last executing test programs:

3.847606304s ago: executing program 1 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}])
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r2, 0x0, r3, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r4=>0x0)
syz_ublk_setup_queues(r2, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x2)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x264f, 0x400, 0x3, 0x1f0}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x637c, 0x8000, 0x3, 0x252}, <r6=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8826, 0x0, 0x2, 0x256}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d50, 0x80, 0x3, 0x235}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f97, 0x4, 0x2, 0x26c}}], 0x4, &(0x7f0000001c40)={0x2e, 0x1e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x1, 0xbf1, 0x0, &(0x7f0000000c40)=@buf_512="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"}}, &(0x7f0000001cc0))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001d00)={0x0, 0x6510, 0x8000, 0x0, 0x24a}, &(0x7f0000001d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14fa, 0x800, 0x2, 0x3b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x94a1, 0x2000, 0x3, 0x301}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x724, 0x10, 0x0, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad20, 0x400, 0x1, 0x32b}, <r7=>0xffffffffffffffff}], 0x4, &(0x7f0000005200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x518, 0x0, &(0x7f0000004200)=@buf_max_buf="1784a6c50f1f612ef7c1611c03e7c64ba36983188dff7669ef52ea4022d14851b1e474bb8100ca1e6175cdae639d7f40ee2b64204e20500e6808af163b8b84e0ac675b414db99848b17b779822d277aa91ef3468632597760d7a8d5ca7c544a961e21188194cb83e9c05803a3a2a9c95fa76aa7a92e8b12fc7c3ca3e9475cf88f16e1d630a4cebff9966d6328201a59316733d4e70cc689e8f4c6c55de669a44a066af7894d1e997face2a692b01800998d4cb5384695ae999a9e662ce63ee26a274f1ffb941cbb905f69c2e65167e60aca6ebe34b62fcd992d07e7df74cd4adfae1d74d42def29ad60c50d2786b210455428c48ce304fb054e6a6d792d02f1c0a93949aecbec1368751ddb9cb685ef146f9a99e60fecdd68f71d168b2ce42876568e4dfa7421c82556dbf0c5ab084c765bc4f5a91cf0d19fdda57e1e8e587468fc7b297e601a92a9317876b0015ec677097726a59bfd393abe6e6785fc625edbf79722ee7369464f297fa1a6bec3e10280650c6e31713f9835097d5f63fe3dbbad33582b881dcefbdd0a97842ad455b54eead5a89d6d72578bfda1bad4944901235cacd254ff52ab0e493627fd0fbe1bc5e83c8169ca4622f026884ab7290ed2e6dfbdce4ae9b1889d6ce6f04c791fcba796e003b79bc1eac751ec53e063a29ec3421217bcf97806497096d768d8672449cda08b750bc2fbecf9da03e371c88e1b269cf1297c7aa692d04d5f20dbdf5e1425611bcbc2c4d0a1752a3de2deda756a2687f26a69cc1279316ca74dbd86e57846b950e75d4e48eeb46e444a11308bc38c8e513deb93e83c30bcdc0802aad884ac640d125fe9157edf81764044103eb175c8289bbedca550d02e95f2611c8574391002d5d9f84b7ddd81cebb43eeff59cc2d2c6ae35756f51fffa73767fd1061ef484a3098f45f86de7e403c68df1c3af2ffa13221e88a1f057fdee24f3d680469d2ef3bcc603a43e403b28c3795cc4cde79c15cedb4168b03da2af47078a64d8e88dc496de62dc541463e4d450826bd7dd784c2678558483a8a0c7e499519c2a8391ede46d26ccd0ece8d410d127d9f4146fd9a1e7b6fde839c9a2bf40b45cad06ee396d806053508fd239e0335f6ad342105388763144a745b7ba5c8e9a4d4185b3e2227f2f91a5100e164989d2502ed2ae74010faaf1debebe4f65a5694a48809615628f0d24299a9e9eef9d35411ce5b2fe925c86e335a6c37fc3f687fd95b5bd8056927d3c2675b5b8a2ad77313b23394249e0f4f176e932cc707ba4ac44f654a1d4c73350c632e7dffbbc0f98b9b5da864d33225c7fd9e8faf02dfe89361989bae6b5ca6e8769b7c41412b34ff37585658721b99a9f59ac2866d4a1631594cbb329c85f92ff8534e29223c15e995ba10ea1859c3386cc5710292fa4711831664e234cf1145f9f55e90c74ab8767f8a8e1e30e1e0b5f336bb8cff28d865cbd2a0b7d0417b9666de43b32ac6e225889eb9dd4850a3622bf939acaddeed9d8d37e890fa622a7626c84bdf5867ace6f62008379a2e3c69b13879b9dbbce6e2a378afe3030cd7a8e7ffcf66cee871bb418922ddc0df93b28ff8dab5be57e78972ea16f2be0679d35d985f16c6a4c296614dc631d18b91152f0ea91901005fc9dd131ae172e6ee0375b2dd4e07938dc742a09335b134af65b93f3670aa844595ffa860085de8b1054963dec3bf41916e6b8a345a7b10bd77171c9ded6dd6af6e1f3a2e3050bd89672bb44616656c93d26e85a79e99f37b091f9f9aa62642adf521efeaa9ee67d0a1b6bd01d9e1bf354a01344896daceee16c5d8e7adde3f5f22596eb64a8e6b35d4b9a5b2f322cb75b6df9d3f8e7bf6cc7f6091d2c42bd10470ae64e817b37615e4b85a467ea4d48c6b65120a401652ba54f033468564622a5510150e5f1a06eb4b283e7976cc595c38399102ce6e72eb6b35721bc37204a3422a351ffad3d6149cafb386ddfbb4f52baa7822ae55d250ee3ec93e27f07b88eaf19f6fee34caa5f226007341a626134ce4c4633bdc21f4d9ef6aa937949c3815d0a406bc369377491fa31e3053fe9613e12f9195c0bc1c1b6171501e2c3f1aecca339fad824ed314c262a6b8c4e0ea61a1a36ecc3fafd4f80a588b5dd0b030e347a8a2f401deffde378d9f46771fce3952ca54bdec043fde30365c04b9ca5296d2acd2b3f371b754b2422a28d9032e867aafc7286628152b6f8c3c204d48fcdef38adfcc146516c4d2bebb04f041caaa2acf5f007176be72ba295ce978fbe60f71da044f1f2798b44a5ed41dd02cd8a9dfae334f410abcee71e3cb68afa4bf280ada58e30fea1942498935468a642a2be0d402685b77383095d95034bcd952825393192d00804887b67aa8868f9d527f1b09d70a1c6124572a9fba5efe9d18b6b594b76638b3caecc9bec168101657899f0371d79bca460731fa58dc883b8818fe08124fac3a9f69a3c08826b2fec57c3a80756129135402237b8ba7c924aac774cc84d1a32da35aaae79692e15e877383daee5428b144b91d7e0e49daccb5cdd1c2c2a2a6ad0979321efa0b464b38be2117074dc4a0f8ce71402f87ff88714db098e017e5ff9f30efb5a2919ce12b6b64ab1969bf8f7e26647d64e1479e46ec9a15793d785228652fbbf33ea8be35f733ca70ef0dfd4e6e9d220ca24d2f4f320885f8b1ba76df769434d6ee24155b9eb54a68c4d9dc5989d41c4d51279ed4d890d8fbc5de616be09adc5805193934b7a46dd32f7fbae548bafd001cf8b9f272942958f10107bc4c95a41686b85ac54257c85315e9142f005ee572337cc36871beaefe55ada066e5bab8c844818d67328110a67811fd18ce22d1e888923bd9c71baa6eaa3bcf157a02a6bd31dddc719f8bd7f860f3a80792b5542f3b3f296468179a9714e7affa545c3bae524860d0a6ed6358936eb2b87afa922d263a6137f2e1c0c4899ca7c5cb3127f8f478e9ea12e12f551fb7caf799997b137351cdc46314079f2b48bf6db5b3f3b3dc0115d799b6eec35531a820589b8bb0ad08fb5518a4068e6460c55200a0b75ae5b56bb5b9e1cfbe5ee9cfa24ef2c055243720f44f2995067d39f0a13c389f114da2e248ff97efd96d4c9ce41619f7b5d0f0ff38b691a8acf257087f2f979f0ae039d153c220c76899fbbde63e20510cb62b6772d01ca0bb630ff2666889943c0c9796ff4955c11759ccd5e0fccf1afd852dd41fbac5aa3db7085a74cf48db687815f4bae4c0f2a48b1b50264019cd05bbcee6833734334e3124ce84d15186cc3f4186b3036b996232ef3da73c4eb508369dc079debf0fb304cdfe2c5c3b82c8d0150fdd72736721edacf0a9f936bccfb21913a15edf7601084d6b15a271201e04c1d931584df26bc7dc8d687b23b24d8ea8b6d3b95c89917a024b116267958706f831a9762fbb5453155983d340d04f5a6e26b96642c1e7a45e790091f4a561e205529c58ea430ec60ca82705a99d7058ebe9dee305111d41bf64f213d20d365e9f26f67c810287baefa5670c51a441480f79036c5819891310cb248a63074f30db7706281a8565953f697c3a74d6e563ab7c7f80124186e5bb38c68bd9271006be529bb418a8d9ad71ed933fcc58e8612208774f0e29e3b582c7acbbe42053be069438daff8759374553dee3c6d3ca3902aa0861a269ef0fe3461361f516f999c3f4f30aef6577c4f1e6cc5f3e240b6b1bfec6f91ce2016dbcb27abc9ff3eead8e8ab32d36d7e704a0450ddaf6905b4d3e363158e2d5175367d6d1c4b6c20485ff796db12cb51cf03cbab61bf484cbc16820249b36e434e0fadb14b4fb49c4b83448499a95a7e1af6f46029a1d0818b3afc9c5a050896e47856a5ddb096d79717ec38385c1d8665ee9efbd8d9f92ba3f59e43faa730f76f87031a617c3bc89f6b3b532e53c067862e2c30a274ab82b8661cfc63fbd21029f85d095b4d996249845f46c176ffbbec372af4ed0739ef81105e7093d6cc59b20b5e11d3aced739123275da980676c3df6378f5dd1cf0e67f257964557baaea5929bbbc5877f2e051dff1e36e32b9b3bbd5c442d27ce29c177dd3bfc8a52d1c802f76b6152aa69c216fd6e397ebc16d1ccde302847995bfbd9411b1e76075091bc335266f51c2df9cd3e139acf24517f6811f132079bf08a24669481cb0dfc9eafe5916f1aecd64d0c1459297f268d1d1d194c45b71cb0beddbe597191096a02f1a84f883ca3b0cea9ce12203a2cc414ac4fde5818d46fc1238427ce01f5352789a0b4225232699a270f36a6f55d7528c41f414f6e80306e82d6d2b85a713aac6dbe3550eccacaa20d8fe18a072cbf70f47ace64f5249ff007224d771287d3d6e2874c320eda9fd8737fc539a3ff4708ad62cfd6eef102f489b35d222b18f89d4aa97f358e46c31c1f62ba18edae14029b2a5f6313f6d568bde5f8205bfb9af7ee4ac502c099ce95a7a0987d8617eca8e6dc2a6826e0307be39e715e1b1cf76efe46a9ee6b4cd53c641ccfcb17eb9bc5e6f9218ed331c0be246ec52ec06e144fb4c948108476358cc974974378238a4bbc1baa85515aa2880df983ebf89f3c69e944c51644f50688a789f12dde1079b5074185fef1415883b10de4a04e8ba1fb921a6b29c5391cceb8ba60399952c538f23502746b9eee801d2a58ea1438ab85d6756b90030accb4b306707b12d98c31a1cde8d7216e56059fa9e9e7939e1037c69a577efaccbcb6dc3f5aaa9599ecc275de60252b397e9477b77a6d699b6ecf0cc8c34b11b6916e2fdce2b1e3929e27c97b4cf4e110fe29381bc6b6eafdd80c60a486acfc753f5ac703a66f1f16e8d221e338cc3bb01adff418336f49dfcaf807f7b0d7559a7153a34048f2c6875aeea68da47bbe79b4c794fa612786c6902d60a1bfa90d0137debe42a5a85a5ba9d2acf8f76fdfae38ac6a0470219549eb8d43287dfd2fba1db9857b3202a80e710847196d0db0a0f1e0cac3a867352fa136e859a77a1b1f3b26c2c5a7b3c59f0a090c834d72c5b5c440354d3c2c4795f1741d84a41c6142ecfb947754d811a256c99f22bb22acb4c9aa720c7802857ddb7dd9f055247ad13cffd3b1c9241357b3bc86a5f270526a8de03b040e5ca0cac076632901b25895d4a5a3ad5d6fcadfc332ef4d1831cc4225134402943d221e3f0ce5ffcb39beabb30cb81aa5cde2a96ecc872e097bd09c65477c157bb8f7f3edcb596e1546a7da898e5fba51d76e91e7775bd6ce9ec9588efb070063730bbf25a49825c332c18196d32a4e124fd69ac92b58bf05d29fe36af4c3b66300a3f453981d71fab709ad43df4d0381f63982f2d2696e90a3dd5f360057f7d94e1f9f7d6f4ff108d85985dc55fd9a8ebf52d0f4872f0ae87bacdcdd5f9487f36721daeebed25494d1e9fa428db5cc91b44fd1e1ad90c809f67603caf9f418624c784d0b400e64390018b33c7033633a5712fe33e3be5eef4765d255ed0cb75218afb45345d6f1ceb7aa6e38469a9b3ea8ae6502b2ac659e6c504715f1cffc9772a8766499a85add1c3c99f6d819b57ea716ae4fe0d9cdd7eca715b052b5a202396bf2e03567dead04478d534286d7bf1051e4b562a9ba944180256e0045d927bb72dc60f3401e22e0555ac6bed7e9b14605aae6ef20e519a443c0aaceeef005fd4daea729d0de6b0248df3d32f8692583168cc7747c553e3667248d37f88172cbd6037bfac91a45e53e4fb3d9419fe99fd6798e23fdf36cc6520e4c70505fc11586e2fe5429efb3f57de3ba9ba23930"}}, &(0x7f0000005280))
r8 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
sync_file_range(r8, 0x4, 0x2, 0x5)
r9 = openat(0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00', 0x208000, 0x120)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000005580)={0x0, 0x6374, 0x800, 0x0, 0x1c6}, &(0x7f0000005600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e98, 0x0, 0x0, 0x158}}, {0x0, 0x0, <r10=>0xffffffffffffffff, {0x0, 0x3aa6, 0x2634d067faa5b0f5, 0x2, 0x2f6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ba, 0x20, 0x1, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a96, 0x80000, 0x3, 0x30e}}], 0x4, &(0x7f0000006880)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x63e, 0x0, &(0x7f0000005880)=@buf_1k="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"}}, &(0x7f0000006900))
syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x7248, 0x2, 0x0, 0x338, 0x0, r5}, &(0x7f0000005300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5a3, 0x100, 0x1, 0x2f3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x78eb, 0x800, 0x2, 0x39c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x934a, 0x80000, 0x1, 0x2bd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63ef, 0x4000, 0x1, 0x201, 0x0, r9}}], 0x4, &(0x7f0000007940)={0x2e, 0x20, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x1, 0xcbc, 0x0, &(0x7f0000006940)=@buf_1k="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"}}, &(0x7f00000079c0))
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, <r12=>0x0}, 0x2020)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
write$FUSE_INIT(r11, &(0x7f0000000080)={0x50, 0x0, r12, {0x7, 0x29, 0xb, 0xffffffff9080edc4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f2, 0x0, 0x20010}]})
r16 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x18, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)

3.702741267s ago: executing program 2 (id=3):
r0 = syz_clone(0x8000, &(0x7f0000000440)="c16036056a100e98a817d63b1209d6c1fb6d581d3fbbab10daccd4a2e25a8dc53d03eb433edb20e999e24e15b4d942dd45d78060ceae8bb0da98cf0d06abdd7fdbba868d12b17a44ece5e4479ebcfc4a6ef2c490be5b776ea5699046065c50047477ed22957dde952d4718c2f04a6c23531bef970c6ab3c436fc87c456d33b43611307f54febd780fbdcdbdfc0108bce8e744376915de437acf88799d2e463a245ee174dddc1108109ec7b8af458d05a7ae61c7ee52e5e490bacd7cd9aa3b8de06863de09268892cc660b1782091957fa20c641f1d8aa726e0f1bcb27d9c6f50", 0xe0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="3a37d72a332156742915369faa7ebddcab4cb60588505a20e6ac75aae2e3fbc6989a8055188e59bb21146f94af7ec274689fc2323213fd80646f8ce02a3e191437013da3ddbaf5fbcdbe1b284b56c48fde4a0818b994638126ff98e00219abbb370d4e6fa415c1f95c")
r1 = syz_open_procfs(r0, &(0x7f0000000140)='map_files\x00')
pread64(r1, &(0x7f0000001240)=""/102391, 0x18ff7, 0x5)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_hcd.0', 0xb)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000040)={'trans=unix,', {[{@aname={'aname', 0x3d, '9p\x00'}}]}})

3.420563414s ago: executing program 1 (id=6):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setuid(0xee01)
r3 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3000, 0x2, 0x19a}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x1c0}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0xb, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x29, 0x86, 0x0, 0xe, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000cc0)={{r0}, "25e5ddde7206ef62738ecc4450fe6db9a21b6f01f02728883886c998b28f3f6bd2dd21abc95f31834eccec1c36370bad1533ba2b9be96e1d1f7fd2b074bb468bffdfabb88c66f1a0b8184fbb3ab8d053889736e437497d625cdcaba390ae92b135e26e1ce09adbb9d54f5844dfa88019af579ec07522b1d6ce8a36342b9e8301c1fb652c8ddd3f7f355687371a20166156ca0712c3cedc611ada42e295a0e643aded2db2643b7cea61b2fe9c6dc209f47d678122e1f4fae20435629ae64c6d64cb8b56d1cc35de2b493c4043291a2af0a7fbf0bd48117de37fa69208ce700a3a7a1361e35a2d9ba8317f9729bdca83d6b5f18e55cb6a2a5dad48bdf6a7cf2e657ef7df690b8f18cfb44176bb0138d2a208f27232ab7da59dda7de91ca38bc89115d93fd4336ec9c53183d010d90f33b8f0fe3b84f71fefc7ca2b841494fb1a4ce19df60408b3cf3f342a79245bc6e6b9a6694e95c4b53171fa39257022177abb6df2f07a076c1f239f8f584530c6f3dc32e01111578e1d3049fab427db62a3bf25004d7119b5678e5f9d1ca75b927a2de6caaeca3d36c535e5d1f87dd9b94752aaeee544ecd7aa32fb9ee46a22e0f6a793b8b6c0dfdec431f25f646ed42ea24212abff57fa89f7ae22c838f796a524d2053c5b055599a8df6c4eda0c17469b3bbce101816650716e6e8abfa1106907d98fabcfcf68c1779cb93101b74faef333daf46abe280c7a058f3a48e21bec30fd83213014aa6ce8ad10683109702c787c7a20f526d90352988c299d837f2fdd49ce4eec03a501ac7a25e0809eb1933e3cbf0b33988ef5a3338baf6261b75e2fea8871204989d5893214001485d8ae9b0c9f8348c19bb318a400c67d756f90d01cd6ddf4e0a12ff457a969270ad47031c6b9548bda7088116cfd3516ea5ee710b8f2e02ce95a88d2860d324d9062a21d790c92833a302fd77e4d358d3235a90dcfe9e0d21c8d6939060ea6417419b4922b8a02d5965abb979a804ba3431655475199b06b7479ab5fc63859fc649519a7e5cd6b68e9e29418dd35f386f42c2da7f206c3f3c45042b18b49b06c5442f6acb5c6bc5d330ae5abd94fb7cd6e7a59a3719a5b164bb223ee7f3af2d42f2e8950fc89d9f2fc49889831e950ac5a239a1d1f776bdd3d3756e7d13e1e326cf4896a585c2f32473041a9def9bc0a3d683569f42e4e61fe03b853517c48a60a31e6c3aee268da2bd8a2a53e748bbc16beab50a4fe11b5f33e4150f222e9e221013721e5f516b1274f6af526da7979001a082922c4f5d883fa5f4fdc97824aabe57933f256e8e5359d2ac707b08657a856495cc3e35b2747f062a1d1b772a5b049b0657bc1d95ada88ad8cd89667eb723b0d90c50c9b132d2578ece19434727ea6b9146d51e7228529e039bf64550058f60f478eb07c35a51fa8cafeaf2d715fad737f51e0eb07e09bfb75ac292e1b8f35399d406e7c7c3d12cf169e38b326a19c1c9cb51d9ab310d4aad2104772e96ad5535c5638e4de4895f167047fc35dc3a1bfd5da0079ed448ea8c5555bfec042d5fc62f9032cff9b09a8de630ffb745aec5c6843e8980c8a0b7dbde38bc52bc2f662e347d0127c8598c04fb6a6a5942c433727cac4f3378ff791dadd1cc06d6151df81f034e2195729fce51a075b172b935945e82df78e67789e93db8bfae302091564bb6376326f0a265ddb07c50c2f57f255fb472c1cc3fa0907a19735e8144019cc3b58b6bafc0a7d053642be72c0e26dd34a19977584b536e4ea16ab1fd165b672064e7dd07c0dfc6747f1b1e563fa1389542033b766d5f62717333c60a709ba436932b308954ad40284526ba23443c76527434413d6f9aa6996e9dbf63df6e46d3566880e2dbc34710b6a44d77e847d3929c1a1cec1ddaecf9cf805b889f149b1db9df43d3d873f330f06c852023882b129b5615f0980b5812d1bdc69eeb38fce039ffee4bfadf9fdf8d560f45a4b475e6c21c20fc60d31f239075200b7c761569f35a2316ee5de6218fc4e2c61ebbb37de20662a4998d2daded712988060fd4d73368ff6921fccef0f24310414e8ccc446243ea20a11b065d167c4dccbdaa797540cfc1f5b044bfc298b7a57e94c62ffc2510add0966ffa4e0afbbbf8dc80b8f9740f21b6fe405127b6c6056054b98a9c9ef33b26ea7d40318ce495a3cad56d76daf487aa8c876c7df8ad8ecaa576e3605438d8d9143d7ad98eb3eddde42d48c71c25671394fe68bfdcb5c5a9cf70a52bf1d880d380ef6f3d5606a9ccd8ecb0be9a6f746ee6aa7ac7eca6a6566fd719b92c7a5d5d939fcec5d3d2157883cd6c320a6329f71d89653bae0427e060b4f45eb9d530eb96a7f0a446bbecbc9ada79d9751000ba5b8743671fd6416a2769d3c571823e6bf16ab33be16bc91025d4eb43b0a1f0233f17735e9da4b6c84ddc941350c4319010fdcb07bd54ff4fa76cc139458a0c33bca61660b77fbf1200201725b48448b17ecdf2819eaf8dba8c8cd5333a46a6207054b1aab3bc7e753e60df4bd8fce59940d77e09e7550625f1baf540c4021a3bd9404b00bdeda78b12f03511e99cc0b75b2d0185f1473ed2dc323aa8ebbfd89980e480def575efec04b151ea60938da266f33d0a1a9eb2ec0536a11a03cee051b35753de58745ce96e118202c1d5d5e1ce492bfe0ba2b116f2040dacd45cf3b1fad3b803fc9e0569b50a1fe0664b908991c422d3d96d77f74eb7885ac73ab80caeddb8b7488423d5046e6d15f381fc1e85387112f77b5ed07eb2878da4c55616dff4aba3a8669bfca850f776a9d6a2883e873a451c6433a2014abcce033f003c7fb0dd585dcc9aa3f42d53934576866d06cbc9a6d5e78b3b88259a1a8fd79b371f54ff72568165ac76400ab739aceb4fbd9df2af1bdd448475034812a4c85617960fd8704d07a644b2cdff6784be22cb46df9d517d0baa65359c6575e1bb92710c1aef9a3d96c5c3990c3e5fc999906ef98b329bdab16ecc7cbdbac5f9924a8bf2b82af3d02fff07959fc3301d4ef5cacef398d0b2ee1827bedb885cf7498062692ac714ab9a7d568de56461d5bd3617ff65bd46c7ea6be986fdd13c05dd6f2587fa73ff99af073777f3d37a33481e48ec0e1b1ebdf240fcc1c52d078577f0e2c900005dc99dd1beb7886bb407f212e9a69eca8f75bdef2fba049301d9c3ddc01193c2d8593444a45705a97693342aa6d4705514044a79257e7df6d8a34620d1e45a22e98d1751a2955beb0b9cbe439c91d290d0ee1f919b815193cb6929d02a5720fc9043d2a58251091698d6e6687715610795c54c474db173f744e190e1ef615d3054c13c1dba855cb229fa3a7d014efeac7e49cb5142507e3f78a67fba00c3bb25e64859269d2d5bf983b2ef3b8b6360c20258d655f0c29ad09732377acf0b0a0446be6a693b17f3fd71e9c800db8f6ab0c86bda6d5998c89e5011be56c70c7044a2bcb7d6609ad8e831cf938fd628b5048e8e4c9b1c7e190de74913a9d1903fec63831adbbf0e43c7eedd6b59cf2bf4fe0c007aa4d3c2b53540110bb40dcd6ea2c71d7b279429d9e5095d6a5d6f843477ac35c12b935bef5060b15b30d9849d279da8281f7d93eb93fa6aaf64b60a656d2a64ebf7c0552ce98fd0f2c513814d7639478a0c39fc88c83d920bb20ea1816609047774a6dd1dd719d7e712d827e2b965525fe04b6b15074ccb780df8bb3b04164c4c67a5e02f6731f195618c563e70f2ffbf67c7926b35691591bf67aec65a41c38cddab90656eae5c18f6c19b3be11f09ff1b08bec1f2654564f2c19ea85b814268cfaec78d69df2d7c491ce66f04ee5f21ae0655c72857f9a22d40423f1c2f542b74432e55aed1d41a1f729e43b8d4be8d5420ac31492b263ede68d52910af41ab329a8a96a0bf385dcdc2e9f30999a68dc132c937171afd4713a3737aa56aa18964ae91fb05fad6bc9fd569f834014b4d08a3873f6983b8cfa42ce79fabd58ff914e142b0e319626b823db61ac336b846aaaf58c0d0f181e3ec6bb25bccfbe736a9c64e8f8a92016fcbd3a27469cf4d592bdbac86846a5e028df7488cf6bdafdb856ec961edba92fc49f242de24812d9dff0d01cb2af3f04522035ee71f6f02914ae92926269e82e5bc16989b669e14691f3eb4b70e3594b4900c2292d1a66b414cdc7cb606e4062744541edf0d2cbd602354fb79a764099a8d881b82ed5ea9b0740e74853fced7b3b2e0fb682554788ab8a19f17d961b10f9582e3505601ab047e16cb7cc87b52a10de962d97fdf09bad65a8e78188a8749394d3daacb656403d75a0b579738c9440e1023c82d622277ea0f877a3cc59e5682c89a6e86c25dd65976bc9516a2a75291346cd3f33ee06ba823250aafb074bc2abe22b426c3a16d1a6d648e00e1fd35f1a9ca5512ea771ecad3903388d80c5edf50181a109f8068fc77bb0ce735c59edc1294601aaed5cf59194a5d6c585a07a25467b008896d256e5429eb5b0be6b558b340d51056f91ecb3771e153c8aa44f46da7fea46b15990ffc4c8bd0e62cb78cc7eedc0824064b9ca7e17402d25c042fff9f12e559791506037452bba8f96b26d3c68c75ed0e11780669b9fe5550972b51a755a9e8e1562659170dc6358ab7d120cec46f5000c60d2cd8cde20de045629c91ce6ac247d9599de7f8573606c0562fbc32891a97121a2d2123bf90eae694505f3fe7819d96bb1855365c00dfbdd9110c4343354fa206f5b805c04ce185cb666d7d7344da22f632c9c5c9e81e428f14b13c5dcd5172afd3a48b990e3900e975247fcfb463dbcd5cce962e5f94ac3439484c2b6bdc991c73b71490a00569bbc3a23035aa97faa09bda2d76ceb3ec35686f2ae6b0c007c4b7150aecdcefd3211b0f1dc1078da2d519b6fc836538761896d201bde1c43164bc72c0f62ee8baaec544e599a7ff9bba5619df2e95ce960672ddb3a412f7681207deaf56abee2b6e85cad5fb887e490a912c9058814b1cadb3fd0de3ce520084db1015435aea1ab403c3907acaa14d9279e2dfa1e83524a9817baeeb18226b3e45178f5c60d0845861a2998132cb0b109eb260f287449dd79fb87494600c56385a303ea80d107530bc616254ee39bdb8d262708112fdef6f2e4fed5c8cffa08d84aad2504121478fbcbf7ca1c1c128dcab3b4bb4525247210d3d41e1e23c4ddb54d6fb6bccb61764cea7cf1e8942360fc918cdc7380296ae1897957f2606402dd59679edfb8aeeaa682c85fe981dea75293525ecda12d17cfb7021f848165876654d4fd48fb417c620b0e2a14e5ab0a92fb969f6cbcdc4cd33355f847f7748a4f4b37627889d70ea6e22d64d013855cc4bf329ab4d5146eebf5aeb2ce49749807c828068f2c63f7a55b29178f95751fcc166e10b600276d292efcbb471163df583fde5a20dec651438a460f8643d387ea2a7c32855cc07681efe28769f5443117a48a0c6431e7fff7ee5625d85b632af4f57f66422c4e1a5ff80d0b255b436ea8190448e6158508c00ecaabf9456494e657d0218670187773bef489738d3eb45fddeeadc9f48e697704d24d37f78e766208b230c4b7a9f387111eaf45e2b592bb7ced91ab8bdce0d1b960ada4958fc72f7ab50520c3e09f36b947a43400abdce29a4de3425eafc56a16b3fe65c13e3b5350b7b9f693bf8410e6cdc5e8dd7673450345a09fc2589886f736afa1c6a27e48f222a44eb74c2e9598919870d090d0ce146dff69b108251edcd2bf2ba876c53477905e59178ded64c5770833d2"})
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x4, 0x1}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9)
sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x3, <r13=>r1, 'id0\x00'})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r14, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", ""]}, 0x20}}, 0x337ee4f0d645a8)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r16 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r17 = geteuid()
quotactl_fd$Q_SETINFO(r16, 0xffffffff80000600, r17, &(0x7f00000002c0)={0x9f0, 0x2, 0x1, 0x4})
r18 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r18, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})

3.353732246s ago: executing program 2 (id=7):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x18, 0x4, 0x7f})
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

3.219955279s ago: executing program 1 (id=8):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0xb35}], 0x1, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0xa0}}, 0x4000000)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.332884511s ago: executing program 1 (id=19):
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a"], 0x0)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000441d"], 0x38}}], 0x1, 0x46000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="240000002d0001000000000000000000080000", @ANYRES32, @ANYRES32=0xee00], 0x24}], 0x1}, 0x8010)

1.840893914s ago: executing program 3 (id=24):
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000000280))
syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.726157307s ago: executing program 0 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000") (fail_nth: 1)

1.636655819s ago: executing program 0 (id=28):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b40)={0x0, &(0x7f0000000500)=[@nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xf8b4}}, @wr_crn={0x67, 0x20, {0x3, 0x7ff}}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xaa, 0x80000000, 0xbfd, 0x9}}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x76, {"66baf80cb8d8f0c682ef66bafc0cb800000000efb96f0800000f32c74424000c000000c74424020de90000c7442406000000000f011424f30f1ad1c483397dea42b9800000c00f320f20c035010000000f22c08f8978dbf73e440f34672e0fc79e5f000000"}}, @out_dx={0x6a, 0x28, {0xd6a6, 0x2, 0xff}}, @nested_load_syzos={0x136, 0x118, {0x1, 0x7, [@uexit={0x0, 0x18, 0x5}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x5}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host_nat=0x6c06, 0x80, 0x8b, 0x800}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x5a, 0xffffffff00000001, 0xd3ed}}]}}, @set_irq_handler={0xc8, 0x20, {0x56, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x54, 0x5, 0x9, 0x2}}, @nested_load_syzos={0x136, 0x30, {0x0, 0x8, [@nested_amd_stgi={0x17e, 0x10}]}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8000000000000001, 0x6}}, @wr_drn={0x68, 0x20, {0x3, 0x6}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0xe19, 0x7, 0x1}}, @wrmsr={0x65, 0x20, {0x2d0, 0x8206}}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_syzos={0x136, 0xe8, {0x1, 0x2, [@enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4814, 0x8, 0x7}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7fff, 0x7fffffffffffffff, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x720b}}]}}, @cpuid={0x64, 0x18, {0xf, 0xd4}}, @uexit={0x0, 0x18, 0x8}, @nested_load_code={0x12e, 0x76, {0x0, "66baf80cb8a4d1db80ef66bafc0ced8175d000400000b97c0200000f32c462e9bcf6c744240000100000c7442402f5a5165ac7442406000000000f011424660f38818aecf1a09a450f01cfb805000000b9fcffffff0f01d9460f07f0ff09"}}, @rdmsr={0x66, 0x18, {0xc0011034}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xfff, 0xa3, 0x1}}], 0x604})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000b80)={0xa000, 0x108000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005a0001"], 0x1c}], 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x73, 0x0, 0xfe7a)
getsockname(0xffffffffffffffff, 0x0, &(0x7f00000004c0))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.038494334s ago: executing program 1 (id=29):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0xf0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xb3, 0xa0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x62, 0x35, 0xf, 0x2, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x620, 0x6, 0x40, 0xc0, {0xa, 0x25, 0x25, 0x7ffdffff, 0x2f, 0xbd9}}}}}}}}]}}, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
pread64(r2, &(0x7f00000001c0)=""/210, 0xd2, 0x60a2d3b9)
listen(r1, 0xc)
socket$inet6(0xa, 0x802, 0x0)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000ec0)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203f608026000030116a0490904000000010100000a240100000a000201020904010000010200000904010101010200000905010920000f3a070725010c010e00090402000001020081000904020101010200000905820910000205030725010c0707"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x70bd29, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x20008080)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000000c0)={0xfffffffffffffff8, 0x7, 0x9, 0x62cd, 0xfcf6, 0x3f, 0xf})
lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x3)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
mount$binderfs(0x0, 0x0, 0x0, 0x804c7, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
read$eventfd(r0, &(0x7f0000000140), 0x8)
llistxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000040)=""/40, 0x28)

1.033851794s ago: executing program 0 (id=37):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000a87000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
write$binfmt_elf32(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46800c040001000400010000000200030001000000dd00ffffffff000045030000080000000500200001", @ANYRES16=r1], 0x58)
close(r1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0)
r2 = signalfd(r1, &(0x7f0000000040)={[0x100]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@remote, @multicast1, 0x10, 0x1d}})

912.200817ms ago: executing program 0 (id=30):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00')
lseek(r0, 0x10001, 0x0) (async, rerun: 32)
prctl$PR_GET_FP_MODE(0x2e) (rerun: 32)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x40, 0x5, 0x4, "e4b72d73"}, 0x0, 0x0, 0x0, 0x0})

511.769457ms ago: executing program 3 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x6, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x0, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0xbfb3, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x3, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x1ff, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7b, 0x1, 0x3, 0x0, 0x92, 0x1, 0x8001, 0xf, 0x63]}})
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f00000005c0)=[@code={0xa, 0x4a, {"0f0013470f3266430f32a5b9800000c00f3235004000000f3026460f01700db9800000c00f3235000400000f300f01ca47e49266b89e008ec8"}}, @cpuid={0x64, 0x18, {0x7, 0xa}}, @wr_crn={0x67, 0x20, {0x8, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x73, {"48b800000000000000000f23d00f21f835200000090f23f8410fc7296766f2f2460f224466ba210066edc42105f69a8d000000450fbba800000000660fc7750048b800900000000000000f23c80f21f835000020000f23f8b9810a00000f320f01f8"}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x1b49, 0x4}}, @cpuid={0x64, 0x18, {0x10, 0xf}}, @nested_amd_invlpga={0x17d, 0x20, {0x30000, 0x4752}}, @out_dx={0x6a, 0x28, {0xfc4e, 0x4, 0x1000}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd6, 0x2, 0xd58}}, @cpuid={0x64, 0x18, {0x0, 0x7f}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x66, {0x3, "c482fda7f7450f009704000000b805000000b9095d00000f01d9c461d5d2680246dad566b89e008ee064f00fb0b967f70000430f3805ed45d8dc66baf80cb82c3e118cef66bafc0cb841e28dcdef"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0xa385423aa6479f05, 0x1f90}}, @code={0xa, 0x6a, {"66b833000f00d83e450f1ef0c4e29d45e40f78d5b9390a00000f32b9300300000f32660ffba2c5910000c744240092890000c7442402ef740000c7442406000000000f011c243e66440f1a9f2e600000c4015ded8200000000"}}, @nested_vmlaunch={0x12f, 0x18, 0x4a}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x400, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x70, {0x3, "48b822ae39c8000000000f23d80f21f835000000d00f23f84b0fc79fe4ffffffb9a10a0000b89c020000ba000000000f30672e666742dca4f60300000066baa100ec2e66430f388123430f080f01c20f350f58899a000000"}}], 0x495})
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28c800, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="66baf80cb8c4409988ef66bafc0c66edc4e3696de356660fea64af00b9800000c00f3235001000000f30c4e165757e8b66baf80cb85807cd87ef66bafc0cec0f07640f01c266baf80cb8c03f7282ef66bafc0ced0f09", 0x56}], 0x1, 0x27, &(0x7f0000000100), 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0})

472.549188ms ago: executing program 3 (id=32):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) (async)
setuid(0xee01) (async)
syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0x1, 0x136}, 0x0, 0x0, 0x0) (async)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) (async, rerun: 32)
setreuid(0x0, 0xee00) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) (async)
ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
write(r1, &(0x7f0000000200)="89", 0xffe3) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)={[{@gid}]})

365.426681ms ago: executing program 3 (id=33):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000285000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="baa00066edba4100edea000039000f01c3b87c000f00d00f219036653e0f11030f47eadb8048e3ba6100ec", 0x2b}], 0x1, 0x20, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
creat(0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x5)
unlinkat(r4, &(0x7f00000011c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000002e")
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x901080, 0x0)
ioctl$FIONCLEX(r6, 0x5450)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000000)=0x202001)
write$P9_RREADDIR(r3, &(0x7f0000000340)={0xd9, 0x29, 0x1, {0xfffffe29, [{{0x2, 0x4, 0x1}, 0x0, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x1, 0x2, 0x5, './dev'}, {{0x2, 0x3, 0x7}, 0x287, 0x9, 0x14, './dev/mapper/control'}, {{0x26, 0x2, 0x5}, 0x3, 0xda, 0x5, './dev'}, {{0x8, 0x2}, 0x7, 0x5, 0x1, './dev'}, {{0x8, 0x1, 0x7}, 0x3093, 0x5, 0x14, './dev/mapper/control'}]}}, 0xd9)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
madvise(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x9)

365.251731ms ago: executing program 0 (id=34):
r0 = syz_clone(0x8000, &(0x7f0000000440)="c16036056a100e98a817d63b1209d6c1fb6d581d3fbbab10daccd4a2e25a8dc53d03eb433edb20e999e24e15b4d942dd45d78060ceae8bb0da98cf0d06abdd7fdbba868d12b17a44ece5e4479ebcfc4a6ef2c490be5b776ea5699046065c50047477ed22957dde952d4718c2f04a6c23531bef970c6ab3c436fc87c456d33b43611307f54febd780fbdcdbdfc0108bce8e744376915de437acf88799d2e463a245ee174dddc1108109ec7b8af458d05a7ae61c7ee52e5e490bacd7cd9aa3b8de06863de09268892cc660b1782091957fa20c641f1d8aa726e0f1bcb27d9c6f50", 0xe0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="3a37d72a332156742915369faa7ebddcab4cb60588505a20e6ac75aae2e3fbc6989a8055188e59bb21146f94af7ec274689fc2323213fd80646f8ce02a3e191437013da3ddbaf5fbcdbe1b284b56c48fde4a0818b994638126ff98e00219abbb370d4e6fa415c1f95c")
r1 = syz_open_procfs(r0, &(0x7f0000000140)='map_files\x00')
pread64(r1, &(0x7f0000001240)=""/102391, 0x18ff7, 0x5)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r1, 0x5608)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb)

290.064052ms ago: executing program 3 (id=35):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000")

239.002654ms ago: executing program 2 (id=36):
open$dir(&(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x80000, 0xd2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0)
write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0xffffff01, 0x8, 0x3, 0x2, 0x5, 0x6, 0x3, 0x0, 0x8e9b}}, 0x43)

222.702394ms ago: executing program 3 (id=38):
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000000))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x110, 0xffffffffffffffff, 0x9d89b000)
mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs\x00', &(0x7f0000000180), 0x3040800, &(0x7f00000001c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x7e}}], [{@subj_user={'subj_user', 0x3d, '+//'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfshat}]})
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x101000, 0x13, 0x18}, 0x18)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x7, 0x21, 0x4, {r1, r2/1000+60000}, {r3, r4/1000+60000}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x38, 0x2, 0x0, 0x0, "9b767e9f72a55395b41c1ebd7ad6204828f2a905168042b4f2f1e509106497fbac03f14635c18a5a508953e3a0d7cf38253a864056b6e88c94667f27c1c9190d"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x81)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x6000, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
syz_usb_connect$uac2(0x2, 0x129, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xcf, 0x2b73, 0x3c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0xf, 0x40, 0x8, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x3e, 0x9}, [@extension_unit={0xd, 0x24, 0x9, 0x4, 0xe, 0xfb, "c296c407b5e2"}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0xe, 0x5, 0x1}, @processing_unit={0xb, 0x24, 0x8, 0x1, 0x2, [0x1, 0x2, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0xc, '~'}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, [0x7, 0x7, 0x7, 0xc, 0xff]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x10, "40cccaf0e6edee"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd, 0x9, "75b2", "1d7e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0xf4, 0x5}, @as_header={0x10, 0x24, 0x1, 0x6, 0x6, 0x0, 0x4, 0x85, 0x0, 0xd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc428, 0x3, 0x5, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x8, 0x7f, {0x8, 0x25, 0x1, 0x82, 0xc, 0x10, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x33, 0x3, 0x3, 0x6, "c16db0865162f85258"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xae}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x2, 0x1}, @as_header={0x10, 0x24, 0x1, 0x4, 0x7f, 0x3, 0x2, 0xda, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xc3, 0x9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x10, 0x44, 0x80, {0x8, 0x25, 0x1, 0x0, 0xc, 0x8, 0x200}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x4, 0x9, 0x5, 0x20, 0x5b}, 0x55, &(0x7f0000000680)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9, 0xf, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xf, 0xdbba}, @wireless={0xb, 0x10, 0x1, 0x0, 0x5, 0x3, 0x9, 0x9, 0xae}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xf25, 0x0, 0x0, [0xffff00, 0xff00ff, 0xff3f00, 0xc0f0, 0x0, 0xa03f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x2, 0x1, 0x8, 0x5}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1404}}, {0x36, &(0x7f0000000740)=@string={0x36, 0x3, "5cb69d39e1214883d0254b876f1c095a1d54a778e37cb0e3acb893a1a8674d87ce545d9ef0e1c50f5bd68f8b0397cee05369e94c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1809}}, {0x4d, &(0x7f00000007c0)=@string={0x4d, 0x3, "208fa2cd07a8436024206971fb23edbd1ebd938657a2570754ef5c029b3f28b8f6d756a91b478808130e0431568817d81e460d1773d2d08ebaa1f687528ce5b9f9e637e7f1d6552f645016"}}, {0xbf, &(0x7f0000000840)=@string={0xbf, 0x3, "2f4c918aca7bb0915e3fcdfe1d9d44c0105725ec4ddbef6d27131a1daa8c10efa698c987ef16691dee550398180b4396e15e5d3edb82b0512d57dec2a48d8a05980cc17a68fe205a4aff3172e1324a74067e8395af126d9d013372332489993cf158890fa4d83ad673142a874f9485529380c33d8fc927bb2a289ede0c0260158a5d046377dbb929a13e8058f1ec5ff78268976c0a82142b21bb65007723a00db7140bc977424165709ae5dcaafc14f6f27d072d8b28cd508a81519b75"}}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x80040, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000009c0)={0x1, 0x0, [{0xb, 0x8, 0x3, 0x6, 0x3, 0x7fff, 0x6}]})
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000a00)=0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(r5, 0x540d)
r7 = open(&(0x7f0000000a40)='./file0\x00', 0x4000, 0x151)
r8 = accept$unix(r7, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e)
ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000b40))
r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001100)={0x0, &(0x7f0000000b80)=[@nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xbc, {0x2, 0xa47, [@nested_load_code={0x12e, 0x84, {0x1, "45db4e00f2f30f2245b805000000b9413400000f01d9400f2156f2f22645d9d0b9800000c00f3235002000000f3048b80c000000000000000f23d00f21f835200000040f23f848b8ae000000000000000f23d80f21f835000000800f23f80f20c035000000400f22c00f01cf"}}, @nested_create_vm={0x12d, 0x18, 0x3}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xddd5, 0x0, 0x1}}, @nested_load_code={0x12e, 0x8f, {0x2, "b9800000c00f3235001000000f30b805000000b9a6b200000f01c166baf80cb86cb7ea8fef66bafc0cec0f30c744240000000000c7442402a4b30fadc7442406000000000f01142466baf80cb8b40f1c8fef66bafc0ced8f49309af166b815008ee066baf80cb8c494248fef66bafc0ced66ba210066ed"}}, @wrmsr={0x65, 0x20, {0xb98, 0x1}}, @rdmsr={0x66, 0x18, {0x205}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x0, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0xfffffffffffffff7}}, @nested_vmresume={0x130, 0x18, 0x3}, @code={0xa, 0x68, {"0f00dfb9800000c00f3235000400000f3066baf80cb87a59d180ef66bafc0c66edb9ce080000b800480000ba000000000f30660faef5f30f1eff450f01df66baf80cb8b8109c8def66bafc0cb015ee0f01cac422c59836"}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0x4f, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0xfa2f}}, @rdmsr={0x66, 0x18, {0x2a5}}, @wr_drn={0x68, 0x20, {0x7, 0x7}}, @wr_crn={0x67, 0x20, {0x8, 0x101}}, @nested_load_code={0x12e, 0x77, {0x2, "66b830000f00d066baf80cb85c616c89ef66bafc0cb800000000ef400fc76c6f05f044f6588264362e2e420f201166ba4000ecf2d0dc48b859000000000000000f23d00f21f835100000090f23f8400f08b9800000c00f3235000400000f30"}}, @rdmsr={0x66, 0x18, {0x393}}, @nested_create_vm={0x12d, 0x18, 0x2}, @code={0xa, 0x6d, {"c44265acd264410f18cec403cd697d519967670f1a6a0566b8e3008ed00f845e77531667470f00945e0b58000066bad00466edc74424000c000000c7442402ce000000c7442406000000000f011c24440f20c0350f000000440f22c0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x89f5, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x600e, 0x101, 0x100000000, 0xf29}}, @cpuid={0x64, 0x18, {0xf, 0x80000001}}, @nested_load_code={0x12e, 0x5d, {0x0, "450f0093000000000f01d13e66660f08470f01c3f32afdb9460900000f3266baf80cb86a33718eef66bafc0c66b8f59e66ef0f20c035010000000f22c00f06c421d963568e"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x574})
ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, 0xfffffffffffffffe)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000019c0)=@nat={'nat\x00', 0x19, 0x4, 0x818, [0x200000001180, 0x0, 0x0, 0x2000000016e4, 0x200000001714], 0x0, &(0x7f0000001140), &(0x7f0000001180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x20, 0x60, 'geneve0\x00', 'ip6tnl0\x00', 'vcan0\x00', 'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x5645c182e50458d5, 0xff, 0xff, 0xff], 0x2e6, 0x396, 0x3de, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x4}, {0x6}], 0x2}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x30, [{0x0, 0x2, 0x5, 0x4}, {0x8000, 0x7, 0x9, 0x40}, {0x8, 0x6, 0x5, 0x6}, {0x4104, 0xfa, 0x6, 0x9}, {0x9, 0x7, 0x6, 0x864e}, {0x5, 0x80, 0x8, 0x9}, {0x3, 0xff, 0x8, 0x401}, {0x5, 0x0, 0x4, 0x9}, {0x2, 0x48, 0x9, 0x6}, {0x4771, 0x2, 0x6, 0x9}, {0x10, 0x2a, 0xb, 0x40}, {0xa, 0x8, 0x0, 0x800}, {0x6, 0x60, 0x5, 0x7}, {0xcad6, 0x52, 0x9, 0xc}, {0x7, 0x45, 0xfe, 0x10000}, {0x6, 0x4, 0x3, 0x5}, {0x3, 0x1, 0x9, 0x4}, {0x9, 0x3, 0x18, 0x1a4}, {0x8, 0x2, 0x3, 0x6}, {0x1, 0x9, 0x40, 0x24000000}, {0x2, 0x5, 0x0, 0x8}, {0x101, 0x0, 0x8, 0x465a6ffd}, {0xf1, 0x46, 0xdb, 0x4}, {0xe, 0x9, 0x1, 0x3}, {0xdf27, 0x4, 0x0, 0xa5}, {0x9, 0x7d, 0x12, 0x3}, {0x1, 0x9, 0x1, 0x8}, {0x9, 0x0, 0x40, 0x9}, {0x4233, 0x9, 0x5, 0x2}, {0xff, 0x3, 0x5, 0xa0}, {0x6, 0x3, 0x2, 0xfffffff0}, {0x5, 0x71, 0x3, 0x4}, {0x6, 0x8b, 0x6, 0x800}, {0x7fff, 0xca, 0x2, 0x7}, {0x8001, 0x3, 0xee, 0x2c}, {0x0, 0x6, 0xd, 0xb7d}, {0xb8, 0x5, 0x6}, {0x7ff, 0xff, 0x10, 0x401}, {0x6, 0x4, 0x5, 0x3}, {0x9c, 0x0, 0x80, 0x50}, {0x20, 0x8, 0x26, 0x8}, {0x5, 0x1, 0xe, 0x5}, {0x9, 0x7, 0xa0, 0x400}, {0x7, 0xfa, 0x2, 0x8}, {0x6, 0x3, 0x1, 0xffff}, {0x81, 0x4, 0x2, 0x7}, {0x9, 0x7, 0x5, 0x6}, {0x6, 0x0, 0x5}, {0x8, 0x4, 0x6, 0x6}, {0x1, 0xd3, 0x4, 0x10001}, {0x8, 0xd, 0x99, 0x7}, {0x4, 0x40, 0x3, 0x2}, {0xfe, 0xe, 0x2d, 0xffff}, {0x5, 0x9, 0x4, 0x2}, {0xfd65, 0x9, 0x5, 0x2}, {0xfffc, 0x9, 0xfe, 0x6}, {0x1ff, 0xff, 0x7, 0x8001}, {0x3, 0x5, 0x92, 0x4}, {0x3, 0x1, 0x65, 0xb376374}, {0x8, 0x5, 0x4d, 0xe}, {0x1, 0xfe, 0xc, 0xfffffbff}, {0x8, 0x7f, 0x18, 0x22}, {0x1ff, 0x2, 0x6, 0x6}, {0x1, 0x6, 0x0, 0x800}], {0xfffffffffffffff9}}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x12, 0x4, 0x1, 0x0, "49384428e8efb2fe239af21e391fa1975ad1cae7b332fca4b2de90196cbd141441375e999fd7468729425aa24f620b398fcb6c61be31ebed69b93c983a01390c"}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0xfffffffffffffffd}}}], @common=@ERROR={'ERROR\x00', 0x20, {"4f6316d180bed665ea0f7abe7d8418940aa2519104f08cab4d9e40adb119"}}}, {0x5, 0x0, 0xf5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'lo\x00', 'nr0\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x10e, 0x156, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0xa597, 0x2}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="c88302946ab7", 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @common=@ERROR={'ERROR\x00', 0x20, {"3ba4b6f9cd4c432cccabbe484f61ef7e57436af87f2f3c4478b2869493cd"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x3, 0x20, 0x9bf9, 'veth0\x00', 'dvmrp0\x00', 'veth1_virt_wifi\x00', 'vxcan1\x00', @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0x80], 0x6e, 0x106, 0x13e, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0xc3, {0x4}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x9, {0x1}}}}], @snat={'snat\x00', 0x10, {{@random="1b64ae3a74e7", 0xfffffffffffffffd}}}}, {0x3, 0x42, 0x8808, 'vcan0\x00', 'vcan0\x00', 'veth0_macvtap\x00', 'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, [0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xfffffffffffffffd}}}}]}]}, 0x890)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), r0)
r10 = getpgrp(0x0)
fcntl$setown(r0, 0x8, r10)
syz_kvm_setup_cpu$x86(r7, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001ac0)=[@text16={0x10, &(0x7f0000001a80)="660f38804c00640f06660f73fd000f01ca67660f3814b04600000066b8000000000f23c80f21f86635080080000f23f83e0f090f91f92e0f78f10f01c2", 0x3d}], 0x1, 0x0, &(0x7f0000001b00)=[@dstype0={0x6, 0xa}], 0x1)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000001b40))
r11 = geteuid()
statx(r7, &(0x7f0000003440)='./file0\x00', 0x6000, 0x40, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$netlink(r7, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001b80)={0x54, 0x3a, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="0f2d6847b616a9e4297c9068a7f4e934e849c1bddacea0688ff980e05209d235a93c504f669c1d81d7a5658834c695552e61514d7d97d0d67538daae514b88b09afe8f"]}, 0x54}, {&(0x7f0000001c00)={0x108, 0x28, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="d7cbbc7390df5ea0d30d6801a9db5181bb1a9696e0318743d291ecd331a7f8115f141d02fe8944eadbd52e5842c5841d029f0ba805bc39ca258ae8c43a774e3d1e5f07961dbd4a882d733c9ec378a8073447b4089643e1470f0c7adb5033854dbeca504b1be180053614012099f17a4b6b4d8641ed178b03f184544559a186b42e0052b4aac728f2c1968bc5d9b70493ddf706c550267546a84d31443388096f34a13fcb04efd0a8b686383887f1b47debce7b4fbce7b9f2d7bac3c4c8db8f0a9536e7694601de65873de917f5768a4eb8ce44e4346eb81c9f0677c4c275d3df1045b0f0a5bc4c957179adb4df87", @typed={0x8, 0x116, 0x0, 0x0, @uid=r11}]}, 0x108}, {&(0x7f0000001d40)={0x1c4, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, "", [@nested={0x18, 0xad, 0x0, 0x1, [@nested={0x4, 0x35}, @nested={0x4, 0x14b}, @typed={0x8, 0x163, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xd9}]}, @typed={0x14, 0xee, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x123, 0x0, 0x0, @str='*\\*\x00'}, @typed={0x8, 0x42, 0x0, 0x0, @u32=0x6}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0xca17}, @typed={0xc, 0x1f, 0x0, 0x0, @u64}, @generic="88936e1fbe6d4d4c4f63fc7bce5c0850c5854525d494e34672b1d14766aeee34b4eab5dd2890569908041526064598dd6e608ca7befaf37e351f0ced69ed7303bae2a4012469f8c8648b260511a638f751db82141176ecaf41cb0673a1e76b39292fd30c5f1d077fcab601dfbed92b2a8906d0ebbe713db97f95a9c5d931336bcdd6fbc8fad6a78b4e0fd042cbfa48527a83c513fd7a1ddb2c91adec86eee148bd216146dbae1f156fdf4091f1856e769414d987b0", @generic="80bdab4825dcf3897ad8cf58d57f38db82883ea877bec6fda58157cc7e27ba1266bc795cb353e7e406c77d9bd370bf8a99f6f112871fd128b5cac83425d96e2815ad1a9ef4daeea94b5e1a88277ba63a930488e68f937b5fdd7a5504aa83460451e240f48294ad2ec60b2d935718c86b50e1e5728631b2dd045da03c166118484e86efe3a2560280966038476a83c3ce0e3fb542d5d23375e1206ae1eb3c5e6e52b243f44af5dba6b0"]}, 0x1c4}, {&(0x7f0000001f40)={0xf4, 0x15, 0x20, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x13b}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r5}, @generic="4217a330d646b107f2e249cf0f7e128dfa040bf917c32f3c31e611f593b230a55574ae03cb4b0d084aa5c774dd5df9e92ae16ec72f6459d4f897c55feadba9efab16d0407e02ca0437add15dca89c573bab7598a41e78d6a15c97482756ffb26664c378009d50fd1bec64e8bc11afc541a4bd5858caff05adc74b08ecfee738936bcde", @generic="fc4966e18c4424ba2d9c5564c202ae2c719e9818b929cd66776f258059114dfc7af79ef388e434165da99a336e93038f1329f37c94136e87bb084f3f284e3888add1", @typed={0x8, 0xca, 0x0, 0x0, @pid=r10}, @nested={0x8, 0x127, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, 0xf4}, {&(0x7f0000002040)={0x131c, 0x29, 0x100, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xef, 0x0, 0x0, @fd=r8}, @nested={0x1018, 0x53, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x76, 0x0, 0x0, @str='vcan0\x00'}, @generic="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"]}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r6}, @typed={0x8a, 0xa5, 0x0, 0x0, @binary="5d3c9f5a34bd4da1a618667b1cd1d29e6a921ef9d058922aca68d8de63a3ba48ed7d639f8c7717c6d87ffaf80b0f9fe3ae990a27bb363d63d184e729527af7caee201e99a1e5e014e90d01f067a14633a9bd9405edff96c0973848bfa80a576052481773f92dca9d29990d18ab1f64ed272cd276f2c8c1d6b080581b6082906ef32bd845b120"}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@remote}, @nested={0x120, 0xe5, 0x0, 0x1, [@generic="54326803e3480ed7f4dd291d2a79b2c6e424f42563b136b411d0387b48ec09692347e23c2315a511b336f93f4046efdca7320d23f8760f3545273927118f14aa00102c5e75b6af17b9cb8f54eb6e15e51fa54dee35deedee7acdcee62d729afedd1cb79988479f64341734b3ec2b01d9dc56d73d3c84c3be5128fe0b906bf5ca30ef67f26aabcafdf0b4c778a55cc2e8b140c5e1995ad7249180e825e634d8d1889ab1c244dda30d900750cc574632992098643f05b0dda0ea7bf6abef9c69cf8cad1efa1ad8a174316a8ef50fb07b35017eb832dad302d936b150763bb022f41aa11013baf9d0871afafa2ecc569b0c64ca3abf", @nested={0x4, 0x36}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x3d}, @typed={0xc, 0x59, 0x0, 0x0, @u64=0x2}]}, @nested={0x105, 0xe2, 0x0, 0x1, [@generic="f24ff13ccd04baf3452cf918ee6efa8063b1addb1b6ea27921521a46f57ee110bcd1691d8f82ed64836864d42407594187ad1daa2ba89931a49d6d518e6c4050bfeae5a1b6baadaafafda1861e4fb70fc983fb339cde37b0feb0a6c9a4789dba9e043e49fc4b520f581864bf08ba8b0367f796777ec53d35c68d4c3e4da56c8460ae70c1076160e2f622af0b77843b1e88f32e404077f20e71c81c63c797bdbedec972ac9ceca0cb58e035635f53f8b0fcc8f42172d796308a25be24e58142574764b6648d07fa90ee648fe4cc0cd4911f083e334aaf0e40d34fc47e3ed37258f37c1841c9dbaf4536bc2347a7baa6792c7b49f1d3", @nested={0x4, 0x21}, @nested={0x4, 0xed}, @nested={0x4, 0x117}]}]}, 0x131c}, {&(0x7f0000003380)={0x40, 0x2d, 0x800, 0x70bd27, 0x25dfdbfc, "", [@generic="bcf2be612e7b6323e11dad07919871a8646564fc99d7aff9edf1e9da49b82c73b086d8b9405bd606493f135a", @typed={0x4, 0xc9}]}, 0x40}], 0x6, &(0x7f0000008480)=[@cred={{0x1c, 0x1, 0x2, {r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x28, 0x1, 0x1, [r9, r8, r6, r5, r7, r8]}}, @rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r0, r7, r5, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x148, 0x800}, 0x48004)

117.268527ms ago: executing program 2 (id=39):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x3, 0x2, 0x5, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8001, 0xffff, 0xa620, 0x1, 0x788, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x17, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"})
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup3(r3, r4, 0x0) (async)
connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x3, 0x2, 0x5, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8001, 0xffff, 0xa620, 0x1, 0x788, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x17, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) (async)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (async)

0s ago: executing program 0 (id=40):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x4, 0x41000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x58, 0xfc, 0xf, 0xf3}}}}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   22.123090][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   22.123107][   T36] audit: type=1400 audit(1785890900.780:59): avc:  denied  { transition } for  pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.127739][   T36] audit: type=1400 audit(1785890900.780:60): avc:  denied  { noatsecure } for  pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.132236][   T36] audit: type=1400 audit(1785890900.790:61): avc:  denied  { write } for  pid=275 comm="sh" path="pipe:[1509]" dev="pipefs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   22.135697][   T36] audit: type=1400 audit(1785890900.790:62): avc:  denied  { rlimitinh } for  pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.138663][   T36] audit: type=1400 audit(1785890900.790:63): avc:  denied  { siginh } for  pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts.
[   30.598494][   T36] audit: type=1400 audit(1785890909.250:64): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.602287][  T287] cgroup: Unknown subsys name 'net'
[   30.621293][   T36] audit: type=1400 audit(1785890909.250:65): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.648842][   T36] audit: type=1400 audit(1785890909.280:66): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.649362][  T287] cgroup: Unknown subsys name 'devices'
[   30.772546][  T287] cgroup: Unknown subsys name 'hugetlb'
[   30.778283][  T287] cgroup: Unknown subsys name 'rlimit'
[   30.875691][   T36] audit: type=1400 audit(1785890909.530:67): avc:  denied  { setattr } for  pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.899183][   T36] audit: type=1400 audit(1785890909.530:68): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   30.923991][   T36] audit: type=1400 audit(1785890909.530:69): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   30.954703][  T289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   30.964060][   T36] audit: type=1400 audit(1785890909.620:70): avc:  denied  { relabelto } for  pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.990436][   T36] audit: type=1400 audit(1785890909.620:71): avc:  denied  { write } for  pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.045535][   T36] audit: type=1400 audit(1785890909.700:72): avc:  denied  { read } for  pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.071668][   T36] audit: type=1400 audit(1785890909.700:73): avc:  denied  { open } for  pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.072704][  T287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.872090][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.879379][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.899497][  T294] bridge_slave_0: entered allmulticast mode
[   31.906067][  T294] bridge_slave_0: entered promiscuous mode
[   31.915504][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.922642][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.930202][  T294] bridge_slave_1: entered allmulticast mode
[   31.939636][  T294] bridge_slave_1: entered promiscuous mode
[   32.048873][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.055993][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.063349][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.070416][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.130826][  T299] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.137920][  T299] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.145078][  T299] bridge_slave_0: entered allmulticast mode
[   32.151547][  T299] bridge_slave_0: entered promiscuous mode
[   32.158318][  T299] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.165495][  T299] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.172730][  T299] bridge_slave_1: entered allmulticast mode
[   32.179025][  T299] bridge_slave_1: entered promiscuous mode
[   32.204188][  T300] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.211431][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.218746][  T300] bridge_slave_0: entered allmulticast mode
[   32.225236][  T300] bridge_slave_0: entered promiscuous mode
[   32.234850][  T298] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.242007][  T298] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.249103][  T298] bridge_slave_0: entered allmulticast mode
[   32.255546][  T298] bridge_slave_0: entered promiscuous mode
[   32.262075][  T300] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.269182][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.276628][  T300] bridge_slave_1: entered allmulticast mode
[   32.283472][  T300] bridge_slave_1: entered promiscuous mode
[   32.293709][  T298] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.300864][  T298] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.307985][  T298] bridge_slave_1: entered allmulticast mode
[   32.314476][  T298] bridge_slave_1: entered promiscuous mode
[   32.393429][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.401021][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.448769][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.455998][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.477525][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.484614][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.562119][  T294] veth0_vlan: entered promiscuous mode
[   32.575373][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.582507][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.590904][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.599320][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.615960][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.623094][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.638936][  T294] veth1_macvtap: entered promiscuous mode
[   32.648448][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.655936][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.684441][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.691702][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.699740][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.706831][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.753434][  T299] veth0_vlan: entered promiscuous mode
[   32.765243][  T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.782215][  T300] veth0_vlan: entered promiscuous mode
[   32.797698][  T299] veth1_macvtap: entered promiscuous mode
[   32.820600][  T298] veth0_vlan: entered promiscuous mode
[   32.842855][  T300] veth1_macvtap: entered promiscuous mode
[   32.856649][  T298] veth1_macvtap: entered promiscuous mode
[   32.878788][  T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.978474][  T320] batadv_slave_1: entered promiscuous mode
[   33.007219][  T317] dummy_hcd dummy_hcd.0: remove, state 4
[   33.022206][  T317] usb usb1: USB disconnect, device number 1
[   33.039143][  T317] dummy_hcd dummy_hcd.0: stopped
[   33.048407][  T317] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   33.060564][  T317] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005
[   33.068882][  T317] dummy_hcd dummy_hcd.0: Dummy host controller
[   33.078099][  T317] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1
[   33.087918][  T317] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.12
[   33.098745][  T325] 9pnet_fd: p9_fd_create_tcp (325): problem connecting socket to 127.0.0.1
[   33.109365][  T317] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   33.120942][  T326] 9pnet_fd: p9_fd_create_unix (326): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   33.122211][  T317] usb usb1: Product: Dummy host controller
[   33.222159][  T317] usb usb1: Manufacturer: Linux syzkaller dummy_hcd
[   33.232352][  T317] usb usb1: SerialNumber: dummy_hcd.0
[   33.239993][  T317] hub 1-0:1.0: USB hub found
[   33.245501][  T317] hub 1-0:1.0: 1 port detected
[   33.376515][  T332] kvm: pic: non byte write
[   33.493084][  T336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=336 comm=syz.1.8
[   33.520313][   T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.671311][   T67] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7
[   33.682786][   T67] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024
[   33.696085][   T67] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   33.705572][   T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.713935][   T67] usb 1-1: Product: syz
[   33.718474][   T67] usb 1-1: Manufacturer: syz
[   33.724782][   T67] usb 1-1: SerialNumber: syz
[   33.791729][  T318] batadv_slave_1: left promiscuous mode
[   33.827470][  T343] Bluetooth: ISO socket layer initialized
[   33.958727][  T323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.968285][  T323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.008623][  T356] device-mapper: ioctl: device name cannot contain '/'
[   34.026531][   T67] usb 1-1: Can't get UAC3 power state for id 10
[   34.037840][   T67] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   34.056512][   T67] usb 1-1: USB disconnect, device number 2
[   34.064784][  T359] rust_binder: 358:359 no such ref 2
[   34.073313][  T359] rust_binder: Write failure EFAULT in pid:19
[   34.092663][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.108489][  T361] configfs-gadget.g1 gadget.0: HOST MAC 2a:0d:67:26:5c:e6
[   34.138337][  T361] configfs-gadget.g1 gadget.0: MAC d2:16:2d:fb:48:f7
[   34.460131][   T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   34.560292][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.580486][  T384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   34.590748][  T384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   34.602646][  T384] netlink: 72 bytes leftover after parsing attributes in process `syz.0.21'.
[   34.621385][   T67] usb 1-1: Dual-Role OTG device on HNP port
[   34.627675][   T67] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12
[   34.637623][   T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.654494][   T67] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 2a:0d:67:26:5c:e6
[   34.710942][   T10] usb 2-1: Using ep0 maxpacket: 16
[   34.720817][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[   34.738449][   T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   34.764024][   T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   34.776467][   T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   34.793834][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[   34.815976][   T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   34.827536][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.837761][   T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[   34.871624][  T406] device-mapper: ioctl: device name cannot contain '/'
[   34.895284][  T409] rust_binder: 408:409 no such ref 2
[   34.900758][  T409] rust_binder: Write failure EFAULT in pid:16
[   34.929583][  T413] FAULT_INJECTION: forcing a failure.
[   34.929583][  T413] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.950128][  T413] CPU: 0 UID: 0 PID: 413 Comm: syz.0.27 Not tainted syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9
[   34.950168][  T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.950192][  T413] Call Trace:
[   34.950200][  T413]  <TASK>
[   34.950210][  T413]  __dump_stack+0x21/0x30
[   34.950269][  T413]  dump_stack_lvl+0x140/0x1c0
[   34.950303][  T413]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.950340][  T413]  dump_stack+0x19/0x20
[   34.950373][  T413]  should_fail_ex+0x3c2/0x510
[   34.950401][  T413]  should_fail+0xf/0x20
[   34.950426][  T413]  should_fail_usercopy+0x1e/0x30
[   34.950456][  T413]  _copy_from_user+0x20/0xa0
[   34.950490][  T413]  dm_ctl_ioctl+0x151/0xde0
[   34.950514][  T413]  ? selinux_file_ioctl+0x732/0x1480
[   34.950539][  T413]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   34.950569][  T413]  ? bpf_lsm_file_ioctl+0xd/0x20
[   34.950601][  T413]  ? security_file_ioctl+0x3e/0x110
[   34.950638][  T413]  ? __cfi_dm_ctl_ioctl+0x10/0x10
[   34.950702][  T413]  __se_sys_ioctl+0x132/0x1b0
[   34.950733][  T413]  __x64_sys_ioctl+0x7f/0xa0
[   34.950763][  T413]  x64_sys_call+0x1878/0x2ee0
[   34.950786][  T413]  do_syscall_64+0x57/0xf0
[   34.950814][  T413]  ? clear_bhb_loop+0x50/0xa0
[   34.950848][  T413]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.950879][  T413] RIP: 0033:0x7f9bcdd9e019
[   34.950900][  T413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.950921][  T413] RSP: 002b:00007f9bceccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   34.950954][  T413] RAX: ffffffffffffffda RBX: 00007f9bce025fa0 RCX: 00007f9bcdd9e019
[   34.950974][  T413] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[   34.950992][  T413] RBP: 00007f9bceccc090 R08: 0000000000000000 R09: 0000000000000000
[   34.951008][  T413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.951024][  T413] R13: 00007f9bce026038 R14: 00007f9bce025fa0 R15: 00007ffcf0756e08
[   34.951046][  T413]  </TASK>
[   35.020825][   T46] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[   35.062037][    T9] usb 2-1: USB disconnect, device number 2
[   35.066124][  T417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   35.272168][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[   35.284129][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[   35.295812][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   35.307404][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[   35.317702][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   35.327895][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   35.340864][   T46] usb 4-1: string descriptor 0 read error: -22
[   35.347134][   T46] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   35.356666][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.365637][   T46] usb 4-1: config 0 descriptor??
[   35.371603][  T393] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   35.390582][  T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.582810][    T9] usb 4-1: USB disconnect, device number 2
[   35.615845][   T36] kauditd_printk_skb: 108 callbacks suppressed
[   35.615866][   T36] audit: type=1400 audit(1785890914.270:182): avc:  denied  { ioctl } for  pid=423 comm="syz.0.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3949 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.619974][  T424] process 'syz.0.37' launched './file0' with NULL argv: empty string added
[   35.622613][   T36] audit: type=1400 audit(1785890914.270:183): avc:  denied  { execute } for  pid=423 comm="syz.0.37" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   35.688254][   T36] audit: type=1400 audit(1785890914.310:184): avc:  denied  { execute_no_trans } for  pid=423 comm="syz.0.37" path="/10/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   35.697133][  T429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.721028][  T429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.890091][  T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   36.041574][  T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7
[   36.052811][  T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024
[   36.067834][  T310] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   36.078160][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.086470][  T310] usb 2-1: Product: syz
[   36.090740][  T310] usb 2-1: Manufacturer: syz
[   36.095638][  T310] usb 2-1: SerialNumber: syz
[   36.176530][   T36] audit: type=1400 audit(1785890914.830:185): avc:  denied  { map } for  pid=434 comm="syz.3.32" path="socket:[3972]" dev="sockfs" ino=3972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   36.202258][   T36] audit: type=1400 audit(1785890914.830:186): avc:  denied  { checkpoint_restore } for  pid=434 comm="syz.3.32" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   36.269691][  T442] dummy_hcd dummy_hcd.0: remove, state 1
[   36.283467][  T442] usb usb1: USB disconnect, device number 1
[   36.291419][  T442] usb 1-1: USB disconnect, device number 3
[   36.298155][  T442] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[   36.329787][  T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.342653][  T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.380310][  T447] device-mapper: ioctl: device name cannot contain '/'
[   36.432266][   T36] audit: type=1400 audit(1785890915.090:187): avc:  denied  { mounton } for  pid=453 comm="syz.3.38" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.482445][  T310] usb 2-1: Can't get UAC3 power state for id 10
[   36.493194][  T310] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[   36.517275][  T442] dummy_hcd dummy_hcd.0: stopped
[   36.531659][  T310] usb 2-1: USB disconnect, device number 3
[   36.560880][  T442] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   36.650870][  T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.679014][  T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.681095][   T67] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI
[   36.699759][   T67] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]
[   36.708219][   T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/1:2 Not tainted syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9
[   36.719812][   T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.730441][   T67] Workqueue: mld mld_dad_work
[   36.735175][   T67] RIP: 0010:dummy_queue+0x1c0/0x8e0
[   36.740519][   T67] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 49 a0 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[   36.760338][   T67] RSP: 0018:ffffc90000d7f0e8 EFLAGS: 00010206
[   36.766535][   T67] RAX: 000000000000000a RBX: ffff88810f7da210 RCX: dffffc0000000000
[   36.774716][  T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.774725][   T67] RDX: ffff888101be5f00 RSI: 0000000000000003 RDI: 0000000000000005
[   36.774746][   T67] RBP: ffffc90000d7f160 R08: 0000000000000003 R09: 0000000000000004
[   36.799788][   T67] R10: 0000000000000000 R11: ffffffff83b99350 R12: 0000000000000050
[   36.809286][   T67] R13: ffff88810f7da200 R14: 1ffff11021efb440 R15: ffff88810235cc90
[   36.820824][   T67] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   36.822188][  T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.831292][   T67] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   36.847064][   T67] CR2: 00007f9a0ca07286 CR3: 000000013648e000 CR4: 00000000003526b0
[   36.855414][   T67] Call Trace:
[   36.858949][   T67]  <TASK>
[   36.861923][   T67]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   36.868776][   T67]  usb_ep_queue+0xe3/0x230
[   36.873266][   T67]  eth_start_xmit+0x9c1/0xf90
[   36.878006][   T67]  dev_hard_start_xmit+0x230/0x730
[   36.883451][   T67]  sch_direct_xmit+0x27d/0x9c0
[   36.888632][   T67]  ? __kasan_check_write+0x18/0x20
[   36.893829][   T67]  ? _raw_spin_trylock+0xb5/0x140
[   36.899663][   T67]  ? __cfi_sch_direct_xmit+0x10/0x10
[   36.905616][   T67]  ? netdev_core_pick_tx+0x1ff/0x370
[   36.911243][   T67]  ? __dev_queue_xmit+0x26c/0x3780
[   36.916774][   T67]  __dev_queue_xmit+0x1611/0x3780
[   36.922540][   T67]  ? __dev_queue_xmit+0x26c/0x3780
[   36.928312][   T67]  ? fib_rules_lookup+0x7c7/0xa20
[   36.933767][   T67]  ? __cfi_fib_rules_lookup+0x10/0x10
[   36.939383][   T67]  ? __cfi___dev_queue_xmit+0x10/0x10
[   36.945691][   T67]  ? mroute6_is_socket+0x227/0x360
[   36.951499][   T67]  ? ret_from_fork_asm+0x1a/0x30
[   36.957394][   T67]  ? __cfi_mroute6_is_socket+0x10/0x10
[   36.963971][   T67]  ? stack_trace_save+0xaa/0x100
[   36.971054][   T67]  ? stack_depot_save_flags+0x38/0x800
[   36.973745][  T459] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   36.976584][   T67]  ? kasan_save_track+0x4f/0x80
[   36.976628][   T67]  ? kasan_save_track+0x3e/0x80
[   36.985257][   T36] audit: type=1400 audit(1785890915.500:188): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   36.990479][   T67]  ? __asan_memcpy+0x5a/0x80
[   36.990517][   T67]  ip6_finish_output2+0x16b2/0x1990
[   36.996647][   T36] audit: type=1400 audit(1785890915.500:189): avc:  denied  { search } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.020056][   T67]  ? __cfi_ip6_finish_output2+0x10/0x10
[   37.020101][   T67]  ? __asan_memset+0x39/0x50
[   37.020124][   T67]  ? xfrm_lookup_with_ifid+0x196e/0x2340
[   37.067490][  T459] netlink: 'syz.2.39': attribute type 32 has an invalid length.
[   37.071030][   T67]  ip6_finish_output+0x535/0xaf0
[   37.071070][   T67]  ip6_output+0x1fe/0x420
[   37.088691][   T67]  ? __cfi_ip6_output+0x10/0x10
[   37.094205][   T67]  ? __cfi_ip6_finish_output+0x10/0x10
[   37.095678][   T36] audit: type=1400 audit(1785890915.500:190): avc:  denied  { write } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.099812][   T67]  ? __cfi_ip6_output+0x10/0x10
[   37.099846][   T67]  mld_sendpack+0x751/0xd10
[   37.131548][   T67]  ? add_grec+0x1400/0x1400
[   37.136101][   T67]  ? add_grec+0xfa8/0x1400
[   37.140706][   T67]  ? __cfi_dst_output+0x10/0x10
[   37.145696][   T67]  ? mutex_lock+0x97/0x1d0
[   37.150161][   T67]  mld_send_initial_cr+0x1c0/0x320
[   37.155661][   T67]  mld_dad_work+0x3e/0x4e0
[   37.160142][   T67]  process_scheduled_works+0x7f7/0x1060
[   37.165743][   T67]  worker_thread+0xc99/0x13f0
[   37.170558][   T67]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[   37.176416][   T67]  ? __kasan_check_read+0x15/0x20
[   37.181526][   T67]  kthread+0x2c7/0x360
[   37.185648][   T67]  ? __cfi_worker_thread+0x10/0x10
[   37.190243][   T36] audit: type=1400 audit(1785890915.500:191): avc:  denied  { add_name } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.190895][   T67]  ? __cfi_kthread+0x10/0x10
[   37.216186][   T67]  ret_from_fork+0x67/0xa0
[   37.220747][   T67]  ? __cfi_kthread+0x10/0x10
[   37.225546][   T67]  ret_from_fork_asm+0x1a/0x30
[   37.230542][   T67]  </TASK>
[   37.233729][   T67] Modules linked in:
[   37.238171][   T67] ---[ end trace 0000000000000000 ]---
[   37.244049][   T67] RIP: 0010:dummy_queue+0x1c0/0x8e0
[   37.249306][   T67] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 49 a0 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[   37.269185][   T67] RSP: 0018:ffffc90000d7f0e8 EFLAGS: 00010206
[   37.275780][   T67] RAX: 000000000000000a RBX: ffff88810f7da210 RCX: dffffc0000000000
[   37.283846][   T67] RDX: ffff888101be5f00 RSI: 0000000000000003 RDI: 0000000000000005
[   37.292058][   T67] RBP: ffffc90000d7f160 R08: 0000000000000003 R09: 0000000000000004
[   37.300472][   T67] R10: 0000000000000000 R11: ffffffff83b99350 R12: 0000000000000050
[   37.308501][   T67] R13: ffff88810f7da200 R14: 1ffff11021efb440 R15: ffff88810235cc90
[   37.316575][   T67] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   37.325595][   T67] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   37.332256][   T67] CR2: 00007f9a0ca07286 CR3: 000000013648e000 CR4: 00000000003526b0
[   37.340316][   T67] Kernel panic - not syncing: Fatal exception in interrupt
[   37.348126][   T67] Kernel Offset: disabled
[   37.352479][   T67] Rebooting in 86400 seconds..