last executing test programs: 4m59.161892909s ago: executing program 1 (id=1408): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000100000a0000040900010073797a3100000000080005400000000209000200730400000000000008000a40fffffffc08000340000000012c0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x3, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0xcb}, {}, {}, {}, {0xfe}, {}, {}, {0x20, 0x0, 0x3}, {}, {}, {0x3}, {}, {}, {0x7}, {}, {0x1}, {}, {0x0, 0x0, 0x40}]}}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 4m58.594542811s ago: executing program 1 (id=1413): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioprio_set$pid(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x32, &(0x7f0000000080)=0x4, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x4fed0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x10000, @remote, 0x6}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000030a03000000000000000000010000050c0002400000000000000001040008800900010073797a3000000000140000001100010010000000000000000000000a227a69420bf4b22d5596b0"], 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x18f302, 0x188) socket$alg(0x26, 0x5, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r6, 0x0, 0x4, 0x10001}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r6, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08001a8004000080"], 0x20}], 0x1}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGLED(r8, 0x40284504, &(0x7f0000000000)=""/56) 4m58.202017083s ago: executing program 1 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') pread64(r1, &(0x7f0000002340)=""/4103, 0x1007, 0xffffffff) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') (async) pread64(r1, &(0x7f0000002340)=""/4103, 0x1007, 0xffffffff) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) 4m57.839172097s ago: executing program 1 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfdfd}) 4m57.076546125s ago: executing program 1 (id=1419): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4m55.966470378s ago: executing program 1 (id=1425): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x40, 0x126, 0x16, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x9f4a, 0xe}}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@xdp={0x2c, 0x1, r4, 0x2c}, 0x80, 0x0, 0x53}, 0xe07e872420dfefca) 4m55.721618707s ago: executing program 32 (id=1425): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x40, 0x126, 0x16, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x9f4a, 0xe}}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@xdp={0x2c, 0x1, r4, 0x2c}, 0x80, 0x0, 0x53}, 0xe07e872420dfefca) 2m43.630279779s ago: executing program 4 (id=2291): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'vxcan1\x00', 0x5000}) 2m43.493780003s ago: executing program 4 (id=2292): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_dev$video4linux(&(0x7f0000000040), 0x741, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x1011, 0x0, 0xffffffff, 0x0, 0x0, 0x1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110) socket$inet6(0xa, 0x5, 0x9) 2m43.251188252s ago: executing program 4 (id=2293): r0 = socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m43.048926047s ago: executing program 4 (id=2294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x442a41) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x0, 0x0, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) 2m41.225607939s ago: executing program 4 (id=2304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0xe5b1) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m41.205278632s ago: executing program 4 (id=2305): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xa70, 0x1, 0x1}, 0x18, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() creat(&(0x7f0000001380)='./file0\x00', 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ntfs3\x00', 0x0, 0x0) landlock_restrict_self(r0, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x25, &(0x7f0000002d80)="f0c46000", 0x4) 2m25.050934631s ago: executing program 33 (id=2305): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xa70, 0x1, 0x1}, 0x18, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() creat(&(0x7f0000001380)='./file0\x00', 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ntfs3\x00', 0x0, 0x0) landlock_restrict_self(r0, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x25, &(0x7f0000002d80)="f0c46000", 0x4) 2m18.185667234s ago: executing program 2 (id=2402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x7, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 2m17.535322488s ago: executing program 2 (id=2403): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e10508040125010207010902360001000000000904"], 0x0) syz_usb_connect(0x3, 0x36d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x3a, 0x40, 0x43, 0x20, 0x45e, 0x404, 0x9d02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35b, 0x2, 0x38, 0xf7, 0x0, 0x31, "", [{{0x9, 0x4, 0x7c, 0x8, 0x4, 0x1, 0xe6, 0x51, 0x80, [], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0x9, 0x9, 0x4, [@generic={0xdb, 0x8, "0fecf9d2134e9b422b24703137a92942148c380816a5ddc7e895fc3c4253b482b75e4fd0c3f88ae53cf1496de4c6424eebe54d8918619eff0d8b50b79b601e2c2b17e4e1f09b9f09a3016e325bddf02c40145aae0444260afa5674490608abc1a4a5046b92b5409145e2225e0dc29ef2bc4fa583d1bd5c0561bef00c880df03f17f2ecefa5ff76b29001412169813fcdf9a05be3de81d5c75e9b5d22ca6531e2e9c83df9a6e45a22a7b81c23b9fd0429ea657d334eacd033e9d6aa44d604a9ab7a79c4f5f5047b330da2b3b4c32e80c3279bc0a1b05bfb7c23"}, @generic={0x44, 0x23, "1dcf20e956fadb4241902e7f50fe1cb57e1a4b599bf5b1b87758a9a84196f912b62b51ec10d6322afacb3c4a547a84eaad3b1127f763fb44dbd10c90ef4e8117b2d0"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x3, 0x14, 0x1}}, {{0x9, 0x5, 0xe, 0x6, 0x930ac4909d1f4687, 0x0, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6}, @generic={0xda, 0x21, "7f25ed20b6f9ea56aabbea93ed7b22a6636c66e8dd3b4e9204ac9352e525af141c1eb49211bb057b92f6ebea91520a70eb99933c41f11c94f3589e9efaa928e61b18217f179546deb598d43e7ea577678d621b5c0d8857da71f6bd37fae2c28d645a55ac1b2909d602410ba283e861cef0c1348f03096f85757f2c31a4b377daece5a75f23d33ed020d66640adfc98760f303baf78e38695f8444056bbb829a172c3209dc79b5a6f91a512c51aa015f31879d03e2a16a377e64dbbfaab23c5c86f54ccffce3a5f461a515d997347b27e32f0a45197098afe"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7, 0xca, 0x98}}]}}, {{0x9, 0x4, 0x2b, 0x0, 0x4, 0x88, 0xeb, 0x23, 0x8, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x40, 0x7f, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x2, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0xc7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xab, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0x12, 0x39, [@generic={0xe3, 0x5, "aa399a80036c60b9298f7afc0da05de2a62298cacf5adf94bdc240e8b0ab639a1d71179662f9e1f18b98066133cc9d427dba7d441ed682b7c5108aa184df27cf98b3378d6f236a5717f20f43867b5c1583e15a5cb57cc6a50e92875369c99bab9f3389fb4390942382b6589a3dc32d7923bc83cb7eaa5272a7a0803a1e2cd207e30850cfda106bf3b5eccaf0e53aefac440d3265369ce941a3dd0043d113fd470acbd104ee8a306d1be2f940ce3e576fe73de0c5dc0ba98632eeb8ee85c613b40a25efdfc29778992d5e51a25db7af6d993d64c2d2429480853cbb93b8b7cf9a8d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x80}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xe4, 0x0, 0x38, 0xff}, 0x8, &(0x7f0000000400)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2b}}, {0x59, &(0x7f0000000500)=@string={0x59, 0x3, "17b00a50e05d3c09c8415cd3d5550b7ddae9bd05d45e27914f2efdb29886cb203d8c5c4d82ff8d8e631bf4ff89ca7ef0db3ed313f20d8576abac1361d563883551d550c1641d11f279ae8129f2227f57f9d131d5319ec2"}}, {0x39, &(0x7f0000000580)=@string={0x39, 0x3, "bb2afd37ce9daaa9a44633ecc825c431175f6dc97f660e6278bb940d5c3b02c2ed12be1c78bfce45428a1642a58dc86f46f4e0e720db36"}}]}) 2m16.094280701s ago: executing program 2 (id=2407): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') socket$inet6(0xa, 0x800000000000002, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 2m15.937543445s ago: executing program 2 (id=2408): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x4) timer_create(0x3, &(0x7f0000000240)={0x0, 0x1a, 0x2, @thr={&(0x7f0000000080)="1261d89c626309dee06fbfa386b3cb3faaea43201aeaa8a593ae2525f00394d0c88385264ae43c251177a1ab659a49a5597aa8bef8f8ce4111b5a3c5e1fdd6337d11f180d5a14be38acf9fe027050b21600575af8556136ed1210904be747927f13ec300a84e89e16ae9c5dc6a67ed5e0415432efe695219971934ef90095b020ed1176491583ebdc6b76512c24c7a", &(0x7f0000000140)="15d4d2b749747ae9ff1f365e154e552f6cf540547251013c833142fefb5eca8ebcb3308693aae98707fd11b708086c7ad881f2f93c5f04614a7a746d6bf581b3cb8c60bfe3803e05bf759e39cfe9662a8d3c74c898d763afbe7a08dc05ac815002b7ca813e4e8357c0854cb75efebd0b0f791af4953d57eca1ad1101dcd1a9e58355e6bca8272ba5e3e8aa9021d43c502e79d3d85b81ef532a06a1f1233406ff9c5184445390fb6d827ba1b6d7ef0dd5bf8481451ca1c3a76aa20f7df7d5e9212f58d77c4223442c6c"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000000340)) nanosleep(&(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)) write$P9_ROPEN(r0, &(0x7f0000000400)={0x18, 0x71, 0x2, {{0x20, 0x2}, 0xc}}, 0x18) r4 = semget$private(0x0, 0x2, 0x0) semtimedop(r4, &(0x7f0000000440)=[{0x4, 0x7, 0x1000}], 0x1, &(0x7f0000000480)={0x0, 0x3938700}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) futex_waitv(&(0x7f0000000a80)=[{0x8, &(0x7f00000004c0)=0x7fff, 0x2}, {0xd9, &(0x7f0000000500)=0x8, 0x82}, {0x9, &(0x7f0000000540)=0x9}, {0x7, &(0x7f0000000580)=0x2, 0x2}, {0x7, &(0x7f00000005c0)=0x211, 0x2}, {0x4, &(0x7f0000000600)=0x8, 0x82}, {0x5, &(0x7f0000000640)=0x8, 0x82}, {0x419, &(0x7f0000000680)=0x56e49635, 0x2}, {0x0, &(0x7f00000006c0)=0x8000000000000001, 0x82}, {0x0, &(0x7f0000000700)=0x100000000, 0x82}, {0x1ff, &(0x7f0000000740)=0x6, 0x82}, {0xfffffffffffffffb, &(0x7f0000000780), 0x82}, {0x8b, &(0x7f00000007c0)=0x2, 0x82}, {0x2, &(0x7f0000000800)=0x1590, 0x2}, {0x8, &(0x7f0000000840)=0x4, 0x80}, {0x4, &(0x7f0000000880)=0xfffffffffffffffe, 0x82}, {0x7f, &(0x7f00000008c0)=0x86a, 0x82}, {0x5, &(0x7f0000000900)=0x5, 0x82}, {0xc32b, &(0x7f0000000940)=0x400, 0x82}, {0xdb89, &(0x7f0000000980)=0x9, 0x82}, {0x1, &(0x7f00000009c0)=0x3, 0x82}, {0x2, &(0x7f0000000a00)=0x1, 0x82}, {0x2, &(0x7f0000000a40)=0x4, 0x2}], 0x17, 0x0, &(0x7f0000000cc0)={0x0, 0x3938700}, 0x1) r5 = mq_open(&(0x7f0000000d00)='{\x00', 0x800, 0x80, &(0x7f0000000d40)={0x7, 0x9, 0x0, 0x1}) mq_timedreceive(r5, &(0x7f0000000d80)=""/8, 0x8, 0x2, &(0x7f0000000dc0)) futex_waitv(&(0x7f0000002240)=[{0x10000, &(0x7f0000000e00)=0x8000000000000000, 0x2}, {0x400, &(0x7f0000000e40)=0x8, 0x82}, {0x3, &(0x7f0000000e80), 0x82}, {0x1, &(0x7f0000000ec0)=0x97ac, 0x2}, {0x7, &(0x7f0000000f00)=0x5, 0x82}, {0x8000, &(0x7f0000000f40)=0xffffffffffff1cca, 0x82}, {0x80, &(0x7f0000000f80)=0x9, 0x82}, {0x2, &(0x7f0000000fc0)=0xfffffffffffffc01, 0x82}, {0x6, &(0x7f0000001000)=0x5e21, 0x82}, {0x4, &(0x7f0000001040), 0x2}, {0x1ff, &(0x7f0000001080)=0x92, 0x82}, {0x7, &(0x7f00000010c0)=0x9, 0x184}, {0x7, &(0x7f0000001100)=0x9, 0x82}, {0x5, &(0x7f0000001140)=0x3, 0x82}, {0x3, &(0x7f0000001180)=0x2, 0x82}, {0x9, &(0x7f00000011c0)=0xe5fb, 0x2}, {0x7, &(0x7f0000001200)=0x6, 0x2}, {0x4, &(0x7f0000001240), 0x2}, {0x4, &(0x7f0000001280)=0x4, 0x82}, {0x5, &(0x7f00000012c0)=0x4}, {0x7a, &(0x7f0000001300)=0x4, 0x2}, {0x8000, &(0x7f0000001340)=0x2, 0x82}, {0xc31, &(0x7f0000001380)=0x200, 0x2}, {0x1000, &(0x7f00000013c0)=0x6, 0x2}, {0x0, &(0x7f0000001400)=0x3ff, 0x2}, {0x6, &(0x7f0000001440)=0x7, 0x82}, {0x9, &(0x7f0000001480)=0x6, 0x82}, {0x100000000, &(0x7f00000014c0)=0x3, 0x2}, {0x8104, &(0x7f0000001500)=0x80000000, 0x82}, {0x4, &(0x7f0000001540)=0x5, 0x82}, {0x200, &(0x7f0000001580)=0x7, 0x82}, {0x7f, &(0x7f00000015c0), 0x2}, {0x0, &(0x7f0000001600), 0x2}, {0x101, &(0x7f0000001640)=0x6, 0x2}, {0x2, &(0x7f0000001680)=0xcba8, 0x2}, {0x8, &(0x7f00000016c0), 0x2}, {0x100000001, &(0x7f0000001700)=0x7, 0x2}, {0x0, &(0x7f0000001740)=0x8001, 0x2}, {0xd1, &(0x7f0000001780)=0x8000000000000000, 0x2}, {0xffffffff, &(0x7f00000017c0)=0xd, 0x80}, {0x10000, &(0x7f0000001800)=0x6, 0x2}, {0x2198, &(0x7f0000001840)=0x7, 0x2}, {0x101, &(0x7f0000001880)=0x7f, 0x2}, {0x7, &(0x7f00000018c0)=0x4, 0x82}, {0x100, &(0x7f0000001900)=0x5, 0x82}, {0x5, &(0x7f0000001940)=0x9dd368a, 0x2}, {0x8, &(0x7f0000001980)=0x10000, 0x82}, {0xf94, &(0x7f00000019c0)=0x100, 0x2}, {0x0, &(0x7f0000001a00)=0x3, 0x2}, {0x7, &(0x7f0000001a40)=0x3ff, 0x2}, {0x7f, &(0x7f0000001a80)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000001ac0)=0x800, 0x82}, {0x2, &(0x7f0000001b00)=0x67e, 0x82}, {0x6, &(0x7f0000001b40)=0x28, 0x82}, {0x5, &(0x7f0000001b80)=0x5, 0x2}, {0x1000, &(0x7f0000001bc0)=0xffffffff, 0x82}, {0x1000, &(0x7f0000001c00)=0x4, 0x2}, {0x3, &(0x7f0000001c40)=0x24e2, 0x82}, {0x8, &(0x7f0000001c80)=0x2, 0x2}, {0xfff, &(0x7f0000001cc0)=0xf3c8, 0x2}, {0x6, &(0x7f0000001d00)=0x8, 0x2}, {0x6, &(0x7f0000001d40)=0x4e41, 0x2}, {0x1, &(0x7f0000001d80)=0x14b4, 0x82}, {0x1, &(0x7f0000001dc0)=0x4, 0x82}, {0xa28, &(0x7f0000001e00)=0xffffffffffffffff, 0x2}, {0x7365, &(0x7f0000001e40)=0x1ec, 0x2}, {0x7ff, &(0x7f0000001e80)=0x7, 0x2}, {0xe3, &(0x7f0000001ec0)=0x4, 0x2}, {0x8, &(0x7f0000001f00)=0xd006, 0x82}, {0xf91f, &(0x7f0000001f40)=0x2}, {0x9, &(0x7f0000001f80)=0x3, 0x82}, {0x3, &(0x7f0000001fc0)=0x17b55987, 0x82}, {0x7, &(0x7f0000002000)=0x54f0, 0x82}, {0x8000000000000001, &(0x7f0000002040)=0x3ff, 0x82}, {0x8, &(0x7f0000002080)=0x1a, 0x82}, {0x0, &(0x7f00000020c0)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000002100)=0x80000000, 0x2}, {0x2400000, &(0x7f0000002140)=0x9, 0x82}, {0xb4b4, &(0x7f0000002180)=0x2, 0x2}, {0x100000001000, &(0x7f00000021c0)=0x2, 0x2}, {0xffffffffffffffff, &(0x7f0000002200)=0x8, 0x82}], 0x51, 0x0, &(0x7f0000002a00)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000002a40)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000002a80)={{r6, r7+60000000}, {0x0, 0x989680}}, &(0x7f0000002ac0)) timer_create(0x6, &(0x7f0000002b00)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000002b40)=0x0) timer_settime(r8, 0x0, &(0x7f0000002b80)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000002bc0)) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000002c00), &(0x7f0000002c40)) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c80), 0x408000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0605345, &(0x7f0000002cc0)={0x0, 0x2, {0xffffffffffffffff, 0x3, 0x6, 0x2, 0xac13}}) mq_timedsend(r5, &(0x7f0000002d40)="69bb95d089fe2e113889f11842f23c9dd0ed34dfb758f501356f2c9f1cbfb2cdf81482a2e8e4b633e620fde6601eccb99060a9869cd5724b44468894ec8a3eda591441cb01bf785bc6", 0x49, 0xfffffffffffffff8, &(0x7f0000002dc0)={0x77359400}) poll(&(0x7f0000002e00)=[{r5, 0x2100}, {r9, 0x1000}, {r9, 0x24c0}, {r5, 0x8831}, {r0, 0x600}], 0x5, 0x0) clock_settime(0x7, &(0x7f0000002e40)={0x0, 0x3938700}) timer_getoverrun(r1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000002e80)={0x0, 0x8, 0xffffffffffffffff}) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readv(r0, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/193, 0xc1}], 0x1) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) poll(&(0x7f00000030c0)=[{r9}, {r11, 0x5000}, {r9, 0x41}, {0xffffffffffffffff, 0x1}, {r10}, {r5, 0x1260a}, {r10, 0x4033}, {r5, 0x40}, {}], 0x9, 0x100) 2m15.633376695s ago: executing program 2 (id=2410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d86ddf06712e948040000dbb8a10000", 0x1f}, {&(0x7f0000000240)="000001010000", 0x6}, {&(0x7f0000000440)="a43b2eaf3943a7919f40", 0xa}, {&(0x7f0000000140)="00000000010000", 0x7}, {&(0x7f00000002c0)="00a3f72c", 0x4}], 0x5) 2m14.885555023s ago: executing program 2 (id=2412): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000ffd000/0x2000)=nil) sync() 1m58.70617708s ago: executing program 34 (id=2412): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000ffd000/0x2000)=nil) sync() 1m5.476427235s ago: executing program 3 (id=2705): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0xfc, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0xebc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x12, 0x4}}}}}]}}]}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x8a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x5, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x43, {{0xa, 0x24, 0x6, 0x0, 0x0, "05963158d9"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xfff, 0x8, 0x4}, [@country_functional={0x12, 0x24, 0x7, 0x0, 0x5, [0xa, 0x3, 0xb, 0x0, 0x25, 0x7]}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x6, 0xabfd}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x29, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0xb, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0xe2, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x2, 0x5, 0x10, 0x2}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x4, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3fc8da93f922fcd79392d78080418d12"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x5, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x2, 0xd}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}, {0x8b, &(0x7f00000001c0)=@string={0x8b, 0x3, "8c82e6f32affd8d8708e9697e627dd80e31771079e38774e9ef05c5f93b0fee6489c960cef05aa8e6d9ab434eb117bca4e40fa5ec2bac90a2a6264227d31333c5d6ef09837211e56f119f06c3520bc1e160967d2399457073dd67fd32b60a05b35cd882f394973d69bc38036dc8c0077194879f9cc302cf96e3aeb04f6f151a603f039a95cf37482be"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x459}}]}) 1m4.058539078s ago: executing program 3 (id=2713): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000100)=@llc={0x1a, 0x110, 0x5, 0x0, 0xe, 0x2f, @broadcast}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="c890ef807b4148da77fd8fe09a", 0xd}], 0x2}, 0x40000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m4.012370015s ago: executing program 3 (id=2714): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x201, 0xc, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x4}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200110005ecf", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESDEC=r1], 0x0}) 1m1.905952247s ago: executing program 3 (id=2726): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, r8, 0x7}}, 0x48) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, &(0x7f0000000540)) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r11, 0x0, 0x1, 0x4}}, 0x20) syz_usb_connect(0x6, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d6451010203010902420001020000000904"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x10, 0xea, 0xa9, 0x20, 0xc0b, 0xa109, 0x22db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) 1m0.386878565s ago: executing program 3 (id=2733): futex_waitv(&(0x7f0000001800)=[{0x6, 0x0, 0x80}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x8000000) read$FUSE(0xffffffffffffffff, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r1, r1, r1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000006c0)) sendto$llc(r2, 0x0, 0x0, 0x4084, &(0x7f00000002c0)={0x1a, 0x201, 0xa9, 0xe, 0xa1, 0xf4, @multicast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) setregid(0x0, 0x0) semget$private(0x0, 0x1, 0x5a6) r5 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)) unshare(0x8000000) 1m0.199338023s ago: executing program 3 (id=2736): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e22, 0x9, @empty, 0x5}}, {{0xa, 0x4e23, 0x0, @empty, 0xa}}}, 0x108) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x411, 0x72bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2102eaeaf644ffffffff00020400bf050005", 0x2e}], 0x1}, 0x0) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) 44.033056861s ago: executing program 35 (id=2736): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e22, 0x9, @empty, 0x5}}, {{0xa, 0x4e23, 0x0, @empty, 0xa}}}, 0x108) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x411, 0x72bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2102eaeaf644ffffffff00020400bf050005", 0x2e}], 0x1}, 0x0) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) 5.651499387s ago: executing program 7 (id=2996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x20) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x3000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) read$msr(r1, &(0x7f0000000280)=""/103, 0x67) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) r5 = syz_pidfd_open(r2, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0x8, 0xf1, 0x10, {0x7, 0x25, 0x1, 0xc, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe, 0xd8, 0x3, {0x7, 0x25, 0x1, 0x8, 0x4, 0x5}}}}}}}}]}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002600230700000000000000001b00d50000000000000059"], 0x2c}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 4.469447057s ago: executing program 6 (id=3005): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000166a2004794b1bdf00000001090224220100890400000203000100092105100a01222800090581030000030b02000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0003280000002810f70ba381430000000000000600000000000000920d91a5411a9d29959a957bfdcdadc254f365"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0003280000002810f70ba381430000000000000600000000000000920d91a5411a9d29959a957bfdcdadc254f365"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x8) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x40, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x9, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x4, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x3, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0xd, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xdfffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x22, 0x0) (async) recvmmsg(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x22, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x100) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x6, 0x4, 0x8}) 2.804005897s ago: executing program 0 (id=3008): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 2.773122536s ago: executing program 0 (id=3009): futex_waitv(&(0x7f0000002240)=[{0x10000, &(0x7f0000000e00)=0x8000000000000000, 0x2}, {0x400, &(0x7f0000000e40)=0x8, 0x82}, {0x3, &(0x7f0000000e80), 0x82}, {0x1, &(0x7f0000000ec0)=0x97ac, 0x2}, {0x7, &(0x7f0000000f00)=0x5, 0x82}, {0x8000, &(0x7f0000000f40)=0xffffffffffff1cca, 0x82}, {0x80, &(0x7f0000000f80)=0x9, 0x82}, {0x2, &(0x7f0000000fc0)=0xfffffffffffffc01, 0x82}, {0x6, &(0x7f0000001000)=0x5e21, 0x82}, {0x4, &(0x7f0000001040), 0x2}, {0x1ff, &(0x7f0000001080)=0x92, 0x82}, {0x7, &(0x7f00000010c0)=0x9, 0x184}, {0x7, &(0x7f0000001100)=0x9, 0x82}, {0x5, &(0x7f0000001140)=0x3, 0x82}, {0x3, &(0x7f0000001180)=0x2, 0x82}, {0x9, &(0x7f00000011c0)=0xe5fb, 0x2}, {0x1, 0x0, 0x82}], 0x11, 0x0, &(0x7f0000002a00)={0x0, 0x989680}, 0x0) 2.695513069s ago: executing program 0 (id=3010): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2.694589129s ago: executing program 0 (id=3011): mkdir(0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2.357800663s ago: executing program 7 (id=3012): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x4000800) 2.357362668s ago: executing program 7 (id=3013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="00082cbd7000fedbdf2501000000ae87d25aad667abe050627afdf3273ca212ed402e921633b44faa87c10566bee1df51e6ca3613691dfee40c06bd8a730baeb1bcb94622ee48b79a786aa57c2ec5bf3c77b020ebcc5664797e9fddc682d5ffc0e2308"], 0x14}, 0x1, 0x0, 0x0, 0x20009080}, 0x400c0c4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)='\x00\x00\x00\x00\x00', 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 1.923052657s ago: executing program 5 (id=3014): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) 1.679259471s ago: executing program 5 (id=3015): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r1) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4004000) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x22401) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000200)={r5, 0x7}, &(0x7f0000000240)=0x8) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142450", @ANYRES64=r3], 0xb2) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01312dbd7000fddbdf2502000000080001000100000008000200020000000800020002008300080001000100000008000200020000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x14040090}, 0x4040090) 1.525720796s ago: executing program 5 (id=3016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="5ef6ab647cdf4bb02cefdff0cc9ef40afb9334ef617b838379f08b986dc3557916db11f947f3bba70928bc2e8ed6a5a3596f32bb40129143c8e2531acccbf17bb22694f23678aee70fcd3ebe279c7857", 0x50}, {&(0x7f0000000080)="9176b6577de92d7dc0333599a6f41bb1c368c872176f865b5b0856944ef2d3ea4e19193e66226b5f7398df436a98563d9e7816e16cc28931017bc14a2e22350b2a3ae57619744919ead9d5188c1d9f06982f0e82", 0x54}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="84e56b82320d9a23d0ecf70f00833dee5f640b861b6b6599e3e555f429a295c90c00c6b6299c517b58b9702253e8aea6840f7bc7d329203a8300716173c675ea8af010d6a1b82e7628d171b9de9138e1e94305e8ed256ae055d76699b2aa23fcb8f0b4f02779a03bf1c6c99410993b4d4d36316d2734107bd5eaf962a5a7d74f827fb042d89378dc1f565719d79cd70c851080629bc05fce185c0eff68328ccb9b97b7e11b", 0xa5}, {&(0x7f0000000380)="ef27fbd7fd3e5f74eb544bf68512448c7e54d4635263655046e720ededbfa3757ebbecd911a88096e6c297e37ed007295f30d0e53d3be7bf07a9a799e92b41637871c4e0eff6180984ec4582fd01b89b64cfddbb4f8614d0e75ac7e88b9830a30555758f01e48cbcdb1d8b5f9ee3d003eb430466955cdf4645f3b2fd5a05ba7fb3214c786088162da94f6b5e0c673aca91392632ac84ea2a68ce3e9efcde545a1ffa1ae6aa8db04ec0a27c2e76a7505d85aa5dceb9ab2f64dd47f2bd0eeb5e04e5175914ae36a4c4848de6a1eef165237b2509ed61411fc11afe0f8b53e71297", 0xe0}, {&(0x7f0000000480)="ce34ef5ce493a4b19d8d3c105ac3490cd7aaec0e36acacbd8371cbccaf2d6a457fc7050ba6c69a4b4e66b00ff6213016b2990818698325b617c74c477782d71ee5a897b3181d4d1709ab1c2aea0242169b0e95c208a205db9095c64ec43091365b6a52576fb84813aa1e3f4125a65683882d5c5e18041d7bad620da0c1c09b326130d32e07e7d9b3529ba09b", 0x8c}], 0x6, 0x8, 0x3) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x27, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.194443619s ago: executing program 0 (id=3017): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x7, 0x0}) 1.193622823s ago: executing program 6 (id=3018): futex_waitv(&(0x7f0000002240)=[{0x10000, &(0x7f0000000e00)=0x8000000000000000, 0x2}, {0x400, &(0x7f0000000e40)=0x8, 0x82}, {0x3, &(0x7f0000000e80), 0x82}, {0x1, &(0x7f0000000ec0)=0x97ac, 0x2}, {0x7, &(0x7f0000000f00)=0x5, 0x82}, {0x8000, &(0x7f0000000f40)=0xffffffffffff1cca, 0x82}, {0x80, &(0x7f0000000f80)=0x9, 0x82}, {0x2, &(0x7f0000000fc0)=0xfffffffffffffc01, 0x82}, {0x6, &(0x7f0000001000)=0x5e21, 0x82}, {0x4, &(0x7f0000001040), 0x2}, {0x1ff, &(0x7f0000001080)=0x92, 0x82}, {0x7, &(0x7f00000010c0)=0x9, 0x184}, {0x7, &(0x7f0000001100)=0x9, 0x82}, {0x5, &(0x7f0000001140)=0x3, 0x82}, {0x3, &(0x7f0000001180)=0x2, 0x82}, {0x1, 0x0, 0x82}], 0x10, 0x0, &(0x7f0000002a00)={0x0, 0x989680}, 0x0) 1.153448469s ago: executing program 7 (id=3019): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1.064788576s ago: executing program 0 (id=3020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x20) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x3000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) read$msr(r1, &(0x7f0000000280)=""/103, 0x67) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) r5 = syz_pidfd_open(r2, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0x8, 0xf1, 0x10, {0x7, 0x25, 0x1, 0xc, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe, 0xd8, 0x3, {0x7, 0x25, 0x1, 0x8, 0x4, 0x5}}}}}}}}]}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002600230700000000000000001b00d50000000000000059"], 0x2c}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.018220181s ago: executing program 6 (id=3021): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x4000800) 971.05692ms ago: executing program 7 (id=3022): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1b4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x9}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 5) 968.929621ms ago: executing program 6 (id=3023): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) 876.522531ms ago: executing program 6 (id=3024): r0 = memfd_secret(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc7f1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f7ee81c7142cf36447ab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f2d050000000000003bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b5267288949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x8, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x6700000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) timer_create(0x3, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r0, 0x0, 0x100000000, 0x10000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r7, 0x8004500b, &(0x7f0000000100)=0x957) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$cgroup_int(r10, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socket$inet(0x2, 0x802, 0x1) 720.194532ms ago: executing program 7 (id=3025): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x8949, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x1, 0x0, 0x1, [0x0, 0x83dc]}) getresuid(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f000000a0c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x7d6, 0xc, 0x1, {0x22, 0xeec}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb3, 0x3, 0xfa}}}}}]}}]}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) syz_usb_connect(0x3, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xf5, 0x72, 0x34, 0x10, 0x1199, 0x6803, 0x78ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x8, 0x40, 0x0, 0x6f, "", [{{0x9, 0x4, 0x3e, 0x7, 0x6, 0xcc, 0xa1, 0x5f, 0xe9, [@hid_hid={0x9, 0x21, 0x55, 0xc0, 0x1, {0x22, 0x1c0}}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x6c, 0x42, 0x6}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x3, 0x7, 0xf7}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x3, 0x6, 0x4}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x9, 0x81, 0x6}}, {{0x9, 0x5, 0x4, 0xd56eef07cda23075, 0x200, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x3df8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0x3, 0x1c, 0x40, 0x1, 0x66, 0x7}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x7, 0x10, 0x1}, 0x0, 0x0}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @mcast1, 0x6}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') fdatasync(r6) syz_usb_connect$midi(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020ca15010140000102030109022000010100500309d40000010103200b09050f03400006c100052501017b"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 257.852681ms ago: executing program 6 (id=3026): mkdir(0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 169.476227ms ago: executing program 5 (id=3027): r0 = semget$private(0x0, 0x0, 0x202) semop(r0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x10, 0x2d49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x101}) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x0, 0x1800}], 0x1, 0x0) 64.170098ms ago: executing program 5 (id=3028): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x7, 0x0}) 0s ago: executing program 5 (id=3029): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1b4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x9}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r4, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, r12, 0x1, 0x70bd2a, 0x25efdc03, {}, [{{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x400000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xf9, 0x8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0xf000, 0x1, 0x7fff, 0x6}}) r15 = socket(0x11, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r17}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x300, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) kernel console output (not intermixed with test programs): device number 39 using dummy_hcd [ 505.120777][T13204] binder: 13202:13204 ioctl c0306201 0 returned -14 [ 505.388351][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 505.561386][ T37] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 505.561416][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.568941][ T37] usb 6-1: config 0 descriptor?? [ 505.594100][ T37] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 505.989689][ T58] block nbd1: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 300 seconds [ 505.989736][ T58] block nbd1: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 300 seconds [ 505.989764][ T58] block nbd1: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 300 seconds [ 505.989839][ T58] block nbd1: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 300 seconds [ 506.065210][ T37] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 506.166799][ T825] hid_parser_main: 6 callbacks suppressed [ 506.166824][ T825] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 506.213425][ T825] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.255006][ T5709] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 506.363233][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 506.495605][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.497787][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.625204][ T5709] usb 1-1: no configurations [ 506.625225][ T5709] usb 1-1: can't read configurations, error -22 [ 506.687814][ T37] gspca_cpia1: usb_control_msg 02, error -71 [ 506.727946][ T37] gspca_cpia1: usb_control_msg 05, error -71 [ 506.728021][ T37] cpia1 6-1:0.0: unexpected systemstate: 00 [ 506.844476][ T37] usb 6-1: USB disconnect, device number 11 [ 506.889426][T13235] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2557'. [ 506.949510][ T5709] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 507.056184][ T5785] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 507.112064][ T5709] usb 1-1: no configurations [ 507.112078][ T5709] usb 1-1: can't read configurations, error -22 [ 507.112638][ T5709] usb usb1-port1: attempt power cycle [ 507.253599][ T5785] usb 4-1: config 194 has too many interfaces: 227, using maximum allowed: 32 [ 507.253632][ T5785] usb 4-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 507.253652][ T5785] usb 4-1: config 194 has 1 interface, different from the descriptor's value: 227 [ 507.253702][ T5785] usb 4-1: config 194 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 507.253729][ T5785] usb 4-1: config 194 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 507.253757][ T5785] usb 4-1: config 194 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.257659][ T5785] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 507.257687][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 507.257708][ T5785] usb 4-1: Product: syz [ 507.257723][ T5785] usb 4-1: Manufacturer: syz [ 507.257738][ T5785] usb 4-1: SerialNumber: syz [ 507.483129][ T5709] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 507.506506][ T5709] usb 1-1: no configurations [ 507.506527][ T5709] usb 1-1: can't read configurations, error -22 [ 507.553747][ T37] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 507.644097][ T5785] rc_core: IR keymap rc-imon-rsc not found [ 507.644899][ T5785] Registered IR keymap rc-empty [ 507.646393][ T5785] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:194.0/rc/rc0 [ 507.648345][ T5785] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:194.0/rc/rc0/input46 [ 507.658826][ T5709] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 507.677452][ T5709] usb 1-1: no configurations [ 507.677471][ T5709] usb 1-1: can't read configurations, error -22 [ 507.678236][ T5709] usb usb1-port1: unable to enumerate USB device [ 507.708296][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 507.710466][ T37] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 507.710493][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.723546][ T37] usb 6-1: config 0 descriptor?? [ 507.737005][ T37] gspca_main: sq930x-2.14.0 probing 041e:403c [ 507.755161][ T5785] imon_raw 4-1:194.0: probe with driver imon_raw failed with error -90 [ 507.846541][ T5785] usb 4-1: USB disconnect, device number 40 [ 508.085533][ T37] gspca_sq930x: reg_r 001f failed -71 [ 508.085632][ T37] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 508.125230][ T37] usb 6-1: USB disconnect, device number 12 [ 508.297299][T13271] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 509.371961][T13282] binder: 13281:13282 ioctl c0306201 0 returned -14 [ 509.903989][T13290] nfs: Deprecated parameter 'nointr' [ 510.333590][T13297] FAULT_INJECTION: forcing a failure. [ 510.333590][T13297] name failslab, interval 1, probability 0, space 0, times 0 [ 510.333614][T13297] CPU: 0 UID: 0 PID: 13297 Comm: syz.6.2568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.333630][T13297] Tainted: [L]=SOFTLOCKUP [ 510.333634][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.333641][T13297] Call Trace: [ 510.333647][T13297] [ 510.333652][T13297] dump_stack_lvl+0xe8/0x150 [ 510.333671][T13297] should_fail_ex+0x46b/0x600 [ 510.333690][T13297] should_failslab+0xa8/0x100 [ 510.333706][T13297] __kvmalloc_node_noprof+0x170/0x8e0 [ 510.333722][T13297] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 510.333825][T13297] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 510.333864][T13297] ? kvm_msr_allowed+0x9a/0x490 [ 510.333928][T13297] mmu_topup_memory_caches+0x21/0x170 [ 510.333945][T13297] kvm_mmu_load+0x9d/0x2320 [ 510.333958][T13297] ? kvm_msr_allowed+0x9a/0x490 [ 510.333973][T13297] ? kvm_msr_allowed+0x9a/0x490 [ 510.333987][T13297] ? kvm_msr_allowed+0x3f4/0x490 [ 510.334007][T13297] ? kvm_msr_allowed+0x9a/0x490 [ 510.334023][T13297] ? kvm_apic_has_interrupt+0x73c/0x770 [ 510.334079][T13297] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 510.334166][T13297] vcpu_run+0x5c68/0x7830 [ 510.334208][T13297] ? ___ratelimit+0x1ea/0x8d0 [ 510.334240][T13297] ? __pfx_vcpu_run+0x10/0x10 [ 510.334253][T13297] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 510.334265][T13297] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 510.334283][T13297] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 510.334303][T13297] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 510.334314][T13297] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 510.334327][T13297] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.334344][T13297] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.334360][T13297] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.334375][T13297] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 510.334390][T13297] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 510.334406][T13297] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 510.334419][T13297] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.334433][T13297] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.334448][T13297] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 510.334463][T13297] ? rt_write_unlock+0x190/0x230 [ 510.334477][T13297] kvm_vcpu_ioctl+0xa65/0xfe0 [ 510.334502][T13297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 510.334527][T13297] ? __fget_files+0x2a/0x420 [ 510.334547][T13297] ? __fget_files+0x2a/0x420 [ 510.334561][T13297] ? __fget_files+0x3a6/0x420 [ 510.334573][T13297] ? __fget_files+0x2a/0x420 [ 510.334586][T13297] ? bpf_lsm_file_ioctl+0x9/0x20 [ 510.334602][T13297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 510.334616][T13297] __se_sys_ioctl+0xff/0x170 [ 510.334631][T13297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.334643][T13297] do_syscall_64+0x174/0x580 [ 510.334658][T13297] ? trace_irq_disable+0x3b/0x140 [ 510.334671][T13297] ? clear_bhb_loop+0x40/0x90 [ 510.334683][T13297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.334694][T13297] RIP: 0033:0x7f806719ce59 [ 510.334706][T13297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.334715][T13297] RSP: 002b:00007f80653d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.334728][T13297] RAX: ffffffffffffffda RBX: 00007f8067416090 RCX: 00007f806719ce59 [ 510.334736][T13297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 510.334748][T13297] RBP: 00007f80653d5090 R08: 0000000000000000 R09: 0000000000000000 [ 510.334755][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.334762][T13297] R13: 00007f8067416128 R14: 00007f8067416090 R15: 00007ffe9fa0a308 [ 510.334778][T13297] [ 511.033134][ T825] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 511.182707][ T825] usb 4-1: device descriptor read/64, error -71 [ 511.436061][T13309] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2573'. [ 511.439898][ T825] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 511.590626][ T825] usb 4-1: device descriptor read/64, error -71 [ 511.720298][ T825] usb usb4-port1: attempt power cycle [ 511.916998][T13318] binder: 13317:13318 ioctl c0306201 0 returned -14 [ 511.974428][ T5618] Bluetooth: Unexpected start frame (len 138) [ 512.115800][ T825] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 512.137514][ T825] usb 4-1: device descriptor read/8, error -71 [ 512.198394][ T5785] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 512.369307][ T5785] usb 6-1: Using ep0 maxpacket: 32 [ 512.373465][ T5785] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 512.373496][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.373517][ T5785] usb 6-1: Product: syz [ 512.373530][ T5785] usb 6-1: Manufacturer: syz [ 512.373540][ T5785] usb 6-1: SerialNumber: syz [ 512.377729][ T5785] usb 6-1: config 0 descriptor?? [ 512.412038][ T825] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 512.435716][ T825] usb 4-1: device descriptor read/8, error -71 [ 512.552584][ T825] usb usb4-port1: unable to enumerate USB device [ 513.041707][ T5709] IPVS: starting estimator thread 0... [ 513.044728][ T5785] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 513.044760][ T5785] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 513.044825][ T5785] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 513.139824][ T5785] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 513.157775][T13324] IPVS: using max 12 ests per chain, 28800 per kthread [ 513.167420][ T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 513.320793][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 513.323028][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 513.327696][ T37] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 513.327725][ T37] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 513.327746][ T37] usb 1-1: Product: syz [ 513.327761][ T37] usb 1-1: Manufacturer: syz [ 513.327775][ T37] usb 1-1: SerialNumber: syz [ 513.330223][ T825] usb 6-1: USB disconnect, device number 13 [ 513.391003][ T37] usb 1-1: config 0 descriptor?? [ 513.392828][T13323] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 513.412239][ T37] hub 1-1:0.0: bad descriptor, ignoring hub [ 513.412278][ T37] hub 1-1:0.0: probe with driver hub failed with error -5 [ 513.738444][ T37] usb 1-1: USB disconnect, device number 16 [ 514.080962][ T825] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 514.105560][T13333] comedi comedi0: No hardware detected at I/O base 0x3c4 [ 514.240537][ T825] usb 1-1: Using ep0 maxpacket: 32 [ 514.244318][ T825] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 514.247267][ T825] usb 1-1: string descriptor 0 read error: -22 [ 514.247371][ T825] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 514.247385][ T825] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 514.253506][ T825] usb 1-1: config 0 descriptor?? [ 514.269726][T13323] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 514.300122][ T825] hub 1-1:0.0: bad descriptor, ignoring hub [ 514.304678][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 514.315520][ T825] hub 1-1:0.0: probe with driver hub failed with error -5 [ 514.357852][ T5781] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 514.518644][ T5781] usb 6-1: Using ep0 maxpacket: 8 [ 514.521790][ T5781] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 1024 [ 514.521821][ T5781] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 514.521846][ T5781] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.521862][ T5781] usb 6-1: config 1 interface 0 has no altsetting 0 [ 514.525410][ T5781] usb 6-1: string descriptor 0 read error: -22 [ 514.525522][ T5781] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.525537][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.560244][T13340] binder: 13338:13340 ioctl c0046209 200000000000000 returned -22 [ 514.574592][T13333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.574775][T13333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.638214][ T5784] usb 1-1: USB disconnect, device number 17 [ 514.805334][T13333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.805719][T13333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.905628][ T825] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 515.027372][ T5781] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -32 [ 515.065647][ T825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.065677][ T825] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.071822][ T825] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 515.071853][ T825] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 515.071874][ T825] usb 4-1: Product: syz [ 515.071888][ T825] usb 4-1: Manufacturer: syz [ 515.071896][ T825] usb 4-1: SerialNumber: syz [ 515.143905][ T825] appletouch 4-1:1.0: Could not find int-in endpoint [ 515.143942][ T825] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 515.146185][ T825] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 515.205920][T13347] binder: 13346:13347 ioctl c0306201 0 returned -14 [ 515.261369][ T5614] Bluetooth: Unexpected start frame (len 138) [ 515.347527][ T5709] usb 4-1: USB disconnect, device number 45 [ 515.874622][T13356] FAULT_INJECTION: forcing a failure. [ 515.874622][T13356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.874657][T13356] CPU: 0 UID: 0 PID: 13356 Comm: syz.6.2589 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.874683][T13356] Tainted: [L]=SOFTLOCKUP [ 515.874691][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.874703][T13356] Call Trace: [ 515.874711][T13356] [ 515.874719][T13356] dump_stack_lvl+0xe8/0x150 [ 515.874746][T13356] should_fail_ex+0x46b/0x600 [ 515.874780][T13356] _copy_from_user+0x2d/0xb0 [ 515.874801][T13356] __se_sys_mount+0x18b/0x420 [ 515.874820][T13356] ? __pfx___se_sys_mount+0x10/0x10 [ 515.874835][T13356] ? __x64_sys_mount+0x20/0xc0 [ 515.874847][T13356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.874859][T13356] do_syscall_64+0x174/0x580 [ 515.874874][T13356] ? trace_irq_disable+0x3b/0x140 [ 515.874886][T13356] ? clear_bhb_loop+0x40/0x90 [ 515.874900][T13356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.874910][T13356] RIP: 0033:0x7f806719ce59 [ 515.874921][T13356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.874930][T13356] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.874942][T13356] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 515.874950][T13356] RDX: 0000200000000440 RSI: 0000200000000040 RDI: 0000000000000000 [ 515.874960][T13356] RBP: 00007f80653f6090 R08: 0000200000000000 R09: 0000000000000000 [ 515.874967][T13356] R10: 0000000001800010 R11: 0000000000000246 R12: 0000000000000001 [ 515.874974][T13356] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 515.874993][T13356] [ 515.933734][T13356] overlayfs: missing 'lowerdir' [ 516.155735][T13360] FAULT_INJECTION: forcing a failure. [ 516.155735][T13360] name failslab, interval 1, probability 0, space 0, times 0 [ 516.155759][T13360] CPU: 1 UID: 0 PID: 13360 Comm: syz.6.2591 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.155775][T13360] Tainted: [L]=SOFTLOCKUP [ 516.155780][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.155789][T13360] Call Trace: [ 516.155794][T13360] [ 516.155799][T13360] dump_stack_lvl+0xe8/0x150 [ 516.155818][T13360] should_fail_ex+0x46b/0x600 [ 516.155837][T13360] should_failslab+0xa8/0x100 [ 516.155855][T13360] __kmalloc_noprof+0xdf/0x7b0 [ 516.155877][T13360] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 516.155910][T13360] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 516.155940][T13360] genl_family_rcv_msg_doit+0xd9/0x330 [ 516.155970][T13360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.155995][T13360] ? __pfx_genl_get_cmd+0x10/0x10 [ 516.156014][T13360] ? __pfx_nbd_genl_connect+0x10/0x10 [ 516.156108][T13360] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.156138][T13360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.156172][T13360] genl_rcv_msg+0x61c/0x7a0 [ 516.156204][T13360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.156226][T13360] ? __pfx_nbd_genl_connect+0x10/0x10 [ 516.156253][T13360] netlink_rcv_skb+0x232/0x4b0 [ 516.156270][T13360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.156290][T13360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.156312][T13360] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.156327][T13360] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.156345][T13360] genl_rcv+0x28/0x40 [ 516.156360][T13360] netlink_unicast+0x780/0x920 [ 516.156385][T13360] netlink_sendmsg+0x813/0xb40 [ 516.156400][T13360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.156415][T13360] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 516.156432][T13360] ? aa_sock_msg_perm+0x122/0x200 [ 516.156444][T13360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.156454][T13360] sock_sendmsg_nosec+0x13a/0x180 [ 516.156469][T13360] ____sys_sendmsg+0x55c/0x870 [ 516.156488][T13360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.156508][T13360] ? import_iovec+0x73/0xa0 [ 516.156524][T13360] ___sys_sendmsg+0x2a5/0x360 [ 516.156539][T13360] ? __lock_acquire+0x6b5/0x2d10 [ 516.156554][T13360] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.156588][T13360] ? __fget_files+0x2a/0x420 [ 516.156600][T13360] ? __fget_files+0x3a6/0x420 [ 516.156617][T13360] __x64_sys_sendmsg+0x1c3/0x2a0 [ 516.156634][T13360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.156655][T13360] ? __pfx_ksys_write+0x10/0x10 [ 516.156674][T13360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.156685][T13360] do_syscall_64+0x174/0x580 [ 516.156700][T13360] ? trace_irq_disable+0x3b/0x140 [ 516.156713][T13360] ? clear_bhb_loop+0x40/0x90 [ 516.156726][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.156739][T13360] RIP: 0033:0x7f806719ce59 [ 516.156750][T13360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.156760][T13360] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.156772][T13360] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 516.156781][T13360] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 516.156790][T13360] RBP: 00007f80653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.156797][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.156803][T13360] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 516.156819][T13360] [ 516.457378][T13366] veth1_to_bond: entered allmulticast mode [ 516.463894][ T825] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 516.550794][T13366] comedi comedi0: board detection failed [ 516.568337][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2593'. [ 516.637280][ T825] usb 4-1: config 89 has too many interfaces: 201, using maximum allowed: 32 [ 516.637309][ T825] usb 4-1: config 89 has 0 interfaces, different from the descriptor's value: 201 [ 516.639863][ T825] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 516.639897][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.639918][ T825] usb 4-1: Product: syz [ 516.639934][ T825] usb 4-1: Manufacturer: syz [ 516.639956][ T825] usb 4-1: SerialNumber: syz [ 516.922042][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.922602][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.957493][ T37] usb 4-1: USB disconnect, device number 46 [ 517.330585][T13365] veth1_to_bond: left allmulticast mode [ 517.477617][T13383] netlink: 'syz.6.2598': attribute type 2 has an invalid length. [ 517.477647][T13383] netlink: 'syz.6.2598': attribute type 1 has an invalid length. [ 517.561474][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.561576][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.586855][ T5618] Bluetooth: Unexpected start frame (len 138) [ 518.106021][ T5709] usb 6-1: USB disconnect, device number 14 [ 518.516526][ T825] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 518.676034][ T5618] Bluetooth: Unexpected start frame (len 138) [ 518.679451][ T825] usb 1-1: Using ep0 maxpacket: 32 [ 518.688572][ T825] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 518.688600][ T825] usb 1-1: config 0 has no interface number 0 [ 518.716587][ T825] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 518.716619][ T825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.716640][ T825] usb 1-1: Product: syz [ 518.716660][ T825] usb 1-1: Manufacturer: syz [ 518.716682][ T825] usb 1-1: SerialNumber: syz [ 518.719594][ T5709] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 518.745416][ T825] usb 1-1: config 0 descriptor?? [ 518.768856][ T825] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 518.879953][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 518.882393][ T5709] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.882427][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 518.882462][ T5709] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 518.882486][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.895177][ T5709] usb 6-1: config 0 descriptor?? [ 519.036724][ T825] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 519.080323][ T825] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 519.216554][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.218891][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.288731][ T5618] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 519.288763][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.288800][ T5618] Tainted: [L]=SOFTLOCKUP [ 519.288808][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.288823][ T5618] Workqueue: hci4 hci_rx_work [ 519.288933][ T5618] Call Trace: [ 519.288943][ T5618] [ 519.288953][ T5618] dump_stack_lvl+0xe8/0x150 [ 519.288984][ T5618] sysfs_create_dir_ns+0x271/0x2a0 [ 519.289009][ T5618] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 519.289038][ T5618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 519.289068][ T5618] ? rt_spin_unlock+0x160/0x200 [ 519.289098][ T5618] kobject_add_internal+0x631/0xd10 [ 519.289133][ T5618] kobject_add+0x163/0x240 [ 519.289164][ T5618] ? __pfx_kobject_add+0x10/0x10 [ 519.289195][ T5618] ? get_device_parent+0x370/0x3a0 [ 519.289226][ T5618] device_add+0x408/0xb90 [ 519.289255][ T5618] hci_conn_add_sysfs+0xd5/0x210 [ 519.289288][ T5618] le_conn_complete_evt+0x10e6/0x16b0 [ 519.289353][ T5618] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 519.289377][ T5618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.289410][ T5618] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.289446][ T5618] ? skb_pull_data+0xfb/0x200 [ 519.289475][ T5618] hci_le_conn_complete_evt+0x187/0x470 [ 519.289552][ T5618] hci_event_packet+0x659/0xef0 [ 519.289591][ T5618] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 519.289616][ T5618] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 519.289648][ T5618] ? __pfx_hci_event_packet+0x10/0x10 [ 519.289677][ T5618] ? rt_spin_unlock+0x14f/0x200 [ 519.289713][ T5618] ? hci_send_to_monitor+0xe2/0x590 [ 519.289741][ T5618] hci_rx_work+0x3ee/0x1040 [ 519.289781][ T5618] ? process_one_work+0x8be/0x1630 [ 519.289811][ T5618] process_one_work+0x98b/0x1630 [ 519.289864][ T5618] ? __pfx_process_one_work+0x10/0x10 [ 519.289892][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.289932][ T5618] worker_thread+0xb49/0x1140 [ 519.289973][ T5618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.290019][ T5618] kthread+0x388/0x470 [ 519.290044][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 519.290074][ T5618] ? __pfx_kthread+0x10/0x10 [ 519.290099][ T5618] ret_from_fork+0x514/0xb70 [ 519.290129][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 519.290154][ T5618] ? __switch_to+0xc79/0x1410 [ 519.290178][ T5618] ? __pfx_kthread+0x10/0x10 [ 519.290204][ T5618] ret_from_fork_asm+0x1a/0x30 [ 519.290249][ T5618] [ 519.290367][ T5618] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 519.290408][ T5618] Bluetooth: hci4: failed to register connection device [ 519.572786][ T5709] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 519.719512][ T5613] Bluetooth: hci5: command 0x2016 tx timeout [ 521.287644][ T825] usb 6-1: USB disconnect, device number 15 [ 521.444108][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 521.445415][ T5699] usb 1-1: USB disconnect, device number 18 [ 521.489646][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 521.540960][ T5699] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 521.579904][ T5699] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 521.624458][ T5699] quatech2 1-1:0.51: device disconnected [ 521.919468][ T5613] Bluetooth: hci5: command 0x2016 tx timeout [ 522.579774][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2621'. [ 523.231139][ T37] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 523.402113][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 523.405366][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 523.406529][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.406552][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.408790][ T37] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 523.408818][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.408837][ T37] usb 4-1: Product: syz [ 523.408850][ T37] usb 4-1: Manufacturer: syz [ 523.408858][ T37] usb 4-1: SerialNumber: syz [ 523.714126][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 523.755335][ T37] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 523.775868][ T37] usb 4-1: USB disconnect, device number 47 [ 525.208804][ T5709] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 525.370474][ T5709] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 525.379801][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.388865][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.388899][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.412716][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.412774][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.412802][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.414586][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.414636][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.414673][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.416595][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.416651][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.416676][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.418621][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.418682][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.418710][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.419809][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.419859][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.419887][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.421042][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.421885][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.421917][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.428440][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 525.428458][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 525.428566][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 525.627610][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.627648][ T5709] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.627664][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.630104][ T5709] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 525.630135][ T5709] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 525.630155][ T5709] usb 6-1: Product: syz [ 525.630170][ T5709] usb 6-1: Manufacturer: syz [ 525.630183][ T5709] usb 6-1: SerialNumber: syz [ 525.634041][ T5709] usb 6-1: config 0 descriptor?? [ 525.735386][ T5709] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 525.866299][T13487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.879184][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.879811][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.924372][ T825] usb 6-1: USB disconnect, device number 16 [ 525.948508][ T825] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 526.181587][ T5709] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 526.374013][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 526.475431][ T5709] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 526.475461][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.475480][ T5709] usb 1-1: Product: syz [ 526.475495][ T5709] usb 1-1: Manufacturer: syz [ 526.475510][ T5709] usb 1-1: SerialNumber: syz [ 526.545666][ T5709] usb 1-1: config 0 descriptor?? [ 527.047720][ T5709] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 527.047747][ T5709] airspy 1-1:0.0: Could not detect board [ 527.047853][ T5709] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 527.137198][T13521] comedi comedi0: comedi_config --init_data is deprecated [ 527.859309][T13551] FAULT_INJECTION: forcing a failure. [ 527.859309][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.859332][T13551] CPU: 1 UID: 0 PID: 13551 Comm: syz.6.2652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.859348][T13551] Tainted: [L]=SOFTLOCKUP [ 527.859353][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.859360][T13551] Call Trace: [ 527.859364][T13551] [ 527.859370][T13551] dump_stack_lvl+0xe8/0x150 [ 527.859388][T13551] should_fail_ex+0x46b/0x600 [ 527.859410][T13551] _copy_from_user+0x2d/0xb0 [ 527.859423][T13551] ucma_write+0x166/0x2f0 [ 527.859438][T13551] ? __pfx_ucma_write+0x10/0x10 [ 527.859449][T13551] ? iov_iter_iovec_advance+0x1e0/0x290 [ 527.859464][T13551] vfs_writev+0x4c6/0x9a0 [ 527.859481][T13551] ? __pfx_ucma_write+0x10/0x10 [ 527.859494][T13551] ? __pfx_vfs_writev+0x10/0x10 [ 527.859511][T13551] ? __fget_files+0x2a/0x420 [ 527.859526][T13551] ? __fget_files+0x3a6/0x420 [ 527.859537][T13551] ? __fget_files+0x2a/0x420 [ 527.859553][T13551] do_writev+0x15a/0x2e0 [ 527.859565][T13551] ? __pfx_do_writev+0x10/0x10 [ 527.859580][T13551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.859591][T13551] do_syscall_64+0x174/0x580 [ 527.859607][T13551] ? trace_irq_disable+0x3b/0x140 [ 527.859619][T13551] ? clear_bhb_loop+0x40/0x90 [ 527.859632][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.859643][T13551] RIP: 0033:0x7f806719ce59 [ 527.859654][T13551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.859664][T13551] RSP: 002b:00007f80653d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 527.859676][T13551] RAX: ffffffffffffffda RBX: 00007f8067416090 RCX: 00007f806719ce59 [ 527.859684][T13551] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 527.859691][T13551] RBP: 00007f80653d5090 R08: 0000000000000000 R09: 0000000000000000 [ 527.859697][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.859704][T13551] R13: 00007f8067416128 R14: 00007f8067416090 R15: 00007ffe9fa0a308 [ 527.859719][T13551] [ 529.180432][ T5718] usb 1-1: USB disconnect, device number 19 [ 529.379446][T13565] FAULT_INJECTION: forcing a failure. [ 529.379446][T13565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.379482][T13565] CPU: 0 UID: 0 PID: 13565 Comm: syz.0.2658 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 529.379509][T13565] Tainted: [L]=SOFTLOCKUP [ 529.379516][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.379528][T13565] Call Trace: [ 529.379536][T13565] [ 529.379544][T13565] dump_stack_lvl+0xe8/0x150 [ 529.379572][T13565] should_fail_ex+0x46b/0x600 [ 529.379602][T13565] _copy_to_user+0x31/0xb0 [ 529.379627][T13565] simple_read_from_buffer+0xe1/0x170 [ 529.379653][T13565] proc_fail_nth_read+0x1be/0x230 [ 529.379678][T13565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.379702][T13565] ? rw_verify_area+0x2ac/0x4e0 [ 529.379727][T13565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.379751][T13565] vfs_read+0x212/0xa80 [ 529.379783][T13565] ? __pfx_vfs_read+0x10/0x10 [ 529.379808][T13565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.379835][T13565] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.379862][T13565] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 529.379887][T13565] ? mutex_lock_nested+0x152/0x1d0 [ 529.379906][T13565] ? fdget_pos+0x252/0x320 [ 529.379934][T13565] ksys_read+0x156/0x270 [ 529.379961][T13565] ? __pfx_ksys_read+0x10/0x10 [ 529.379995][T13565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.380016][T13565] do_syscall_64+0x174/0x580 [ 529.380042][T13565] ? trace_irq_disable+0x3b/0x140 [ 529.380063][T13565] ? clear_bhb_loop+0x40/0x90 [ 529.380087][T13565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.380106][T13565] RIP: 0033:0x7fe149edd68e [ 529.380124][T13565] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.380141][T13565] RSP: 002b:00007fe14816dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.380162][T13565] RAX: ffffffffffffffda RBX: 00007fe14816e6c0 RCX: 00007fe149edd68e [ 529.380177][T13565] RDX: 000000000000000f RSI: 00007fe14816e0a0 RDI: 0000000000000005 [ 529.380189][T13565] RBP: 00007fe14816e090 R08: 0000000000000000 R09: 0000000000000000 [ 529.380202][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.380213][T13565] R13: 00007fe14a196038 R14: 00007fe14a195fa0 R15: 00007ffdc651a068 [ 529.380244][T13565] [ 529.751018][T13575] FAULT_INJECTION: forcing a failure. [ 529.751018][T13575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.752020][T13575] CPU: 0 UID: 0 PID: 13575 Comm: syz.3.2663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 529.752044][T13575] Tainted: [L]=SOFTLOCKUP [ 529.752049][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.752058][T13575] Call Trace: [ 529.752068][T13575] [ 529.752075][T13575] dump_stack_lvl+0xe8/0x150 [ 529.752099][T13575] should_fail_ex+0x46b/0x600 [ 529.752124][T13575] prepare_alloc_pages+0x22a/0x6b0 [ 529.752149][T13575] __alloc_frozen_pages_noprof+0x12f/0x380 [ 529.752171][T13575] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.752193][T13575] ? __pfx_policy_nodemask+0x10/0x10 [ 529.752212][T13575] ? __lock_acquire+0x6b5/0x2d10 [ 529.752234][T13575] alloc_pages_mpol+0xd1/0x380 [ 529.752257][T13575] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 529.752278][T13575] vma_alloc_folio_noprof+0xe1/0x1e0 [ 529.752299][T13575] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 529.752320][T13575] ? __pte_offset_map+0x29/0x200 [ 529.752415][T13575] do_pte_missing+0x822/0x2940 [ 529.752444][T13575] ? handle_mm_fault+0xed/0x14d0 [ 529.752467][T13575] handle_mm_fault+0xdc2/0x14d0 [ 529.752486][T13575] ? handle_mm_fault+0xed/0x14d0 [ 529.752506][T13575] ? __pfx_handle_mm_fault+0x10/0x10 [ 529.752533][T13575] ? __lock_acquire+0x6b5/0x2d10 [ 529.752554][T13575] ? lock_mm_and_find_vma+0xa7/0x340 [ 529.752578][T13575] do_user_addr_fault+0x75b/0x1340 [ 529.752655][T13575] exc_page_fault+0x6a/0xc0 [ 529.752680][T13575] asm_exc_page_fault+0x26/0x30 [ 529.752696][T13575] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 529.752717][T13575] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 529.752731][T13575] RSP: 0018:ffffc9000d8774d8 EFLAGS: 00050202 [ 529.752746][T13575] RAX: ffff888057b26001 RBX: ffff888057b264b1 RCX: 0000000000000157 [ 529.752759][T13575] RDX: 0000000000000000 RSI: ffff888057b264f1 RDI: 0000200000001000 [ 529.752770][T13575] RBP: ffffc9000d877650 R08: ffff888057b26647 R09: 1ffff1100af64cc8 [ 529.752783][T13575] R10: dffffc0000000000 R11: ffffed100af64cc9 R12: dffffc0000000000 [ 529.752795][T13575] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 529.752830][T13575] _copy_to_iter+0x60a/0x17d0 [ 529.752858][T13575] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 529.752876][T13575] ? __pfx__copy_to_iter+0x10/0x10 [ 529.752887][T13575] ? rt_spin_lock+0x1e0/0x400 [ 529.752905][T13575] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 529.752929][T13575] __skb_datagram_iter+0xf8/0x980 [ 529.752946][T13575] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 529.752967][T13575] skb_copy_datagram_iter+0xb5/0x240 [ 529.752985][T13575] netlink_recvmsg+0x2c3/0xa50 [ 529.753007][T13575] ? __pfx_netlink_recvmsg+0x10/0x10 [ 529.753025][T13575] ? __pfx_aa_sk_perm+0x10/0x10 [ 529.753045][T13575] ? aa_sock_msg_perm+0x122/0x200 [ 529.753063][T13575] ? __pfx_netlink_recvmsg+0x10/0x10 [ 529.753079][T13575] sock_recvmsg_nosec+0x130/0x170 [ 529.753102][T13575] ____sys_recvmsg+0x23d/0x4f0 [ 529.753124][T13575] ? __pfx_____sys_recvmsg+0x10/0x10 [ 529.753150][T13575] ? import_iovec+0x73/0xa0 [ 529.753170][T13575] ___sys_recvmsg+0x215/0x590 [ 529.753194][T13575] ? __pfx____sys_recvmsg+0x10/0x10 [ 529.753215][T13575] ? __fget_files+0x2a/0x420 [ 529.753243][T13575] ? __fget_files+0x3a6/0x420 [ 529.753266][T13575] do_recvmmsg+0x33a/0x800 [ 529.753286][T13575] ? __pfx_do_recvmmsg+0x10/0x10 [ 529.753309][T13575] ? _copy_from_user+0x94/0xb0 [ 529.753338][T13575] __x64_sys_recvmmsg+0x1b7/0x250 [ 529.753354][T13575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 529.753375][T13575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.753390][T13575] do_syscall_64+0x174/0x580 [ 529.753410][T13575] ? trace_irq_disable+0x3b/0x140 [ 529.753426][T13575] ? clear_bhb_loop+0x40/0x90 [ 529.753444][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.753458][T13575] RIP: 0033:0x7f4d8408ce59 [ 529.753472][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.753485][T13575] RSP: 002b:00007f4d822de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 529.753501][T13575] RAX: ffffffffffffffda RBX: 00007f4d84305fa0 RCX: 00007f4d8408ce59 [ 529.753512][T13575] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 529.753523][T13575] RBP: 00007f4d822de090 R08: 0000200000003700 R09: 0000000000000000 [ 529.753534][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.753544][T13575] R13: 00007f4d84306038 R14: 00007f4d84305fa0 R15: 00007ffe2371d978 [ 529.753570][T13575] [ 529.755564][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 529.755602][ T38] audit: type=1400 audit(1780513871.248:51): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13571 comm="syz.5.2660" [ 530.555233][ T37] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 530.596912][ T5709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 530.735812][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 530.744977][ T37] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 530.745007][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.745023][ T37] usb 4-1: Product: syz [ 530.745031][ T37] usb 4-1: Manufacturer: syz [ 530.745038][ T37] usb 4-1: SerialNumber: syz [ 530.778639][ T5709] usb 1-1: device descriptor read/64, error -71 [ 530.782676][ T37] usb 4-1: config 0 descriptor?? [ 531.045935][ T5709] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 531.060893][T13590] FAULT_INJECTION: forcing a failure. [ 531.060893][T13590] name failslab, interval 1, probability 0, space 0, times 0 [ 531.060930][T13590] CPU: 0 UID: 0 PID: 13590 Comm: syz.5.2669 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.060957][T13590] Tainted: [L]=SOFTLOCKUP [ 531.060965][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.060977][T13590] Call Trace: [ 531.060985][T13590] [ 531.060993][T13590] dump_stack_lvl+0xe8/0x150 [ 531.061023][T13590] should_fail_ex+0x46b/0x600 [ 531.061057][T13590] should_failslab+0xa8/0x100 [ 531.061083][T13590] __kmalloc_noprof+0xdf/0x7b0 [ 531.061108][T13590] ? tomoyo_encode+0x28b/0x550 [ 531.061135][T13590] tomoyo_encode+0x28b/0x550 [ 531.061162][T13590] tomoyo_realpath_from_path+0x58d/0x5d0 [ 531.061187][T13590] ? tomoyo_domain+0xd7/0x130 [ 531.061215][T13590] ? tomoyo_path_number_perm+0x219/0x630 [ 531.061248][T13590] tomoyo_path_number_perm+0x246/0x630 [ 531.061279][T13590] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.061306][T13590] ? __lock_acquire+0x6b5/0x2d10 [ 531.061331][T13590] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.061382][T13590] ? __fget_files+0x2a/0x420 [ 531.061408][T13590] ? __fget_files+0x2a/0x420 [ 531.061428][T13590] ? __fget_files+0x3a6/0x420 [ 531.061449][T13590] ? __fget_files+0x2a/0x420 [ 531.061475][T13590] security_file_ioctl+0xc3/0x2a0 [ 531.061504][T13590] __se_sys_ioctl+0x47/0x170 [ 531.061532][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.061554][T13590] do_syscall_64+0x174/0x580 [ 531.061581][T13590] ? trace_irq_disable+0x3b/0x140 [ 531.061602][T13590] ? clear_bhb_loop+0x40/0x90 [ 531.061626][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.061646][T13590] RIP: 0033:0x7f206a1ace59 [ 531.061665][T13590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.061681][T13590] RSP: 002b:00007f2068406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.061703][T13590] RAX: ffffffffffffffda RBX: 00007f206a425fa0 RCX: 00007f206a1ace59 [ 531.061717][T13590] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 531.061729][T13590] RBP: 00007f2068406090 R08: 0000000000000000 R09: 0000000000000000 [ 531.061741][T13590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.061753][T13590] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007fff74d85238 [ 531.061784][T13590] [ 531.061833][T13590] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.228332][ T37] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 531.228348][ T37] airspy 4-1:0.0: Could not detect board [ 531.228409][ T37] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 531.430815][ T5709] usb 1-1: device descriptor read/64, error -71 [ 531.559361][ T5709] usb usb1-port1: attempt power cycle [ 531.911731][ T5781] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 531.923282][ T5709] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 531.950547][ T5709] usb 1-1: device descriptor read/8, error -71 [ 532.072092][ T5781] usb 6-1: Using ep0 maxpacket: 8 [ 532.076611][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.077863][ T5781] usb 6-1: config 1 has an invalid interface number: 5 but max is 0 [ 532.077886][ T5781] usb 6-1: config 1 has no interface number 0 [ 532.077930][ T5781] usb 6-1: config 1 interface 5 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 532.077954][ T5781] usb 6-1: config 1 interface 5 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 532.077981][ T5781] usb 6-1: config 1 interface 5 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 1024 [ 532.078007][ T5781] usb 6-1: config 1 interface 5 altsetting 15 bulk endpoint 0x81 has invalid maxpacket 1024 [ 532.078030][ T5781] usb 6-1: config 1 interface 5 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.078057][ T5781] usb 6-1: config 1 interface 5 has no altsetting 0 [ 532.080177][ T5781] usb 6-1: New USB device found, idVendor=413c, idProduct=4006, bcdDevice=9b.7c [ 532.080205][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.080224][ T5781] usb 6-1: Product: syz [ 532.080237][ T5781] usb 6-1: Manufacturer: syz [ 532.080247][ T5781] usb 6-1: SerialNumber: syz [ 532.219450][T13598] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 532.221821][ T5709] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 532.243872][ T5709] usb 1-1: device descriptor read/8, error -71 [ 532.366063][ T5709] usb usb1-port1: unable to enumerate USB device [ 532.483437][ T5781] usb 6-1: USB disconnect, device number 17 [ 533.271458][T13603] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 533.353485][T13609] kvm: pic: level sensitive irq not supported [ 533.353559][T13609] kvm: pic: non byte read [ 533.353869][T13609] kvm: pic: level sensitive irq not supported [ 533.353924][T13609] kvm: pic: non byte read [ 533.354122][T13609] kvm: pic: level sensitive irq not supported [ 533.354176][T13609] kvm: pic: non byte read [ 533.354384][T13609] kvm: pic: level sensitive irq not supported [ 533.354505][T13609] kvm: pic: non byte read [ 533.354645][T13609] kvm: pic: level sensitive irq not supported [ 533.354784][T13609] kvm: pic: non byte read [ 533.357116][T13609] kvm: pic: level sensitive irq not supported [ 533.357181][T13609] kvm: pic: non byte read [ 533.357511][T13609] kvm: pic: level sensitive irq not supported [ 533.357578][T13609] kvm: pic: non byte read [ 533.357798][T13609] kvm: pic: level sensitive irq not supported [ 533.357853][T13609] kvm: pic: non byte read [ 533.362948][T13609] kvm: pic: level sensitive irq not supported [ 533.363127][T13609] kvm: pic: non byte read [ 533.363494][T13609] kvm: pic: level sensitive irq not supported [ 533.363553][T13609] kvm: pic: non byte read [ 533.502900][ T825] usb 4-1: USB disconnect, device number 48 [ 533.616045][ T5618] Bluetooth: hci4: unexpected event for opcode 0x2000 [ 534.307753][T13630] FAULT_INJECTION: forcing a failure. [ 534.307753][T13630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.307777][T13630] CPU: 0 UID: 0 PID: 13630 Comm: syz.5.2681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.307794][T13630] Tainted: [L]=SOFTLOCKUP [ 534.307798][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.307805][T13630] Call Trace: [ 534.307810][T13630] [ 534.307818][T13630] dump_stack_lvl+0xe8/0x150 [ 534.307847][T13630] should_fail_ex+0x46b/0x600 [ 534.307871][T13630] _copy_from_user+0x2d/0xb0 [ 534.307887][T13630] ucma_write+0x166/0x2f0 [ 534.307902][T13630] ? __pfx_ucma_write+0x10/0x10 [ 534.307916][T13630] ? rw_verify_area+0x25b/0x4e0 [ 534.307940][T13630] vfs_writev+0x4c6/0x9a0 [ 534.307952][T13630] ? __pfx_ucma_write+0x10/0x10 [ 534.307966][T13630] ? __pfx_vfs_writev+0x10/0x10 [ 534.307983][T13630] ? __fget_files+0x2a/0x420 [ 534.307998][T13630] ? __fget_files+0x3a6/0x420 [ 534.308009][T13630] ? __fget_files+0x2a/0x420 [ 534.308025][T13630] do_writev+0x15a/0x2e0 [ 534.308037][T13630] ? __pfx_do_writev+0x10/0x10 [ 534.308052][T13630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.308064][T13630] do_syscall_64+0x174/0x580 [ 534.308079][T13630] ? trace_irq_disable+0x3b/0x140 [ 534.308091][T13630] ? clear_bhb_loop+0x40/0x90 [ 534.308104][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.308115][T13630] RIP: 0033:0x7f206a1ace59 [ 534.308126][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.308135][T13630] RSP: 002b:00007f20683e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 534.308147][T13630] RAX: ffffffffffffffda RBX: 00007f206a426090 RCX: 00007f206a1ace59 [ 534.308155][T13630] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000011 [ 534.308162][T13630] RBP: 00007f20683e5090 R08: 0000000000000000 R09: 0000000000000000 [ 534.308168][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.308175][T13630] R13: 00007f206a426128 R14: 00007f206a426090 R15: 00007fff74d85238 [ 534.308190][T13630] [ 534.349277][ T5781] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 534.605860][ T5781] usb 1-1: Using ep0 maxpacket: 32 [ 534.612282][ T5781] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 534.612312][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.616042][ T5781] usb 1-1: config 0 descriptor?? [ 534.835078][ T5781] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 534.861753][ T5781] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 534.861795][ T5781] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 535.165036][T13643] netlink: 'syz.6.2688': attribute type 29 has an invalid length. [ 535.165061][T13643] netlink: 'syz.6.2688': attribute type 3 has an invalid length. [ 535.165075][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2688'. [ 535.236741][ T5709] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 535.407738][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 535.424961][ T5709] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 535.425000][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.425020][ T5709] usb 4-1: Product: syz [ 535.425034][ T5709] usb 4-1: Manufacturer: syz [ 535.425049][ T5709] usb 4-1: SerialNumber: syz [ 535.436708][ T5709] usb 4-1: config 0 descriptor?? [ 535.966917][ T5709] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 535.966945][ T5709] airspy 4-1:0.0: Could not detect board [ 535.967049][ T5709] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 536.188060][ T5699] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 536.360036][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 536.368153][ T5699] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 536.368182][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.368194][ T5699] usb 6-1: Product: syz [ 536.368201][ T5699] usb 6-1: Manufacturer: syz [ 536.368209][ T5699] usb 6-1: SerialNumber: syz [ 536.377101][ T5699] usb 6-1: config 0 descriptor?? [ 536.650852][T13649] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2691'. [ 536.652667][ T5699] usb read operation failed. (-32) [ 537.083249][ T5699] usb write operation failed. (-71) [ 537.083335][ T5699] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 537.084706][ T5699] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 537.084732][ T5699] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 537.249309][T13663] netlink: 'syz.0.2697': attribute type 16 has an invalid length. [ 537.249323][T13663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2697'. [ 537.249343][T13663] veth0_macvtap: entered allmulticast mode [ 537.909343][ T5618] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 537.916172][ T5618] Bluetooth: hci4: Injecting HCI hardware error event [ 537.919038][ T5614] Bluetooth: hci4: hardware error 0x00 [ 538.133729][ T58] block nbd1: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 330 seconds [ 538.133765][ T58] block nbd1: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 330 seconds [ 538.133787][ T58] block nbd1: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 330 seconds [ 538.133805][ T58] block nbd1: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 330 seconds [ 538.222371][ T825] usb 4-1: USB disconnect, device number 49 [ 538.401421][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.401974][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.575828][T13685] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 538.688271][T13692] binder: 13691:13692 ioctl c0306201 200000000080 returned -14 [ 538.709682][T13692] binder: 13691:13692 ioctl c0306201 2000000003c0 returned -14 [ 538.712111][T13692] FAULT_INJECTION: forcing a failure. [ 538.712111][T13692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.712153][T13692] CPU: 0 UID: 0 PID: 13692 Comm: syz.6.2709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 538.712179][T13692] Tainted: [L]=SOFTLOCKUP [ 538.712187][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 538.712199][T13692] Call Trace: [ 538.712207][T13692] [ 538.712216][T13692] dump_stack_lvl+0xe8/0x150 [ 538.712246][T13692] should_fail_ex+0x46b/0x600 [ 538.712280][T13692] prepare_alloc_pages+0x22a/0x6b0 [ 538.712316][T13692] __alloc_frozen_pages_noprof+0x12f/0x380 [ 538.712346][T13692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 538.712376][T13692] ? __pfx_policy_nodemask+0x10/0x10 [ 538.712401][T13692] ? lockdep_hardirqs_on+0x7a/0x110 [ 538.712438][T13692] ? rt_mutex_slowunlock+0x1cb/0x300 [ 538.712464][T13692] alloc_pages_mpol+0xd1/0x380 [ 538.712498][T13692] alloc_pages_noprof+0xd2/0x2f0 [ 538.712526][T13692] binder_alloc_new_buf+0x1e4f/0x3030 [ 538.712643][T13692] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 538.712668][T13692] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 538.712698][T13692] binder_transaction+0x2853/0x6fd0 [ 538.712812][T13692] ? __pfx_binder_transaction+0x10/0x10 [ 538.712838][T13692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 538.712874][T13692] ? __lock_acquire+0x6b5/0x2d10 [ 538.712905][T13692] ? __lock_acquire+0x6b5/0x2d10 [ 538.712938][T13692] ? __lock_acquire+0x6b5/0x2d10 [ 538.712961][T13692] ? __lock_acquire+0x6b5/0x2d10 [ 538.712987][T13692] ? __might_fault+0xaf/0x130 [ 538.713011][T13692] ? __might_fault+0xaf/0x130 [ 538.713052][T13692] binder_ioctl_write_read+0xb37/0xa490 [ 538.713078][T13692] ? is_bpf_text_address+0x26/0x2b0 [ 538.713175][T13692] ? __kernel_text_address+0xd/0x30 [ 538.713215][T13692] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 538.713245][T13692] ? stack_depot_save_flags+0x33/0x810 [ 538.713282][T13692] ? do_raw_spin_lock+0x12b/0x2f0 [ 538.713317][T13692] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 538.713341][T13692] ? reacquire_held_locks+0x104/0x190 [ 538.713366][T13692] ? rt_spin_lock+0x1e0/0x400 [ 538.713389][T13692] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 538.713415][T13692] ? rt_spin_unlock+0x14f/0x200 [ 538.713445][T13692] ? binder_get_thread+0x177/0x6d0 [ 538.713474][T13692] binder_ioctl+0x426/0x1b10 [ 538.713499][T13692] ? tomoyo_path_number_perm+0x219/0x630 [ 538.713530][T13692] ? tomoyo_path_number_perm+0x219/0x630 [ 538.713562][T13692] ? do_vfs_ioctl+0x117b/0x1540 [ 538.713589][T13692] ? __pfx_binder_ioctl+0x10/0x10 [ 538.713615][T13692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 538.713672][T13692] ? __fget_files+0x2a/0x420 [ 538.713697][T13692] ? __fget_files+0x2a/0x420 [ 538.713718][T13692] ? __fget_files+0x3a6/0x420 [ 538.713739][T13692] ? __fget_files+0x2a/0x420 [ 538.713764][T13692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.713791][T13692] ? __pfx_binder_ioctl+0x10/0x10 [ 538.713816][T13692] __se_sys_ioctl+0xff/0x170 [ 538.713842][T13692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.713863][T13692] do_syscall_64+0x174/0x580 [ 538.713889][T13692] ? trace_irq_disable+0x3b/0x140 [ 538.713911][T13692] ? clear_bhb_loop+0x40/0x90 [ 538.713934][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.713954][T13692] RIP: 0033:0x7f806719ce59 [ 538.713972][T13692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.713989][T13692] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.714009][T13692] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 538.714023][T13692] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 538.714037][T13692] RBP: 00007f80653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.714049][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.714061][T13692] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 538.714091][T13692] [ 538.742970][ T825] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 538.910245][ T825] usb 4-1: Using ep0 maxpacket: 8 [ 538.913430][ T825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 538.913464][ T825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 538.913505][ T825] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 538.913532][ T825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.938788][ T825] usb 4-1: config 0 descriptor?? [ 539.173535][ T825] usb 4-1: string descriptor 0 read error: -71 [ 539.236799][ T825] usbhid 4-1:0.0: can't add hid device: -71 [ 539.236886][ T825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 539.258803][ T825] usb 4-1: USB disconnect, device number 50 [ 539.985684][T13706] FAULT_INJECTION: forcing a failure. [ 539.985684][T13706] name failslab, interval 1, probability 0, space 0, times 0 [ 539.985708][T13706] CPU: 0 UID: 0 PID: 13706 Comm: syz.5.2716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 539.985724][T13706] Tainted: [L]=SOFTLOCKUP [ 539.985728][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.985735][T13706] Call Trace: [ 539.985739][T13706] [ 539.985745][T13706] dump_stack_lvl+0xe8/0x150 [ 539.985764][T13706] should_fail_ex+0x46b/0x600 [ 539.985788][T13706] should_failslab+0xa8/0x100 [ 539.985804][T13706] __kmalloc_cache_noprof+0x84/0x690 [ 539.985819][T13706] ? vkms_plane_duplicate_state+0x51/0x110 [ 539.985901][T13706] vkms_plane_duplicate_state+0x51/0x110 [ 539.985915][T13706] drm_atomic_get_plane_state+0x27e/0x730 [ 539.985965][T13706] drm_atomic_set_property+0x2db/0x3b60 [ 539.986003][T13706] ? rt_mutex_slowunlock+0x1cb/0x300 [ 539.986016][T13706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 539.986030][T13706] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 539.986046][T13706] ? __might_fault+0xaf/0x130 [ 539.986070][T13706] drm_mode_atomic_ioctl+0x7be/0xdd0 [ 539.986094][T13706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.986118][T13706] ? rt_spin_unlock+0x14f/0x200 [ 539.986132][T13706] ? rt_spin_unlock+0x160/0x200 [ 539.986146][T13706] ? drm_is_current_master+0x1a2/0x210 [ 539.986163][T13706] drm_ioctl_kernel+0x2e2/0x3b0 [ 539.986199][T13706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.986215][T13706] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 539.986233][T13706] drm_ioctl+0x6c0/0xb80 [ 539.986249][T13706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 539.986266][T13706] ? __pfx_drm_ioctl+0x10/0x10 [ 539.986286][T13706] ? __fget_files+0x2a/0x420 [ 539.986301][T13706] ? bpf_lsm_file_ioctl+0x9/0x20 [ 539.986317][T13706] ? __pfx_drm_ioctl+0x10/0x10 [ 539.986330][T13706] __se_sys_ioctl+0xff/0x170 [ 539.986346][T13706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.986357][T13706] do_syscall_64+0x174/0x580 [ 539.986372][T13706] ? trace_irq_disable+0x3b/0x140 [ 539.986385][T13706] ? clear_bhb_loop+0x40/0x90 [ 539.986398][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.986409][T13706] RIP: 0033:0x7f206a1ace59 [ 539.986420][T13706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.986430][T13706] RSP: 002b:00007f2068406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.986442][T13706] RAX: ffffffffffffffda RBX: 00007f206a425fa0 RCX: 00007f206a1ace59 [ 539.986450][T13706] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 539.986460][T13706] RBP: 00007f2068406090 R08: 0000000000000000 R09: 0000000000000000 [ 539.986467][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.986474][T13706] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007fff74d85238 [ 539.986490][T13706] [ 540.307098][ T5614] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 540.307279][ T37] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 540.501776][ T37] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.501813][ T37] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 540.501829][ T37] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.501843][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.501862][ T37] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 540.501880][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.505432][ T37] usb 4-1: config 0 descriptor?? [ 540.507855][T13704] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 540.578324][T13710] FAULT_INJECTION: forcing a failure. [ 540.578324][T13710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.578359][T13710] CPU: 0 UID: 0 PID: 13710 Comm: syz.0.2718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 540.578386][T13710] Tainted: [L]=SOFTLOCKUP [ 540.578394][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.578406][T13710] Call Trace: [ 540.578413][T13710] [ 540.578421][T13710] dump_stack_lvl+0xe8/0x150 [ 540.578451][T13710] should_fail_ex+0x46b/0x600 [ 540.578485][T13710] _copy_to_user+0x31/0xb0 [ 540.578509][T13710] simple_read_from_buffer+0xe1/0x170 [ 540.578537][T13710] proc_fail_nth_read+0x1be/0x230 [ 540.578564][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.578589][T13710] ? rw_verify_area+0x2ac/0x4e0 [ 540.578623][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.578647][T13710] vfs_read+0x212/0xa80 [ 540.578683][T13710] ? __pfx_vfs_read+0x10/0x10 [ 540.578711][T13710] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.578738][T13710] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.578766][T13710] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 540.578793][T13710] ? mutex_lock_nested+0x152/0x1d0 [ 540.578813][T13710] ? fdget_pos+0x252/0x320 [ 540.578843][T13710] ksys_read+0x156/0x270 [ 540.578872][T13710] ? __pfx_ksys_read+0x10/0x10 [ 540.578897][T13710] ? __pfx_v4l2_ioctl+0x10/0x10 [ 540.578925][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.578946][T13710] do_syscall_64+0x174/0x580 [ 540.578973][T13710] ? trace_irq_disable+0x3b/0x140 [ 540.578995][T13710] ? clear_bhb_loop+0x40/0x90 [ 540.579018][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.579037][T13710] RIP: 0033:0x7fe149edd68e [ 540.579055][T13710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.579072][T13710] RSP: 002b:00007fe14816dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.579092][T13710] RAX: ffffffffffffffda RBX: 00007fe14816e6c0 RCX: 00007fe149edd68e [ 540.579106][T13710] RDX: 000000000000000f RSI: 00007fe14816e0a0 RDI: 0000000000000005 [ 540.579118][T13710] RBP: 00007fe14816e090 R08: 0000000000000000 R09: 0000000000000000 [ 540.579130][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.579142][T13710] R13: 00007fe14a196038 R14: 00007fe14a195fa0 R15: 00007ffdc651a068 [ 540.579172][T13710] [ 541.069115][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069153][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069181][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069208][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069248][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069275][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069301][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.069327][ T37] elecom 0003:056E:00FC.001D: unknown main item tag 0x0 [ 541.136769][ T37] elecom 0003:056E:00FC.001D: hidraw0: USB HID v2.01 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0 [ 541.269623][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.270507][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.272348][ T5698] usb 4-1: USB disconnect, device number 51 [ 542.004710][T13727] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 542.281210][ T5718] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 542.452088][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 542.453738][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.456079][ T5718] usb 4-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 542.456106][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.456126][ T5718] usb 4-1: Product: syz [ 542.456137][ T5718] usb 4-1: Manufacturer: syz [ 542.456144][ T5718] usb 4-1: SerialNumber: syz [ 542.459185][ T5718] usb 4-1: config 0 descriptor?? [ 542.515936][ T5718] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 542.546761][ T5718] ums-datafab 4-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 542.625750][ T5718] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 542.811290][ T5718] usb 4-1: USB disconnect, device number 52 [ 543.695571][T13754] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2736'. [ 546.339038][T13771] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2743'. [ 546.686432][T13775] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 546.768435][T13775] pic_ioport_write: 14 callbacks suppressed [ 546.768496][T13775] kvm: pic: level sensitive irq not supported [ 546.769054][T13775] picdev_read: 14 callbacks suppressed [ 546.769119][T13775] kvm: pic: non byte read [ 546.769770][T13775] kvm: pic: level sensitive irq not supported [ 546.769812][T13775] kvm: pic: non byte read [ 546.771634][T13775] kvm: pic: level sensitive irq not supported [ 546.771698][T13775] kvm: pic: non byte read [ 546.772986][T13775] kvm: pic: level sensitive irq not supported [ 546.773632][T13775] kvm: pic: non byte read [ 546.774643][T13775] kvm: pic: level sensitive irq not supported [ 546.774698][T13775] kvm: pic: non byte read [ 546.775940][T13775] kvm: pic: level sensitive irq not supported [ 546.776010][T13775] kvm: pic: non byte read [ 546.777198][T13775] kvm: pic: level sensitive irq not supported [ 546.777265][T13775] kvm: pic: non byte read [ 546.777907][T13775] kvm: pic: level sensitive irq not supported [ 546.778468][T13775] kvm: pic: non byte read [ 546.779142][T13775] kvm: pic: level sensitive irq not supported [ 546.779197][T13775] kvm: pic: non byte read [ 546.780832][T13775] kvm: pic: level sensitive irq not supported [ 546.780888][T13775] kvm: pic: non byte read [ 548.237683][T13791] binder: 13790:13791 ioctl c0306201 200000000080 returned -14 [ 548.239440][T13791] binder: 13790:13791 ioctl c0306201 2000000003c0 returned -14 [ 549.522206][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 550.118870][T13801] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2757'. [ 550.119286][T13801] xfrm0: entered promiscuous mode [ 550.940391][T13805] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 552.154951][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 553.238770][T13843] FAULT_INJECTION: forcing a failure. [ 553.238770][T13843] name failslab, interval 1, probability 0, space 0, times 0 [ 553.238793][T13843] CPU: 0 UID: 0 PID: 13843 Comm: syz.6.2772 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 553.238809][T13843] Tainted: [L]=SOFTLOCKUP [ 553.238813][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.238820][T13843] Call Trace: [ 553.238825][T13843] [ 553.238830][T13843] dump_stack_lvl+0xe8/0x150 [ 553.238846][T13843] should_fail_ex+0x46b/0x600 [ 553.238865][T13843] should_failslab+0xa8/0x100 [ 553.238880][T13843] __kmalloc_noprof+0xdf/0x7b0 [ 553.238892][T13843] ? lockdep_hardirqs_on+0x7a/0x110 [ 553.238908][T13843] ? ieee80211_key_alloc+0x52/0x2490 [ 553.239069][T13843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 553.239112][T13843] ieee80211_key_alloc+0x52/0x2490 [ 553.239139][T13843] ieee80211_add_key+0x344/0xc30 [ 553.239161][T13843] rdev_add_key+0x134/0x300 [ 553.239179][T13843] nl80211_new_key+0x71c/0x860 [ 553.239196][T13843] ? __pfx_nl80211_new_key+0x10/0x10 [ 553.239214][T13843] ? nl80211_pre_doit+0x57c/0x8d0 [ 553.239230][T13843] genl_family_rcv_msg_doit+0x22a/0x330 [ 553.239248][T13843] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.239267][T13843] ? bpf_lsm_capable+0x9/0x20 [ 553.239277][T13843] ? security_capable+0x7e/0x2c0 [ 553.239292][T13843] genl_rcv_msg+0x61c/0x7a0 [ 553.239308][T13843] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.239319][T13843] ? ref_tracker_free+0x673/0x820 [ 553.239335][T13843] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 553.239346][T13843] ? __pfx_nl80211_new_key+0x10/0x10 [ 553.239358][T13843] ? __pfx_nl80211_post_doit+0x10/0x10 [ 553.239369][T13843] ? ____sys_sendmsg+0x55c/0x870 [ 553.239385][T13843] ? ___sys_sendmsg+0x2a5/0x360 [ 553.239399][T13843] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 553.239413][T13843] ? do_syscall_64+0x174/0x580 [ 553.239428][T13843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.239443][T13843] netlink_rcv_skb+0x232/0x4b0 [ 553.239460][T13843] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.239473][T13843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.239496][T13843] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.239511][T13843] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.239529][T13843] genl_rcv+0x28/0x40 [ 553.239540][T13843] netlink_unicast+0x780/0x920 [ 553.239561][T13843] netlink_sendmsg+0x813/0xb40 [ 553.239575][T13843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.239586][T13843] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 553.239602][T13843] ? aa_sock_msg_perm+0x122/0x200 [ 553.239615][T13843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.239624][T13843] sock_sendmsg_nosec+0x13a/0x180 [ 553.239639][T13843] ____sys_sendmsg+0x55c/0x870 [ 553.239660][T13843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.239684][T13843] ? import_iovec+0x73/0xa0 [ 553.239699][T13843] ___sys_sendmsg+0x2a5/0x360 [ 553.239714][T13843] ? __lock_acquire+0x6b5/0x2d10 [ 553.239730][T13843] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.239763][T13843] ? __fget_files+0x2a/0x420 [ 553.239775][T13843] ? __fget_files+0x3a6/0x420 [ 553.239793][T13843] __x64_sys_sendmsg+0x1c3/0x2a0 [ 553.239810][T13843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.239831][T13843] ? __pfx_ksys_write+0x10/0x10 [ 553.239851][T13843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.239863][T13843] do_syscall_64+0x174/0x580 [ 553.239878][T13843] ? trace_irq_disable+0x3b/0x140 [ 553.239890][T13843] ? clear_bhb_loop+0x40/0x90 [ 553.239903][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.239914][T13843] RIP: 0033:0x7f806719ce59 [ 553.239926][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.239936][T13843] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.239948][T13843] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 553.239956][T13843] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 553.239963][T13843] RBP: 00007f80653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 553.239970][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.239976][T13843] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 553.239993][T13843] [ 553.420695][T13845] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 553.485900][T13845] pic_ioport_write: 14 callbacks suppressed [ 553.497971][T13845] kvm: pic: level sensitive irq not supported [ 553.498639][T13845] picdev_read: 14 callbacks suppressed [ 553.498656][T13845] kvm: pic: non byte read [ 553.499115][T13845] kvm: pic: level sensitive irq not supported [ 553.499463][T13845] kvm: pic: non byte read [ 553.501015][T13845] kvm: pic: level sensitive irq not supported [ 553.501076][T13845] kvm: pic: non byte read [ 553.501812][T13845] kvm: pic: level sensitive irq not supported [ 553.501870][T13845] kvm: pic: non byte read [ 553.502910][T13845] kvm: pic: level sensitive irq not supported [ 553.502972][T13845] kvm: pic: non byte read [ 553.504921][T13845] kvm: pic: level sensitive irq not supported [ 553.505740][T13845] kvm: pic: non byte read [ 553.506402][T13845] kvm: pic: level sensitive irq not supported [ 553.507028][T13845] kvm: pic: non byte read [ 553.507506][T13845] kvm: pic: level sensitive irq not supported [ 553.508665][T13845] kvm: pic: non byte read [ 553.509334][T13845] kvm: pic: level sensitive irq not supported [ 553.510253][T13845] kvm: pic: non byte read [ 553.511136][T13845] kvm: pic: level sensitive irq not supported [ 553.511758][T13845] kvm: pic: non byte read [ 554.907775][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2777'. [ 554.907859][T13856] openvswitch: netlink: Flow actions attr not present in new flow. [ 554.999011][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2778'. [ 556.082258][T13868] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 556.633197][T13884] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 556.633551][T13884] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 556.633784][T13884] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 556.633964][T13884] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 556.634099][T13884] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 556.634267][T13884] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 557.529628][T13895] FAULT_INJECTION: forcing a failure. [ 557.529628][T13895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.529652][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.0.2790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.529668][T13895] Tainted: [L]=SOFTLOCKUP [ 557.529672][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.529678][T13895] Call Trace: [ 557.529683][T13895] [ 557.529696][T13895] dump_stack_lvl+0xe8/0x150 [ 557.529712][T13895] should_fail_ex+0x46b/0x600 [ 557.529731][T13895] _copy_from_iter+0x1d3/0x1670 [ 557.529745][T13895] ? __lock_acquire+0x6b5/0x2d10 [ 557.529760][T13895] ? __pfx__copy_from_iter+0x10/0x10 [ 557.529778][T13895] tun_get_user+0x267/0x4450 [ 557.529796][T13895] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.529814][T13895] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 557.529826][T13895] ? reacquire_held_locks+0x81/0x190 [ 557.529839][T13895] ? rt_spin_lock+0x1e0/0x400 [ 557.529853][T13895] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 557.529865][T13895] ? __pfx_tun_get_user+0x10/0x10 [ 557.529884][T13895] ? rt_spin_unlock+0x14f/0x200 [ 557.529908][T13895] ? rt_spin_unlock+0x160/0x200 [ 557.529927][T13895] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 557.529943][T13895] ? ref_tracker_alloc+0x332/0x4a0 [ 557.529958][T13895] ? tun_get+0x157/0x2f0 [ 557.529971][T13895] ? vfs_write+0x629/0xba0 [ 557.529984][T13895] ? ksys_write+0x156/0x270 [ 557.529997][T13895] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 557.530015][T13895] ? tun_get+0x1c/0x2f0 [ 557.530033][T13895] ? tun_get+0x1c/0x2f0 [ 557.530047][T13895] ? tun_get+0x1c/0x2f0 [ 557.530063][T13895] tun_chr_write_iter+0x119/0x210 [ 557.530080][T13895] vfs_write+0x629/0xba0 [ 557.530097][T13895] ? __pfx_vfs_write+0x10/0x10 [ 557.530116][T13895] ? __fget_files+0x2a/0x420 [ 557.530132][T13895] ksys_write+0x156/0x270 [ 557.530148][T13895] ? __pfx_ksys_write+0x10/0x10 [ 557.530165][T13895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.530177][T13895] do_syscall_64+0x174/0x580 [ 557.530194][T13895] ? trace_irq_disable+0x3b/0x140 [ 557.530206][T13895] ? clear_bhb_loop+0x40/0x90 [ 557.530219][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.530230][T13895] RIP: 0033:0x7fe149f1ce59 [ 557.530241][T13895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.530250][T13895] RSP: 002b:00007fe14816e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.530262][T13895] RAX: ffffffffffffffda RBX: 00007fe14a195fa0 RCX: 00007fe149f1ce59 [ 557.530269][T13895] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000005 [ 557.530276][T13895] RBP: 00007fe14816e090 R08: 0000000000000000 R09: 0000000000000000 [ 557.530283][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.530289][T13895] R13: 00007fe14a196038 R14: 00007fe14a195fa0 R15: 00007ffdc651a068 [ 557.530305][T13895] [ 558.247083][T13908] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2793'. [ 558.247107][T13908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.279093][T13910] program syz.0.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.369956][T13925] FAULT_INJECTION: forcing a failure. [ 559.369956][T13925] name failslab, interval 1, probability 0, space 0, times 0 [ 559.369994][T13925] CPU: 0 UID: 0 PID: 13925 Comm: syz.0.2800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.370020][T13925] Tainted: [L]=SOFTLOCKUP [ 559.370027][T13925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.370038][T13925] Call Trace: [ 559.370046][T13925] [ 559.370055][T13925] dump_stack_lvl+0xe8/0x150 [ 559.370084][T13925] should_fail_ex+0x46b/0x600 [ 559.370113][T13925] should_failslab+0xa8/0x100 [ 559.370128][T13925] kmem_cache_alloc_noprof+0x87/0x680 [ 559.370141][T13925] ? rcu_is_watching+0x15/0xb0 [ 559.370155][T13925] ? security_file_alloc+0x34/0x310 [ 559.370172][T13925] security_file_alloc+0x34/0x310 [ 559.370187][T13925] init_file+0x96/0x2d0 [ 559.370201][T13925] alloc_empty_file+0x74/0x1d0 [ 559.370213][T13925] path_openat+0x11b/0x3960 [ 559.370232][T13925] ? try_to_take_rt_mutex+0x840/0xb00 [ 559.370246][T13925] ? arch_stack_walk+0xfb/0x150 [ 559.370329][T13925] ? __lock_acquire+0x6b5/0x2d10 [ 559.370344][T13925] ? __pfx_path_openat+0x10/0x10 [ 559.370360][T13925] ? kasan_save_track+0x4f/0x80 [ 559.370371][T13925] ? kasan_save_track+0x3e/0x80 [ 559.370382][T13925] ? __kasan_slab_alloc+0x6c/0x80 [ 559.370397][T13925] ? do_raw_spin_lock+0x12b/0x2f0 [ 559.370412][T13925] do_file_open+0x23e/0x4a0 [ 559.370426][T13925] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 559.370443][T13925] ? __pfx_do_file_open+0x10/0x10 [ 559.370455][T13925] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 559.370478][T13925] ? alloc_fd+0x679/0x6f0 [ 559.370495][T13925] do_sys_openat2+0x115/0x200 [ 559.370515][T13925] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.370528][T13925] ? ksys_write+0x248/0x270 [ 559.370543][T13925] ? __pfx_ksys_write+0x10/0x10 [ 559.370557][T13925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.370569][T13925] __x64_sys_creat+0x8f/0xc0 [ 559.370583][T13925] do_syscall_64+0x174/0x580 [ 559.370598][T13925] ? trace_irq_disable+0x3b/0x140 [ 559.370610][T13925] ? clear_bhb_loop+0x40/0x90 [ 559.370623][T13925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.370634][T13925] RIP: 0033:0x7fe149f1ce59 [ 559.370645][T13925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.370654][T13925] RSP: 002b:00007fe14816e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 559.370666][T13925] RAX: ffffffffffffffda RBX: 00007fe14a195fa0 RCX: 00007fe149f1ce59 [ 559.370674][T13925] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000200000000140 [ 559.370681][T13925] RBP: 00007fe14816e090 R08: 0000000000000000 R09: 0000000000000000 [ 559.370688][T13925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.370694][T13925] R13: 00007fe14a196038 R14: 00007fe14a195fa0 R15: 00007ffdc651a068 [ 559.370710][T13925] [ 560.182536][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 560.191765][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 560.199005][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 560.284903][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 560.285479][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2801'. [ 560.303476][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.194068][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.194303][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.194487][T13933] bridge_slave_0: entered allmulticast mode [ 561.196419][T13933] bridge_slave_0: entered promiscuous mode [ 561.204147][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.204488][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.204763][T13933] bridge_slave_1: entered allmulticast mode [ 561.207971][T13933] bridge_slave_1: entered promiscuous mode [ 561.262270][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.272360][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.319650][T13933] team0: Port device team_slave_0 added [ 561.323037][T13933] team0: Port device team_slave_1 added [ 561.373289][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.373306][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.373330][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.388173][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.388189][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.388214][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.493690][T13933] hsr_slave_0: entered promiscuous mode [ 561.494997][T13933] hsr_slave_1: entered promiscuous mode [ 561.496075][T13933] debugfs: 'hsr0' already exists in 'hsr' [ 561.496093][T13933] Cannot create hsr debugfs directory [ 562.144363][T13933] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.191422][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.192378][T13933] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.239776][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.240846][T13933] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 562.307076][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.308371][T13933] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 562.359019][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.388161][T13965] pim6reg1: entered promiscuous mode [ 562.388186][T13965] pim6reg1: entered allmulticast mode [ 562.622917][ T5614] Bluetooth: hci6: command tx timeout [ 562.790411][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.832777][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.854431][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.854628][T12742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.891721][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.892158][T12726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.372247][T13992] tc_dump_action: action bad kind [ 563.377068][T13992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2813'. [ 563.747709][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.266309][T13933] veth0_vlan: entered promiscuous mode [ 564.320392][T13933] veth1_vlan: entered promiscuous mode [ 564.487164][T13933] veth0_macvtap: entered promiscuous mode [ 564.497224][T13933] veth1_macvtap: entered promiscuous mode [ 564.545386][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.571277][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.592285][T12726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.592559][T12726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.625583][T12726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.626664][T12726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.846252][ T5614] Bluetooth: hci6: command tx timeout [ 565.155904][T12735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.155923][T12735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.707144][ T1246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.707164][ T1246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.976082][T14033] FAULT_INJECTION: forcing a failure. [ 565.976082][T14033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.976109][T14033] CPU: 1 UID: 0 PID: 14033 Comm: syz.7.2815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.976125][T14033] Tainted: [L]=SOFTLOCKUP [ 565.976129][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.976137][T14033] Call Trace: [ 565.976141][T14033] [ 565.976146][T14033] dump_stack_lvl+0xe8/0x150 [ 565.976164][T14033] should_fail_ex+0x46b/0x600 [ 565.976182][T14033] _copy_from_user+0x2d/0xb0 [ 565.976196][T14033] do_semtimedop+0x235/0x3a0 [ 565.976291][T14033] ? __pfx_do_semtimedop+0x10/0x10 [ 565.976323][T14033] ? __pfx_ksys_write+0x10/0x10 [ 565.976342][T14033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.976353][T14033] do_syscall_64+0x174/0x580 [ 565.976369][T14033] ? trace_irq_disable+0x3b/0x140 [ 565.976382][T14033] ? clear_bhb_loop+0x40/0x90 [ 565.976395][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.976408][T14033] RIP: 0033:0x7fd30b81ce59 [ 565.976419][T14033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.976428][T14033] RSP: 002b:00007fd309a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 565.976440][T14033] RAX: ffffffffffffffda RBX: 00007fd30ba95fa0 RCX: 00007fd30b81ce59 [ 565.976448][T14033] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000000 [ 565.976455][T14033] RBP: 00007fd309a76090 R08: 0000000000000000 R09: 0000000000000000 [ 565.976461][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.976468][T14033] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 565.976483][T14033] [ 567.069406][ T5614] Bluetooth: hci6: command tx timeout [ 569.294073][ T5614] Bluetooth: hci6: command tx timeout [ 569.626591][T14066] FAULT_INJECTION: forcing a failure. [ 569.626591][T14066] name failslab, interval 1, probability 0, space 0, times 0 [ 569.626614][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.5.2826 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 569.626630][T14066] Tainted: [L]=SOFTLOCKUP [ 569.626634][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.626642][T14066] Call Trace: [ 569.626646][T14066] [ 569.626651][T14066] dump_stack_lvl+0xe8/0x150 [ 569.626679][T14066] should_fail_ex+0x46b/0x600 [ 569.626710][T14066] should_failslab+0xa8/0x100 [ 569.626729][T14066] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 569.626751][T14066] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 569.626774][T14066] ? dup_task_struct+0x52/0x860 [ 569.626805][T14066] dup_task_struct+0x52/0x860 [ 569.626830][T14066] ? rt_spin_unlock+0x160/0x200 [ 569.626856][T14066] copy_process+0x837/0x43d0 [ 569.626880][T14066] ? __lock_acquire+0x6b5/0x2d10 [ 569.626895][T14066] ? __might_fault+0xaf/0x130 [ 569.626908][T14066] ? __might_fault+0xaf/0x130 [ 569.626927][T14066] ? __pfx_copy_process+0x10/0x10 [ 569.626947][T14066] kernel_clone+0x2d7/0x940 [ 569.626965][T14066] ? __pfx_kernel_clone+0x10/0x10 [ 569.626990][T14066] __se_sys_clone3+0x33c/0x360 [ 569.627003][T14066] ? __pfx___se_sys_clone3+0x10/0x10 [ 569.627027][T14066] ? __pfx_ksys_write+0x10/0x10 [ 569.627046][T14066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.627058][T14066] do_syscall_64+0x174/0x580 [ 569.627073][T14066] ? trace_irq_disable+0x3b/0x140 [ 569.627086][T14066] ? clear_bhb_loop+0x40/0x90 [ 569.627098][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.627109][T14066] RIP: 0033:0x7f206a1ace59 [ 569.627120][T14066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.627130][T14066] RSP: 002b:00007f2068405ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 569.627142][T14066] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f206a1ace59 [ 569.627150][T14066] RDX: 00007f2068405f10 RSI: 0000000000000058 RDI: 00007f2068405f10 [ 569.627160][T14066] RBP: 00007f2068406090 R08: 0000000000000000 R09: 0000000000000058 [ 569.627167][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.627173][T14066] R13: 00007f206a426038 R14: 00007f206a425fa0 R15: 00007fff74d85238 [ 569.627189][T14066] [ 570.287277][ T58] block nbd1: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 360 seconds [ 570.287311][ T58] block nbd1: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 360 seconds [ 570.287327][ T58] block nbd1: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 360 seconds [ 570.287343][ T58] block nbd1: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 360 seconds [ 570.921760][T14092] netlink: 'syz.6.2835': attribute type 2 has an invalid length. [ 570.930826][T14061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.051512][T14092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.792079][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2843'. [ 572.792489][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2843'. [ 573.081257][T14125] netlink: 57 bytes leftover after parsing attributes in process `syz.6.2844'. [ 574.448498][T14137] binder: 14136:14137 ioctl c0306201 0 returned -14 [ 576.050865][T14144] netlink: 'syz.5.2850': attribute type 46 has an invalid length. [ 576.086724][T14144] netlink: 'syz.5.2850': attribute type 49 has an invalid length. [ 576.337746][T14128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.327581][T14187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 578.414782][T14188] pic_ioport_write: 14 callbacks suppressed [ 578.414801][T14188] kvm: pic: level sensitive irq not supported [ 578.414915][T14188] picdev_read: 14 callbacks suppressed [ 578.414930][T14188] kvm: pic: non byte read [ 578.415127][T14188] kvm: pic: level sensitive irq not supported [ 578.415177][T14188] kvm: pic: non byte read [ 578.415369][T14188] kvm: pic: level sensitive irq not supported [ 578.415413][T14188] kvm: pic: non byte read [ 578.415606][T14188] kvm: pic: level sensitive irq not supported [ 578.415643][T14188] kvm: pic: non byte read [ 578.415846][T14188] kvm: pic: level sensitive irq not supported [ 578.415883][T14188] kvm: pic: non byte read [ 578.416069][T14188] kvm: pic: level sensitive irq not supported [ 578.416162][T14188] kvm: pic: non byte read [ 578.416292][T14188] kvm: pic: level sensitive irq not supported [ 578.416386][T14188] kvm: pic: non byte read [ 578.416512][T14188] kvm: pic: level sensitive irq not supported [ 578.416630][T14188] kvm: pic: non byte read [ 578.416804][T14188] kvm: pic: level sensitive irq not supported [ 578.416859][T14188] kvm: pic: non byte read [ 578.417072][T14188] kvm: pic: level sensitive irq not supported [ 578.417116][T14188] kvm: pic: non byte read [ 578.823373][T14196] FAULT_INJECTION: forcing a failure. [ 578.823373][T14196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.823410][T14196] CPU: 0 UID: 0 PID: 14196 Comm: syz.0.2868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.823438][T14196] Tainted: [L]=SOFTLOCKUP [ 578.823446][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.823458][T14196] Call Trace: [ 578.823466][T14196] [ 578.823475][T14196] dump_stack_lvl+0xe8/0x150 [ 578.823504][T14196] should_fail_ex+0x46b/0x600 [ 578.823524][T14196] _copy_to_user+0x31/0xb0 [ 578.823538][T14196] simple_read_from_buffer+0xe1/0x170 [ 578.823554][T14196] proc_fail_nth_read+0x1be/0x230 [ 578.823570][T14196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.823588][T14196] ? rw_verify_area+0x2ac/0x4e0 [ 578.823616][T14196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.823640][T14196] vfs_read+0x212/0xa80 [ 578.823674][T14196] ? __pfx_vfs_read+0x10/0x10 [ 578.823703][T14196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.823721][T14196] ? lockdep_hardirqs_on+0x7a/0x110 [ 578.823737][T14196] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 578.823751][T14196] ? mutex_lock_nested+0x152/0x1d0 [ 578.823763][T14196] ? fdget_pos+0x252/0x320 [ 578.823780][T14196] ksys_read+0x156/0x270 [ 578.823799][T14196] ? __pfx_ksys_read+0x10/0x10 [ 578.823833][T14196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.823856][T14196] do_syscall_64+0x174/0x580 [ 578.823883][T14196] ? trace_irq_disable+0x3b/0x140 [ 578.823905][T14196] ? clear_bhb_loop+0x40/0x90 [ 578.823918][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.823929][T14196] RIP: 0033:0x7fe149edd68e [ 578.823940][T14196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.823950][T14196] RSP: 002b:00007fe14816dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.823963][T14196] RAX: ffffffffffffffda RBX: 00007fe14816e6c0 RCX: 00007fe149edd68e [ 578.823971][T14196] RDX: 000000000000000f RSI: 00007fe14816e0a0 RDI: 0000000000000004 [ 578.823978][T14196] RBP: 00007fe14816e090 R08: 0000000000000000 R09: 0000000000000000 [ 578.823985][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.823991][T14196] R13: 00007fe14a196038 R14: 00007fe14a195fa0 R15: 00007ffdc651a068 [ 578.824011][T14196] [ 581.088882][T14227] C: renamed from veth1_to_team (while UP) [ 581.129094][T14227] netlink: 'syz.7.2877': attribute type 3 has an invalid length. [ 581.129108][T14227] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2877'. [ 581.333889][ T5614] Bluetooth: Unexpected start frame (len 138) [ 581.386730][T14235] tmpfs: Bad value for 'mpol' [ 581.413775][T14235] VFS: Mount too revealing [ 582.755538][ T5614] Bluetooth: Unexpected start frame (len 138) [ 583.156701][T14266] comedi comedi0: Minor 2 could not be opened [ 583.245001][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.245099][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.881877][T14270] FAULT_INJECTION: forcing a failure. [ 583.881877][T14270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.881911][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.7.2894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.881937][T14270] Tainted: [L]=SOFTLOCKUP [ 583.881944][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.881955][T14270] Call Trace: [ 583.881962][T14270] [ 583.881971][T14270] dump_stack_lvl+0xe8/0x150 [ 583.882003][T14270] should_fail_ex+0x46b/0x600 [ 583.882035][T14270] _copy_to_user+0x31/0xb0 [ 583.882057][T14270] simple_read_from_buffer+0xe1/0x170 [ 583.882085][T14270] proc_fail_nth_read+0x1be/0x230 [ 583.882110][T14270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.882137][T14270] ? rw_verify_area+0x2ac/0x4e0 [ 583.882162][T14270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.882186][T14270] vfs_read+0x212/0xa80 [ 583.882223][T14270] ? __pfx_vfs_read+0x10/0x10 [ 583.882251][T14270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.882280][T14270] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.882308][T14270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.882335][T14270] ? mutex_lock_nested+0x152/0x1d0 [ 583.882355][T14270] ? fdget_pos+0x252/0x320 [ 583.882386][T14270] ksys_read+0x156/0x270 [ 583.882415][T14270] ? __pfx_ksys_read+0x10/0x10 [ 583.882439][T14270] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 583.882468][T14270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.882489][T14270] do_syscall_64+0x174/0x580 [ 583.882515][T14270] ? trace_irq_disable+0x3b/0x140 [ 583.882536][T14270] ? clear_bhb_loop+0x40/0x90 [ 583.882560][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.882579][T14270] RIP: 0033:0x7fd30b7dd68e [ 583.882598][T14270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.882614][T14270] RSP: 002b:00007fd309a75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.882635][T14270] RAX: ffffffffffffffda RBX: 00007fd309a766c0 RCX: 00007fd30b7dd68e [ 583.882650][T14270] RDX: 000000000000000f RSI: 00007fd309a760a0 RDI: 0000000000000005 [ 583.882666][T14270] RBP: 00007fd309a76090 R08: 0000000000000000 R09: 0000000000000000 [ 583.882678][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.882690][T14270] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 583.882722][T14270] [ 584.237730][T14274] netlink: 'syz.7.2896': attribute type 46 has an invalid length. [ 584.331054][ T5614] Bluetooth: Unexpected start frame (len 138) [ 584.422081][T14281] FAULT_INJECTION: forcing a failure. [ 584.422081][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 584.422115][T14281] CPU: 1 UID: 0 PID: 14281 Comm: syz.7.2899 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.422143][T14281] Tainted: [L]=SOFTLOCKUP [ 584.422150][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.422162][T14281] Call Trace: [ 584.422170][T14281] [ 584.422179][T14281] dump_stack_lvl+0xe8/0x150 [ 584.422217][T14281] should_fail_ex+0x46b/0x600 [ 584.422255][T14281] should_failslab+0xa8/0x100 [ 584.422282][T14281] __kmalloc_noprof+0xdf/0x7b0 [ 584.422307][T14281] ? tomoyo_encode+0x28b/0x550 [ 584.422336][T14281] tomoyo_encode+0x28b/0x550 [ 584.422364][T14281] tomoyo_realpath_from_path+0x58d/0x5d0 [ 584.422399][T14281] tomoyo_check_open_permission+0x229/0x470 [ 584.422431][T14281] ? tomoyo_check_open_permission+0x1d3/0x470 [ 584.422460][T14281] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 584.422491][T14281] ? __asan_memset+0x22/0x50 [ 584.422537][T14281] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 584.422564][T14281] ? tomoyo_file_open+0x166/0x220 [ 584.422593][T14281] security_file_open+0xa9/0x240 [ 584.422622][T14281] do_dentry_open+0x4c0/0x13e0 [ 584.422645][T14281] ? vfs_open+0x31/0x350 [ 584.422668][T14281] vfs_open+0x3b/0x350 [ 584.422684][T14281] ? path_openat+0x2ed3/0x3960 [ 584.422711][T14281] path_openat+0x2eea/0x3960 [ 584.422761][T14281] ? __pfx_path_openat+0x10/0x10 [ 584.422787][T14281] ? kasan_save_track+0x4f/0x80 [ 584.422804][T14281] ? kasan_save_track+0x3e/0x80 [ 584.422821][T14281] ? __kasan_slab_alloc+0x6c/0x80 [ 584.422850][T14281] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.422878][T14281] do_file_open+0x23e/0x4a0 [ 584.422902][T14281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.422933][T14281] ? __pfx_do_file_open+0x10/0x10 [ 584.422955][T14281] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 584.422998][T14281] ? alloc_fd+0x679/0x6f0 [ 584.423029][T14281] do_sys_openat2+0x115/0x200 [ 584.423053][T14281] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.423075][T14281] ? exc_page_fault+0x6a/0xc0 [ 584.423104][T14281] ? do_user_addr_fault+0xc6f/0x1340 [ 584.423129][T14281] __x64_sys_openat+0x138/0x170 [ 584.423153][T14281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.423172][T14281] do_syscall_64+0x174/0x580 [ 584.423210][T14281] ? trace_irq_disable+0x3b/0x140 [ 584.423230][T14281] ? clear_bhb_loop+0x40/0x90 [ 584.423253][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.423271][T14281] RIP: 0033:0x7fd30b7dd68e [ 584.423290][T14281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.423307][T14281] RSP: 002b:00007fd309a75b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.423327][T14281] RAX: ffffffffffffffda RBX: 00007fd309a766c0 RCX: 00007fd30b7dd68e [ 584.423340][T14281] RDX: 0000000000080880 RSI: 00007fd309a75c00 RDI: ffffffffffffff9c [ 584.423353][T14281] RBP: 00007fd309a75c00 R08: 0000000000000000 R09: 0000000000000000 [ 584.423365][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 584.423378][T14281] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 584.423407][T14281] [ 584.423431][T14281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.123262][ T5614] Bluetooth: Unexpected start frame (len 138) [ 586.376756][T14326] FAULT_INJECTION: forcing a failure. [ 586.376756][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.376793][T14326] CPU: 0 UID: 0 PID: 14326 Comm: syz.6.2915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.376820][T14326] Tainted: [L]=SOFTLOCKUP [ 586.376828][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.376839][T14326] Call Trace: [ 586.376848][T14326] [ 586.376857][T14326] dump_stack_lvl+0xe8/0x150 [ 586.376887][T14326] should_fail_ex+0x46b/0x600 [ 586.376921][T14326] _copy_to_iter+0x1e4/0x17d0 [ 586.376953][T14326] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.376985][T14326] ? __pfx__copy_to_iter+0x10/0x10 [ 586.377013][T14326] ? rt_mutex_slowunlock+0x1cb/0x300 [ 586.377037][T14326] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.377075][T14326] seq_read_iter+0xbf6/0xe20 [ 586.377199][T14326] vfs_read+0x58b/0xa80 [ 586.377234][T14326] ? __pfx_vfs_read+0x10/0x10 [ 586.377262][T14326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.377291][T14326] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.377321][T14326] ? mutex_lock_nested+0x152/0x1d0 [ 586.377342][T14326] ? fdget_pos+0x252/0x320 [ 586.377379][T14326] ksys_read+0x156/0x270 [ 586.377408][T14326] ? __pfx_ksys_read+0x10/0x10 [ 586.377442][T14326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.377464][T14326] do_syscall_64+0x174/0x580 [ 586.377490][T14326] ? trace_irq_disable+0x3b/0x140 [ 586.377513][T14326] ? clear_bhb_loop+0x40/0x90 [ 586.377538][T14326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.377557][T14326] RIP: 0033:0x7f806719ce59 [ 586.377577][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.377594][T14326] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.377614][T14326] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 586.377628][T14326] RDX: 0000000000002020 RSI: 000020000000b180 RDI: 0000000000000003 [ 586.377650][T14326] RBP: 00007f80653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 586.377663][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.377675][T14326] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 586.377707][T14326] [ 586.615619][T14328] syzkaller0: entered promiscuous mode [ 586.615642][T14328] syzkaller0: entered allmulticast mode [ 586.638860][T14328] tipc: Started in network mode [ 586.638958][T14328] tipc: Node identity aeb118d10a62, cluster identity 4711 [ 586.639728][T14328] tipc: Enabled bearer , priority 0 [ 586.728757][T14327] tipc: Resetting bearer [ 586.958261][T14327] tipc: Disabling bearer [ 586.976083][T14339] FAULT_INJECTION: forcing a failure. [ 586.976083][T14339] name failslab, interval 1, probability 0, space 0, times 0 [ 586.976105][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.7.2922 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.976121][T14339] Tainted: [L]=SOFTLOCKUP [ 586.976126][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.976135][T14339] Call Trace: [ 586.976140][T14339] [ 586.976145][T14339] dump_stack_lvl+0xe8/0x150 [ 586.976165][T14339] should_fail_ex+0x46b/0x600 [ 586.976184][T14339] should_failslab+0xa8/0x100 [ 586.976199][T14339] kmem_cache_alloc_noprof+0x87/0x680 [ 586.976212][T14339] ? alloc_empty_file+0x5b/0x1d0 [ 586.976226][T14339] alloc_empty_file+0x5b/0x1d0 [ 586.976238][T14339] alloc_file_pseudo+0x155/0x240 [ 586.976251][T14339] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 586.976263][T14339] ? __pfx_shmem_get_inode+0x10/0x10 [ 586.976377][T14339] __shmem_file_setup+0x2e9/0x370 [ 586.976397][T14339] ? __pfx___shmem_file_setup+0x10/0x10 [ 586.976422][T14339] ? drm_gem_private_object_init+0x297/0x390 [ 586.976445][T14339] drm_gem_object_init+0x39/0x90 [ 586.976472][T14339] __drm_gem_shmem_create+0x179/0x2e0 [ 586.976533][T14339] drm_gem_shmem_dumb_create+0x72/0x120 [ 586.976559][T14339] drm_mode_create_dumb_ioctl+0x2c0/0x350 [ 586.976632][T14339] drm_ioctl_kernel+0x2e2/0x3b0 [ 586.976647][T14339] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 586.976663][T14339] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 586.976680][T14339] drm_ioctl+0x6c0/0xb80 [ 586.976700][T14339] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 586.976718][T14339] ? __pfx_drm_ioctl+0x10/0x10 [ 586.976736][T14339] ? __fget_files+0x2a/0x420 [ 586.976751][T14339] ? bpf_lsm_file_ioctl+0x9/0x20 [ 586.976766][T14339] ? __pfx_drm_ioctl+0x10/0x10 [ 586.976779][T14339] __se_sys_ioctl+0xff/0x170 [ 586.976794][T14339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.976806][T14339] do_syscall_64+0x174/0x580 [ 586.976821][T14339] ? trace_irq_disable+0x3b/0x140 [ 586.976834][T14339] ? clear_bhb_loop+0x40/0x90 [ 586.976847][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.976857][T14339] RIP: 0033:0x7fd30b81ce59 [ 586.976869][T14339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.976878][T14339] RSP: 002b:00007fd309a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.976891][T14339] RAX: ffffffffffffffda RBX: 00007fd30ba95fa0 RCX: 00007fd30b81ce59 [ 586.976899][T14339] RDX: 0000200000000080 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 586.976906][T14339] RBP: 00007fd309a76090 R08: 0000000000000000 R09: 0000000000000000 [ 586.976913][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.976919][T14339] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 586.976935][T14339] [ 587.073344][T14341] FAULT_INJECTION: forcing a failure. [ 587.073344][T14341] name failslab, interval 1, probability 0, space 0, times 0 [ 587.073379][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz.7.2923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 587.073407][T14341] Tainted: [L]=SOFTLOCKUP [ 587.073414][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.073426][T14341] Call Trace: [ 587.073434][T14341] [ 587.073442][T14341] dump_stack_lvl+0xe8/0x150 [ 587.073472][T14341] should_fail_ex+0x46b/0x600 [ 587.073506][T14341] should_failslab+0xa8/0x100 [ 587.073532][T14341] kmem_cache_alloc_noprof+0x87/0x680 [ 587.073555][T14341] ? ptlock_alloc+0x20/0x70 [ 587.073583][T14341] ptlock_alloc+0x20/0x70 [ 587.073611][T14341] pte_alloc_one+0x7e/0x380 [ 587.073639][T14341] __pte_alloc+0x25/0x1a0 [ 587.073664][T14341] ? mm_alloc_pmd+0x246/0x400 [ 587.073787][T14341] userfaultfd_ioctl+0x315a/0x8520 [ 587.073815][T14341] ? __pfx_stack_trace_save+0x10/0x10 [ 587.073848][T14341] ? kasan_save_track+0x4f/0x80 [ 587.073868][T14341] ? kasan_save_track+0x3e/0x80 [ 587.073888][T14341] ? kasan_save_free_info+0x46/0x50 [ 587.073916][T14341] ? __kasan_slab_free+0x5c/0x80 [ 587.073938][T14341] ? tomoyo_path_number_perm+0x501/0x630 [ 587.073975][T14341] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 587.074034][T14341] ? kasan_quarantine_put+0xbb/0x1f0 [ 587.074064][T14341] ? tomoyo_path_number_perm+0x219/0x630 [ 587.074093][T14341] ? tomoyo_path_number_perm+0x219/0x630 [ 587.074124][T14341] ? do_vfs_ioctl+0x117b/0x1540 [ 587.074155][T14341] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 587.074216][T14341] ? __fget_files+0x2a/0x420 [ 587.074241][T14341] ? __fget_files+0x2a/0x420 [ 587.074262][T14341] ? __fget_files+0x3a6/0x420 [ 587.074283][T14341] ? __fget_files+0x2a/0x420 [ 587.074308][T14341] ? bpf_lsm_file_ioctl+0x9/0x20 [ 587.074335][T14341] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 587.074362][T14341] __se_sys_ioctl+0xff/0x170 [ 587.074389][T14341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.074410][T14341] do_syscall_64+0x174/0x580 [ 587.074437][T14341] ? trace_irq_disable+0x3b/0x140 [ 587.074459][T14341] ? clear_bhb_loop+0x40/0x90 [ 587.074483][T14341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.074503][T14341] RIP: 0033:0x7fd30b81ce59 [ 587.074522][T14341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.074538][T14341] RSP: 002b:00007fd309a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.074558][T14341] RAX: ffffffffffffffda RBX: 00007fd30ba95fa0 RCX: 00007fd30b81ce59 [ 587.074571][T14341] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 587.074583][T14341] RBP: 00007fd309a76090 R08: 0000000000000000 R09: 0000000000000000 [ 587.074594][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.074611][T14341] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 587.074641][T14341] [ 588.135513][T14355] openvswitch: netlink: Actions may not be safe on all matching packets [ 588.783874][ T38] audit: type=1326 audit(1780513926.490:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14363 comm="syz.7.2932" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30b81ce59 code=0x0 [ 591.254581][T14416] binder: 14415:14416 ioctl 4018620d 0 returned -22 [ 591.254847][T14416] binder: 14415:14416 ioctl c0306201 200000000180 returned -11 [ 591.255017][T14416] binder: 14415:14416 ioctl c0306201 0 returned -14 [ 592.531234][T14429] netlink: 'syz.0.2958': attribute type 46 has an invalid length. [ 595.005485][T14447] netlink: 'syz.6.2967': attribute type 46 has an invalid length. [ 595.130624][T14451] FAULT_INJECTION: forcing a failure. [ 595.130624][T14451] name failslab, interval 1, probability 0, space 0, times 0 [ 595.130660][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.6.2969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.130686][T14451] Tainted: [L]=SOFTLOCKUP [ 595.130693][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.130704][T14451] Call Trace: [ 595.130712][T14451] [ 595.130721][T14451] dump_stack_lvl+0xe8/0x150 [ 595.130750][T14451] should_fail_ex+0x46b/0x600 [ 595.130782][T14451] should_failslab+0xa8/0x100 [ 595.130808][T14451] __kmalloc_noprof+0xdf/0x7b0 [ 595.130832][T14451] ? kfree+0x4d/0x6c0 [ 595.130851][T14451] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.130878][T14451] tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.130911][T14451] tomoyo_mount_permission+0x3e8/0x9d0 [ 595.130936][T14451] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 595.130953][T14451] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 595.130991][T14451] security_sb_mount+0xe4/0x320 [ 595.131009][T14451] path_mount+0xbc/0x10e0 [ 595.131021][T14451] ? user_path_at+0xd4/0x160 [ 595.131037][T14451] ? user_path_at+0xd4/0x160 [ 595.131051][T14451] __se_sys_mount+0x31d/0x420 [ 595.131066][T14451] ? __pfx___se_sys_mount+0x10/0x10 [ 595.131081][T14451] ? __x64_sys_mount+0x20/0xc0 [ 595.131092][T14451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.131104][T14451] do_syscall_64+0x174/0x580 [ 595.131120][T14451] ? trace_irq_disable+0x3b/0x140 [ 595.131132][T14451] ? clear_bhb_loop+0x40/0x90 [ 595.131145][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.131156][T14451] RIP: 0033:0x7f806719ce59 [ 595.131167][T14451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.131176][T14451] RSP: 002b:00007f80653f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.131188][T14451] RAX: ffffffffffffffda RBX: 00007f8067415fa0 RCX: 00007f806719ce59 [ 595.131196][T14451] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 595.131204][T14451] RBP: 00007f80653f6090 R08: 00002000000001c0 R09: 0000000000000000 [ 595.131211][T14451] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 595.131217][T14451] R13: 00007f8067416038 R14: 00007f8067415fa0 R15: 00007ffe9fa0a308 [ 595.131233][T14451] [ 595.131338][T14451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.607833][T14479] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2982'. [ 596.740541][T14483] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2984'. [ 596.851250][T14483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.916727][T14483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.961039][T14483] bond0 (unregistering): Released all slaves [ 597.895844][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2991'. [ 599.691282][ T5781] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 599.691432][ T5781] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 599.696780][ T5781] usb 1-1: USB disconnect, device number 24 [ 600.013610][ T5781] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 600.176970][ T5781] usb 1-1: Using ep0 maxpacket: 16 [ 600.179265][ T5781] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 167, changing to 7 [ 600.182139][ T5781] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 600.182168][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.182188][ T5781] usb 1-1: Product: syz [ 600.182202][ T5781] usb 1-1: Manufacturer: syz [ 600.182216][ T5781] usb 1-1: SerialNumber: syz [ 600.429488][ T5781] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 600.430072][ T5781] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 600.464338][ T5781] usb 1-1: USB disconnect, device number 25 [ 600.499441][ T6220] udevd[6220]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.435265][ T5785] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 601.595648][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 601.599723][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.612789][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 601.612824][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.612848][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 601.612875][ T5785] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 601.612900][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 601.612922][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.625262][ T5785] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 601.625280][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.625291][ T5785] usb 1-1: Product: syz [ 601.625298][ T5785] usb 1-1: Manufacturer: syz [ 601.625306][ T5785] usb 1-1: SerialNumber: syz [ 601.734287][ T5785] usb 1-1: config 0 descriptor?? [ 601.746312][T14546] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 601.758975][ T5785] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.962941][ T5785] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 601.977292][ T5785] usb 1-1: USB disconnect, device number 26 [ 602.027566][ T6220] udevd[6220]: setting mode of /dev/bus/usb/001/026 to 020664 failed: No such file or directory [ 602.027654][ T6220] udevd[6220]: setting owner of /dev/bus/usb/001/026 to uid=0, gid=0 failed: No such file or directory [ 602.080854][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.154869][T14554] sg_write: data in/out 217088/136 bytes for SCSI command 0x0-- guessing data in; [ 602.154869][T14554] program syz.5.3015 not setting count and/or reply_len properly [ 602.452787][ T58] block nbd1: Possible stuck request ffff888027ba7000: control (read@0,1024B). Runtime 390 seconds [ 602.452835][ T58] block nbd1: Possible stuck request ffff888027ba71c0: control (read@1024,1024B). Runtime 390 seconds [ 602.452865][ T58] block nbd1: Possible stuck request ffff888027ba7380: control (read@2048,1024B). Runtime 390 seconds [ 602.452893][ T58] block nbd1: Possible stuck request ffff888027ba7540: control (read@3072,1024B). Runtime 390 seconds [ 602.963220][T14577] FAULT_INJECTION: forcing a failure. [ 602.963220][T14577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.963256][T14577] CPU: 1 UID: 0 PID: 14577 Comm: syz.7.3022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.963282][T14577] Tainted: [L]=SOFTLOCKUP [ 602.963290][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 602.963301][T14577] Call Trace: [ 602.963308][T14577] [ 602.963322][T14577] dump_stack_lvl+0xe8/0x150 [ 602.963353][T14577] should_fail_ex+0x46b/0x600 [ 602.963385][T14577] _copy_to_iter+0x589/0x17d0 [ 602.963414][T14577] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 602.963437][T14577] ? __pfx__copy_to_iter+0x10/0x10 [ 602.963454][T14577] ? rt_spin_lock+0x1e0/0x400 [ 602.963478][T14577] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 602.963511][T14577] __skb_datagram_iter+0xf8/0x980 [ 602.963532][T14577] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 602.963558][T14577] skb_copy_datagram_iter+0xb5/0x240 [ 602.963580][T14577] netlink_recvmsg+0x2c3/0xa50 [ 602.963607][T14577] ? __pfx_netlink_recvmsg+0x10/0x10 [ 602.963629][T14577] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.963650][T14577] ? aa_sock_msg_perm+0x122/0x200 [ 602.963669][T14577] ? __pfx_netlink_recvmsg+0x10/0x10 [ 602.963688][T14577] sock_recvmsg_nosec+0x130/0x170 [ 602.963712][T14577] ____sys_recvmsg+0x23d/0x4f0 [ 602.963762][T14577] ? __pfx_____sys_recvmsg+0x10/0x10 [ 602.963794][T14577] ? import_iovec+0x73/0xa0 [ 602.963818][T14577] ___sys_recvmsg+0x215/0x590 [ 602.963841][T14577] ? __pfx____sys_recvmsg+0x10/0x10 [ 602.963863][T14577] ? __fget_files+0x2a/0x420 [ 602.963909][T14577] ? __fget_files+0x3a6/0x420 [ 602.963938][T14577] do_recvmmsg+0x33a/0x800 [ 602.963963][T14577] ? __pfx_do_recvmmsg+0x10/0x10 [ 602.963993][T14577] ? _copy_from_user+0x94/0xb0 [ 602.964028][T14577] __x64_sys_recvmmsg+0x1b7/0x250 [ 602.964049][T14577] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 602.964076][T14577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.964097][T14577] do_syscall_64+0x174/0x580 [ 602.964124][T14577] ? trace_irq_disable+0x3b/0x140 [ 602.964145][T14577] ? clear_bhb_loop+0x40/0x90 [ 602.964169][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.964189][T14577] RIP: 0033:0x7fd30b81ce59 [ 602.964207][T14577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.964224][T14577] RSP: 002b:00007fd309a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 602.964245][T14577] RAX: ffffffffffffffda RBX: 00007fd30ba95fa0 RCX: 00007fd30b81ce59 [ 602.964259][T14577] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 602.964272][T14577] RBP: 00007fd309a76090 R08: 0000200000003700 R09: 0000000000000000 [ 602.964284][T14577] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 602.964295][T14577] R13: 00007fd30ba96038 R14: 00007fd30ba95fa0 R15: 00007fffb159ced8 [ 602.964324][T14577] [ 603.092823][ T32] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 603.263191][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 603.278372][ T32] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 603.278458][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.278478][ T32] usb 1-1: Product: syz [ 603.278493][ T32] usb 1-1: Manufacturer: syz [ 603.278507][ T32] usb 1-1: SerialNumber: syz [ 603.505292][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 604.439379][ T39] INFO: task syz.4.2305:12272 blocked for more than 143 seconds. [ 604.439407][ T39] Tainted: G L syzkaller #0 [ 604.439419][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.439428][ T39] task:syz.4.2305 state:D stack:25176 pid:12272 tgid:12270 ppid:9684 task_flags:0x400140 flags:0x00080002 [ 604.439579][ T39] Call Trace: [ 604.439587][ T39] [ 604.439600][ T39] __schedule+0x16f9/0x5500 [ 604.439663][ T39] ? __pfx___schedule+0x10/0x10 [ 604.439689][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 604.439728][ T39] rt_mutex_schedule+0x76/0xf0 [ 604.439851][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 604.439887][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 604.439914][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 604.439940][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 604.439964][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 604.439998][ T39] ? sync_bdevs+0x27e/0x470 [ 604.440085][ T39] ? sync_bdevs+0x27e/0x470 [ 604.440125][ T39] ? sync_bdevs+0x27e/0x470 [ 604.440152][ T39] mutex_lock_nested+0x168/0x1d0 [ 604.440181][ T39] sync_bdevs+0x27e/0x470 [ 604.440212][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.440235][ T39] __ia32_sys_sync+0xc5/0x120 [ 604.440316][ T39] ? __pfx___ia32_sys_sync+0x10/0x10 [ 604.440352][ T39] ? do_syscall_64+0x9d/0x580 [ 604.440384][ T39] do_syscall_64+0x174/0x580 [ 604.440411][ T39] ? trace_irq_disable+0x3b/0x140 [ 604.440434][ T39] ? clear_bhb_loop+0x40/0x90 [ 604.440459][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.440479][ T39] RIP: 0033:0x7f295861ce59 [ 604.440497][ T39] RSP: 002b:00007f2956855028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 604.440518][ T39] RAX: ffffffffffffffda RBX: 00007f2958896090 RCX: 00007f295861ce59 [ 604.440534][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.440546][ T39] RBP: 00007f2958896090 R08: 0000000000000000 R09: 0000000000000000 [ 604.440573][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.440573][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.440648][ T39] R13: 00007f2958896128 R14: 00007f2958896090 R15: 00007ffd98425c38 [ 604.440682][ T39] [ 604.440737][ T39] [ 604.440737][ T39] Showing all locks held in the system: [ 604.440749][ T39] 1 lock held by rcub/0/19: [ 604.440760][ T39] #0: ffffffff8e1d0808 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0 [ 604.441093][ T39] 4 locks held by kworker/1:0/32: [ 604.441138][ T39] #0: ffff8880216ed138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.441193][ T39] #1: ffffc90000a6fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.441247][ T39] #2: ffff8880254e0210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 604.441292][ T39] #3: ffff88803be62210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 604.441342][ T39] 1 lock held by khungtaskd/39: [ 604.441353][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 604.441492][ T39] 8 locks held by kworker/0:2/825: [ 604.441504][ T39] #0: ffff888037b6d138 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.441561][ T39] #1: ffffc90003ad7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.441626][ T39] #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 604.441973][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 604.442025][ T39] #4: ffff888039a4a240 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 604.442073][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 604.442241][ T39] #6: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 604.442293][ T39] #7: ffffffff8e1cacc0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x220/0xed0 [ 604.442358][ T39] 2 locks held by getty/5362: [ 604.442369][ T39] #0: ffff88803663b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 604.442417][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 604.442478][ T39] 6 locks held by kworker/1:3/5699: [ 604.442490][ T39] #0: ffff8880216ed138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.442543][ T39] #1: ffffc90005727c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.442594][ T39] #2: ffff88802a85e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 604.442637][ T39] #3: ffff88803b1b4210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 604.442686][ T39] #4: ffff8880605af1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 604.442733][ T39] #5: ffffffff8e0689a0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 604.442785][ T39] 4 locks held by udevd/5700: [ 604.442808][ T39] #0: ffff888077f09950 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 604.442862][ T39] #1: ffff88805d264c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 604.442941][ T39] #2: ffff88803cdf60f8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 604.442998][ T39] #3: ffff88803be62210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 604.443045][ T39] 4 locks held by udevd/5810: [ 604.443056][ T39] #0: ffff88805c0481a8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 604.443109][ T39] #1: ffff8880343bf078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 604.443173][ T39] #2: ffff888037ab6f08 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 604.443240][ T39] #3: ffff88803b1b4210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 604.443450][ T39] 1 lock held by udevd/6227: [ 604.443461][ T39] #0: ffff8880260b04c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 604.443519][ T39] 1 lock held by syz.4.2305/12272: [ 604.443530][ T39] #0: ffff8880260b04c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 604.443586][ T39] 1 lock held by syz.2.2412/12701: [ 604.443596][ T39] #0: ffff8880260b04c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 604.443656][ T39] 1 lock held by syz.3.2736/13753: [ 604.443667][ T39] #0: ffff88802a85e210 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x790 [ 604.443714][ T39] [ 604.443737][ T39] ============================================= [ 604.443737][ T39] [ 604.443795][ T39] NMI backtrace for cpu 0 [ 604.443811][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.443837][ T39] Tainted: [L]=SOFTLOCKUP [ 604.443845][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.443856][ T39] Call Trace: [ 604.443864][ T39] [ 604.443872][ T39] dump_stack_lvl+0xe8/0x150 [ 604.443898][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 604.443923][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 604.443979][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 604.444004][ T39] sys_info+0x135/0x170 [ 604.444026][ T39] watchdog+0xfd3/0x1030 [ 604.444082][ T39] ? watchdog+0x1c9/0x1030 [ 604.444109][ T39] kthread+0x388/0x470 [ 604.444143][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.444160][ T39] ? __pfx_kthread+0x10/0x10 [ 604.444183][ T39] ret_from_fork+0x514/0xb70 [ 604.444209][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.444231][ T39] ? __switch_to+0xc79/0x1410 [ 604.444252][ T39] ? __pfx_kthread+0x10/0x10 [ 604.444275][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.444313][ T39] [ 604.444321][ T39] Sending NMI from CPU 0 to CPUs 1: [ 604.444351][ C1] NMI backtrace for cpu 1 [ 604.444367][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.444391][ C1] Tainted: [L]=SOFTLOCKUP [ 604.444397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.444408][ C1] RIP: 0010:__iterate_interfaces+0x1a7/0x590 [ 604.444433][ C1] Code: 74 15 e9 a9 00 00 00 e8 37 b4 0d f7 83 7c 24 0c 02 0f 85 99 00 00 00 4c 8d b3 48 0b 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 64 01 00 00 45 8b 36 44 89 f6 83 e6 20 31 ff e8 b1 b8 [ 604.444449][ C1] RSP: 0018:ffffc90000a4f700 EFLAGS: 00000a06 [ 604.444463][ C1] RAX: 0000000000000000 RBX: ffff888056d51000 RCX: ffff88801e2d1f00 [ 604.444475][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 604.444486][ C1] RBP: ffff888056d211e8 R08: ffff88801e2d1f00 R09: 0000000000000002 [ 604.444498][ C1] R10: 0000000000000100 R11: 0000000000000006 R12: ffff888056d532b0 [ 604.444512][ C1] R13: ffff888056d233c0 R14: ffff888056d51b48 R15: dffffc0000000000 [ 604.444524][ C1] FS: 0000000000000000(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000 [ 604.444538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.444549][ C1] CR2: 00007f206a1fa540 CR3: 0000000032d4a000 CR4: 00000000003526f0 [ 604.444564][ C1] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 604.444574][ C1] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 604.444585][ C1] Call Trace: [ 604.444591][ C1] [ 604.444599][ C1] ? __pfx_mac80211_hwsim_addr_iter+0x10/0x10 [ 604.444632][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 604.444656][ C1] ? __pfx_mac80211_hwsim_addr_iter+0x10/0x10 [ 604.444677][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 604.444702][ C1] mac80211_hwsim_addr_match+0x11e/0x190 [ 604.444724][ C1] ? __pfx_mac80211_hwsim_addr_match+0x10/0x10 [ 604.444751][ C1] mac80211_hwsim_tx_frame_no_nl+0xfe8/0x1740 [ 604.444784][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 604.444813][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 604.444904][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 604.444929][ C1] mac80211_hwsim_beacon_tx+0x3a0/0x830 [ 604.444949][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 604.444974][ C1] __iterate_interfaces+0x2ab/0x590 [ 604.444995][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 604.445021][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 604.445044][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 604.445064][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 604.445088][ C1] mac80211_hwsim_beacon+0xad/0x2d0 [ 604.445104][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 604.445122][ C1] __hrtimer_run_queues+0x405/0xb10 [ 604.445200][ C1] hrtimer_run_softirq+0x18f/0x260 [ 604.445217][ C1] handle_softirqs+0x1de/0x6d0 [ 604.445249][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 604.445264][ C1] run_ktimerd+0x69/0x100 [ 604.445279][ C1] smpboot_thread_fn+0x541/0xa50 [ 604.445295][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 604.445313][ C1] kthread+0x388/0x470 [ 604.445330][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 604.445344][ C1] ? __pfx_kthread+0x10/0x10 [ 604.445362][ C1] ret_from_fork+0x514/0xb70 [ 604.445381][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 604.445399][ C1] ? __switch_to+0xc79/0x1410 [ 604.445415][ C1] ? __pfx_kthread+0x10/0x10 [ 604.445432][ C1] ret_from_fork_asm+0x1a/0x30 [ 604.445459][ C1] [ 604.660212][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 604.660236][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.660265][ T39] Tainted: [L]=SOFTLOCKUP [ 604.660274][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.660286][ T39] Call Trace: [ 604.660300][ T39] [ 604.660309][ T39] vpanic+0x56c/0xa60 [ 604.660335][ T39] ? __pfx___schedule+0x10/0x10 [ 604.660352][ T39] ? __pfx_vpanic+0x10/0x10 [ 604.660387][ T39] panic+0xc5/0xd0 [ 604.660413][ T39] ? __pfx_panic+0x10/0x10 [ 604.660438][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 604.660471][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 604.660501][ T39] watchdog+0x102c/0x1030 [ 604.660529][ T39] ? watchdog+0x1c9/0x1030 [ 604.660553][ T39] kthread+0x388/0x470 [ 604.660577][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.660596][ T39] ? __pfx_kthread+0x10/0x10 [ 604.660619][ T39] ret_from_fork+0x514/0xb70 [ 604.660645][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.660660][ T39] ? __switch_to+0xc79/0x1410 [ 604.660672][ T39] ? __pfx_kthread+0x10/0x10 [ 604.660684][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.660714][ T39] [ 604.660983][ T39] Kernel Offset: disabled