last executing test programs: 16m37.350795292s ago: executing program 1 (id=1627): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)}, {&(0x7f0000000700)}, {&(0x7f0000000a80)}, {0x0}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16m37.135479409s ago: executing program 1 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r2, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r3, 0x0, 0x1, 0x1, &(0x7f0000000000)='L', 0x5}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_IE={0x40, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x10}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x1}}, @peer_mgmt={0x75, 0x4, {0x1, 0x2, @void, @void, @void}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x6, 0x0, {0xb806, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x6, 0x7f}}, @mic={0x8c, 0x10, {0x4a, "e54ab19a6462", @short="ec65b463f50fc5d8"}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xcf}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4005}, 0x4410) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) 16m37.063505855s ago: executing program 1 (id=1632): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 16m36.940358041s ago: executing program 1 (id=1634): socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020400) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x89901) unshare(0x22020400) 16m36.767638183s ago: executing program 1 (id=1635): syz_io_uring_setup(0x8f02, &(0x7f00000027c0)={0x0, 0xe4c0, 0x10000, 0x0, 0x2fb}, &(0x7f0000000100), 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x547b, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42592}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m36.353844445s ago: executing program 1 (id=1637): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 16m36.000774467s ago: executing program 32 (id=1637): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "94365e3897f9956a1f4a25101206b90155ada6bcd510f70d5223c2a6c22b8c3b2c625efa5f9ca0da7c0cee3f4d5dcb666aaaef502967f72000938911603036cf35b4510deeac535808a6acca63eb0dce3ca160d3bd6ffb1651c26b8001022aeb2330375e078f81dfa0e663c9992663cf951edd5b2e9591de5e29c1b35d7c8a222ec0fee83e64ff2a8853ed73a0ecde4ae8598ef39c2dac74471cb718df387927cd58827e3ce5cf57dcdf69a29c36ec845106a59f29c840446b2ad9aea0763b12f605e938d6682b804c183af35dbec08ad98f2ef75fdd7e270b83d9a1ee0ff884e54ea2ce610df936c1db1bbfe001c4679b27f816d6abd05d0fe83cc4f7b2d80a97c2d0713016243cfe954da350ccdaffbc90ede40b4dd3e0cda49e98ec645418cffeb60f9d3273a98ff58565a26d0218f3dc41cc3ad3f2e3cd7fbf7175ab3a7081b4289f7aba01ccf8f8109b0f1bc382818c2e06338084f5f27b649fe7dd82e810c4f0dff03ed54f968238ab1bd171eedf96698615483fc8c9fa5b4a334b497d6f4dfb83a5b9047a14897c61b153739596d7884035c976b294ab6e72c8cbd41453af7f34172b84492fe6f6d2c12865ebcfeb8748d8c26c30e2ad88f2908ffa60baffbde4b2a2b4c50c0aa07b1595d6a8d44855bbbaf145ab47cf61c4bdd0507f04f9e100dec3469dbcfd2fca530d776f0baa1e56c5bf0bee12e4f53ac328bc82f76385bd68ab1274866cbebb7a66406dfba6332b610c12fea8ae305eae869c624f218b9f8754e25f531e05c942b8ae7af16cf41b4a4740fa38b48d30473da57e6f648705b9f7caa21aa542f6f1cb32f09e302451b1aeb149abc94e89ac3c3c57b8dfc4c600c9eaa440188b77a6a0dfd795b781c6f0e74c28735829fad6a70d9e513d91c922b523bcd4b839a9a8ffb2b3275e9d24ea9dda040e9e9bdc92e722a94ae7e476ec88217f584176d15dd59910b6b4823ca31342d50c9a67f8d5eb14891c064a8fd85aa20d1646762219f45f907e975bec7a448113efcdbdfdf7a0b80569d231931fba1cceff354302b09c1b38d892ec7e2e8b388dba73160f03cc3545c78d285a3b9516e8cd7b879170b0ac0e889d03af85a8ef7e9e5f1b5f31b6783772e5df09938d8c5e16e3a18e1d6e1075f27e18eb7c057bede22dbff3d83b3c94c9943b5529447d02d553736d310ba441a6687a5eb08a54d98b566a3aa9cad5cab36ea15468d6eab0def96c9f56863cf8e8a6c3d013d3a9b748dfb078dbfab9aed64cc71ef86490db1df8becc68d9c0017a9209cb9c1599f13b9429af54e26f346850fe17deeb69d2fc1e39abf75669a43679ed18f6717e14fbbde15eaedfbeaad4a794737b7963d858444582ca46daf320868c5fd818226b077290aa6e6271cedd791a00a57ebe959c6b2f6e516b364edcf113665d966cb17a6da70bcd85b06fe758c704a9b2d46774b146d83769b804304fd6011ca8c5f995566e18216b10660d4682b5523a6efb883fdb30f5085f4d80c8a099fbd939d42e78a85f5e6dee146fd37ef7aec3a337eb12f7120150aa483fe7ea0015353390e7cb8e3795ee8d9ca52c25e309c2ffda454a12e4a0e937d070e69903607ad4925e0e581a25f2e98c1a73454a24f532fdd54da9f3318a74ab1bcb681166395fc88faa2905090d582f650197c3c266b8b3967e8b1b7b87d30d648ca1b0c59035159c4ba8e6e733ad2283fb3fede1e015bf2c873487ff8eb75461556d855ac7a1d631813f1c29d7e42b31b24faf15fbd4f724411b38a92016992d7a9e059e7f82cc333747c15674158035c168ffef7f16c4f3f13f04e0679567236a956b18ec88e102dba91bc34cf3d40a7bdeae5bbeb5dc400c79870c80fb8ffe6832fcfad34d5dc9453dd3d1ad0dc81fb15cc05318a83909717a58fb79a5c6a75c52ad82e7505eab0221fbdf369572d5674126962c1d010c6e5cfee741fc1639a8dcaa8cf9409d3a60a9449b1821aab650f02d90edd9eb76ff9c75893668db0b325fc2509fe3152a9541812e6e1e3e3f56219256e43b351c03175a10ae4fff97e05f484e1740430a01b834e65051867b06e00a86b040130e08eaff6c242c96c947cb52c18a985d9edd000f82b83c8ea0287466e9eba3bfcfef4ea7f5ead95fbe3b7decc4aeec108c4df1701b19547ee92c927df007527eeb6de23f17c0184bf923d95e716d941181d44feee49e116a0eb8dd11e47bc5e125475e73629e3f135a96dab6c77e2abc4ed0b7e7e97e4fd8081969d87bb869e9c9f8b48e3e07fceaba3317ba56bfc923a6b17d48deace88d1f6e61fc60574ec50ff1da5965973ac6c1ac695ece5b26b3577a867e69f7a70a5cbb5e2fe5faf5c9dd15919f4cfa65a17256e9ec07cac107631e5ffbe2774bd7af8a2a0e85f4d7cf2722a842d2d9b65e25295736c789742300aa3aac499e4af42cbcc3690a4df1868d1de6581e1d21c26d140941845b439e22662310f156b046090e92ef48f3886eab47d1319af7645859093adaa049b43369f8f457b54e193f6156ff40537c62838e17696cf7ef26b90b8bdc580d251ceec99453ca72c5e29c463910bb3f862dc199b65c4e7c9cf372c07b3e38d98652f6626564884b47c970c5aa45efb29b754efe6a09600700187d53a71e0758fd859d2110b90a02538832ab223206396d84bc14e6b55eb073130cf7b5d979e8e83950a1b80c9ea5586c4441a05bc41d843866c0d10193fe6486a6738fb858033257be0e1ae8624d5ac38553cf163c04af03cb78dd775b75883ef2330237adf5d65282d1491d8779674b8cc56750ed63e58a80915ca921ee46b4849d08674f624beb2be7376181713fc8d7125e429a2e5d46b99ebfdbac465a32bb7868d0e28f2c08b203edc9009fb935a3ae7a9b90bedc7ed03680530505044db11fc19e4d5794c06d84474c4fbd4975a1bfec9563094d392bf7b493c0ef9e5babe3128cd246d7e4cc9e99c5de07b92a949b34e228237c4521e6b10c5a7224a687ab43970a9e9eab029cefda25795c7f02a9e6240f0fab7c710a0450d1ca1b9f81558581a474ce7f069164d49afdc1de21c5d5c6bef4adc95e98ff2b6f3ce46bc7db1b5622424741863777b8eb114e3c8fbfdc6733116c1b20b6c3a8276a49447db86b896dfccdd2aa7cf62555075e155d6194fe9705449b6273aba2831eb32d0d382ec61f498998e2fa18da12199550113ffb374c495714c84178d6ad7cd7e13b2efc4a4964f064a9d8febbbe239231e245a37756d766fb30d5ab309bda56175bcd05b1631a33ff7e7b712d9ca44ff9796de22aa99a491a4e8a6a9f6a6dde0ce3b6c82d1abf4cec5c911ac48517a0e565ba7501d4c5ce458f1470ca5fd56b11839dd50f8271d7afaf1adb08c2a88c6307ddaa83ea8701213a1a065cd214a0158a8e863f31342b9946055ecfc397adb7e6bb6641c02aa28f18bcedb25036f0349e9d030d9f4547a42cc4fc8876b605553171210b09beb8963ff040d8c0ec2acb9036dde4c03197093d3170cdab7af27bf0a0eb72c3db808ae7903254d5c91b6b0d123b0ee6803e943d1a804948db8bf86fad93f3e3a381ef59b3fcabd977a03cc3a0f8543b7ea11523e229db23073f5c350a45394ef967bbdd8750593147618565e47d506c2c2ae8cd79f232a90325e2dcc21df21448a5b390db24931be258d39782d5318cf485740185ecec11aa35b61f41f9625c7805058a1c6dc60bdf495b5ece8b589101ce81497dde706a190b0ebffd3966ce5eefa8e6306de10ec7f63d82c87cf8db7f486fa6816656191b8a42d47624ea487f6e5790fa991fbe62f3599bf8473887980e6e2eb182ccba0a6084d0d37f2c311b8a688addd157fa9b5c8d0174092caaa76aba332fca66521c6b2c75765bedf36bad081442824198c71a74d176218fe7915a861b4b64cc5197a73d30e2d8f90393499d2d3d46ef852d4752d48b04b5352be40726d16ce8bd27b430fb9f082c65a79ac2cbe68b50456d4cbc15a094b3351bcc1138d3ada5608f5dbfe6fae21455b0c88c5c791c75515c31331b0b883c3c9de187aea9b637acb1336a1392ba227be4094eb57a5c9a68e88c71e51b8b42c74cddafde88d82bea9d102ba10145e12ff7fdfe56f4ad794ac03066dbc5ae9c80015d6d23575d09855dc16faa64f22592249996f91021d1c3f8286df99da43ea9946bcbe8abbe1e365e47591310fa1bfe56de9e829e7ce2a1251be421a5e3029d08cb3a8265e693ff86fe646bacf8f4b3abc9a4d5398b9d7af332f5bafbb58c211f05f30e731145d9457e002f37b7e2b98920724209feb50341cc46da34f0783e4a3776612ac5bda58b8278c3f5960d74eec223f867a92cd4e7f34467d984c85dfdb1d8f43bb437cb37e93c5c0113578eb5a6b3a26a28826f7cfa6ad22109c994934506a6dcc36451dc55a0e1affe6cdfbd8d3a3baa558fae4dedf60a0ce7f5a11cf92d31df5580a1a745c17b2a54d93c2f07ba362ee209734b2276101e52b20e59e0ca784927567d70a30c28f9b8c3e525b5ee4848ea79ecde3158f180967f1a18999a1ce6fd327cf9ae47aff20000b6af9af6e75571cafd7fbaa5279e698b1dccd7271b600fe6fbad34dbe25b0bb1608db1b16aef46f45bf5c3812ce7a4d473fb1a6f263b8fa4b80535076cdee6fd0c907696eea792d0a7cc9e19f876703f7ac8f84e24c4d5b8bf64c59c1a5a602193c9b3c2543281bf58021984edcc2241b5dea9f552c3cdfc493f1468bac2c677340b05c61a767d4cfee5acbab27e90fae8e83cc1fe0737791a17b92a4dab1b0c5dde317243eccc4991982f292be5653498c4c5b40ba79312b7627de99613384d9c3bdec513bc2f9bedee645b620fde89f50841408ee3d44398d00b0971f233a762d7e63c4495bf79b3aea4bf18b136f460c6ad6397fe7f972b1f4845ebaba2116323674f157880651b086a94623a35c74d935e787fc0815b670eab5ca66d8098831acb2e1cc9da5aa72b1310a090f78cb3befad409c8f9cc521c656ee61f0c37f90c921480470d539ce0732fa4101c8f92775c5e41adc6c92fee25b12af2926e9559677beda0a777dedb48e741fd5dfd2a5f0335273ac6814657668430e6c0d5ed7e827e2fde6048ef7b35ce63704fe89739ff14392cbb57917de6dbf26a604a84095b7fcafdbc3bbae65d945f3e235a569554929d08aa71d41411f21fc2f3d9235ae7bd1cb5d467faaaa6e4c31adc964a4e14d301c7f3fbd3d72bc15c75676c3f9bbbe3aab66643bf923bdd2b7abbc83ba8dd8c1907f91056084e856e171e16b1ee01e80eec8e2de418165351d2a1432e5d50982e6af8220d60c9e6beb61471f7554e95a761c9f4a78a84bb7bf81f8ef263e54377441f57cb4b383c0a5853dcb168ac431df441e6aa837457ef7c9f265092a7aefa7d7a894d4b282221a411d33f2c6d44b4b377c348ea934d50937eaf3a6d8183dcfc87a22413b62a424dafbd8bdb116e256e2e21770ad8936bd5ba34d108eea8babf82194e2582a1ac4a6d5b790dcfedbccbfd62232f97de5262a9db137c587f44a0b57c9f808278efbf5fb7240957a9c51ec80273ed98febf4103a8b7cc503a80eab21da70e1260a6899210a150142f497f13f2e07f91de40ed6f50557c5dbaeae230805a79bd8888478618a66c1a2079e5508ba98532796bd34bb6da76a30d90a2ff458f6102ac678a203d7f0d2264545e05e61072bc2bf69d400a7a3895dd787ba461c4b294f6aeafa08265d8a029d937bdd2066f0a50ed404db4a35ecc4342"}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 10m33.671032687s ago: executing program 4 (id=3772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 1) 10m33.214059208s ago: executing program 4 (id=3773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x48, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 10m32.280519317s ago: executing program 4 (id=3778): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d1050120001001020301090212"], 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0) pipe(&(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x48, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 10m29.15614503s ago: executing program 4 (id=3788): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (fail_nth: 1) 10m28.79107567s ago: executing program 4 (id=3790): futex(&(0x7f0000000000)=0x1, 0x8, 0x0, 0x0, 0x0, 0x2) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file1\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) setns(r6, 0x80) 10m27.703828729s ago: executing program 4 (id=3795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x48, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 10m27.185446685s ago: executing program 33 (id=3795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x48, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 7m13.010345401s ago: executing program 3 (id=4462): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x3, 0x20fb, 0x0, 0x8}, 0x52, [0x4, 0x400, 0x3, 0x2, 0x44, 0xfffffff2, 0xc199, 0x28d, 0xd7, 0x6, 0x5, 0x7, 0x3, 0x6, 0x4, 0x0, 0x8, 0x3, 0x1ff, 0x8b, 0x4, 0x5, 0x7, 0x1, 0x8, 0x3, 0x6, 0xad, 0x7f, 0x0, 0x8, 0x9, 0x161, 0x673, 0xe, 0x1, 0x6, 0x8, 0x8000, 0x8, 0xfffff5d0, 0x8, 0xdc, 0xf7, 0x80000001, 0x1ac2751a, 0x7, 0x800, 0x3, 0x1, 0xfffffffc, 0x8001, 0x1ff, 0x0, 0x400, 0x10, 0x400, 0x1, 0x1, 0x3f5e7652, 0x1, 0x4, 0x1, 0xb6f], [0x1, 0x3, 0xf, 0x800, 0x5, 0x0, 0x3, 0x6, 0x2, 0x2, 0x3, 0x3ec, 0x7, 0x6, 0x4, 0x4, 0xd5e, 0x5, 0x8, 0x8, 0x3, 0x1000, 0x8, 0xf6, 0xec1, 0x0, 0x8001, 0xff, 0x510, 0x0, 0xb386, 0xffff, 0x0, 0x8, 0x3ff, 0xf, 0x9, 0x5, 0x5, 0x6, 0x2, 0x4, 0x1e00, 0x3, 0x10, 0x2, 0x3, 0x6, 0x101, 0x0, 0x1, 0x2, 0x913, 0x3, 0x8, 0x1000, 0x7, 0x400000, 0x9, 0x7, 0xd183, 0x5, 0x7, 0x5], [0x8ae, 0x8, 0x101, 0x400, 0x81, 0xc, 0xfffffffe, 0x2, 0x40, 0x80, 0x7, 0x49, 0x8000, 0x5, 0x2, 0x3c10, 0x5, 0x0, 0x3f, 0x2, 0x7, 0x5, 0xfffffffa, 0x80, 0x3, 0x801, 0x5479, 0x3, 0x80000000, 0x7, 0x5, 0x3, 0x26, 0x8000, 0x8, 0x10000, 0x8, 0xfffff000, 0x0, 0x0, 0x9, 0x8, 0x8000, 0x1000, 0x6a6f8a2, 0x5, 0x7ce8, 0x5, 0xee, 0x6, 0x7, 0x20000, 0x0, 0x1, 0x10001, 0x9, 0x3, 0x77577f77, 0xf, 0x7fffffff, 0x9, 0x8, 0xc592, 0x3de4d63c], [0x0, 0x1, 0x0, 0x3, 0xd, 0x4, 0x5ae, 0x2, 0xd, 0x10, 0x81, 0x7f, 0x6, 0x2, 0x5, 0x200, 0x3, 0x6, 0xfffffff8, 0x400, 0xfff, 0x0, 0x4, 0xf15, 0xf50, 0xe0, 0x3, 0xc, 0x5, 0x7fffffff, 0x1, 0x9, 0x5, 0x7fff, 0x3, 0xfa1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x5203ed05, 0x4, 0x7, 0x9, 0xb, 0x6, 0x7, 0x4, 0xf859, 0xb, 0x3, 0x0, 0x784b, 0x7, 0xffff, 0xfc94d7d, 0xfffffff9, 0x3, 0x101, 0x81, 0x0, 0x7f, 0x3]}, 0x45c) 7m12.887031909s ago: executing program 3 (id=4464): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="93", 0xf5) write$char_usb(r0, &(0x7f0000000040)="a90c0bc91cde5ae2b137489050b534f2ee50d9", 0x13) 7m12.826769832s ago: executing program 3 (id=4465): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) (async) r1 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1201823d00000020630703204000010203010902720003010300080904000000010100000a240109000a0002010209041c000001020000090401010101020000072401014003000b240201020407019a5eec09050109ff030705010725010455370209040200000102000009040201010102000009058209ef0708f9120725010c000000"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 7m11.018925114s ago: executing program 3 (id=4477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf253b00000008000300", @ANYRES64=r2, @ANYBLOB="0800a00005000000050019010b0000001000cd00010041c7060005000400000004006c284c81a500"], 0x44}, 0x1, 0x0, 0x0, 0x20008085}, 0x20028094) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x104c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone(0x4088200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffffb, 0x300}, 0xc) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000300)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x80, 0x9, 0x0, 0x0, 0x40003, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m10.082594462s ago: executing program 3 (id=4479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) 7m9.319158957s ago: executing program 3 (id=4483): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x3, 0x20fb, 0x0, 0x8}, 0x52, [0x4, 0x400, 0x3, 0x2, 0x44, 0xfffffff2, 0xc199, 0x28d, 0xd7, 0x6, 0x5, 0x7, 0x3, 0x6, 0x4, 0x0, 0x8, 0x3, 0x1ff, 0x8b, 0x4, 0x5, 0x7, 0x1, 0x8, 0x3, 0x6, 0xad, 0x7f, 0x0, 0x8, 0x9, 0x161, 0x673, 0xe, 0x1, 0x6, 0x8, 0x8000, 0x8, 0xfffff5d0, 0x8, 0xdc, 0xf7, 0x80000001, 0x1ac2751a, 0x7, 0x800, 0x3, 0x1, 0xfffffffc, 0x8001, 0x1ff, 0x0, 0x400, 0x10, 0x400, 0x1, 0x1, 0x3f5e7652, 0x1, 0x4, 0x1, 0xb6f], [0x1, 0x3, 0xf, 0x800, 0x5, 0x0, 0x3, 0x6, 0x2, 0x2, 0x3, 0x3ec, 0x7, 0x6, 0x4, 0x4, 0xd5e, 0x5, 0x8, 0x8, 0x3, 0x1000, 0x8, 0xf6, 0xec1, 0x0, 0x8001, 0xff, 0x510, 0x0, 0xb386, 0xffff, 0x0, 0x8, 0x3ff, 0xf, 0x9, 0x5, 0x5, 0x6, 0x2, 0x4, 0x1e00, 0x3, 0x10, 0x2, 0x3, 0x6, 0x101, 0x0, 0x1, 0x2, 0x913, 0x3, 0x8, 0x1000, 0x7, 0x400000, 0x9, 0x7, 0xd183, 0x5, 0x7, 0x5], [0x8ae, 0x8, 0x101, 0x400, 0x81, 0xc, 0xfffffffe, 0x2, 0x40, 0x80, 0x7, 0x49, 0x8000, 0x5, 0x2, 0x3c10, 0x5, 0x0, 0x3f, 0x2, 0x7, 0x5, 0xfffffffa, 0x80, 0x3, 0x801, 0x5479, 0x3, 0x80000000, 0x7, 0x5, 0x3, 0x26, 0x8000, 0x8, 0x10000, 0x8, 0xfffff000, 0x0, 0x0, 0x9, 0x8, 0x8000, 0x1000, 0x6a6f8a2, 0x5, 0x7ce8, 0x5, 0xee, 0x6, 0x7, 0x20000, 0x0, 0x1, 0x10001, 0x9, 0x3, 0x77577f77, 0xf, 0x7fffffff, 0x9, 0x8, 0xc592, 0x3de4d63c], [0x0, 0x1, 0x0, 0x3, 0xd, 0x4, 0x5ae, 0x2, 0xd, 0x10, 0x81, 0x7f, 0x6, 0x2, 0x5, 0x200, 0x3, 0x6, 0xfffffff8, 0x400, 0xfff, 0x0, 0x4, 0xf15, 0xf50, 0xe0, 0x3, 0xc, 0x5, 0x7fffffff, 0x1, 0x9, 0x5, 0x7fff, 0x3, 0xfa1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x5203ed05, 0x4, 0x7, 0x9, 0xb, 0x6, 0x7, 0x4, 0xf859, 0xb, 0x3, 0x0, 0x784b, 0x7, 0xffff, 0xfc94d7d, 0xfffffff9, 0x3, 0x101, 0x81, 0x0, 0x7f, 0x3]}, 0x45c) 7m9.11721129s ago: executing program 34 (id=4483): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x3, 0x20fb, 0x0, 0x8}, 0x52, [0x4, 0x400, 0x3, 0x2, 0x44, 0xfffffff2, 0xc199, 0x28d, 0xd7, 0x6, 0x5, 0x7, 0x3, 0x6, 0x4, 0x0, 0x8, 0x3, 0x1ff, 0x8b, 0x4, 0x5, 0x7, 0x1, 0x8, 0x3, 0x6, 0xad, 0x7f, 0x0, 0x8, 0x9, 0x161, 0x673, 0xe, 0x1, 0x6, 0x8, 0x8000, 0x8, 0xfffff5d0, 0x8, 0xdc, 0xf7, 0x80000001, 0x1ac2751a, 0x7, 0x800, 0x3, 0x1, 0xfffffffc, 0x8001, 0x1ff, 0x0, 0x400, 0x10, 0x400, 0x1, 0x1, 0x3f5e7652, 0x1, 0x4, 0x1, 0xb6f], [0x1, 0x3, 0xf, 0x800, 0x5, 0x0, 0x3, 0x6, 0x2, 0x2, 0x3, 0x3ec, 0x7, 0x6, 0x4, 0x4, 0xd5e, 0x5, 0x8, 0x8, 0x3, 0x1000, 0x8, 0xf6, 0xec1, 0x0, 0x8001, 0xff, 0x510, 0x0, 0xb386, 0xffff, 0x0, 0x8, 0x3ff, 0xf, 0x9, 0x5, 0x5, 0x6, 0x2, 0x4, 0x1e00, 0x3, 0x10, 0x2, 0x3, 0x6, 0x101, 0x0, 0x1, 0x2, 0x913, 0x3, 0x8, 0x1000, 0x7, 0x400000, 0x9, 0x7, 0xd183, 0x5, 0x7, 0x5], [0x8ae, 0x8, 0x101, 0x400, 0x81, 0xc, 0xfffffffe, 0x2, 0x40, 0x80, 0x7, 0x49, 0x8000, 0x5, 0x2, 0x3c10, 0x5, 0x0, 0x3f, 0x2, 0x7, 0x5, 0xfffffffa, 0x80, 0x3, 0x801, 0x5479, 0x3, 0x80000000, 0x7, 0x5, 0x3, 0x26, 0x8000, 0x8, 0x10000, 0x8, 0xfffff000, 0x0, 0x0, 0x9, 0x8, 0x8000, 0x1000, 0x6a6f8a2, 0x5, 0x7ce8, 0x5, 0xee, 0x6, 0x7, 0x20000, 0x0, 0x1, 0x10001, 0x9, 0x3, 0x77577f77, 0xf, 0x7fffffff, 0x9, 0x8, 0xc592, 0x3de4d63c], [0x0, 0x1, 0x0, 0x3, 0xd, 0x4, 0x5ae, 0x2, 0xd, 0x10, 0x81, 0x7f, 0x6, 0x2, 0x5, 0x200, 0x3, 0x6, 0xfffffff8, 0x400, 0xfff, 0x0, 0x4, 0xf15, 0xf50, 0xe0, 0x3, 0xc, 0x5, 0x7fffffff, 0x1, 0x9, 0x5, 0x7fff, 0x3, 0xfa1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x5203ed05, 0x4, 0x7, 0x9, 0xb, 0x6, 0x7, 0x4, 0xf859, 0xb, 0x3, 0x0, 0x784b, 0x7, 0xffff, 0xfc94d7d, 0xfffffff9, 0x3, 0x101, 0x81, 0x0, 0x7f, 0x3]}, 0x45c) 5m53.662491042s ago: executing program 0 (id=4709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 3) 5m53.409357727s ago: executing program 0 (id=4712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x7, 0x3, 'PTT'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x9, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x350, r5, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7fff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x76, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0xf}, 0x5, 0x3, @broadcast, 0x3, 0x9, 0x8}}, @supported_rates={0x1, 0x4, [{0xc}, {0x48, 0x1}, {0x1, 0x1}, {0x9}]}, @tim={0x5, 0x32, {0x2, 0x35, 0x3, "6c8da6dfb3b585334d65ccd8f1124911037f453fb494553eb4798ba2276d45ebe79c12cbe9ae1ddf4ca000acf69dd3"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x6}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0xf801}]}, @NL80211_ATTR_IE={0x118, 0x2a, [@preq={0x82, 0x3b, {{0x0, 0x1, 0x1}, 0x7, 0x7, 0x75bf, @device_b, 0x3, @void, 0xa43, 0x7, 0x3, [{{}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b}]}}, @mic={0x8c, 0x10, {0x448, "eecb93994471", @short="fd8559c82ae28a4c"}}, @link_id={0x65, 0x12, {@random="4db45b541474", @broadcast, @broadcast}}, @tim={0x5, 0x77, {0x4, 0x52, 0x7f, "62532c574f61d1c746ae12fccdfc7a55540d7f574a4871245ee50ef24fe18cb2ab3441b9f82d87be5e86d71de2ccdf5e87e90c5a03adae69f4b61e34385c3aae6cf05c2c0130b10d2566914f78a24fe704491c936db523257ef178d8b013fff5447cd138d59e7d04321d2df1da5a44b1d61881fa"}}, @mesh_chsw={0x76, 0x6, {0x80, 0xb4, 0xe, 0x6}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x9, 0x5, 0x3, @device_b, 0x1, @value=@broadcast, 0x9, 0xd, 0x1, [{{}, @device_a, 0x1}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x16b, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xf4, 0x70, 0x4}}, @perr={0x84, 0x6a, {0x4, 0x8, [{{}, @device_a, 0xaec, @void, 0x2a}, {{}, @device_b, 0x38e5, @void, 0x22}, {{}, @device_b, 0x6, @void, 0x20}, {{}, @device_b, 0x10001, @void, 0x33}, {{}, @device_a, 0x30000, @void, 0x21}, {{}, @device_b, 0x40, @void, 0x39}, {{}, @broadcast, 0x6, @void, 0x35}, {{}, @device_a, 0x8, @void, 0x27}]}}, @tim={0x5, 0xf3, {0x2, 0xbc, 0x93, "83b4ba377c4f7bbbc4d384f3e51be8b067e73780dcf086641407a052f1b4e3f9e0430142a660bde6f99052ebd153780732ef2837d1ef64e9c525e260a76187b05d466a4db4b18ac74c6c2779bb00fb58ed5df2485ab3b922101cc783d655d0917dd9b6e5ca9e923ea31abd84146b2f24834c6ed5a45133ff70012756acf9ce54e8975797a45b9a4bae2968f5b2e98a30587f196513db5746aa2bbb176ddfd647ca2524ce88c347af21fe0b251d73a2ffbbbaa9eec82ecf8421f2f1288b80ade80c4272e9bb31c2648c6cef1626610479157897c2126fd1a83474c4559623987ea76a0e26193c7de687e3594b0508d34e"}}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x400c810}, 0x4000000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000011c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xc0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x84, 0x81, 0x0, {0x7, 0x25, 0x1, 0xc, 0x8, 0x72e6}}}}}}}}]}}, 0x0) 5m51.999121453s ago: executing program 0 (id=4715): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x3, {0x2, 0x1, 0x3}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}, {0x3, 0x1, {0x0, 0xff, 0x1}, {0x0, 0xff, 0x1}, 0x2, 0xfe}], 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00000000000000", @ANYBLOB="0000000000000000a900000000000000040000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff000000000000f8ff0000000000000000000a000000000000000000000080400000000000000000080000001000000000000101000000000008"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0xa0002001}) epoll_pwait2(r3, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000300)={0xb, 0x77, 0x1, 0x3}, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf25030000000a000900ffffffffffff000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x4004) syz_usb_connect(0x3, 0x24, &(0x7f0000000fc0)={{0x12, 0x1, 0x250, 0xec, 0x64, 0x10, 0x8, 0xc45, 0x8001, 0xc244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0x19, 0x33, 0x0, 0xa0, 0x71, 0x72, 0x81}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000240)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="4ecb62e564bbfa023135897ac52753086126a5a131d6b15f36eb20ee81b2d9b8ee0c1bdd02cec184578a0387e851b0386574a202ec4a76aedd39fece9c93c9d9969ef4dc87f2c4beb4c6f13e6272c4a2b5bf8f8c34cea0e85c4e7e47e070b184f51be520c89d7b72eb123e8ae6f53a0a59db37246085287828d1bdea48b48e987b122a8a79ca32438d9046750df0fc156f82de808f01582d75222ff5291b0d12d4049b1af5fb1384c4d7c11b444cb7b1c23210ed77521a6e5e05", 0xba, 0x1010, &(0x7f0000000280)={0x11, 0x4, r7, 0x1, 0xd, 0x6, @local}, 0x14) 5m50.312934807s ago: executing program 0 (id=4720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5m50.131522305s ago: executing program 0 (id=4721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x8000, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 5m49.862259786s ago: executing program 0 (id=4722): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '-@\x00'}, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc9) 5m49.512549604s ago: executing program 35 (id=4722): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '-@\x00'}, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc9) 8.289184686s ago: executing program 5 (id=6574): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b3, 0x3a8e5b6e, 0x1, 0x8000000000000000]}, &(0x7f0000000200)=0x78) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r1, &(0x7f00000001c0), &(0x7f0000000340)=0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xe40fa6cdb42d9f41, 0xdd3, 0x7, 0xb, 0x800, 0x0, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x28, {0x8, 0x40, 0x0, {0x5, 0xffffffffffffffe9, 0x7, 0x8, 0xa, 0xffffffffffffff0c, 0x9, 0x35741060, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000ec0)='\n', 0x1, 0x20048080, &(0x7f0000000300)={0xa, 0x100, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000216640b10e80430fff430010203010902240001800800010904"], 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000240)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x1000, 0x872}}) 7.542063976s ago: executing program 2 (id=6580): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) socket$can_bcm(0x1d, 0x2, 0x2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@dev}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@aname={'aname', 0x3d, 'trans=fd,'}}, {@afid}, {@privport}, {@nodevmap}]}}) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee00, 0x1000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x84, 0x1d, 0x1, 0x80000002, 0x0, "", [@typed={0x8, 0xbe, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xb5, 0x0, 0x0, @fd}, @generic="fec1c073c54fb99bb795e5fcf3dbada0932dd637d427e423e0f1f6c2f0d88808eaaaba884b1732cf1e295cf0a0cb573a6d0d6273acee2dc891d398525e981c901b8231f1f46985ad08152fb1a7a2f820e7a7f3a5c4ce8456313674ab0f3a54698e79f0"]}, 0x84}], 0x1}, 0x20000000) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/mnt\x00') 7.09901963s ago: executing program 2 (id=6582): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 64) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x80000) read$usbmon(r6, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000000)={[0x6000, 0xf000, 0x3000, 0x4], 0x7, 0x14, 0xfffffffffffffff8}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="00caea35b21ffe00798c40a34c0ecfc091870c197d2b6fdcf4c77f70fe8ecd58e7cc8da44b1e6ca05288c787804c20af311c9629c7252a7cc705f72c6bcc87f1f13dd8c1961c7a1160e70b49c3471c2dadc5219d82bee77d331919d6ca7533015b7364e4f32e0e27b3bbb745b3a3f96ebbd96121b80b932ba2ceea8e65e98dbe029bdc5e72073eddb8d62d595c9ddfe097aacf96fb391a0d5cd559c4"], 0x0, 0x0}) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000012c0)=""/4097, 0x1001}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000040)=""/7, 0x7}, {0x0, 0x4100}, {&(0x7f0000000700)=""/132, 0x84}], 0x5}, 0xffffff81}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x40020062, 0x0) 6.60920058s ago: executing program 2 (id=6583): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x10000, 0x82200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r5 = dup(r4) getsockopt$inet_buf(r5, 0x118, 0x1, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_4={0x3, 0x1, 0x1, "6c575ca2"}]}}, 0x0}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) 6.415182899s ago: executing program 5 (id=6584): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0xa2}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0xc000) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.220840819s ago: executing program 5 (id=6585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8000000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xa, 0x0, 0x100000}, 0x20) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) 5.146306984s ago: executing program 6 (id=6588): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000002c0)) 5.024151064s ago: executing program 6 (id=6589): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000002c0)={0x0, "40087ba32282a8bbffb752db18fe994c"}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 4.93527958s ago: executing program 6 (id=6590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1) mkdir(0x0, 0x23) syz_usb_connect(0x5, 0x5d8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x708}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r9 = getpid() r10 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r12, &(0x7f0000000280)={r10, r11, 0x4}) accept4$unix(r8, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) 4.108047705s ago: executing program 5 (id=6592): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.9713382s ago: executing program 5 (id=6593): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0xa2}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0xc000) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.971125943s ago: executing program 7 (id=6594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ef17fe60000000000001090224000100000000090400100903000600092100000001222900090581030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.836142559s ago: executing program 5 (id=6595): r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x69) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0xa5, 0xf3, 0xe0, 0x8, 0xc98, 0x1140, 0x840, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x52, 0x10, 0xc, "", [{{0x9, 0x4, 0x70, 0x7, 0x0, 0x28, 0xc5, 0x6b, 0xd}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x800000008401, 0x1) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYRESDEC=r6, @ANYRES32=r2, @ANYBLOB="0c000188080001c7", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRESHEX=r7, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYRES16=r7, @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYBLOB="34cff74e3e3bd2ee830d80f9462f76535dc27b81662f21e99ec882bbc5f78f15aa465e30b6dd5108f553921a255032", @ANYRESOCT=r6, @ANYRES8=r8, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x10) r9 = fsmount(r8, 0x1, 0x0) openat(r9, &(0x7f0000000040)='./file1\x00', 0x141242, 0x18f) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r12, 0x2, 0xbce}, &(0x7f0000000400)=0xc) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000905dfa5b38f0507f68d70b3f0290e8b937879966112a7bd3dd27988ec617f902aa5458352d3e3875a5752026581233c323f388d447df477b1e52618fb5e322b259d40de4f4c40001fecb5cd21277fa42380a648ec4a0501aba2a", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4854) 3.565793739s ago: executing program 2 (id=6596): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb86dd6d00200000d811ff20010000000000000000000000000002ff0200000000000000000000000000014f194e2000d890"], 0x112) 3.411544546s ago: executing program 2 (id=6597): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000002c0)) 3.361354756s ago: executing program 7 (id=6598): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60041411000a7403", 0x1b}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) set_mempolicy(0x3, &(0x7f0000000200)=0xfff, 0x5) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3.314235748s ago: executing program 2 (id=6599): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @random="c22aee767214"}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000540)={0x0, 0x62, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="007034cc2e65b9cfce4c4d00000200000000e147045b8212f14c33575cdfe75ec5f12256e45507a1b97037628780bd6999cda18b56774e243bb524e70d7e4cec7248f2e3814cc82ec1b583859ce23df649861722d97b4309ea9735b5430e8285d98571a11f713114b57ebc3f235fdf9bdb70466b1bfd234780f0b9aad16220dd9c2939e449a853212906e38c97caa4af19b15afc86362f90b1832a8362b36a2ab0d17eb6be010a2d68a096971a245c14625c9e6983a66c557caa965789fc324ee338b9cf605add9bf85155243112f127bf96571deaba0e6a"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x6e, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) write$nci(r0, &(0x7f00000012c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0xd, 0x0, 0x2, 0x2, 0x7, 0xfb, 0x8c, {0x3, 0xf1, "1076333f343c52a225eb151d5f433b13124cd67f9b66b9f8c33d65d73fb367137606bcf325855d2d466fa53dc68beec0efde040e95c64e944bb7132e798803940078afdd1b6e0c315715a6f90ff82cd6241cca856989e9df5853223749459d67f5691186f28d47ee88fd7c6323909812634b406c678a838e2d146f22e9655321a37f0e9fc5b99d698edf01734f45e85d91086e176dcbb5de879a28138f5c06685267e94157f034058cee6e0d6be1f9acaf3589f5e667072c0b774b896412625b8bc4bc06e4d4480cb577db5edbe8658f6f113c2c9b5cf0e937ae9e8cc4eb5fd51f77f839c7fb5329fa4530c639ee501654"}, 0xc2, 0x94, 0x8, 0x10, 0x1000, "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"}}, 0x1102) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 3.16188994s ago: executing program 7 (id=6600): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e87, 0x81, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1f}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x5f, 0x4850) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x0, @private0, 0xfffffffd}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000580)={0x40}, 0x0, 0x0, 0x0, 0x0}) 2.483516882s ago: executing program 7 (id=6601): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.468823331s ago: executing program 7 (id=6602): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x24, 0x7, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket(0x14, 0x2, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x12}, 0x78) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) 1.678586669s ago: executing program 6 (id=6603): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0xa2}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.399414459s ago: executing program 6 (id=6604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) 415.20811ms ago: executing program 7 (id=6605): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000005540)=[{0x0}, {0x0}, {&(0x7f0000003400)=""/4096, 0xca4}, {0x0}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x310}], 0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) socket$kcm(0x29, 0x2, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=6606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008ef17fe60000000000001090224000100000000090400100903000600092100000001222900090581030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): .080732][T24138] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.080745][T24138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.080757][T24138] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1288.080791][T24138] [ 1288.082448][T24138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1288.426379][ T30] audit: type=1326 audit(1772809375.134:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24140 comm="syz.7.6131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff697b9c799 code=0x0 [ 1288.456675][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1288.478624][ T10] usb 3-1: device descriptor read/8, error -71 [ 1288.595703][ T10] usb usb3-port1: unable to enumerate USB device [ 1289.289910][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1289.298018][ C1] lec:lec_tx_timeout: lec0 [ 1289.302975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1289.590678][T24159] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.6137' resets device [ 1289.758004][ T30] audit: type=1800 audit(1772809376.379:55): pid=24162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.6137" name="/newroot/369/file0" dev="tmpfs" ino=1971 res=0 errno=0 [ 1289.789730][T24167] tipc: Enabled bearer , priority 0 [ 1289.887539][T24167] syzkaller0: entered promiscuous mode [ 1289.893618][T24167] syzkaller0: entered allmulticast mode [ 1289.902129][T24167] tipc: Resetting bearer [ 1289.956371][T24166] tipc: Resetting bearer [ 1290.680597][ T5908] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1290.716398][T24191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.728200][T24191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.852654][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.863179][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1290.872344][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.898955][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.913534][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.924051][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.933459][ T5908] usb 3-1: Product: syz [ 1290.938838][ T5908] usb 3-1: Manufacturer: syz [ 1290.943522][ T5908] usb 3-1: SerialNumber: syz [ 1290.969817][ T5908] cdc_mbim 3-1:1.0: skipping garbage [ 1290.975550][ T5908] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 1290.982884][ T5908] cdc_mbim 3-1:1.0: bind() failure [ 1292.806675][T24204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.815809][T24204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.657508][T24218] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.6155' resets device [ 1293.692782][ T5908] usb 3-1: USB disconnect, device number 11 [ 1293.925098][ T30] audit: type=1800 audit(1772809380.254:56): pid=24220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.6155" name="/newroot/376/file0" dev="tmpfs" ino=2008 res=0 errno=0 [ 1294.340108][T24166] tipc: Disabling bearer [ 1294.480828][T24233] x_tables: duplicate underflow at hook 1 [ 1294.588442][T24233] binder: Unknown parameter 'm0000Ow00000000001' [ 1294.702666][T24242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.715183][T24242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.832299][T19744] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1294.908581][T24249] binder: 24248:24249 ioctl 4018620d 0 returned -22 [ 1294.968709][T24251] fuse: Unknown parameter 'ÿÿÿÿ00000000000000000003' [ 1295.005578][T19744] usb 3-1: Using ep0 maxpacket: 8 [ 1295.014605][T24251] fuse: Unknown parameter '000000000000000000070x0000000000000009' [ 1295.025131][T19744] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.048527][T19744] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.060776][T19744] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1295.075523][T19744] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1295.083237][T19744] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1295.094813][T19744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.110030][T19744] usb 3-1: config 0 descriptor?? [ 1295.378465][T24257] FAULT_INJECTION: forcing a failure. [ 1295.378465][T24257] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.391295][T24257] CPU: 1 UID: 0 PID: 24257 Comm: syz.7.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1295.391331][T24257] Tainted: [L]=SOFTLOCKUP [ 1295.391340][T24257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.391353][T24257] Call Trace: [ 1295.391363][T24257] [ 1295.391372][T24257] dump_stack_lvl+0xe8/0x150 [ 1295.391408][T24257] should_fail_ex+0x412/0x560 [ 1295.391436][T24257] should_failslab+0xa8/0x100 [ 1295.391471][T24257] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1295.391503][T24257] ? __get_vm_area_node+0x13f/0x300 [ 1295.391536][T24257] __get_vm_area_node+0x13f/0x300 [ 1295.391568][T24257] __vmalloc_node_range_noprof+0x355/0x1a80 [ 1295.391598][T24257] ? copy_process+0x89b/0x4460 [ 1295.391659][T24257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1295.391692][T24257] ? rcu_is_watching+0x15/0xb0 [ 1295.391715][T24257] ? memcpy_and_pad+0x48/0x80 [ 1295.391748][T24257] __vmalloc_node_noprof+0xc2/0x100 [ 1295.391777][T24257] ? copy_process+0x89b/0x4460 [ 1295.391804][T24257] ? copy_process+0x89b/0x4460 [ 1295.391838][T24257] dup_task_struct+0x228/0x9e0 [ 1295.391870][T24257] ? _raw_spin_unlock_irq+0x23/0x50 [ 1295.391902][T24257] copy_process+0x89b/0x4460 [ 1295.391965][T24257] ? __pfx_copy_process+0x10/0x10 [ 1295.392004][T24257] ? mutex_init_lockdep+0xf9/0x130 [ 1295.392030][T24257] vhost_task_create+0x1f9/0x380 [ 1295.392055][T24257] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1295.392079][T24257] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1295.392104][T24257] ? __pfx_vhost_task_create+0x10/0x10 [ 1295.392139][T24257] ? __pfx_vhost_task_fn+0x10/0x10 [ 1295.392182][T24257] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.392220][T24257] kvm_mmu_post_init_vm+0x14c/0x300 [ 1295.392249][T24257] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1295.392285][T24257] ? __mutex_trylock_common+0x158/0x260 [ 1295.392311][T24257] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1295.392335][T24257] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1295.392361][T24257] ? register_lock_class+0x31/0x2e0 [ 1295.392395][T24257] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.392433][T24257] ? kasan_quarantine_put+0xbb/0x1f0 [ 1295.392464][T24257] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1295.392496][T24257] ? do_raw_write_lock+0x11d/0x260 [ 1295.392539][T24257] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1295.392569][T24257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1295.392590][T24257] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1295.392643][T24257] ? __fget_files+0x2a/0x420 [ 1295.392673][T24257] ? __fget_files+0x2a/0x420 [ 1295.392696][T24257] ? __fget_files+0x3a0/0x420 [ 1295.392721][T24257] ? __fget_files+0x2a/0x420 [ 1295.392749][T24257] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1295.392780][T24257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1295.392803][T24257] __se_sys_ioctl+0xfc/0x170 [ 1295.392836][T24257] do_syscall_64+0x14d/0xf80 [ 1295.392864][T24257] ? trace_irq_disable+0x3b/0x150 [ 1295.392887][T24257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.392908][T24257] ? clear_bhb_loop+0x40/0x90 [ 1295.392934][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.392955][T24257] RIP: 0033:0x7ff697b9c799 [ 1295.392976][T24257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.392994][T24257] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.393017][T24257] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1295.393032][T24257] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1295.393046][T24257] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.393059][T24257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.393071][T24257] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1295.393105][T24257] [ 1295.395445][T24257] syz.7.6168: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1295.775638][T19744] hid_parser_main: 40 callbacks suppressed [ 1295.775664][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.801416][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.808480][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.815470][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.822678][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.829754][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.836757][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.840093][T24257] ,cpuset= [ 1295.844023][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.848905][T24257] syz7 [ 1295.854130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 1295.864872][ C1] lec:lec_tx_timeout: lec0 [ 1295.870660][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1295.878004][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.888769][T19744] lenovo 0003:17EF:60FE.0033: unknown main item tag 0x0 [ 1295.890973][T24257] ,mems_allowed=0-1 [ 1295.904027][T19744] lenovo 0003:17EF:60FE.0033: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 1295.915027][T19744] usb 3-1: USB disconnect, device number 12 [ 1295.923915][T24257] CPU: 0 UID: 0 PID: 24257 Comm: syz.7.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1295.923947][T24257] Tainted: [L]=SOFTLOCKUP [ 1295.923955][T24257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.923968][T24257] Call Trace: [ 1295.923977][T24257] [ 1295.923986][T24257] dump_stack_lvl+0xe8/0x150 [ 1295.924023][T24257] warn_alloc+0x249/0x340 [ 1295.924058][T24257] ? qlist_free_all+0x8c/0x100 [ 1295.924085][T24257] ? __pfx_warn_alloc+0x10/0x10 [ 1295.924115][T24257] ? __get_vm_area_node+0x13f/0x300 [ 1295.924147][T24257] ? __get_vm_area_node+0x2b5/0x300 [ 1295.924180][T24257] __vmalloc_node_range_noprof+0x37a/0x1a80 [ 1295.924240][T24257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1295.924271][T24257] ? rcu_is_watching+0x15/0xb0 [ 1295.924292][T24257] ? memcpy_and_pad+0x48/0x80 [ 1295.924323][T24257] __vmalloc_node_noprof+0xc2/0x100 [ 1295.924351][T24257] ? copy_process+0x89b/0x4460 [ 1295.924378][T24257] ? copy_process+0x89b/0x4460 [ 1295.924410][T24257] dup_task_struct+0x228/0x9e0 [ 1295.924441][T24257] ? _raw_spin_unlock_irq+0x23/0x50 [ 1295.924472][T24257] copy_process+0x89b/0x4460 [ 1295.924534][T24257] ? __pfx_copy_process+0x10/0x10 [ 1295.924571][T24257] ? mutex_init_lockdep+0xf9/0x130 [ 1295.924595][T24257] vhost_task_create+0x1f9/0x380 [ 1295.924629][T24257] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1295.924652][T24257] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1295.924676][T24257] ? __pfx_vhost_task_create+0x10/0x10 [ 1295.924709][T24257] ? __pfx_vhost_task_fn+0x10/0x10 [ 1295.924741][T24257] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.924778][T24257] kvm_mmu_post_init_vm+0x14c/0x300 [ 1295.924806][T24257] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1295.924841][T24257] ? __mutex_trylock_common+0x158/0x260 [ 1295.924866][T24257] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1295.924889][T24257] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1295.924914][T24257] ? register_lock_class+0x31/0x2e0 [ 1295.924946][T24257] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.924999][T24257] ? kasan_quarantine_put+0xbb/0x1f0 [ 1295.925029][T24257] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1295.925062][T24257] ? do_raw_write_lock+0x11d/0x260 [ 1295.925106][T24257] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1295.925138][T24257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1295.925160][T24257] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1295.925208][T24257] ? __fget_files+0x2a/0x420 [ 1295.925237][T24257] ? __fget_files+0x2a/0x420 [ 1295.925260][T24257] ? __fget_files+0x3a0/0x420 [ 1295.925284][T24257] ? __fget_files+0x2a/0x420 [ 1295.925313][T24257] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1295.925345][T24257] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1295.925369][T24257] __se_sys_ioctl+0xfc/0x170 [ 1295.925403][T24257] do_syscall_64+0x14d/0xf80 [ 1295.925432][T24257] ? trace_irq_disable+0x3b/0x150 [ 1295.925455][T24257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.925477][T24257] ? clear_bhb_loop+0x40/0x90 [ 1295.925503][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.925524][T24257] RIP: 0033:0x7ff697b9c799 [ 1295.925544][T24257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.925562][T24257] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.925586][T24257] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1295.925601][T24257] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1295.925622][T24257] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.925636][T24257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.925649][T24257] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1295.925683][T24257] [ 1296.309724][T24257] Mem-Info: [ 1296.312929][T24257] active_anon:12220 inactive_anon:0 isolated_anon:0 [ 1296.312929][T24257] active_file:8447 inactive_file:50679 isolated_file:0 [ 1296.312929][T24257] unevictable:768 dirty:188 writeback:0 [ 1296.312929][T24257] slab_reclaimable:11658 slab_unreclaimable:100076 [ 1296.312929][T24257] mapped:29327 shmem:4256 pagetables:2157 [ 1296.312929][T24257] sec_pagetables:0 bounce:0 [ 1296.312929][T24257] kernel_misc_reclaimable:0 [ 1296.312929][T24257] free:1306899 free_pcp:8245 free_cma:0 [ 1296.359455][T24257] Node 0 active_anon:49280kB inactive_anon:0kB active_file:33744kB inactive_file:202520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117264kB dirty:752kB writeback:0kB shmem:15488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:8580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.388026][T24259] fido_id[24259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1296.393561][T24257] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.439911][T24257] Node 0 DMA free:15312kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1296.470439][T24257] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 1296.476279][T24257] Node 0 DMA32 free:1274944kB boost:0kB min:34088kB low:42608kB high:51128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48880kB inactive_anon:0kB active_file:33744kB inactive_file:202520kB unevictable:1536kB writepending:752kB zspages:0kB present:3129332kB managed:2541272kB mlocked:0kB bounce:0kB free_pcp:33020kB local_pcp:15016kB free_cma:0kB [ 1296.511765][T24257] lowmem_reserve[]: 0 0 1 1 1 [ 1296.513319][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1296.516647][T24257] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1556kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1296.560362][T24257] lowmem_reserve[]: 0 0 0 0 0 [ 1296.565169][T24257] Node 1 Normal free:3937340kB boost:0kB min:55792kB low:69740kB high:83688kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.597489][T24257] lowmem_reserve[]: 0 0 0 0 0 [ 1296.602391][T24257] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15312kB [ 1296.617511][T24257] Node 0 DMA32: 5580*4kB (U) 4652*8kB (UME) 3427*16kB (UME) 714*32kB (UME) 611*64kB (UME) 443*128kB (UME) 310*256kB (UM) 272*512kB (UME) 182*1024kB (UM) 101*2048kB (UME) 105*4096kB (UM) = 1274944kB [ 1296.638925][T24257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1296.650914][T24257] Node 1 Normal: 3*4kB (U) 14*8kB (U) 16*16kB (UM) 6*32kB (U) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937340kB [ 1296.668127][T24257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.678211][T24257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1296.687704][T24257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.698722][T24257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1296.708713][T24257] 63378 total pagecache pages [ 1296.713664][T24257] 0 pages in swap cache [ 1296.719436][T24257] Free swap = 124996kB [ 1296.723660][T24257] Total swap = 124996kB [ 1296.728986][T24257] 2097051 pages RAM [ 1296.732862][T24257] 0 pages HighMem/MovableOnly [ 1296.737640][T24257] 429729 pages reserved [ 1296.741962][T24257] 0 pages cma reserved [ 1296.890873][T24263] tipc: Started in network mode [ 1296.896188][T24263] tipc: Node identity 84e, cluster identity 4711 [ 1296.903488][T24263] tipc: Node number set to 2126 [ 1297.213208][T24277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.224671][T24277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.247761][T24278] IPv6: syztnl0: Disabled Multicast RS [ 1297.673405][T24293] netlink: 220 bytes leftover after parsing attributes in process `syz.7.6179'. [ 1297.683985][T24293] unsupported nla_type 224 [ 1297.700482][T24294] netlink: 220 bytes leftover after parsing attributes in process `syz.7.6179'. [ 1297.842272][T24301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.854849][T24301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.023877][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6186'. [ 1298.139329][T24317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6188'. [ 1298.155942][T24317] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1298.186961][T16191] Bluetooth: (null): Invalid header checksum [ 1298.549133][T24328] FAULT_INJECTION: forcing a failure. [ 1298.549133][T24328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.575591][T24328] CPU: 1 UID: 0 PID: 24328 Comm: syz.5.6193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.575617][T24328] Tainted: [L]=SOFTLOCKUP [ 1298.575623][T24328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.575632][T24328] Call Trace: [ 1298.575639][T24328] [ 1298.575646][T24328] dump_stack_lvl+0xe8/0x150 [ 1298.575673][T24328] should_fail_ex+0x412/0x560 [ 1298.575693][T24328] _copy_from_iter+0x1d3/0x1670 [ 1298.575717][T24328] ? sock_alloc_send_pskb+0x896/0x990 [ 1298.575744][T24328] ? __pfx__copy_from_iter+0x10/0x10 [ 1298.575766][T24328] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1298.575791][T24328] skb_copy_datagram_from_iter+0xf5/0x710 [ 1298.575818][T24328] ? skb_put+0x11b/0x210 [ 1298.575840][T24328] tun_get_user+0xc38/0x3dd0 [ 1298.575874][T24328] ? __pfx_tun_get_user+0x10/0x10 [ 1298.575893][T24328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1298.575912][T24328] ? lockdep_hardirqs_on+0x7a/0x110 [ 1298.575933][T24328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1298.575953][T24328] ? save_netdev_trace_buffer+0x4e2/0x610 [ 1298.575976][T24328] ? ref_tracker_alloc+0x35c/0x4c0 [ 1298.575992][T24328] ? tun_chr_write_iter+0x60/0x210 [ 1298.576009][T24328] ? vfs_write+0x61d/0xb90 [ 1298.576029][T24328] ? ksys_write+0x150/0x270 [ 1298.576049][T24328] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1298.576069][T24328] ? tun_get+0x1c/0x2f0 [ 1298.576091][T24328] ? tun_get+0x1c/0x2f0 [ 1298.576108][T24328] ? tun_get+0x1c/0x2f0 [ 1298.576129][T24328] tun_chr_write_iter+0x113/0x210 [ 1298.576150][T24328] vfs_write+0x61d/0xb90 [ 1298.576176][T24328] ? __pfx_vfs_write+0x10/0x10 [ 1298.576204][T24328] ? __fget_files+0x2a/0x420 [ 1298.576231][T24328] ksys_write+0x150/0x270 [ 1298.576253][T24328] ? __pfx_ksys_write+0x10/0x10 [ 1298.576282][T24328] do_syscall_64+0x14d/0xf80 [ 1298.576303][T24328] ? trace_irq_disable+0x3b/0x150 [ 1298.576319][T24328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.576335][T24328] ? clear_bhb_loop+0x40/0x90 [ 1298.576353][T24328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.576368][T24328] RIP: 0033:0x7f2118d9c799 [ 1298.576383][T24328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.576396][T24328] RSP: 002b:00007f2119d05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1298.576412][T24328] RAX: ffffffffffffffda RBX: 00007f2119015fa0 RCX: 00007f2118d9c799 [ 1298.576423][T24328] RDX: 0000000000000078 RSI: 0000200000000380 RDI: 0000000000000004 [ 1298.576433][T24328] RBP: 00007f2119d05090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.576442][T24328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.576452][T24328] R13: 00007f2119016038 R14: 00007f2119015fa0 R15: 00007ffced07e678 [ 1298.576474][T24328] [ 1298.987509][ T30] audit: type=1800 audit(1772809385.019:57): pid=24330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6194" name="bus" dev="overlay" ino=2097 res=0 errno=0 [ 1299.369692][ T30] audit: type=1326 audit(1772809385.374:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24332 comm="syz.5.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2118d9c799 code=0x7fc00000 [ 1299.428046][T24341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.449631][T24341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.740252][T24347] syzkaller1: entered promiscuous mode [ 1299.745919][T24347] syzkaller1: entered allmulticast mode [ 1300.106862][T24351] netlink: 'syz.7.6204': attribute type 89 has an invalid length. [ 1300.179561][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1300.351613][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1300.368696][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.390067][ T29] usb 6-1: Product: syz [ 1300.394330][ T29] usb 6-1: Manufacturer: syz [ 1300.398967][ T29] usb 6-1: SerialNumber: syz [ 1300.760952][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6210'. [ 1300.777933][ T30] audit: type=1800 audit(1772809386.694:59): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6211" name="file1" dev="overlay" ino=1837 res=0 errno=0 [ 1300.874728][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1300.891810][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1301.180669][T19744] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1301.353577][T19744] usb 3-1: Using ep0 maxpacket: 16 [ 1301.361347][T19744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.374156][T19744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.386532][T19744] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.395764][T19744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.403818][T19744] usb 3-1: Product: syz [ 1301.408494][T19744] usb 3-1: Manufacturer: syz [ 1301.413417][T19744] usb 3-1: SerialNumber: syz [ 1301.556104][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1301.569768][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1301.600078][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1301.634603][ T29] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1301.670629][T19744] usb 3-1: 0:2 : does not exist [ 1301.678343][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1301.704893][ T29] usb 6-1: USB disconnect, device number 29 [ 1301.718878][T19744] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1301.802390][T19744] usb 3-1: USB disconnect, device number 13 [ 1301.847084][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1302.004332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1302.012481][ C1] lec:lec_tx_timeout: lec0 [ 1302.098357][T24391] binder: 24390:24391 ioctl c0306201 200000000240 returned -14 [ 1302.364592][T24403] x_tables: duplicate underflow at hook 1 [ 1302.413312][T24399] kvm: user requested TSC rate below hardware speed [ 1302.466657][T24403] binder: Unknown parameter 'm0000Ow00000000001' [ 1302.592160][T24413] i2c i2c-0: dtv_property_process_set: SET cmd 0x14e11c9a undefined [ 1302.727593][T24419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.737909][T24419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.862764][T24425] netlink: 'syz.5.6227': attribute type 1 has an invalid length. [ 1303.039746][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1303.186842][T24435] fuse: Unknown parameter 'fdõ)3 [ 1303.186842][T24435] „¯|pçj' [ 1303.236304][ T5883] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1303.245797][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.257023][ T5883] usb 3-1: Product: syz [ 1303.261262][ T5883] usb 3-1: Manufacturer: syz [ 1303.266540][ T5883] usb 3-1: SerialNumber: syz [ 1303.559787][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6238'. [ 1303.646379][T24450] netlink: 'syz.7.6239': attribute type 21 has an invalid length. [ 1303.657082][T24450] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6239'. [ 1303.710851][ T5883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1303.723741][ T5883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1303.963071][T24460] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6242'. [ 1304.419477][ T5883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1304.431638][ T5883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1304.443053][ T5883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1304.453839][ T5883] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1304.467833][ T5883] usb 3-1: USB disconnect, device number 14 [ 1306.212680][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1306.373005][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 1306.380711][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.390993][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1306.402834][ T29] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1306.412040][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.420162][ T29] usb 3-1: Product: syz [ 1306.424353][ T29] usb 3-1: Manufacturer: syz [ 1306.429026][ T29] usb 3-1: SerialNumber: syz [ 1306.655901][ T29] usb 3-1: 0:2 : does not exist [ 1306.668492][ T29] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1306.740310][ T29] usb 3-1: USB disconnect, device number 15 [ 1306.785306][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.297481][T24464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1307.307109][T24484] binder: 24482:24484 ioctl c0306201 200000004a40 returned -14 [ 1307.471209][T24487] FAULT_INJECTION: forcing a failure. [ 1307.471209][T24487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.490613][T24487] CPU: 1 UID: 0 PID: 24487 Comm: syz.5.6251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.490645][T24487] Tainted: [L]=SOFTLOCKUP [ 1307.490653][T24487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.490665][T24487] Call Trace: [ 1307.490674][T24487] [ 1307.490684][T24487] dump_stack_lvl+0xe8/0x150 [ 1307.490719][T24487] should_fail_ex+0x412/0x560 [ 1307.490745][T24487] _copy_from_user+0x2d/0xb0 [ 1307.490771][T24487] ___sys_recvmsg+0x175/0x590 [ 1307.490807][T24487] ? __pfx____sys_recvmsg+0x10/0x10 [ 1307.490861][T24487] ? __fget_files+0x3a0/0x420 [ 1307.490896][T24487] do_recvmmsg+0x334/0x800 [ 1307.490933][T24487] ? __pfx_do_recvmmsg+0x10/0x10 [ 1307.490975][T24487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1307.491023][T24487] __x64_sys_recvmmsg+0x198/0x250 [ 1307.491057][T24487] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1307.491101][T24487] do_syscall_64+0x14d/0xf80 [ 1307.491129][T24487] ? trace_irq_disable+0x3b/0x150 [ 1307.491153][T24487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.491174][T24487] ? clear_bhb_loop+0x40/0x90 [ 1307.491199][T24487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.491218][T24487] RIP: 0033:0x7f2118d9c799 [ 1307.491238][T24487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.491256][T24487] RSP: 002b:00007f2119d05028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1307.491279][T24487] RAX: ffffffffffffffda RBX: 00007f2119015fa0 RCX: 00007f2118d9c799 [ 1307.491294][T24487] RDX: 0000000000000001 RSI: 0000200000001880 RDI: 0000000000000003 [ 1307.491316][T24487] RBP: 00007f2119d05090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.491329][T24487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.491342][T24487] R13: 00007f2119016038 R14: 00007f2119015fa0 R15: 00007ffced07e678 [ 1307.491374][T24487] [ 1307.924790][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1308.167720][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1308.178746][ T29] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1308.317267][ T5883] usb 3-1: device descriptor read/64, error -71 [ 1308.338659][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1308.345680][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.356124][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1308.368215][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1308.377463][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.385876][ T29] usb 6-1: Product: syz [ 1308.390105][ T29] usb 6-1: Manufacturer: syz [ 1308.394926][ T29] usb 6-1: SerialNumber: syz [ 1308.573977][ T5883] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1308.622698][ T29] usb 6-1: 0:2 : does not exist [ 1308.645049][ T29] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1308.688485][ T29] usb 6-1: USB disconnect, device number 30 [ 1308.720965][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.745375][ T5883] usb 3-1: device descriptor read/64, error -71 [ 1308.863058][ T5883] usb usb3-port1: attempt power cycle [ 1309.217625][T24515] x_tables: duplicate underflow at hook 1 [ 1309.236322][ T5883] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1309.268878][ T5883] usb 3-1: device descriptor read/8, error -71 [ 1309.299191][T24515] binder: Unknown parameter 'm0000Ow00000000001' [ 1309.545916][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1309.632506][ T5883] usb 3-1: device descriptor read/8, error -71 [ 1309.730838][T24531] xt_policy: too many policy elements [ 1309.739118][T24532] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1309.760568][ T5883] usb usb3-port1: unable to enumerate USB device [ 1309.810402][T24534] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6269'. [ 1310.240385][ T5883] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1310.282033][T24546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.292608][T24546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.432884][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1310.441118][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.451370][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.462803][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1310.472076][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.480145][ T5883] usb 6-1: Product: syz [ 1310.484380][ T5883] usb 6-1: Manufacturer: syz [ 1310.489577][ T5883] usb 6-1: SerialNumber: syz [ 1310.718953][ T5883] usb 6-1: 0:2 : does not exist [ 1310.737750][ T5883] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1310.776086][ T5883] usb 6-1: USB disconnect, device number 31 [ 1310.809154][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.412285][T24563] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6280'. [ 1311.469656][T24565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.478670][T24565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.491363][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1311.565108][T12649] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1311.586598][T19744] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1311.727601][T12649] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1311.736580][T12649] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1311.746781][T19744] usb 6-1: Using ep0 maxpacket: 8 [ 1311.753860][T12649] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1311.763653][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.771800][T12649] usb 3-1: Product: syz [ 1311.776266][T12649] usb 3-1: Manufacturer: syz [ 1311.781011][T12649] usb 3-1: SerialNumber: syz [ 1311.786701][T19744] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1311.797920][T12649] usb 3-1: config 0 descriptor?? [ 1311.806567][T19744] usb 6-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 1311.817539][T12649] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1311.824077][T19744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.834192][T19744] usb 6-1: Product: syz [ 1311.838445][T19744] usb 6-1: Manufacturer: syz [ 1311.843206][T19744] usb 6-1: SerialNumber: syz [ 1312.098080][T19744] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1312.136500][T19744] usb 6-1: USB disconnect, device number 32 [ 1312.367095][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1312.378320][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1312.571732][T24571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.584286][T24571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.665997][T12649] gspca_sunplus: reg_r err -71 [ 1312.670946][T12649] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1312.685631][T12649] usb 3-1: USB disconnect, device number 20 [ 1312.950994][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.963691][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1313.018048][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1313.189629][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1313.196729][T24575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.207252][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.218872][T24575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.220208][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1313.256436][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1313.267914][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.280102][ T10] usb 6-1: Product: syz [ 1313.284350][ T10] usb 6-1: Manufacturer: syz [ 1313.292168][ T10] usb 6-1: SerialNumber: syz [ 1313.482945][T24581] syzkaller1: entered promiscuous mode [ 1313.488720][T24581] syzkaller1: entered allmulticast mode [ 1313.536155][ T10] usb 6-1: 0:2 : does not exist [ 1313.607266][ T10] usb 6-1: USB disconnect, device number 33 [ 1313.669879][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1313.968972][ T5824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1314.131289][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 1314.154970][ T5824] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.182242][ T5824] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.193737][ T5824] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1314.207337][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1314.214047][ T5824] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1314.224036][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.270057][ T5824] usb 3-1: config 0 descriptor?? [ 1314.351549][T24598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.363952][T24598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.492382][T19744] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1314.663353][T19744] usb 6-1: Using ep0 maxpacket: 16 [ 1314.672800][T19744] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.683315][T19744] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.695386][T19744] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.704512][T19744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.712682][T19744] usb 6-1: Product: syz [ 1314.716931][T19744] usb 6-1: Manufacturer: syz [ 1314.721938][T19744] usb 6-1: SerialNumber: syz [ 1314.732370][ T5824] hid_parser_main: 28 callbacks suppressed [ 1314.732395][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.750677][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.757762][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.766920][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.774152][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.783711][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.790860][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.798053][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.805220][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.812272][ T5824] lenovo 0003:17EF:60FE.0034: unknown main item tag 0x0 [ 1314.822710][ T5824] lenovo 0003:17EF:60FE.0034: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 1314.945437][ T5824] usb 3-1: USB disconnect, device number 21 [ 1314.978569][T19744] usb 6-1: 0:2 : does not exist [ 1315.003971][T19744] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1315.043067][T24601] tmpfs: Bad value for 'mpol' [ 1315.104528][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1315.117176][T19744] usb 6-1: USB disconnect, device number 34 [ 1315.164586][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.237082][T24607] x_tables: duplicate underflow at hook 1 [ 1315.585145][T24615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.806546][T12649] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1315.979212][T12649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.994435][T12649] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.005599][T12649] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1316.021698][T12649] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.030993][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.039103][T12649] usb 3-1: Product: syz [ 1316.043658][T12649] usb 3-1: Manufacturer: syz [ 1316.049157][T12649] usb 3-1: SerialNumber: syz [ 1316.067258][T12649] cdc_mbim 3-1:1.0: skipping garbage [ 1316.179338][T24632] x_tables: duplicate underflow at hook 1 [ 1317.157184][T12649] cdc_mbim 3-1:1.0: bind() failure [ 1317.180647][T12649] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1317.208986][T12649] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1317.228668][T12649] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1317.258746][T12649] usb 3-1: USB disconnect, device number 22 [ 1317.752034][T10356] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 1317.861616][T24667] No control pipe specified [ 1318.127848][T24673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.138777][T24673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.359889][ T5883] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1318.525457][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1318.535635][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.544096][ T5883] usb 3-1: Product: syz [ 1318.548494][ T5883] usb 3-1: Manufacturer: syz [ 1318.554114][ T5883] usb 3-1: SerialNumber: syz [ 1318.561478][ T5883] usb 3-1: config 0 descriptor?? [ 1318.784901][ T5883] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1318.809753][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.820313][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.011456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1319.019571][ C1] lec:lec_tx_timeout: lec0 [ 1319.473707][T24687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.484238][T24687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.090188][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.102645][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.871586][T24661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1320.978742][ T5883] usb 3-1: USB disconnect, device number 23 [ 1321.447402][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1321.463986][T24712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.474430][T24712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.618347][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1321.632868][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.643426][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1321.657278][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1321.667825][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.680793][ T5883] usb 6-1: Product: syz [ 1321.686219][ T5883] usb 6-1: Manufacturer: syz [ 1321.690882][ T5883] usb 6-1: SerialNumber: syz [ 1321.931075][ T5883] usb 6-1: 0:2 : does not exist [ 1321.960561][T12649] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1321.968758][ T5883] usb 6-1: USB disconnect, device number 35 [ 1322.003112][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.133338][T12649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.144348][T12649] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.157150][T12649] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1322.167993][T12649] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.187632][T12649] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1322.196976][T12649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.205041][T12649] usb 3-1: Product: syz [ 1322.209372][T12649] usb 3-1: Manufacturer: syz [ 1322.214029][T12649] usb 3-1: SerialNumber: syz [ 1322.229223][T12649] cdc_mbim 3-1:1.0: skipping garbage [ 1322.572076][T24725] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6338'. [ 1322.584097][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6338'. [ 1322.760032][T24732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.776845][T24732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.793164][T24732] ieee802154 phy1 wpan1: encryption failed: -126 [ 1323.305466][T12649] cdc_mbim 3-1:1.0: bind() failure [ 1323.323095][T12649] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1323.331775][T12649] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1323.342237][T12649] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1323.359991][T12649] usb 3-1: USB disconnect, device number 24 [ 1323.584718][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1324.161096][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1324.236032][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1324.322880][ T10] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1324.335012][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1324.360103][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1324.371256][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.381224][ T10] usb 3-1: Product: syz [ 1324.386844][ T10] usb 3-1: Manufacturer: syz [ 1324.391516][ T10] usb 3-1: SerialNumber: syz [ 1324.401816][T24741] netlink: 484 bytes leftover after parsing attributes in process `syz.7.6345'. [ 1324.414014][ T10] usb 3-1: config 0 descriptor?? [ 1324.424983][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1325.326750][ T10] gspca_sunplus: reg_r err -71 [ 1325.338377][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1325.351943][ T10] usb 3-1: USB disconnect, device number 25 [ 1325.411663][ T5824] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1325.581939][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 1325.595543][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.621395][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1325.638686][ T5824] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1325.664563][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.683399][ T5824] usb 6-1: Product: syz [ 1325.687852][ T5824] usb 6-1: Manufacturer: syz [ 1325.697892][ T5824] usb 6-1: SerialNumber: syz [ 1325.912962][T24788] netlink: 'syz.7.6361': attribute type 27 has an invalid length. [ 1325.940113][ T5824] usb 6-1: 0:2 : does not exist [ 1325.951561][T24788] 0ªî{X¹¦: left allmulticast mode [ 1325.970330][ T5824] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.027899][T24788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.075956][ T5824] usb 6-1: USB disconnect, device number 36 [ 1326.136353][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.887596][T24805] netlink: 'syz.7.6367': attribute type 21 has an invalid length. [ 1326.895802][T24805] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6367'. [ 1327.088438][T12649] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1327.227216][T12649] usb 6-1: device descriptor read/64, error -71 [ 1327.323423][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1327.483623][T12649] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1327.483660][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1327.502861][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.514087][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.527524][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.536644][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.546865][ T10] usb 3-1: Product: syz [ 1327.553850][ T10] usb 3-1: Manufacturer: syz [ 1327.560175][ T10] usb 3-1: SerialNumber: syz [ 1327.584393][T24810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.593614][T24810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.618091][T24810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.628408][T24810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.638156][T12649] usb 6-1: device descriptor read/64, error -71 [ 1327.762937][T12649] usb usb6-port1: attempt power cycle [ 1327.787926][ T10] usb 3-1: 0:2 : does not exist [ 1327.801711][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1327.847255][ T10] usb 3-1: USB disconnect, device number 26 [ 1327.879285][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.135339][T12649] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1328.152249][T20427] lec:lec_start_xmit: lec0:No lecd attached [ 1328.159181][T12649] usb 6-1: device descriptor read/8, error -71 [ 1328.340521][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 1328.434516][T12649] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1328.456717][T12649] usb 6-1: device descriptor read/8, error -71 [ 1328.585295][T12649] usb usb6-port1: unable to enumerate USB device [ 1328.776790][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1328.957968][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1328.967583][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1328.976943][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1328.985193][ T10] usb 3-1: Product: syz [ 1328.989515][ T10] usb 3-1: Manufacturer: syz [ 1328.994416][ T10] usb 3-1: SerialNumber: syz [ 1329.003163][ T10] usb 3-1: config 0 descriptor?? [ 1329.239562][T24823] ieee802154 phy1 wpan1: encryption failed: -126 [ 1329.248077][T12649] usb 3-1: USB disconnect, device number 27 [ 1330.799018][ T5824] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1330.966502][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 1330.975052][ T5824] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1330.983703][ T5824] usb 6-1: config 251 has no interface number 0 [ 1330.991803][ T5824] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1331.002644][ T5824] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1331.012735][ T5824] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1331.023904][ T5824] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1331.035122][ T5824] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1331.047040][ T5824] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.057237][ T5824] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1331.067526][ T5824] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1331.082202][ T5824] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1331.091149][ T5824] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1331.100889][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1331.110181][ T5824] usb 6-1: Product: syz [ 1331.114378][ T5824] usb 6-1: SerialNumber: syz [ 1331.347244][ T5824] cxacru 6-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1331.355282][ T5824] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1331.363937][ T5824] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1331.377191][ T5824] usb 6-1: USB disconnect, device number 41 [ 1331.478198][T24813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1331.630003][T24864] Invalid source name [ 1332.014011][T24878] netlink: 'syz.7.6390': attribute type 39 has an invalid length. [ 1332.222223][T10356] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 1332.406924][T24897] FAULT_INJECTION: forcing a failure. [ 1332.406924][T24897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.420652][T24897] CPU: 1 UID: 0 PID: 24897 Comm: syz.2.6394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.420686][T24897] Tainted: [L]=SOFTLOCKUP [ 1332.420695][T24897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1332.420708][T24897] Call Trace: [ 1332.420717][T24897] [ 1332.420726][T24897] dump_stack_lvl+0xe8/0x150 [ 1332.420762][T24897] should_fail_ex+0x412/0x560 [ 1332.420799][T24897] _copy_to_user+0x31/0xb0 [ 1332.420825][T24897] simple_read_from_buffer+0xe1/0x170 [ 1332.420857][T24897] proc_fail_nth_read+0x1bb/0x230 [ 1332.420888][T24897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1332.420918][T24897] ? rw_verify_area+0x2a6/0x4d0 [ 1332.420946][T24897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1332.420974][T24897] vfs_read+0x20c/0xa70 [ 1332.421007][T24897] ? fdget_pos+0x246/0x320 [ 1332.421038][T24897] ? __pfx___mutex_lock+0x10/0x10 [ 1332.421070][T24897] ? __pfx_vfs_read+0x10/0x10 [ 1332.421101][T24897] ? __fget_files+0x2a/0x420 [ 1332.421131][T24897] ? __fget_files+0x3a0/0x420 [ 1332.421155][T24897] ? __fget_files+0x2a/0x420 [ 1332.421190][T24897] ksys_read+0x150/0x270 [ 1332.421221][T24897] ? __pfx_ksys_read+0x10/0x10 [ 1332.421262][T24897] do_syscall_64+0x14d/0xf80 [ 1332.421293][T24897] ? trace_irq_disable+0x3b/0x150 [ 1332.421316][T24897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.421339][T24897] ? clear_bhb_loop+0x40/0x90 [ 1332.421365][T24897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.421387][T24897] RIP: 0033:0x7fd4af35cfce [ 1332.421408][T24897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1332.421427][T24897] RSP: 002b:00007fd4b01b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1332.421450][T24897] RAX: ffffffffffffffda RBX: 00007fd4b01b36c0 RCX: 00007fd4af35cfce [ 1332.421465][T24897] RDX: 000000000000000f RSI: 00007fd4b01b30a0 RDI: 0000000000000004 [ 1332.421479][T24897] RBP: 00007fd4b01b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.421491][T24897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.421504][T24897] R13: 00007fd4af616128 R14: 00007fd4af616090 R15: 00007ffd868d6c68 [ 1332.421537][T24897] [ 1333.878904][ T5824] kernel read not supported for file /radio0 (pid: 5824 comm: kworker/0:3) [ 1333.968501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 1333.976636][ C1] lec:lec_tx_timeout: lec0 [ 1334.203591][ T5824] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1334.385198][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 1334.392232][ T5824] usb 6-1: config 241 has an invalid interface number: 139 but max is 0 [ 1334.400795][ T5824] usb 6-1: config 241 has no interface number 0 [ 1334.407374][ T5824] usb 6-1: config 241 interface 139 has no altsetting 0 [ 1334.419102][ T5824] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a74, bcdDevice=8d.8a [ 1334.428300][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.436328][ T5824] usb 6-1: Product: syz [ 1334.440593][ T5824] usb 6-1: Manufacturer: syz [ 1334.445259][ T5824] usb 6-1: SerialNumber: syz [ 1335.347170][T24883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1335.449178][ T5824] usb 6-1: USB disconnect, device number 42 [ 1335.623860][T24912] netlink: 'syz.2.6401': attribute type 46 has an invalid length. [ 1335.632292][T24912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6401'. [ 1335.793378][T24917] FAULT_INJECTION: forcing a failure. [ 1335.793378][T24917] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.812665][T24917] CPU: 0 UID: 0 PID: 24917 Comm: syz.2.6403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.812699][T24917] Tainted: [L]=SOFTLOCKUP [ 1335.812708][T24917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1335.812720][T24917] Call Trace: [ 1335.812729][T24917] [ 1335.812738][T24917] dump_stack_lvl+0xe8/0x150 [ 1335.812774][T24917] should_fail_ex+0x412/0x560 [ 1335.812803][T24917] should_failslab+0xa8/0x100 [ 1335.812836][T24917] __kmalloc_noprof+0xe8/0x760 [ 1335.812866][T24917] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1335.812903][T24917] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1335.812944][T24917] ? tomoyo_path_number_perm+0x219/0x630 [ 1335.812971][T24917] tomoyo_path_number_perm+0x246/0x630 [ 1335.813001][T24917] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1335.813031][T24917] ? __lock_acquire+0x6b5/0x2cf0 [ 1335.813075][T24917] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1335.813127][T24917] ? __fget_files+0x2a/0x420 [ 1335.813157][T24917] ? __fget_files+0x2a/0x420 [ 1335.813181][T24917] ? __fget_files+0x3a0/0x420 [ 1335.813205][T24917] ? __fget_files+0x2a/0x420 [ 1335.813235][T24917] security_file_ioctl+0xc3/0x2a0 [ 1335.813263][T24917] __se_sys_ioctl+0x47/0x170 [ 1335.813297][T24917] do_syscall_64+0x14d/0xf80 [ 1335.813324][T24917] ? trace_irq_disable+0x3b/0x150 [ 1335.813345][T24917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.813364][T24917] ? clear_bhb_loop+0x40/0x90 [ 1335.813388][T24917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.813407][T24917] RIP: 0033:0x7fd4af39c799 [ 1335.813425][T24917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.813450][T24917] RSP: 002b:00007fd4b01d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.813472][T24917] RAX: ffffffffffffffda RBX: 00007fd4af615fa0 RCX: 00007fd4af39c799 [ 1335.813486][T24917] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1335.813498][T24917] RBP: 00007fd4b01d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.813510][T24917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.813521][T24917] R13: 00007fd4af616038 R14: 00007fd4af615fa0 R15: 00007ffd868d6c68 [ 1335.813551][T24917] [ 1335.813560][T24917] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1336.187996][T24925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6406'. [ 1336.342871][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 1336.374084][T24937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6410'. [ 1336.393845][ T5908] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1336.468946][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1336.477889][T24938] Invalid logical block size (3) [ 1336.543382][ T5908] usb 6-1: device descriptor read/64, error -71 [ 1336.661967][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1336.821198][ T5908] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1336.961303][ T5908] usb 6-1: device descriptor read/64, error -71 [ 1337.079198][ T5908] usb usb6-port1: attempt power cycle [ 1337.451475][ T5908] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1337.475342][ T5908] usb 6-1: device descriptor read/8, error -71 [ 1337.729311][ T5908] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1337.762450][ T5908] usb 6-1: device descriptor read/8, error -71 [ 1337.879197][ T5908] usb usb6-port1: unable to enumerate USB device [ 1339.452725][T24927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1339.823817][T24953] binder: 24952:24953 ioctl c0306201 200000000240 returned -14 [ 1340.080457][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.089286][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.632783][ T1150] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 1340.776064][T24986] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1340.785517][T24986] IPv6: NLM_F_CREATE should be specified when creating new route [ 1340.793878][T24986] IPv6: Can't replace route, no match found [ 1341.148008][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1341.308272][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 1341.315625][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.327670][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.357136][ T5908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.385285][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.394439][ T5908] usb 3-1: Product: syz [ 1341.398682][ T5908] usb 3-1: Manufacturer: syz [ 1341.403314][ T5908] usb 3-1: SerialNumber: syz [ 1341.634407][ T5908] usb 3-1: 0:2 : does not exist [ 1341.641993][ T5908] usb 3-1: unit 17 not found! [ 1341.673572][ T5908] usb 3-1: USB disconnect, device number 28 [ 1341.705880][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.954140][T25001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.964185][T25001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.822725][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.832614][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.739903][T24974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.203415][ T5908] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1344.352970][ T5908] usb 3-1: device descriptor read/64, error -71 [ 1344.556228][T25040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.565189][T25040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.609473][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1344.759042][ T5908] usb 3-1: device descriptor read/64, error -71 [ 1344.839401][T25051] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1344.878036][ T5908] usb usb3-port1: attempt power cycle [ 1345.154303][T19744] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 1345.262235][ T5908] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1345.288303][T25062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.300903][T25062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.317792][ T5908] usb 3-1: device descriptor read/8, error -71 [ 1345.329409][T19744] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1345.349227][T19744] usb 6-1: config 0 has no interface number 0 [ 1345.365493][T25062] input: syz0 as /devices/virtual/input/input200 [ 1345.371633][T19744] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1345.392448][T19744] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1345.403912][T19744] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1345.427058][T19744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.440414][T19744] usb 6-1: config 0 descriptor?? [ 1345.447951][T25053] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1345.462617][T19744] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1345.474680][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1345.645699][ T5908] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1345.668214][ T5908] usb 3-1: device descriptor read/8, error -71 [ 1345.678546][T25053] imon:display_open: display port is already open [ 1345.795676][ T5908] usb usb3-port1: unable to enumerate USB device [ 1346.001254][T25070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.012170][T25070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.903827][T25077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.912820][T25077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.270277][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1347.335010][T25086] FAULT_INJECTION: forcing a failure. [ 1347.335010][T25086] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.347808][T25086] CPU: 0 UID: 0 PID: 25086 Comm: syz.2.6463 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.347840][T25086] Tainted: [L]=SOFTLOCKUP [ 1347.347849][T25086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1347.347867][T25086] Call Trace: [ 1347.347875][T25086] [ 1347.347883][T25086] dump_stack_lvl+0xe8/0x150 [ 1347.347909][T25086] should_fail_ex+0x412/0x560 [ 1347.347929][T25086] should_failslab+0xa8/0x100 [ 1347.347954][T25086] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1347.348001][T25086] ? __alloc_skb+0x186/0x7d0 [ 1347.348027][T25086] ? __alloc_skb+0x1d0/0x7d0 [ 1347.348051][T25086] ? __local_bh_enable_ip+0xd0/0x130 [ 1347.348089][T25086] __alloc_skb+0x1d0/0x7d0 [ 1347.348115][T25086] ? netlink_ack_tlv_len+0x6c/0x210 [ 1347.348143][T25086] netlink_ack+0x146/0xa50 [ 1347.348166][T25086] ? __lock_acquire+0x6b5/0x2cf0 [ 1347.348204][T25086] ? pointer+0x6fa/0xe50 [ 1347.348227][T25086] netlink_rcv_skb+0x2b6/0x4b0 [ 1347.348246][T25086] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1347.348264][T25086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.348289][T25086] ? bpf_lsm_capable+0x9/0x20 [ 1347.348305][T25086] ? security_capable+0x7e/0x2c0 [ 1347.348329][T25086] nfnetlink_rcv+0x2c0/0x27b0 [ 1347.348349][T25086] ? unwind_get_return_address+0x4d/0x90 [ 1347.348363][T25086] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1347.348387][T25086] ? trim_netdev_trace+0x7d7/0x830 [ 1347.348406][T25086] ? stack_trace_save+0xa9/0x100 [ 1347.348429][T25086] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1347.348447][T25086] ? __lock_acquire+0x6b5/0x2cf0 [ 1347.348472][T25086] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1347.348487][T25086] ? ref_tracker_free+0x693/0x840 [ 1347.348503][T25086] ? __netlink_deliver_tap+0x636/0x8b0 [ 1347.348520][T25086] ? netlink_deliver_tap+0x19c/0x1b0 [ 1347.348536][T25086] ? netlink_unicast+0x7e3/0x9b0 [ 1347.348550][T25086] ? netlink_sendmsg+0x813/0xb40 [ 1347.348567][T25086] ? sock_sendmsg_nosec+0x112/0x150 [ 1347.348581][T25086] ? ____sys_sendmsg+0x589/0x8c0 [ 1347.348601][T25086] ? ___sys_sendmsg+0x2a5/0x360 [ 1347.348620][T25086] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1347.348662][T25086] ? do_syscall_64+0x14d/0xf80 [ 1347.348697][T25086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.348732][T25086] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1347.348752][T25086] ? lockdep_hardirqs_on+0x7a/0x110 [ 1347.348773][T25086] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1347.348792][T25086] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 1347.348825][T25086] netlink_unicast+0x80f/0x9b0 [ 1347.348847][T25086] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.348865][T25086] ? netlink_sendmsg+0x650/0xb40 [ 1347.348882][T25086] ? skb_put+0x11b/0x210 [ 1347.348904][T25086] netlink_sendmsg+0x813/0xb40 [ 1347.348928][T25086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.348948][T25086] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1347.348977][T25086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.348995][T25086] sock_sendmsg_nosec+0x112/0x150 [ 1347.349012][T25086] ____sys_sendmsg+0x589/0x8c0 [ 1347.349039][T25086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.349067][T25086] ? import_iovec+0x73/0xa0 [ 1347.349086][T25086] ___sys_sendmsg+0x2a5/0x360 [ 1347.349111][T25086] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.349156][T25086] ? __fget_files+0x2a/0x420 [ 1347.349174][T25086] ? __fget_files+0x3a0/0x420 [ 1347.349201][T25086] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1347.349247][T25086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1347.349287][T25086] ? __pfx_ksys_write+0x10/0x10 [ 1347.349331][T25086] do_syscall_64+0x14d/0xf80 [ 1347.349353][T25086] ? trace_irq_disable+0x3b/0x150 [ 1347.349369][T25086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.349384][T25086] ? clear_bhb_loop+0x40/0x90 [ 1347.349403][T25086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.349418][T25086] RIP: 0033:0x7fd4af39c799 [ 1347.349434][T25086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.349448][T25086] RSP: 002b:00007fd4b01d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.349464][T25086] RAX: ffffffffffffffda RBX: 00007fd4af615fa0 RCX: 00007fd4af39c799 [ 1347.349475][T25086] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 1347.349486][T25086] RBP: 00007fd4b01d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.349495][T25086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.349504][T25086] R13: 00007fd4af616038 R14: 00007fd4af615fa0 R15: 00007ffd868d6c68 [ 1347.349527][T25086] [ 1348.075654][T20699] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1348.131963][ T5824] usb 6-1: USB disconnect, device number 47 [ 1348.159285][T20699] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1348.220420][ T5883] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1348.379610][T25109] FAULT_INJECTION: forcing a failure. [ 1348.379610][T25109] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.382665][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 1348.399748][T25109] CPU: 1 UID: 0 PID: 25109 Comm: syz.7.6472 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.399782][T25109] Tainted: [L]=SOFTLOCKUP [ 1348.399792][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1348.399805][T25109] Call Trace: [ 1348.399814][T25109] [ 1348.399824][T25109] dump_stack_lvl+0xe8/0x150 [ 1348.399861][T25109] should_fail_ex+0x412/0x560 [ 1348.399887][T25109] should_failslab+0xa8/0x100 [ 1348.399921][T25109] __kmalloc_cache_noprof+0x88/0x660 [ 1348.399952][T25109] ? alloc_pipe_info+0xe8/0x4d0 [ 1348.399989][T25109] alloc_pipe_info+0xe8/0x4d0 [ 1348.400024][T25109] splice_direct_to_actor+0xa08/0xc70 [ 1348.400059][T25109] ? __pfx_direct_splice_actor+0x10/0x10 [ 1348.400087][T25109] ? __pfx_aa_file_perm+0x10/0x10 [ 1348.400118][T25109] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1348.400144][T25109] ? get_pid_task+0x20/0x1f0 [ 1348.400172][T25109] do_splice_direct+0x195/0x290 [ 1348.400199][T25109] ? __pfx_do_splice_direct+0x10/0x10 [ 1348.400225][T25109] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1348.400253][T25109] ? bpf_lsm_file_permission+0x9/0x20 [ 1348.400281][T25109] ? security_file_permission+0x75/0x260 [ 1348.400306][T25109] ? rw_verify_area+0x255/0x4d0 [ 1348.400337][T25109] do_sendfile+0x535/0x7d0 [ 1348.400368][T25109] ? __pfx_do_sendfile+0x10/0x10 [ 1348.400390][T25109] ? __fget_files+0x3a0/0x420 [ 1348.400424][T25109] __se_sys_sendfile64+0x144/0x1a0 [ 1348.400448][T25109] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1348.400482][T25109] do_syscall_64+0x14d/0xf80 [ 1348.400511][T25109] ? trace_irq_disable+0x3b/0x150 [ 1348.400534][T25109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.400556][T25109] ? clear_bhb_loop+0x40/0x90 [ 1348.400590][T25109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.400613][T25109] RIP: 0033:0x7ff697b9c799 [ 1348.400633][T25109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.400652][T25109] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1348.400675][T25109] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1348.400692][T25109] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1348.400704][T25109] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.400718][T25109] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.400732][T25109] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1348.400765][T25109] [ 1348.420182][ T5883] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1348.668783][ T5883] usb 3-1: config 0 has no interface number 0 [ 1348.669770][ T5883] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.669800][ T5883] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1348.669827][ T5883] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1348.669853][ T5883] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.675467][ T5883] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1348.734585][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.734612][ T5883] usb 3-1: Product: syz [ 1348.734628][ T5883] usb 3-1: Manufacturer: syz [ 1348.734645][ T5883] usb 3-1: SerialNumber: syz [ 1348.740109][ T5883] usb 3-1: config 0 descriptor?? [ 1348.903720][T25113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.918883][T25113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.052351][ T5883] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 1349.249349][T25096] imon:display_open: display port is already open [ 1349.439489][ T5908] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1349.561876][T25126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.572252][T25126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.605985][ T5908] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 1349.617153][ T5908] usb 6-1: config 253 has no interface number 0 [ 1349.623778][ T5908] usb 6-1: config 253 interface 130 has no altsetting 0 [ 1349.639712][ T5908] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1349.650630][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.665033][ T5908] usb 6-1: Product: syz [ 1349.669453][ T5908] usb 6-1: Manufacturer: syz [ 1349.675521][ T5908] usb 6-1: SerialNumber: syz [ 1350.152374][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.182663][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.264953][ T5908] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1350.517675][ T5908] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1350.535773][ T5908] dib0700: firmware download failed at 7 with -22 [ 1350.574019][ T5908] usb 6-1: USB disconnect, device number 48 [ 1350.946110][ T5908] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1351.123162][ T5908] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1351.134283][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.144843][ T5908] usb 6-1: Product: syz [ 1351.150936][ T5908] usb 6-1: Manufacturer: syz [ 1351.163698][ T5908] usb 6-1: SerialNumber: syz [ 1351.195977][ T5908] usb 6-1: config 0 descriptor?? [ 1351.222852][ T5908] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1351.271782][ T5824] usb 3-1: USB disconnect, device number 33 [ 1351.758689][ T5824] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 1351.906253][ T5824] usb 3-1: device descriptor read/64, error -71 [ 1351.944981][ T5908] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1351.964549][ T5908] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1351.997621][ T5908] usb 6-1: USB disconnect, device number 49 [ 1352.184182][ T5824] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1352.344302][ T5824] usb 3-1: device descriptor read/64, error -71 [ 1352.394009][T25144] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6483'. [ 1352.429975][T20699] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1352.447340][T20699] Bluetooth: hci2: Injecting HCI hardware error event [ 1352.456976][ T51] Bluetooth: hci2: hardware error 0x00 [ 1352.474451][ T5824] usb usb3-port1: attempt power cycle [ 1352.847475][ T5824] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 1352.879916][ T5824] usb 3-1: device descriptor read/8, error -71 [ 1353.018496][ T5908] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1353.145638][ T5824] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1353.180724][ T5824] usb 3-1: device descriptor read/8, error -71 [ 1353.199227][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 1353.217380][ T5908] usb 6-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 1353.241710][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.263169][ T5908] usb 6-1: Product: syz [ 1353.267440][ T5908] usb 6-1: Manufacturer: syz [ 1353.272147][ T5908] usb 6-1: SerialNumber: syz [ 1353.306101][ T5824] usb usb3-port1: unable to enumerate USB device [ 1353.551201][ T5908] usb 6-1: failed to get string for id1: -71 [ 1353.561097][ T5908] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1353.573974][ T5908] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1353.827181][ T5908] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1353.846536][ T5908] usb 6-1: USB disconnect, device number 50 [ 1353.888000][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1354.145777][T25160] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1354.157438][T25160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1354.175910][T25160] KVM: debugfs: duplicate directory 25160-5 [ 1354.438935][ T5908] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1354.527581][T25169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.538694][T25169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.598884][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1354.613026][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.627555][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.639935][ T5908] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1354.654643][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1354.664804][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.672973][ T5908] usb 6-1: Product: syz [ 1354.678353][ T5908] usb 6-1: Manufacturer: syz [ 1354.682996][ T5908] usb 6-1: SerialNumber: syz [ 1354.914924][ T5908] usb 6-1: 0:2 : does not exist [ 1354.948384][ T5908] usb 6-1: USB disconnect, device number 51 [ 1354.979758][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.798704][T25185] x_tables: duplicate underflow at hook 1 [ 1356.032174][T25195] FAULT_INJECTION: forcing a failure. [ 1356.032174][T25195] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.055714][T25195] CPU: 0 UID: 0 PID: 25195 Comm: syz.6.6499 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.055748][T25195] Tainted: [L]=SOFTLOCKUP [ 1356.055757][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1356.055770][T25195] Call Trace: [ 1356.055779][T25195] [ 1356.055789][T25195] dump_stack_lvl+0xe8/0x150 [ 1356.055825][T25195] should_fail_ex+0x412/0x560 [ 1356.055855][T25195] should_failslab+0xa8/0x100 [ 1356.055888][T25195] __kmalloc_cache_noprof+0x88/0x660 [ 1356.055918][T25195] ? binder_transaction+0x2341/0x70b0 [ 1356.055946][T25195] ? do_raw_spin_unlock+0xf5/0x210 [ 1356.055975][T25195] binder_transaction+0x2341/0x70b0 [ 1356.056001][T25195] ? arch_stack_walk+0xfb/0x150 [ 1356.056047][T25195] ? ima_match_policy+0x2146/0x21e0 [ 1356.056082][T25195] ? __pfx_binder_transaction+0x10/0x10 [ 1356.056110][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056145][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056181][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056221][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056253][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056280][T25195] ? binder_debug+0x155/0x1d0 [ 1356.056331][T25195] binder_ioctl_write_read+0xe3b/0xa660 [ 1356.056377][T25195] ? unwind_get_return_address+0x4d/0x90 [ 1356.056398][T25195] ? arch_stack_walk+0xfb/0x150 [ 1356.056429][T25195] ? stack_trace_save+0xa9/0x100 [ 1356.056453][T25195] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1356.056485][T25195] ? kasan_save_free_info+0x46/0x50 [ 1356.056511][T25195] ? stack_depot_save_flags+0x33/0x810 [ 1356.056533][T25195] ? format_decode+0xa0/0xe10 [ 1356.056558][T25195] ? kasan_save_track+0x4f/0x80 [ 1356.056593][T25195] ? kasan_save_track+0x3e/0x80 [ 1356.056619][T25195] ? kasan_save_free_info+0x46/0x50 [ 1356.056641][T25195] ? __kasan_slab_free+0x5c/0x80 [ 1356.056672][T25195] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.056712][T25195] ? binder_debug+0x155/0x1d0 [ 1356.056762][T25195] ? _raw_spin_unlock+0x28/0x50 [ 1356.056788][T25195] ? binder_get_thread+0x177/0x6d0 [ 1356.056818][T25195] binder_ioctl+0x423/0x1b70 [ 1356.056845][T25195] ? tomoyo_path_number_perm+0x219/0x630 [ 1356.056873][T25195] ? tomoyo_path_number_perm+0x219/0x630 [ 1356.056902][T25195] ? do_vfs_ioctl+0x1166/0x1530 [ 1356.056933][T25195] ? __pfx_binder_ioctl+0x10/0x10 [ 1356.056958][T25195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1356.057002][T25195] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1356.057054][T25195] ? __fget_files+0x2a/0x420 [ 1356.057082][T25195] ? __fget_files+0x2a/0x420 [ 1356.057106][T25195] ? __fget_files+0x3a0/0x420 [ 1356.057130][T25195] ? __fget_files+0x2a/0x420 [ 1356.057158][T25195] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1356.057190][T25195] ? __pfx_binder_ioctl+0x10/0x10 [ 1356.057217][T25195] __se_sys_ioctl+0xfc/0x170 [ 1356.057251][T25195] do_syscall_64+0x14d/0xf80 [ 1356.057279][T25195] ? trace_irq_disable+0x3b/0x150 [ 1356.057303][T25195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.057325][T25195] ? clear_bhb_loop+0x40/0x90 [ 1356.057351][T25195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.057372][T25195] RIP: 0033:0x7f876999c799 [ 1356.057392][T25195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.057412][T25195] RSP: 002b:00007f876a87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.057434][T25195] RAX: ffffffffffffffda RBX: 00007f8769c15fa0 RCX: 00007f876999c799 [ 1356.057451][T25195] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1356.057464][T25195] RBP: 00007f876a87b090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.057477][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.057489][T25195] R13: 00007f8769c16038 R14: 00007f8769c15fa0 R15: 00007ffe51d9d2b8 [ 1356.057522][T25195] [ 1356.810259][T19744] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 1356.831374][ T5908] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1356.948931][T19744] usb 6-1: device descriptor read/64, error -71 [ 1356.991662][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1356.998689][ T5908] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1357.009995][ T5908] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1357.020769][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1357.030306][ T5908] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1357.039616][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.048092][ T5908] usb 3-1: Product: syz [ 1357.052409][ T5908] usb 3-1: Manufacturer: syz [ 1357.057190][ T5908] usb 3-1: SerialNumber: syz [ 1357.064775][ T5908] usb 3-1: config 0 descriptor?? [ 1357.216031][T19744] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 1357.354942][T19744] usb 6-1: device descriptor read/64, error -71 [ 1357.475041][T19744] usb usb6-port1: attempt power cycle [ 1357.480843][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1357.490707][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1357.504908][ T5908] gs_usb 3-1:0.0: Configuring for 159 interfaces [ 1357.804392][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1357.867772][T19744] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 1357.890940][T19744] usb 6-1: device descriptor read/8, error -71 [ 1358.083145][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1358.156156][T19744] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 1358.188924][T19744] usb 6-1: device descriptor read/8, error -71 [ 1358.317125][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1358.326389][T19744] usb usb6-port1: unable to enumerate USB device [ 1358.334083][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1358.361104][T25173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1358.382078][ T5908] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 1358.523669][T25216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6507'. [ 1358.543383][ T5908] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1358.566026][ T5908] usb 3-1: USB disconnect, device number 38 [ 1358.601698][T25218] input: syz0 as /devices/virtual/input/input201 [ 1359.176141][T25243] x_tables: duplicate underflow at hook 1 [ 1359.254582][T25247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.264258][T25247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.587872][ T5908] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1359.758817][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 1359.770747][ T5908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1359.787731][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1359.799435][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1359.809879][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.829119][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1359.856587][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.104509][ T5908] usb 3-1: GET_CAPABILITIES returned 0 [ 1360.122320][ T5908] usbtmc 3-1:16.0: can't read capabilities [ 1360.224126][T25267] sp0: Synchronizing with TNC [ 1360.236277][T25270] sp0: Found TNC [ 1360.278113][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1360.293249][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.293285][ T51] Tainted: [L]=SOFTLOCKUP [ 1360.293293][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1360.293308][ T51] Workqueue: hci3 hci_rx_work [ 1360.293343][ T51] Call Trace: [ 1360.293352][ T51] [ 1360.293363][ T51] dump_stack_lvl+0xe8/0x150 [ 1360.293399][ T51] sysfs_create_dir_ns+0x271/0x2a0 [ 1360.293431][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1360.293462][ T51] ? do_raw_spin_unlock+0xf5/0x210 [ 1360.293494][ T51] kobject_add_internal+0x62b/0xd00 [ 1360.293525][ T51] kobject_add+0x163/0x240 [ 1360.293551][ T51] ? __pfx_kobject_add+0x10/0x10 [ 1360.293574][ T51] ? _raw_spin_unlock+0x28/0x50 [ 1360.293606][ T51] ? get_device_parent+0x366/0x3a0 [ 1360.293638][ T51] device_add+0x408/0xb70 [ 1360.293668][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 1360.293700][ T51] le_conn_complete_evt+0xf1d/0x1430 [ 1360.293747][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1360.293768][ T51] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1360.293802][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 1360.293833][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1360.293863][ T51] ? skb_pull_data+0xfb/0x200 [ 1360.293889][ T51] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1360.293913][ T51] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1360.293939][ T51] hci_event_packet+0x7af/0x12c0 [ 1360.293973][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1360.294005][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 1360.294036][ T51] ? kcov_remote_start+0x49a/0x7a0 [ 1360.294062][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 1360.294108][ T51] hci_rx_work+0x3ee/0x1040 [ 1360.294164][ T51] ? process_one_work+0x870/0x1720 [ 1360.294193][ T51] process_one_work+0x963/0x1720 [ 1360.294246][ T51] ? __pfx_process_one_work+0x10/0x10 [ 1360.294286][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 1360.294327][ T51] worker_thread+0xb46/0x1140 [ 1360.294384][ T51] kthread+0x388/0x470 [ 1360.294408][ T51] ? __pfx_worker_thread+0x10/0x10 [ 1360.294435][ T51] ? __pfx_kthread+0x10/0x10 [ 1360.294460][ T51] ret_from_fork+0x51e/0xb90 [ 1360.294493][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 1360.294520][ T51] ? __switch_to+0xc7d/0x1450 [ 1360.294549][ T51] ? __pfx_kthread+0x10/0x10 [ 1360.294574][ T51] ret_from_fork_asm+0x1a/0x30 [ 1360.294612][ T51] [ 1360.294641][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1360.348698][T25249] imon:display_open: display port is already open [ 1360.355737][ T51] Bluetooth: hci3: failed to register connection device [ 1360.565669][ T5908] usb 3-1: USB disconnect, device number 39 [ 1360.625179][T25266] [U] è` [ 1360.761021][T25278] FAULT_INJECTION: forcing a failure. [ 1360.761021][T25278] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.774100][T25278] CPU: 1 UID: 0 PID: 25278 Comm: syz.7.6528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.774131][T25278] Tainted: [L]=SOFTLOCKUP [ 1360.774140][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1360.774153][T25278] Call Trace: [ 1360.774162][T25278] [ 1360.774170][T25278] dump_stack_lvl+0xe8/0x150 [ 1360.774206][T25278] should_fail_ex+0x412/0x560 [ 1360.774234][T25278] should_failslab+0xa8/0x100 [ 1360.774268][T25278] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1360.774298][T25278] ? cgroup1_freezing+0x20/0x350 [ 1360.774317][T25278] ? cgroup1_freezing+0x20/0x350 [ 1360.774336][T25278] ? dup_task_struct+0x57/0x9e0 [ 1360.774372][T25278] dup_task_struct+0x57/0x9e0 [ 1360.774405][T25278] ? _raw_spin_unlock_irq+0x23/0x50 [ 1360.774437][T25278] copy_process+0x89b/0x4460 [ 1360.774501][T25278] ? __pfx_copy_process+0x10/0x10 [ 1360.774541][T25278] ? mutex_init_lockdep+0xf9/0x130 [ 1360.774567][T25278] vhost_task_create+0x1f9/0x380 [ 1360.774594][T25278] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1360.774617][T25278] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1360.774643][T25278] ? __pfx_vhost_task_create+0x10/0x10 [ 1360.774677][T25278] ? __pfx_vhost_task_fn+0x10/0x10 [ 1360.774711][T25278] ? __lock_acquire+0x6b5/0x2cf0 [ 1360.774749][T25278] kvm_mmu_post_init_vm+0x14c/0x300 [ 1360.774778][T25278] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1360.774836][T25278] ? __mutex_trylock_common+0x158/0x260 [ 1360.774863][T25278] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1360.774887][T25278] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1360.774913][T25278] ? register_lock_class+0x31/0x2e0 [ 1360.774947][T25278] ? __lock_acquire+0x6b5/0x2cf0 [ 1360.774987][T25278] ? kasan_quarantine_put+0xbb/0x1f0 [ 1360.775017][T25278] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1360.775054][T25278] ? do_raw_write_lock+0x11d/0x260 [ 1360.775109][T25278] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1360.775139][T25278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1360.775161][T25278] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1360.775211][T25278] ? __fget_files+0x2a/0x420 [ 1360.775239][T25278] ? __fget_files+0x2a/0x420 [ 1360.775263][T25278] ? __fget_files+0x3a0/0x420 [ 1360.775288][T25278] ? __fget_files+0x2a/0x420 [ 1360.775317][T25278] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1360.775348][T25278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1360.775371][T25278] __se_sys_ioctl+0xfc/0x170 [ 1360.775407][T25278] do_syscall_64+0x14d/0xf80 [ 1360.775435][T25278] ? trace_irq_disable+0x3b/0x150 [ 1360.775459][T25278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.775481][T25278] ? clear_bhb_loop+0x40/0x90 [ 1360.775506][T25278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.775527][T25278] RIP: 0033:0x7ff697b9c799 [ 1360.775548][T25278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.775566][T25278] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.775590][T25278] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1360.775606][T25278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1360.775619][T25278] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.775631][T25278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.775644][T25278] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1360.775678][T25278] [ 1361.429136][T25291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.444625][T25291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.752642][T25302] FAULT_INJECTION: forcing a failure. [ 1361.752642][T25302] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.767329][T25302] CPU: 0 UID: 0 PID: 25302 Comm: syz.2.6538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.767361][T25302] Tainted: [L]=SOFTLOCKUP [ 1361.767370][T25302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1361.767383][T25302] Call Trace: [ 1361.767392][T25302] [ 1361.767401][T25302] dump_stack_lvl+0xe8/0x150 [ 1361.767437][T25302] should_fail_ex+0x412/0x560 [ 1361.767483][T25302] should_failslab+0xa8/0x100 [ 1361.767517][T25302] __kmalloc_noprof+0xe8/0x760 [ 1361.767552][T25302] ? tomoyo_encode+0x28b/0x550 [ 1361.767588][T25302] tomoyo_encode+0x28b/0x550 [ 1361.767633][T25302] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1361.767680][T25302] tomoyo_check_open_permission+0x229/0x470 [ 1361.767709][T25302] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1361.767736][T25302] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1361.767809][T25302] security_file_open+0xa9/0x240 [ 1361.767837][T25302] do_dentry_open+0x384/0x14e0 [ 1361.767869][T25302] ? vfs_open+0x31/0x340 [ 1361.767897][T25302] vfs_open+0x3b/0x340 [ 1361.767918][T25302] ? path_openat+0x2df0/0x3860 [ 1361.767952][T25302] path_openat+0x2e08/0x3860 [ 1361.767998][T25302] ? __pfx_stack_trace_save+0x10/0x10 [ 1361.768028][T25302] ? stack_depot_save_flags+0x33/0x810 [ 1361.768060][T25302] ? __pfx_path_openat+0x10/0x10 [ 1361.768088][T25302] ? __x64_sys_creat+0x8f/0xc0 [ 1361.768111][T25302] ? do_syscall_64+0x14d/0xf80 [ 1361.768140][T25302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.768170][T25302] ? __lock_acquire+0x6b5/0x2cf0 [ 1361.768208][T25302] do_file_open+0x23e/0x4a0 [ 1361.768244][T25302] ? __pfx_do_file_open+0x10/0x10 [ 1361.768296][T25302] ? _raw_spin_unlock+0x28/0x50 [ 1361.768322][T25302] ? alloc_fd+0x64b/0x6c0 [ 1361.768358][T25302] do_sys_openat2+0x115/0x200 [ 1361.768386][T25302] ? __pfx_do_sys_openat2+0x10/0x10 [ 1361.768413][T25302] ? ksys_write+0x242/0x270 [ 1361.768444][T25302] ? __pfx_ksys_write+0x10/0x10 [ 1361.768479][T25302] __x64_sys_creat+0x8f/0xc0 [ 1361.768508][T25302] do_syscall_64+0x14d/0xf80 [ 1361.768537][T25302] ? trace_irq_disable+0x3b/0x150 [ 1361.768561][T25302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.768582][T25302] ? clear_bhb_loop+0x40/0x90 [ 1361.768607][T25302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.768635][T25302] RIP: 0033:0x7fd4af39c799 [ 1361.768656][T25302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.768674][T25302] RSP: 002b:00007fd4b01d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1361.768696][T25302] RAX: ffffffffffffffda RBX: 00007fd4af615fa0 RCX: 00007fd4af39c799 [ 1361.768712][T25302] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000200000000000 [ 1361.768726][T25302] RBP: 00007fd4b01d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.768738][T25302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.768751][T25302] R13: 00007fd4af616038 R14: 00007fd4af615fa0 R15: 00007ffd868d6c68 [ 1361.768785][T25302] [ 1361.768901][T25302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1362.197839][T25308] FAULT_INJECTION: forcing a failure. [ 1362.197839][T25308] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.210964][T25308] CPU: 0 UID: 0 PID: 25308 Comm: syz.7.6539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.210998][T25308] Tainted: [L]=SOFTLOCKUP [ 1362.211006][T25308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.211019][T25308] Call Trace: [ 1362.211029][T25308] [ 1362.211038][T25308] dump_stack_lvl+0xe8/0x150 [ 1362.211075][T25308] should_fail_ex+0x412/0x560 [ 1362.211103][T25308] should_failslab+0xa8/0x100 [ 1362.211136][T25308] ? alloc_pid+0x1a4/0x1310 [ 1362.211158][T25308] kmem_cache_alloc_noprof+0x87/0x650 [ 1362.211195][T25308] alloc_pid+0x1a4/0x1310 [ 1362.211216][T25308] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1362.211242][T25308] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1362.211269][T25308] ? __pfx_alloc_pid+0x10/0x10 [ 1362.211301][T25308] ? lockdep_hardirqs_on+0x7a/0x110 [ 1362.211332][T25308] ? fpu_clone+0x347/0xbc0 [ 1362.211368][T25308] ? __asan_memcpy+0x40/0x70 [ 1362.211394][T25308] ? copy_thread+0x74b/0x9a0 [ 1362.211431][T25308] copy_process+0x21b2/0x4460 [ 1362.211479][T25308] ? copy_process+0xd68/0x4460 [ 1362.211518][T25308] ? __pfx_copy_process+0x10/0x10 [ 1362.211556][T25308] ? mutex_init_lockdep+0xf9/0x130 [ 1362.211590][T25308] vhost_task_create+0x1f9/0x380 [ 1362.211616][T25308] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1362.211640][T25308] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1362.211664][T25308] ? __pfx_vhost_task_create+0x10/0x10 [ 1362.211696][T25308] ? __pfx_vhost_task_fn+0x10/0x10 [ 1362.211730][T25308] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.211768][T25308] kvm_mmu_post_init_vm+0x14c/0x300 [ 1362.211798][T25308] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1362.211836][T25308] ? __mutex_trylock_common+0x158/0x260 [ 1362.211863][T25308] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1362.211887][T25308] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1362.211913][T25308] ? register_lock_class+0x31/0x2e0 [ 1362.211949][T25308] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.211987][T25308] ? kasan_quarantine_put+0xbb/0x1f0 [ 1362.212018][T25308] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1362.212050][T25308] ? do_raw_write_lock+0x11d/0x260 [ 1362.212092][T25308] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1362.212123][T25308] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1362.212144][T25308] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1362.212197][T25308] ? __fget_files+0x2a/0x420 [ 1362.212226][T25308] ? __fget_files+0x2a/0x420 [ 1362.212251][T25308] ? __fget_files+0x3a0/0x420 [ 1362.212275][T25308] ? __fget_files+0x2a/0x420 [ 1362.212305][T25308] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1362.212337][T25308] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1362.212360][T25308] __se_sys_ioctl+0xfc/0x170 [ 1362.212395][T25308] do_syscall_64+0x14d/0xf80 [ 1362.212424][T25308] ? trace_irq_disable+0x3b/0x150 [ 1362.212446][T25308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.212468][T25308] ? clear_bhb_loop+0x40/0x90 [ 1362.212494][T25308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.212515][T25308] RIP: 0033:0x7ff697b9c799 [ 1362.212535][T25308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.212553][T25308] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.212587][T25308] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1362.212603][T25308] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1362.212617][T25308] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.212630][T25308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.212643][T25308] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1362.212679][T25308] [ 1363.176215][T25332] FAULT_INJECTION: forcing a failure. [ 1363.176215][T25332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1363.218666][T25332] CPU: 0 UID: 0 PID: 25332 Comm: syz.5.6545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.218698][T25332] Tainted: [L]=SOFTLOCKUP [ 1363.218706][T25332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1363.218719][T25332] Call Trace: [ 1363.218728][T25332] [ 1363.218738][T25332] dump_stack_lvl+0xe8/0x150 [ 1363.218773][T25332] should_fail_ex+0x412/0x560 [ 1363.218800][T25332] prepare_alloc_pages+0x22a/0x650 [ 1363.218838][T25332] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1363.218861][T25332] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1363.218884][T25332] ? __pfx_policy_nodemask+0x10/0x10 [ 1363.218916][T25332] ? __free_frozen_pages+0x6e6/0xd60 [ 1363.218950][T25332] alloc_pages_mpol+0x232/0x4a0 [ 1363.218972][T25332] alloc_migration_target_by_mpol+0x2e4/0x5e0 [ 1363.219006][T25332] migrate_pages_batch+0x9e7/0x4d80 [ 1363.219049][T25332] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1363.219078][T25332] ? is_bpf_text_address+0x26/0x2b0 [ 1363.219105][T25332] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1363.219128][T25332] ? kernel_text_address+0xa5/0xe0 [ 1363.219154][T25332] ? __kernel_text_address+0xd/0x30 [ 1363.219176][T25332] ? unwind_get_return_address+0x4d/0x90 [ 1363.219195][T25332] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1363.219220][T25332] ? arch_stack_walk+0xfb/0x150 [ 1363.219249][T25332] ? __mpol_dup+0x79/0x330 [ 1363.219270][T25332] ? stack_trace_save+0xa9/0x100 [ 1363.219305][T25332] ? __pfx_stack_trace_save+0x10/0x10 [ 1363.219330][T25332] ? __mpol_dup+0x79/0x330 [ 1363.219353][T25332] ? stack_depot_save_flags+0x33/0x810 [ 1363.219378][T25332] ? __mpol_dup+0x79/0x330 [ 1363.219398][T25332] ? kasan_save_track+0x4f/0x80 [ 1363.219425][T25332] ? kasan_save_track+0x3e/0x80 [ 1363.219451][T25332] ? __kasan_slab_alloc+0x6c/0x80 [ 1363.219480][T25332] ? mbind_range+0x3d6/0x810 [ 1363.219500][T25332] ? __se_sys_mbind+0xad4/0x10f0 [ 1363.219540][T25332] migrate_pages+0x1c74/0x2a70 [ 1363.219565][T25332] ? __lock_acquire+0x6b5/0x2cf0 [ 1363.219608][T25332] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1363.219641][T25332] ? __pfx_migrate_pages+0x10/0x10 [ 1363.219671][T25332] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 1363.219698][T25332] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 1363.219723][T25332] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 1363.219778][T25332] __se_sys_mbind+0xe89/0x10f0 [ 1363.219818][T25332] ? __pfx___se_sys_mbind+0x10/0x10 [ 1363.219859][T25332] ? fput+0xa0/0xd0 [ 1363.219883][T25332] ? ksys_write+0x242/0x270 [ 1363.219914][T25332] ? __pfx_ksys_write+0x10/0x10 [ 1363.219949][T25332] ? __x64_sys_mbind+0x21/0xf0 [ 1363.219981][T25332] do_syscall_64+0x14d/0xf80 [ 1363.220010][T25332] ? trace_irq_disable+0x3b/0x150 [ 1363.220034][T25332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.220055][T25332] ? clear_bhb_loop+0x40/0x90 [ 1363.220081][T25332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.220102][T25332] RIP: 0033:0x7f2118d9c799 [ 1363.220122][T25332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.220141][T25332] RSP: 002b:00007f2119cc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1363.220165][T25332] RAX: ffffffffffffffda RBX: 00007f2119016180 RCX: 00007f2118d9c799 [ 1363.220181][T25332] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 1363.220195][T25332] RBP: 00007f2119cc3090 R08: 0000000000000000 R09: 0000000000000002 [ 1363.220208][T25332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.220221][T25332] R13: 00007f2119016218 R14: 00007f2119016180 R15: 00007ffced07e678 [ 1363.220255][T25332] [ 1364.053957][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1364.066303][T25348] FAULT_INJECTION: forcing a failure. [ 1364.066303][T25348] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.079260][T25348] CPU: 0 UID: 0 PID: 25348 Comm: syz.7.6550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.079294][T25348] Tainted: [L]=SOFTLOCKUP [ 1364.079303][T25348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1364.079317][T25348] Call Trace: [ 1364.079326][T25348] [ 1364.079336][T25348] dump_stack_lvl+0xe8/0x150 [ 1364.079373][T25348] should_fail_ex+0x412/0x560 [ 1364.079401][T25348] should_failslab+0xa8/0x100 [ 1364.079445][T25348] __kmalloc_cache_noprof+0x88/0x660 [ 1364.079477][T25348] ? kvm_hv_vcpu_init+0x86/0xaf0 [ 1364.079506][T25348] kvm_hv_vcpu_init+0x86/0xaf0 [ 1364.079533][T25348] kvm_hv_set_msr_common+0xe3/0x3760 [ 1364.079561][T25348] ? kasan_save_track+0x3e/0x80 [ 1364.079587][T25348] ? __kasan_kmalloc+0x93/0xb0 [ 1364.079614][T25348] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 1364.079644][T25348] ? memdup_user+0x2b/0xd0 [ 1364.079664][T25348] ? kvm_arch_vcpu_ioctl+0x76b/0x2ff0 [ 1364.079695][T25348] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 1364.079716][T25348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.079750][T25348] kvm_set_msr_common+0x1e9a/0x4350 [ 1364.079786][T25348] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 1364.079825][T25348] vmx_set_msr+0x15cc/0x2810 [ 1364.079860][T25348] __kvm_set_msr+0x616/0xab0 [ 1364.079888][T25348] ? __pfx___kvm_set_msr+0x10/0x10 [ 1364.079920][T25348] ? __pfx_do_set_msr+0x10/0x10 [ 1364.079950][T25348] kvm_set_msr_ignored_check+0x2a/0x390 [ 1364.079976][T25348] ? __pfx_do_set_msr+0x10/0x10 [ 1364.080006][T25348] msr_io+0x3f8/0x8b0 [ 1364.080039][T25348] ? __pfx_do_set_msr+0x10/0x10 [ 1364.080071][T25348] ? __pfx_msr_io+0x10/0x10 [ 1364.080099][T25348] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.080137][T25348] kvm_arch_vcpu_ioctl+0x76b/0x2ff0 [ 1364.080193][T25348] ? kvm_arch_vcpu_ioctl+0x731/0x2ff0 [ 1364.080235][T25348] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1364.080263][T25348] ? unwind_next_frame+0xa5/0x23c0 [ 1364.080306][T25348] ? is_bpf_text_address+0x26/0x2b0 [ 1364.080338][T25348] ? is_bpf_text_address+0x292/0x2b0 [ 1364.080364][T25348] ? is_bpf_text_address+0x26/0x2b0 [ 1364.080394][T25348] ? kernel_text_address+0xa5/0xe0 [ 1364.080421][T25348] ? __kernel_text_address+0xd/0x30 [ 1364.080452][T25348] ? unwind_get_return_address+0x4d/0x90 [ 1364.080472][T25348] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1364.080498][T25348] ? arch_stack_walk+0xfb/0x150 [ 1364.080531][T25348] ? stack_trace_save+0xa9/0x100 [ 1364.080554][T25348] ? __pfx_stack_trace_save+0x10/0x10 [ 1364.080575][T25348] ? kasan_save_free_info+0x46/0x50 [ 1364.080602][T25348] ? stack_depot_save_flags+0x33/0x810 [ 1364.080633][T25348] ? __lock_acquire+0x6b5/0x2cf0 [ 1364.080662][T25348] ? tomoyo_path_number_perm+0x501/0x630 [ 1364.080684][T25348] ? security_file_ioctl+0xc3/0x2a0 [ 1364.080704][T25348] ? __se_sys_ioctl+0x47/0x170 [ 1364.080730][T25348] ? do_syscall_64+0x14d/0xf80 [ 1364.080756][T25348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.080788][T25348] ? __mutex_trylock_common+0x158/0x260 [ 1364.080812][T25348] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1364.080835][T25348] ? rcu_is_watching+0x15/0xb0 [ 1364.080853][T25348] ? trace_contention_end+0x3d/0x150 [ 1364.080875][T25348] ? __mutex_lock+0x319/0x1300 [ 1364.080908][T25348] ? kasan_quarantine_put+0xbb/0x1f0 [ 1364.080937][T25348] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1364.080965][T25348] ? __pfx___mutex_lock+0x10/0x10 [ 1364.080996][T25348] ? tomoyo_path_number_perm+0x219/0x630 [ 1364.081026][T25348] ? do_vfs_ioctl+0x1166/0x1530 [ 1364.081060][T25348] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1364.081095][T25348] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 1364.081124][T25348] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1364.081144][T25348] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1364.081200][T25348] ? __fget_files+0x2a/0x420 [ 1364.081226][T25348] ? __fget_files+0x2a/0x420 [ 1364.081247][T25348] ? __fget_files+0x3a0/0x420 [ 1364.081268][T25348] ? __fget_files+0x2a/0x420 [ 1364.081294][T25348] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1364.081322][T25348] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1364.081343][T25348] __se_sys_ioctl+0xfc/0x170 [ 1364.081374][T25348] do_syscall_64+0x14d/0xf80 [ 1364.081399][T25348] ? trace_irq_disable+0x3b/0x150 [ 1364.081419][T25348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.081446][T25348] ? clear_bhb_loop+0x40/0x90 [ 1364.081469][T25348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.081488][T25348] RIP: 0033:0x7ff697b9c799 [ 1364.081507][T25348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.081523][T25348] RSP: 002b:00007ff6989f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.081544][T25348] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1364.081558][T25348] RDX: 0000200000000280 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1364.081571][T25348] RBP: 00007ff6989f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.081582][T25348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.081594][T25348] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1364.081628][T25348] [ 1364.684839][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1364.729825][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.744050][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1364.757123][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1364.763843][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1364.772991][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.786689][ T10] usb 3-1: config 0 descriptor?? [ 1364.796934][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1365.506497][ T5883] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1365.680265][ T5883] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1365.688655][ T5883] usb 6-1: config 0 has no interface number 0 [ 1365.694844][ T5883] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1365.706056][ T5883] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1365.715998][ T5883] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1365.727229][ T5883] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1365.739565][ T5883] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 1365.748762][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.756958][ T5883] usb 6-1: Product: syz [ 1365.762500][ T5883] usb 6-1: Manufacturer: syz [ 1365.768881][ T5883] usb 6-1: SerialNumber: syz [ 1365.780784][ T5883] usb 6-1: config 0 descriptor?? [ 1365.795331][ T5883] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1365.807840][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.237/input/input202 [ 1366.003833][T25366] Invalid source name [ 1366.007945][T25366] UBIFS error (pid: 25366): cannot open "./file0", error -22 [ 1366.009466][ T5908] usb 6-1: USB disconnect, device number 56 [ 1366.104934][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1366.687802][T25378] forcing mempool usage for bio_alloc_bioset+0x363/0x11b0 [ 1367.000330][ T5908] usb 3-1: USB disconnect, device number 40 [ 1367.128723][T25387] FAULT_INJECTION: forcing a failure. [ 1367.128723][T25387] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.144413][T25387] CPU: 1 UID: 0 PID: 25387 Comm: syz.2.6565 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.144447][T25387] Tainted: [L]=SOFTLOCKUP [ 1367.144455][T25387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1367.144469][T25387] Call Trace: [ 1367.144478][T25387] [ 1367.144487][T25387] dump_stack_lvl+0xe8/0x150 [ 1367.144525][T25387] should_fail_ex+0x412/0x560 [ 1367.144552][T25387] should_failslab+0xa8/0x100 [ 1367.144585][T25387] ? dst_alloc+0x105/0x1b0 [ 1367.144604][T25387] kmem_cache_alloc_noprof+0x87/0x650 [ 1367.144640][T25387] dst_alloc+0x105/0x1b0 [ 1367.144664][T25387] ip_route_output_key_hash_rcu+0x14d0/0x25f0 [ 1367.144693][T25387] ? ip_route_output_key_hash_rcu+0x1c51/0x25f0 [ 1367.144729][T25387] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1367.144758][T25387] ip_route_output_key_hash+0x18d/0x2a0 [ 1367.144789][T25387] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1367.144833][T25387] ip_route_output_flow+0x2a/0x150 [ 1367.144857][T25387] ? security_sk_classify_flow+0x6d/0x150 [ 1367.144885][T25387] raw_sendmsg+0x1199/0x1a50 [ 1367.144926][T25387] ? __pfx_raw_sendmsg+0x10/0x10 [ 1367.144987][T25387] ? __pfx_aa_sk_perm+0x10/0x10 [ 1367.145023][T25387] ? sock_rps_record_flow+0x19/0x350 [ 1367.145056][T25387] ? inet_sendmsg+0x2f4/0x370 [ 1367.145088][T25387] ? __pfx_inet_sendmsg+0x10/0x10 [ 1367.145116][T25387] sock_sendmsg_nosec+0xf9/0x150 [ 1367.145142][T25387] ____sys_sendmsg+0x589/0x8c0 [ 1367.145179][T25387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1367.145217][T25387] ? import_iovec+0x73/0xa0 [ 1367.145245][T25387] ___sys_sendmsg+0x2a5/0x360 [ 1367.145281][T25387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1367.145347][T25387] ? __fget_files+0x2a/0x420 [ 1367.145372][T25387] ? __fget_files+0x3a0/0x420 [ 1367.145408][T25387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1367.145442][T25387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1367.145482][T25387] ? __pfx_ksys_write+0x10/0x10 [ 1367.145525][T25387] do_syscall_64+0x14d/0xf80 [ 1367.145556][T25387] ? trace_irq_disable+0x3b/0x150 [ 1367.145579][T25387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.145602][T25387] ? clear_bhb_loop+0x40/0x90 [ 1367.145631][T25387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.145652][T25387] RIP: 0033:0x7fd4af39c799 [ 1367.145672][T25387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.145689][T25387] RSP: 002b:00007fd4b01d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1367.145712][T25387] RAX: ffffffffffffffda RBX: 00007fd4af615fa0 RCX: 00007fd4af39c799 [ 1367.145727][T25387] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1367.145741][T25387] RBP: 00007fd4b01d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.145754][T25387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.145767][T25387] R13: 00007fd4af616038 R14: 00007fd4af615fa0 R15: 00007ffd868d6c68 [ 1367.145799][T25387] [ 1367.846242][ T5908] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1368.019322][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.031105][ T5908] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1368.040534][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.052915][ T5908] usb 3-1: config 0 descriptor?? [ 1368.507576][ T5908] hid_parser_main: 28 callbacks suppressed [ 1368.507601][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.523075][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.530661][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.539480][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.549404][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.556862][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.564429][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.571769][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.579266][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.580438][T25371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1368.586668][ T5908] dragonrise 0003:0079:0006.0035: unknown main item tag 0x0 [ 1368.587857][ T5908] dragonrise 0003:0079:0006.0035: item fetching failed at offset 58/235 [ 1368.618868][ T5908] dragonrise 0003:0079:0006.0035: parse failed [ 1368.625203][ T5908] dragonrise 0003:0079:0006.0035: probe with driver dragonrise failed with error -22 [ 1368.750851][ T10] usb 3-1: USB disconnect, device number 41 [ 1368.944243][ T5908] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1369.480902][ T5883] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1369.652278][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1369.659953][ T5883] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.673489][ T5883] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=30.f4 [ 1369.682605][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.690859][ T5883] usb 6-1: Product: syz [ 1369.695224][ T5883] usb 6-1: Manufacturer: syz [ 1369.701177][ T5883] usb 6-1: SerialNumber: syz [ 1369.876039][ T5908] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1369.934529][ T5883] imon_raw 6-1:128.0: IR endpoint missing [ 1369.943470][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1369.953138][ T5883] usb 6-1: USB disconnect, device number 57 [ 1370.059826][ T5908] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1370.068486][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.081808][ T5908] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1370.091500][ T5908] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1370.099556][ T5908] usb 3-1: Manufacturer: syz [ 1370.107521][ T5908] usb 3-1: config 0 descriptor?? [ 1370.189860][ T5908] rc_core: IR keymap rc-hauppauge not found [ 1370.195836][ T5908] Registered IR keymap rc-empty [ 1370.202759][ T5908] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1370.217200][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input203 [ 1370.390986][ T5883] usb 3-1: USB disconnect, device number 42 [ 1370.828599][ T5883] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1370.999836][ T5883] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1371.012511][ T5883] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.022563][ T5883] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1371.029214][ T5883] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1371.038332][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.501736][ T5883] elo 0003:04E7:0009.0037: report_id 0 is invalid [ 1371.508483][ T5883] elo 0003:04E7:0009.0037: item 0 0 1 8 parsing failed [ 1371.516548][ T5883] elo 0003:04E7:0009.0037: parse failed [ 1371.522558][ T5883] elo 0003:04E7:0009.0037: probe with driver elo failed with error -22 [ 1371.550877][T25453] syzkaller1: entered promiscuous mode [ 1371.559698][T25453] syzkaller1: entered allmulticast mode [ 1371.580643][T25453] kernel read not supported for file /file1 (pid: 25453 comm: syz.6.6586) [ 1371.591541][ T30] audit: type=1800 audit(1772809452.974:60): pid=25453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6586" name="file1" dev="mqueue" ino=139331 res=0 errno=0 [ 1372.791297][T25432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.881612][ T5883] usb 3-1: USB disconnect, device number 43 [ 1372.970168][T25472] fuse: Bad value for 'user_id' [ 1372.982209][T25472] fuse: Bad value for 'user_id' [ 1373.066579][T25477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.076650][T25477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.092649][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1373.465958][ T5883] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1373.643758][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 1373.660316][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1373.683525][ T5883] usb 6-1: config 4 has an invalid interface number: 112 but max is 0 [ 1373.703017][ T5883] usb 6-1: config 4 has no interface number 0 [ 1373.720101][ T5883] usb 6-1: config 4 interface 112 has no altsetting 0 [ 1373.742640][ T5883] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 1373.759235][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.769154][ T5883] usb 6-1: Product: syz [ 1373.773535][ T5883] usb 6-1: Manufacturer: syz [ 1373.778485][ T5883] usb 6-1: SerialNumber: syz [ 1373.891865][T25498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.901440][T25498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.919737][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6600'. [ 1374.071621][T25499] kernel read not supported for file /file1 (pid: 25499 comm: syz.5.6595) [ 1374.082227][ T30] audit: type=1800 audit(1772809455.314:61): pid=25499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6595" name="file1" dev="mqueue" ino=138797 res=0 errno=0 [ 1374.615903][T25503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.787111][T25517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.796552][T25517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.969144][T25492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.075524][T25518] ------------[ cut here ]------------ [ 1377.081409][T25518] !valid_signal(sig) [ 1377.081442][T25518] WARNING: kernel/signal.c:2174 at do_notify_parent+0xd18/0xe30, CPU#1: syz.7.6605/25518 [ 1377.095229][T25518] Modules linked in: [ 1377.099667][T25518] CPU: 1 UID: 0 PID: 25518 Comm: syz.7.6605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.110671][T25518] Tainted: [L]=SOFTLOCKUP [ 1377.115017][T25518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1377.125083][T25518] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 1377.130745][T25518] Code: c6 05 18 08 b2 0e 01 48 c7 c7 80 4c eb 8b be a3 08 00 00 48 c7 c2 00 4e eb 8b e8 93 6e 17 00 e9 2e fa ff ff e8 19 1e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 08 1e 3b 00 90 0f 0b 90 e9 db [ 1377.150374][T25518] RSP: 0018:ffffc900055a7c40 EFLAGS: 00010093 [ 1377.156462][T25518] RAX: ffffffff818bc007 RBX: dffffc0000000000 RCX: ffff88802cf83d00 [ 1377.164454][T25518] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1377.172435][T25518] RBP: ffffc900055a7d90 R08: 0000000000000003 R09: 0000000000000004 [ 1377.180423][T25518] R10: dffffc0000000000 R11: fffff52000ab4fa4 R12: ffff888029cff410 [ 1377.188416][T25518] R13: ffff88802cf83d00 R14: 0000000000000080 R15: 1ffff92000ab4f90 [ 1377.196403][T25518] FS: 0000000000000000(0000) GS:ffff888124ee6000(0000) knlGS:0000000000000000 [ 1377.205376][T25518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.211973][T25518] CR2: 00007f876a74da08 CR3: 000000005e21e000 CR4: 00000000003526f0 [ 1377.219962][T25518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1377.227947][T25518] DR3: 000000000000ffe8 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1377.235945][T25518] Call Trace: [ 1377.239270][T25518] [ 1377.242224][T25518] ? do_raw_spin_lock+0x12b/0x2f0 [ 1377.247275][T25518] ? __pfx_do_notify_parent+0x10/0x10 [ 1377.252678][T25518] ? do_raw_write_lock+0x11d/0x260 [ 1377.257818][T25518] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1377.263304][T25518] ? kill_orphaned_pgrp+0x170/0x610 [ 1377.268558][T25518] do_exit+0x15b3/0x2580 [ 1377.272855][T25518] ? __pfx_do_exit+0x10/0x10 [ 1377.277474][T25518] ? rcu_is_watching+0x15/0xb0 [ 1377.282271][T25518] __x64_sys_exit+0x40/0x40 [ 1377.286801][T25518] x64_sys_call+0x2231/0x2240 [ 1377.291494][T25518] do_syscall_64+0x14d/0xf80 [ 1377.296107][T25518] ? trace_irq_disable+0x3b/0x150 [ 1377.301189][T25518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.307277][T25518] ? clear_bhb_loop+0x40/0x90 [ 1377.311976][T25518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.317905][T25518] RIP: 0033:0x7ff697b9c799 [ 1377.322442][T25518] Code: Unable to access opcode bytes at 0x7ff697b9c76f. [ 1377.329561][T25518] RSP: 002b:00007ff6989f7fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1377.338079][T25518] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1377.346121][T25518] RDX: 00007ff6989f89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.354108][T25518] RBP: 00007ff697c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1377.362244][T25518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.370248][T25518] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1377.378253][T25518] [ 1377.381306][T25518] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1377.388783][T25518] CPU: 1 UID: 0 PID: 25518 Comm: syz.7.6605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.399729][T25518] Tainted: [L]=SOFTLOCKUP [ 1377.404065][T25518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1377.414134][T25518] Call Trace: [ 1377.417429][T25518] [ 1377.420518][T25518] vpanic+0x56c/0xa60 [ 1377.424523][T25518] ? __pfx__printk+0x10/0x10 [ 1377.429131][T25518] ? __pfx_vpanic+0x10/0x10 [ 1377.433740][T25518] ? is_bpf_text_address+0x292/0x2b0 [ 1377.439043][T25518] ? is_bpf_text_address+0x26/0x2b0 [ 1377.444270][T25518] panic+0xc5/0xd0 [ 1377.448006][T25518] ? __pfx_panic+0x10/0x10 [ 1377.452449][T25518] __warn+0x315/0x4f0 [ 1377.456445][T25518] ? do_notify_parent+0xd18/0xe30 [ 1377.461497][T25518] ? do_notify_parent+0xd18/0xe30 [ 1377.466546][T25518] __report_bug+0x29a/0x540 [ 1377.471071][T25518] ? task_work_run+0x1d9/0x270 [ 1377.475852][T25518] ? do_exit+0x926/0x2580 [ 1377.480200][T25518] ? __x64_sys_exit+0x40/0x40 [ 1377.484900][T25518] ? do_notify_parent+0xd18/0xe30 [ 1377.489949][T25518] ? __pfx___report_bug+0x10/0x10 [ 1377.495013][T25518] ? do_notify_parent+0xd18/0xe30 [ 1377.500058][T25518] report_bug+0x16a/0x220 [ 1377.504422][T25518] ? do_notify_parent+0xd18/0xe30 [ 1377.509476][T25518] ? do_notify_parent+0xd1a/0xe30 [ 1377.514634][T25518] handle_bug+0x9c/0x200 [ 1377.518918][T25518] exc_invalid_op+0x1a/0x50 [ 1377.523440][T25518] asm_exc_invalid_op+0x1a/0x20 [ 1377.528318][T25518] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 1377.533975][T25518] Code: c6 05 18 08 b2 0e 01 48 c7 c7 80 4c eb 8b be a3 08 00 00 48 c7 c2 00 4e eb 8b e8 93 6e 17 00 e9 2e fa ff ff e8 19 1e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 08 1e 3b 00 90 0f 0b 90 e9 db [ 1377.553601][T25518] RSP: 0018:ffffc900055a7c40 EFLAGS: 00010093 [ 1377.559698][T25518] RAX: ffffffff818bc007 RBX: dffffc0000000000 RCX: ffff88802cf83d00 [ 1377.567709][T25518] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1377.575699][T25518] RBP: ffffc900055a7d90 R08: 0000000000000003 R09: 0000000000000004 [ 1377.583684][T25518] R10: dffffc0000000000 R11: fffff52000ab4fa4 R12: ffff888029cff410 [ 1377.591679][T25518] R13: ffff88802cf83d00 R14: 0000000000000080 R15: 1ffff92000ab4f90 [ 1377.599671][T25518] ? do_notify_parent+0xd17/0xe30 [ 1377.604727][T25518] ? do_raw_spin_lock+0x12b/0x2f0 [ 1377.609770][T25518] ? __pfx_do_notify_parent+0x10/0x10 [ 1377.615196][T25518] ? do_raw_write_lock+0x11d/0x260 [ 1377.620375][T25518] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1377.625874][T25518] ? kill_orphaned_pgrp+0x170/0x610 [ 1377.631118][T25518] do_exit+0x15b3/0x2580 [ 1377.635405][T25518] ? __pfx_do_exit+0x10/0x10 [ 1377.640017][T25518] ? rcu_is_watching+0x15/0xb0 [ 1377.644808][T25518] __x64_sys_exit+0x40/0x40 [ 1377.649331][T25518] x64_sys_call+0x2231/0x2240 [ 1377.654027][T25518] do_syscall_64+0x14d/0xf80 [ 1377.658645][T25518] ? trace_irq_disable+0x3b/0x150 [ 1377.663686][T25518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.669778][T25518] ? clear_bhb_loop+0x40/0x90 [ 1377.674497][T25518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.680665][T25518] RIP: 0033:0x7ff697b9c799 [ 1377.685092][T25518] Code: Unable to access opcode bytes at 0x7ff697b9c76f. [ 1377.692120][T25518] RSP: 002b:00007ff6989f7fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1377.700549][T25518] RAX: ffffffffffffffda RBX: 00007ff697e15fa0 RCX: 00007ff697b9c799 [ 1377.708559][T25518] RDX: 00007ff6989f89c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.716543][T25518] RBP: 00007ff697c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1377.724543][T25518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.732547][T25518] R13: 00007ff697e16038 R14: 00007ff697e15fa0 R15: 00007fff1dacae78 [ 1377.740566][T25518] [ 1378.879106][T25518] Shutting down cpus with NMI [ 1378.884463][T25518] Kernel Offset: disabled [ 1378.888814][T25518] Rebooting in 86400 seconds..