last executing test programs: 6m5.637086354s ago: executing program 32 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2dc197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf8", 0x6e}], 0x1}}], 0x2, 0x2090) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setreuid(0xee01, 0xee01) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0xfffffffffffffffe}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_extract_tcp_res(0x0, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0x7ffffffff000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4111, 0x100f, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) write$P9_RVERSION(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write$P9_RCLUNK(r7, 0x0, 0x0) write(r8, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 6m2.595513014s ago: executing program 33 (id=101): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x40, 0x4b8, 0x21e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xf7, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000003ac0)=ANY=[@ANYBLOB="12010003000000406b1d0101400001020301090284000301b040000904000000010100000a240104002e000201020924030601040402040f240602040401000000ed89bb96000c240204"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4d, &(0x7f0000000640)=@string={0x4d, 0x3, "1e5c9917b3f62116ab90d0865ce8e7f23704de3f961feb168f2a7be9f829fc5eaeb5c09f44a57a8ff45bd24d7cf1d040bbc851ede80d99f505596c5aee03111f22ea8331780efd303faf14"}}, {0xa3, &(0x7f0000000200)=@string={0xa3, 0x3, "5371376c9034619a6770c94aa5b1d1e353f50eb2bf8266aa489cfd6d905409708bfe70b7f6a2d99e404b461db674946c35cf5b52531495ea9bff6253fbf94c46a5586c431266b3acc25f93d46f8bbb91f1e0c61060df2ba05c68b4f2ff5865958950c9dbb2f5d4f63287a701043677f47dd28efa102263064215867bf03811c58799a2488a419afb3ae021438612ecf176fe5c0ce79ff5743803cdadc0b57613ab"}}, {0xc5, &(0x7f00000002c0)=@string={0xc5, 0x3, "108000fec5969a6447644f477a6a7c525d4b67508b68f582ae159ae883630a416b16adcf0c886e574235f31736e4211fb46db1801c547a5583786fcdf7b6be65307021bb41ce85d76bcb727f72ce6dbaeb369e0b952b8f74d37ffbd779afb549748a4004dd40568b1ed678a11a209ed7c12a2caa3d4885cd565e5a7c0261b0d74a4163ddd4eae8e2408828ac0df03994e8dce5832737b4dbd03b751730ac833a7061fdd376f2a6d96905000000e1b1bac603e82720b4535785073aefc1485f8046e060"}}, {0x9f, &(0x7f00000006c0)=@string={0x9f, 0x3, "844888a27d5a375a9b95b2472a2965b0cda611236be01ed68c503cab3c29d5a466d3610304381cad070dc7ec89b4f001f0a7de3d4939d25a361fbc5c2d8dbb1839833890ee88fe3ae6f84278b26db8a11ab9e3e354410f5441716fa36b6106ee6f877463058fec61ae07d1f47ecc52a5a8edb98343dbf483f1f89001f50a2930fadae0e82d453cfcf1d27b242deca684be527b9add1afda39cc193baf5"}}, {0xc6, &(0x7f0000000540)=@string={0xc6, 0x3, "addca5d27465b8ee44165092d5c837728baece0d5fbf9df5cec30cdb78b1574e6d8354fd82dc5d54482a5ee476b0f31bdd828ae9e98a508607e4fbb4364f9bb9aba8c42c57403d35a2c1e4f9a4ae82bde1fa067a1512542d73b171c666243bd9fc48a180cac52a8e7d5d2672e844531046f95a73fc11f9dce0f865e09efa1c02756c75bef5b3c1274f9eff372222ea0b2cce46169ed059c96d5bc0f840ac93e287a54eaa18fdfa9387714f2ce621adc3d3026ca07ed230187fea7ab7a42f96988c72dd65"}}]}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dfd, 0xffffffffffffffff) 5m54.89845134s ago: executing program 34 (id=123): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0xffffff7f}, 0x80, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x7ff, 0x4, {{0x2d, 0x4, 0x1, 0x1, 0xb4, 0x65, 0x0, 0x2d, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x44, 0x6, "f0f66576"}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x34, 0xfb, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote}, {@broadcast, 0x3}, {@multicast2, 0x1}, {@broadcast, 0x3}, {@private=0xa010100, 0x10000}]}, @timestamp={0x44, 0x1c, 0xbf, 0x0, 0x1, [0x9, 0x9, 0x8, 0xfffffff8, 0x8, 0x6]}, @generic={0x89, 0x10, "62c4346a38649265cf0e8221d4f8"}, @timestamp_addr={0x44, 0x34, 0xdb, 0x1, 0x7, [{@remote, 0x4}, {@loopback, 0x4a34}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010101, 0xffffffff}, {@loopback, 0xf}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r9, 0x1, {0x1, 0xff}, 0x3}, 0x18, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x44804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x38, 0x93, 0x30, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x80, 0x7800, 0x7, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x9, 0xe4, 0x8, @mcast1, @private2, 0x1, 0x7800, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x98, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0xfffffffffffffe0d) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, 0x0, 0x24000840) r13 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40090c1) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) r14 = add_key$fscrypt_v1(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r14) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 5m34.849900328s ago: executing program 35 (id=220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 5m33.55347715s ago: executing program 36 (id=228): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) r1 = syz_usb_connect$hid(0x3, 0xfffffffffffffd1f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x22d4, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x4c, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xf0, 0x2}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000780), 0x0}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f00000000c0)=[@nested_load_code={0x12e, 0x68, {0x2, "c744240018000000c744240200000000ff1c2466baa000b000ee0f01c8c481fd2f4900c463857f7777070f3accdc060fc75800c48205b60bb97a080000b840000000ba000000000f30b93b0300000f32"}}, @wrmsr={0x65, 0x20, {0xa06, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x5b, {0x2, "66450f3881760266b856008ee8c4e2f9dd7d51400f350f780e0f20e035000020000f22e02626430f005500f3440fc737b9800000c00f3235004000000f30835ce5b000"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xa3, 0x0, 0x95, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x6}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0xfffffffffffffff8, 0x1}}, @out_dx={0x6a, 0x28, {0xc049, 0x1, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x6, 0x6, 0x2, 0x5}}, @nested_load_code={0x12e, 0x69, {0x3, "2e66f043ff8410b9a00000b9800000c00f3235001000000f30b91b030000b81d000000ba000000000f30640f01dfc402fd1d2e660fedca66b852000f00d0c4213d743ca1b9120800000f32c461dcc23894"}}, @code={0xa, 0x62, {"66baf80cb898556183ef66bafc0cec650f017b022e2e420f1c36f2460f005c3f728f4968013d2384a5640f18d3b9800000c00f3235000100000f30c4e1a173fa1566480f3a226ef53d410f189fd7800000"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x6c, {0x3, "440f20c03504000000440f22c0c4c2990317c462299e9b000000000f01c366baf80cb8cdb1698def66bafc0cb000ee470f32660f388118f3676745cfb9fd080000b80c000000ba000000000f30b9b80200000f32"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xb9, 0xffffffff, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x100}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x280a, 0x1, 0xad3, 0x7}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x2027, 0x5, 0x8001}}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x201}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x6002, 0xc3bc, 0x3, 0x4}}], 0x54a}) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) ppoll(&(0x7f0000000680)=[{r2, 0x1000}], 0x1, &(0x7f0000000700)={r3, r4+60000000}, &(0x7f0000000740)={[0x8001]}, 0x8) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}) 5m29.725875225s ago: executing program 37 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x19cc}}, 0x0) 5m15.234241622s ago: executing program 38 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, 0x0, 0xb35, 0x70bd23, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0xa0) 5m13.784002138s ago: executing program 39 (id=317): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0eb"]}, 0xe0}], 0x1}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="30d49ed86d24", 0x6, 0xfffffffffffffffc) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x741, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1011, 0x0, 0xffffffff, 0x0, 0x0, 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x27) 5m11.524593945s ago: executing program 40 (id=322): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000200)=[@wr_crn={0x67, 0x20, {0x4, 0xcef}}, @code={0xa, 0x5a, {"460f008700500000653e450fc776016565542e410f3566baf80cb84449ff8fef660f3833c4edc481ffe680020000803666459bb805000000b956000000400f214c3e42f69500280000"}}], 0x7a}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0xffffffff, 0x202}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4c20}}, './file0\x00'}) mmap$dsp(&(0x7f0000a01000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000087e000/0x2000)=nil, 0x2000, 0xd000, 0x7, &(0x7f0000753000/0xd000)=nil) clock_getres(0x2, &(0x7f0000000040)) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x1, 0x68764503a78b294f, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 5m6.998349391s ago: executing program 41 (id=329): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "020a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m0.417840006s ago: executing program 42 (id=335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$caif_stream(0x25, 0x1, 0x1) sendmmsg$inet(r5, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="f6c4c90563f2", 0x6}], 0x1}}], 0x1, 0x8004) sendmmsg$inet(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000200)={0x1, 0x800000, 0x0, 0x400000, 0x17, "3eccd8000000000000000010000000040100"}) sendto$inet(r4, &(0x7f0000000c00)="f6", 0x1, 0xc008810, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x200000}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) splice(r4, 0x0, r7, 0x0, 0x7ffff000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m56.659368178s ago: executing program 43 (id=341): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x0, 0x400}) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) ioctl$FE_SET_VOLTAGE(r3, 0x6f43, &(0x7f00000001c0)=0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000500)=[0x80000000, 0x9, 0x7, 0x6, 0x2, 0x1, 0x9, 0x40, 0x9826, 0xbfc5, 0x66ff, 0x1e1e, 0x6, 0x9, 0x80, 0x4, 0xffffffff, 0x9, 0x8, 0x7, 0x3114c66d, 0x1, 0x5, 0x2, 0xc, 0x9, 0x9, 0x0, 0x2, 0x4, 0xfffffffa, 0xe23d, 0x0, 0x7fff, 0xa, 0x2778c, 0x3, 0xfffff821, 0xd, 0x7, 0xffffffff, 0x7fffffff, 0x8, 0x4, 0x6, 0x5788830c, 0xfffff800, 0x8, 0xd, 0x9, 0xe5, 0x1, 0x301, 0x7f, 0x5, 0x0, 0x3, 0x5, 0x2, 0x7fff, 0x8, 0x7, 0x2ec7, 0xd1be, 0x8, 0x10000000, 0x7, 0x200, 0x5, 0x101, 0xfffffffc, 0x4, 0x7fffffff, 0x7, 0x7, 0x200, 0x5, 0x5a, 0x4, 0x6, 0x6, 0x4, 0x10001, 0x1, 0x8, 0x5, 0x9, 0x7, 0x0, 0x0, 0x7, 0x76, 0x7, 0x3, 0x0, 0xffff8001, 0x80000001, 0x491, 0xfffffffc, 0x7, 0x1, 0x2, 0x0, 0x5, 0xf04, 0x1000, 0x545, 0x3, 0xffffffff, 0x5, 0x0, 0xfff, 0x3, 0x0, 0x101, 0x3, 0x9, 0x401, 0x8001, 0x40800, 0xffffff1b, 0x8, 0x9, 0xa, 0x9, 0x81, 0x9, 0x5, 0x566, 0x2, 0x6, 0x9798, 0xe, 0x3, 0x4, 0x9, 0x2400000, 0x4, 0x8, 0x5, 0x1, 0x9, 0x68245e0d, 0xfffffffe, 0x4, 0x9, 0x10a60a18, 0x3, 0x800, 0x4, 0x8, 0xb, 0x7f, 0x7, 0xffff, 0x3, 0x2, 0x400, 0x79d, 0x1, 0xca7, 0x3, 0x0, 0xe, 0x1, 0xdeb, 0x2, 0x8, 0x1, 0xafcb, 0x80000001, 0x4, 0x1, 0x10001, 0x2, 0x4, 0x4, 0xfffffffa, 0xc4fb, 0x7, 0x0, 0x4, 0x650, 0x6, 0xb26, 0x1, 0x80000001, 0x2, 0x5, 0x6, 0x2, 0xc, 0x6, 0x80, 0x6, 0xc, 0x5, 0xe, 0x6, 0x5, 0x10, 0x8, 0x1, 0xffff0000, 0x9, 0x7, 0x8, 0x1, 0x3, 0x9, 0x7, 0x5, 0x8bcb, 0x5, 0x1, 0x3, 0x0, 0x0, 0x2, 0x7, 0x8, 0xffffff92, 0x72e, 0x2c, 0x7, 0x6, 0x40, 0xe, 0x80000000, 0xf88, 0x8, 0x1, 0x6, 0xffffff42, 0x4, 0x9, 0x9472, 0x3, 0x0, 0xd, 0x3ecea589, 0x101, 0x5, 0xe, 0xffff, 0x3, 0x3, 0x9, 0x2, 0x0, 0xffff, 0x2, 0x3, 0x81, 0xfffffff8, 0x7, 0x5, 0x0, 0x7f, 0x7ff, 0xffffffff, 0xe3f, 0x54, 0x0, 0xfffffc01, 0x10000, 0x8001, 0xfffffff7, 0x4, 0x9, 0x2, 0xe0, 0x81, 0x80000000, 0x5, 0x1000000, 0x7fff, 0x1, 0x2, 0x7fff, 0xfff, 0x634, 0x7f, 0x15d, 0x1, 0x0, 0x9, 0xc, 0x1, 0x5, 0x2, 0xe, 0x10, 0x5, 0x4000, 0x1000, 0x9b70, 0x0, 0xd1, 0x40, 0xaafc, 0x80000000, 0x2, 0x401, 0x4, 0x8, 0x5, 0xc, 0x1, 0x255, 0x8, 0x0, 0x4, 0x3, 0xfffff224, 0xffff7fff, 0x10001, 0xfffffffa, 0xe, 0x8, 0x7fff, 0x7, 0x6, 0x0, 0xf9, 0x81, 0x9, 0x5, 0xa4, 0x7, 0x5c655071, 0x242, 0x10, 0x6, 0x2, 0x9, 0x80000000, 0x8, 0x4, 0x0, 0x80, 0xbc7b, 0x1, 0xc, 0x2, 0x8001, 0x10001, 0x0, 0xebc8d933, 0x4, 0x800, 0x1000, 0x9, 0x4, 0x9, 0xff, 0x1, 0x7, 0x0, 0xffffffff, 0x6, 0xf8, 0x2, 0xb, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x1a, 0x5, 0x1000, 0x6, 0x1, 0x7b, 0x8, 0x8, 0x4, 0x401, 0x100, 0x4709bf51, 0x3, 0xd2c, 0xc5d, 0x4, 0x0, 0x64e, 0x100, 0x8, 0x4, 0x4f5, 0x1, 0x80000000, 0x8, 0x8, 0x0, 0x8, 0x9, 0x9, 0x3, 0x7, 0x4, 0x2, 0x5, 0x800, 0x0, 0x8, 0x0, 0x10001, 0x4, 0xff, 0x2, 0x8, 0x6, 0x50000, 0x1, 0xab87, 0x0, 0x8, 0x9, 0x401, 0xa6f, 0xc60, 0x8, 0x4, 0x8, 0x40, 0x7d, 0x1, 0xae8c, 0x10000, 0x3, 0x3, 0x5, 0x3ff, 0x82, 0xf, 0x3, 0x0, 0x6, 0x4d669a2, 0x7, 0x0, 0x8001, 0x4, 0x1, 0x2, 0x9, 0x9, 0x7, 0xc695, 0xffff, 0x100, 0x7, 0x7047, 0x8, 0x8, 0x2, 0x0, 0x57, 0x80000000, 0x9, 0x0, 0xa, 0x7, 0x7fffffff, 0x5, 0x6, 0x101, 0xa1b, 0x49cb, 0x4, 0x4, 0x5, 0x1, 0x0, 0x3, 0xfffffbff, 0x401, 0x0, 0xb5, 0x9, 0x7, 0x2, 0x5, 0x800, 0xfffffff7, 0xe6, 0xae, 0x6, 0xffff, 0x80000001, 0x9, 0x6, 0x4, 0x5, 0x5, 0xdde2, 0x3, 0x0, 0x7fffffff, 0x81, 0xfffffffd, 0xffff, 0x8, 0x101, 0x2, 0x0, 0x3, 0x4bf, 0x7, 0xfffffffc, 0xa, 0x2, 0x6f60, 0x72b, 0x8000, 0x8, 0x2, 0x5, 0x1000, 0x780f, 0x7, 0xd4, 0x5, 0x6, 0x213, 0x71, 0x4b2f, 0x4, 0x6, 0x4, 0x5, 0x831, 0x8, 0x1, 0x2, 0x8, 0xb78, 0x5, 0x2, 0x2, 0x5, 0x1, 0x9, 0x3, 0x6, 0x101, 0xfffffffa, 0x0, 0x4, 0xfffffff9, 0x101, 0x6, 0x9, 0xd84, 0x0, 0x9, 0x6, 0x8, 0x6, 0x3d, 0x1000, 0x4, 0x7f3d, 0x0, 0x6, 0x5, 0x2, 0x8, 0x2, 0x4, 0x4, 0x0, 0x0, 0x8, 0x5, 0x400, 0x2, 0x0, 0x8d8, 0xd, 0x0, 0x5, 0xd9f, 0x3, 0x1, 0x9, 0xb, 0x8, 0x101, 0x17e18cbf, 0x9, 0xb17a, 0x7, 0xe36, 0x85, 0x0, 0x4, 0x8, 0xf, 0xd39c, 0x4, 0x5, 0x200, 0x4, 0x8, 0x10001, 0x4, 0x0, 0x10001, 0x7, 0x8000, 0x6, 0x810000, 0x9, 0x72, 0x200, 0x3, 0x90, 0x7ff, 0x0, 0xfffffff1, 0xfb9, 0x6, 0x9, 0x9, 0xd, 0x1, 0x0, 0xff, 0x3, 0xba000000, 0x8000, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x4, 0x6, 0x7, 0x5b, 0x8, 0x3, 0x1, 0x5, 0x7, 0xa, 0x1, 0x7, 0xffff2960, 0x7, 0xc69, 0x10, 0x0, 0x1, 0x790d23f5, 0x7, 0x1, 0xfffffc01, 0x1ff, 0xca, 0x6, 0x1, 0x3, 0x8, 0x3, 0x9, 0x80, 0xc2, 0x0, 0x5, 0x9, 0x4, 0x1, 0x401, 0x7, 0xb, 0x6, 0x1, 0x101, 0x100, 0x1000, 0x0, 0x9, 0xd3e, 0xb72e, 0x5, 0xffffffff, 0x3, 0x80000001, 0x400, 0x3f, 0x514, 0xffffffc0, 0xd, 0x2, 0x8001, 0x5, 0x2, 0x7fffffff, 0x1, 0x2e0f, 0x7, 0x8, 0x7f, 0x1, 0x6, 0xa, 0x89, 0x1, 0xb, 0xd, 0x1, 0x8, 0x9, 0x4, 0x1, 0x7, 0x2, 0x7, 0x100, 0x9, 0x3, 0xe, 0x8001, 0x5, 0x0, 0x76ae, 0x401, 0x80000000, 0x8a92723, 0x3, 0x2, 0x0, 0xfffc0000, 0x26, 0x3, 0x8, 0x0, 0x9, 0x7, 0x7, 0x8, 0xfa8, 0x8, 0x2, 0xc9, 0xfffffffa, 0xb7bd, 0xb, 0xe3c, 0x2, 0x695, 0x3, 0x60f8, 0x4, 0x6, 0x9, 0xd0, 0x1, 0x1, 0x7, 0x401, 0x4, 0x3, 0x26e, 0x1, 0x4, 0x5cc, 0x5, 0x3, 0x9f4, 0x9, 0xf6ba, 0x40, 0xffff, 0x10000, 0x17146d92, 0x8, 0x6, 0x0, 0x100, 0xfffffff8, 0x39, 0x1, 0x5, 0x100, 0x3, 0x6a, 0x9, 0x4, 0x6, 0x9, 0x80000001, 0x8, 0x0, 0x9, 0x9, 0x80000000, 0xde2239f0, 0x6, 0x9, 0x419d, 0x5, 0x3, 0x3, 0x8, 0x1, 0x8, 0x7, 0x7fff, 0x6be, 0x9, 0x100, 0x0, 0xffffffff, 0x400, 0x2, 0x8, 0x600000, 0xfffffffd, 0xc0, 0xd1, 0x5, 0xa5, 0x9, 0x2, 0x9, 0x33, 0x9, 0x0, 0x3, 0x8, 0x4, 0x4, 0xfff, 0x80, 0x1, 0x6, 0x9, 0x2, 0x5, 0x8a, 0xe, 0x621, 0x3, 0x4, 0x2, 0x1, 0xff, 0x7f, 0x8, 0x5, 0x8, 0x5fb1, 0x25, 0xffffffff, 0x2, 0x9, 0x4, 0x0, 0xe, 0x4, 0x2, 0x9, 0x9, 0x1, 0x60, 0xffff4c9b, 0x9, 0x81, 0x3, 0x7, 0x200, 0x8, 0x28f9a9fe, 0xfffffff8, 0x2, 0x9, 0x0, 0x1, 0xc3, 0x422, 0x6, 0x2, 0x2, 0x800, 0x7fffffff, 0x8, 0x400, 0xc5, 0x2, 0x2, 0xffff, 0x954, 0x0, 0x8000, 0x3, 0x6, 0x101, 0xa9d, 0x3, 0x3, 0x6, 0x0, 0x3, 0x4, 0x1f, 0x2, 0x0, 0x3, 0x40, 0x7, 0x2b43238b, 0x100, 0x4, 0x100, 0x0, 0x7, 0x9, 0x2, 0x7, 0x13431a52, 0x1, 0x2, 0x7, 0x8, 0x101, 0x3ce, 0xb, 0x127, 0xffffffff, 0x2, 0x2, 0x8, 0x5, 0x43, 0x1, 0x8, 0xfffffff9, 0x2, 0x1, 0x3, 0x8, 0x5, 0xe35c, 0x200, 0xe, 0x9, 0x4, 0x2, 0x102, 0x49f8, 0x2, 0x5, 0xe735, 0x1, 0x9, 0x1, 0xffffff01, 0x1000, 0x2, 0x9, 0x5, 0x5, 0x7, 0x5, 0x3, 0xb0d3, 0x80, 0x4, 0x4, 0x76bd, 0xe, 0x7f, 0xccaf, 0x1b, 0x3, 0x2, 0xbb, 0x2b9, 0x6, 0x4, 0x5, 0x3, 0x10001, 0x1, 0x2b3d, 0xbd, 0x6, 0x3, 0xffffffff, 0x8001, 0x2, 0x25b44, 0x9, 0x4c, 0x3, 0x2, 0x7ff, 0x1, 0x7fff, 0x80000000, 0x7, 0x10000, 0x21db, 0xfffffff9, 0x67ce, 0x5, 0xb, 0x2, 0x6b07, 0x7ff, 0x9a3a, 0x4, 0x7, 0x4, 0x6, 0x9, 0x2], 0x1, 0x400, 0x3}) close(r3) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f0000000100), 0x4003) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="1dc0b697a30b"}) write(r2, &(0x7f0000000000)="1c0000001a", 0x5) 4m25.167406218s ago: executing program 44 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x130, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 4m14.820254821s ago: executing program 45 (id=515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) pipe(&(0x7f0000000240)) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$l2tp(r0, &(0x7f00000001c0)=""/44, 0x2c, 0x41, &(0x7f0000000280)={0x2, 0x0, @private}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[{0x8}], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x14c, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x42}, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x11, 0x1f, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0xe2, 0xfa, "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"}]}], "ab092417"}}}}}}, 0x186) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x1c, "4f4bcf808ada6e9d2c8ba625ce8446f5801a3905df2d4265371c7b88"}, &(0x7f0000000100)=0x40) 3m52.059954477s ago: executing program 46 (id=587): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff03040609022107"], 0x0) 3m30.97181503s ago: executing program 5 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='ubifs\x00', 0x2218002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x2, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x1000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000001c0)={{0x0, 0x1, 0xa3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x5422, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 3m30.547368266s ago: executing program 5 (id=695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 3) 3m30.010023953s ago: executing program 5 (id=696): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write(r0, &(0x7f0000000000)="1c0000001a", 0x5) 3m29.906800801s ago: executing program 5 (id=698): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) (fail_nth: 7) 3m29.511952801s ago: executing program 5 (id=700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000002400)={0xa0, r2, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f48aa72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x796515f9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656b372b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ed7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72bc47ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1945}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44c4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000010) 3m28.803694771s ago: executing program 5 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0xfb, 0xa0f, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m28.582262745s ago: executing program 47 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0xfb, 0xa0f, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m26.575557932s ago: executing program 9 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc038563c, &(0x7f0000000100)={0x0, 0x1, @raw_data}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fsmount(r3, 0x1, 0x91) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x8001, 0x6, 0x79e, 0x4, {0x2, 0xfffffffffffffffb, 0xd, 0xfe, 0xfffffffffffffffc, 0x9, 0x9, 0x2, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x9, 0x8}}, {0x2, 0x1, 0x6, 0xfffff1e2, 'bond0\x00'}}]}, 0x0, 0x0, 0x0}) 2m25.320781374s ago: executing program 9 (id=984): mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x208002, 0x0) (async) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x208002, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) 2m25.245646059s ago: executing program 9 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac06, 0xfac08, 0xfac04, 0xfac0b]}]]}, 0x40}}, 0x0) (fail_nth: 8) 2m25.117819784s ago: executing program 9 (id=986): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (fail_nth: 7) 2m24.781321337s ago: executing program 9 (id=988): ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x1, 0x3ff}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e802000000"], 0x2e8}}], 0x1, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="ff454e", 0x3, 0x4040881, &(0x7f0000000200)={0x11, 0xd, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xb7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) connect$netlink(r7, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) write$binfmt_script(r6, 0x0, 0x6f4000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x5, "e77de7754d"}, 0x0}) socket$packet(0x11, 0x2, 0x300) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) 2m24.322812493s ago: executing program 9 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc038563c, &(0x7f0000000100)={0x0, 0x1, @raw_data}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fsmount(r3, 0x1, 0x91) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m23.916457994s ago: executing program 48 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc038563c, &(0x7f0000000100)={0x0, 0x1, @raw_data}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fsmount(r3, 0x1, 0x91) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m3.959565359s ago: executing program 2 (id=1083): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20280, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x33) 2m3.911925553s ago: executing program 2 (id=1085): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0) 2m3.806463439s ago: executing program 2 (id=1087): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2m3.657428871s ago: executing program 2 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m3.496525434s ago: executing program 2 (id=1093): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x2280) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x17, 0x1, &(0x7f0000000180)="95"}) 2m3.139474409s ago: executing program 2 (id=1097): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x4, 0x800) timerfd_settime(r0, 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs$pagemap(0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000625000/0x400000)=nil) keyctl$reject(0x13, 0x0, 0x7, 0x201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 2m2.736061123s ago: executing program 49 (id=1097): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x4, 0x800) timerfd_settime(r0, 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs$pagemap(0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000625000/0x400000)=nil) keyctl$reject(0x13, 0x0, 0x7, 0x201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 1m39.407073983s ago: executing program 1 (id=1201): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "020a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1m35.974252969s ago: executing program 1 (id=1221): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = dup(r1) syz_pidfd_open(0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m35.427019641s ago: executing program 1 (id=1225): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f00000006c0)='./cgroup\x00', r0, &(0x7f0000000080)='./cgroup\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x1407, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x8, 0x1, 0x2}) 1m35.227594763s ago: executing program 1 (id=1226): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) 1m35.17489659s ago: executing program 1 (id=1227): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x8, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000005) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f00000002c0)=""/132, &(0x7f0000000000)=0x84) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4008090}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000040900020073797a310000000008000a40ffff31000000000800054000000010140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000640)={0x9a0000, 0xf, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x990a79, 0x21d425c7, '\x00', @p_u8=&(0x7f0000000500)=0x6}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000003080103000e00000000000005000002050003002f0000001400048008000140000203db0700024000000004060002"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 1m34.92498566s ago: executing program 1 (id=1228): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x141000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r0, r0, 0xe8, 0x3b, '\x00', {0x800, 0x2e62, 0x0, 0xfff, 0x6, 0x9, 0x8, 0x33, {0xc, 0x3}, {0x2, 0x10001}, {0x8000000000000001, 0x7}, 0x4, 0xc, 0x6, 0x6, 0x9, 0x9, 0x8000, 0x9, 0x2, 0x5c36, '\x00', 0x1, 0xffff, 0x100, 0xc}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x0, 0x3, 0x9, 0x3, 0xfffffffb}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000001c0)=0xffff) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='#{\x00', 0x80580, &(0x7f0000000240)={@align=0x2, {0x2, 0x6, 0x4, 0x100000001}}, 0x7f000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='#{\x00', 0x80580, &(0x7f0000000240)={@align=0x2, {0x2, 0x6, 0x4, 0x100000001}}, 0x7f000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) (async) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x105040, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000003c0)) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f0000000440)={&(0x7f0000000400)=""/52, 0x34}) syz_open_dev$sg(&(0x7f0000000480), 0x7c, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r3}, "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"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000014c0)={0x0, 0xffffffff}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001540)={r4, 0xb4, "ce8bb38d27b53dd9941e1fab6c4488374a89c135c2df4580302e67c1f4ad27c5b606935b2de9968b8dd9d4a681628967f80d546b596abb0f37cf6b943eb491f2af03118c0faf3f1c654c6f53481105b9f66abfe12b1cbeb2b2e04d659c3bebffe4c57e181a4501672ff1bebf583d58a2f169333bb7dc39d49d89791d87987dd8b1b13b2fd7c004f4675955507f719da05d1ef676837ab5643e3688ae264d51110d1a305605419ecb831424d0c92782a6386cd3b2"}, &(0x7f0000001600)=0xbc) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001540)={r4, 0xb4, "ce8bb38d27b53dd9941e1fab6c4488374a89c135c2df4580302e67c1f4ad27c5b606935b2de9968b8dd9d4a681628967f80d546b596abb0f37cf6b943eb491f2af03118c0faf3f1c654c6f53481105b9f66abfe12b1cbeb2b2e04d659c3bebffe4c57e181a4501672ff1bebf583d58a2f169333bb7dc39d49d89791d87987dd8b1b13b2fd7c004f4675955507f719da05d1ef676837ab5643e3688ae264d51110d1a305605419ecb831424d0c92782a6386cd3b2"}, &(0x7f0000001600)=0xbc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001640)={@mcast2, @multicast2, 0x3, 0x1f}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001640)={@mcast2, @multicast2, 0x3, 0x1f}}) ppoll(&(0x7f00000016c0)=[{0xffffffffffffffff, 0x1381}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740)={[0x7]}, 0x8) inotify_add_watch(r3, &(0x7f0000001780)='./file0\x00', 0x24000800) (async) r5 = inotify_add_watch(r3, &(0x7f0000001780)='./file0\x00', 0x24000800) inotify_rm_watch(r3, r5) (async) inotify_rm_watch(r3, r5) r6 = inotify_init() inotify_rm_watch(r6, r5) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000017c0)={0x0, 0x1}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000001800)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001880)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001880)) connect$unix(r3, &(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) setresuid(0xee00, 0xee01, 0xee01) 1m34.611443477s ago: executing program 50 (id=1228): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x141000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r0, r0, 0xe8, 0x3b, '\x00', {0x800, 0x2e62, 0x0, 0xfff, 0x6, 0x9, 0x8, 0x33, {0xc, 0x3}, {0x2, 0x10001}, {0x8000000000000001, 0x7}, 0x4, 0xc, 0x6, 0x6, 0x9, 0x9, 0x8000, 0x9, 0x2, 0x5c36, '\x00', 0x1, 0xffff, 0x100, 0xc}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x0, 0x3, 0x9, 0x3, 0xfffffffb}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000001c0)=0xffff) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='#{\x00', 0x80580, &(0x7f0000000240)={@align=0x2, {0x2, 0x6, 0x4, 0x100000001}}, 0x7f000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='#{\x00', 0x80580, &(0x7f0000000240)={@align=0x2, {0x2, 0x6, 0x4, 0x100000001}}, 0x7f000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) (async) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x105040, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000003c0)) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f0000000440)={&(0x7f0000000400)=""/52, 0x34}) syz_open_dev$sg(&(0x7f0000000480), 0x7c, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r3}, "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"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000014c0)={0x0, 0xffffffff}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001540)={r4, 0xb4, "ce8bb38d27b53dd9941e1fab6c4488374a89c135c2df4580302e67c1f4ad27c5b606935b2de9968b8dd9d4a681628967f80d546b596abb0f37cf6b943eb491f2af03118c0faf3f1c654c6f53481105b9f66abfe12b1cbeb2b2e04d659c3bebffe4c57e181a4501672ff1bebf583d58a2f169333bb7dc39d49d89791d87987dd8b1b13b2fd7c004f4675955507f719da05d1ef676837ab5643e3688ae264d51110d1a305605419ecb831424d0c92782a6386cd3b2"}, &(0x7f0000001600)=0xbc) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001540)={r4, 0xb4, "ce8bb38d27b53dd9941e1fab6c4488374a89c135c2df4580302e67c1f4ad27c5b606935b2de9968b8dd9d4a681628967f80d546b596abb0f37cf6b943eb491f2af03118c0faf3f1c654c6f53481105b9f66abfe12b1cbeb2b2e04d659c3bebffe4c57e181a4501672ff1bebf583d58a2f169333bb7dc39d49d89791d87987dd8b1b13b2fd7c004f4675955507f719da05d1ef676837ab5643e3688ae264d51110d1a305605419ecb831424d0c92782a6386cd3b2"}, &(0x7f0000001600)=0xbc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001640)={@mcast2, @multicast2, 0x3, 0x1f}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001640)={@mcast2, @multicast2, 0x3, 0x1f}}) ppoll(&(0x7f00000016c0)=[{0xffffffffffffffff, 0x1381}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740)={[0x7]}, 0x8) inotify_add_watch(r3, &(0x7f0000001780)='./file0\x00', 0x24000800) (async) r5 = inotify_add_watch(r3, &(0x7f0000001780)='./file0\x00', 0x24000800) inotify_rm_watch(r3, r5) (async) inotify_rm_watch(r3, r5) r6 = inotify_init() inotify_rm_watch(r6, r5) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000017c0)={0x0, 0x1}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000001800)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001880)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001880)) connect$unix(r3, &(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) setresuid(0xee00, 0xee01, 0xee01) 1m33.971163713s ago: executing program 4 (id=1237): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="045104df010141ff070000e4da04762ea26dda71ff4ed65737eb7791422b1e9304f3769aa64a9d21bd3083026f543e7b8cfa5fa87395fae076147e84c2f60a77cbc3b015b1f5227149fe57fc90aabc2d61d5a4e2168b56597217cc0ad42cbc4908367ce4a618401ae0a340080ee2c54ba2f8e2949cacddec5b58986e0e9607f0c5b805e29c5227de7a40363d954b301e3e4f00b41dcdcf6dd1434147f28f6c04ab0c3a97be2d0ab6354ee6aeb5ccab6613"], 0x7) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) syz_extract_tcp_res(0x0, 0x1, 0x1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x1, 0x63}, "bfa6ee4168c6641b48e0a662c794965771b8560552cf2b5bb3b4fd9c4f617e4ddfa6b4b62f92f2bb0c10f197149a93ecfee91062c08365c895ddab88f0de72e15f32ac76a7336e46407e16367cb16f9129bfc238b3a71bed663e2823050a510c446ac5"}, 0x67) 1m33.059531171s ago: executing program 4 (id=1238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x101800, 0x0) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000100)={0x0, 0x80, 0x1, 0x1, 0x10, 0x6, 0x100, 0x8, 0x2, 0x1, 0x2, 0xfffffffc, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 1m32.863723028s ago: executing program 4 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x38) 1m32.6692466s ago: executing program 4 (id=1241): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) 1m32.557427634s ago: executing program 4 (id=1242): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x53, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) wait4(r6, 0x0, 0x80000000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1m31.682772817s ago: executing program 4 (id=1246): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x122c42) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, "339f020b0000000043d6010100000000001250ceaac501040000410017c18e8438ef2a565ef1e833236500", "b1163939c787a16c1ca43f8539f3d3289737f0374c72a964a01900", "24431a1e77a68e174f000000000000000010e200"}}) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x2c}], 0x1}, 0xcc000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m31.51703046s ago: executing program 51 (id=1246): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x122c42) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0xfffffffd, 0x4, "339f020b0000000043d6010100000000001250ceaac501040000410017c18e8438ef2a565ef1e833236500", "b1163939c787a16c1ca43f8539f3d3289737f0374c72a964a01900", "24431a1e77a68e174f000000000000000010e200"}}) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x2c}], 0x1}, 0xcc000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m29.702850834s ago: executing program 7 (id=1252): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) (fail_nth: 4) 1m29.667948304s ago: executing program 7 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xf542) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat(r7, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="142300002500010318bd70063b55f839110000000a130897073a0de823c7210f7461efc2e65748fe60c4174754431498b83712e942aec11ae4e0124850f587f3ed1ab8c71c46f365a2c324019a55c52fa8bf2113aafecfb80b0091"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0xd, 0x3, 0x100000008, 0x7f, 0x1, 0x2, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x6, 0xffffffffffffffff, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffff7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) write$sysctl(r8, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) fsetxattr$security_evm(r9, &(0x7f00000002c0), 0x0, 0x0, 0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x4, r2, 0x1}) 1m29.047147981s ago: executing program 7 (id=1257): r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7, 0x5, 0xc, 0x2, 0x8, 0x4, 0x0, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x3, 0x8, 0x40, 0xad, 0x4}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x0, 0x1, [0x8]}, &(0x7f0000000200)=0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m28.727061797s ago: executing program 7 (id=1258): r0 = socket(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r1}}]}) r2 = semget$private(0x0, 0x1, 0x11a) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000040)=0x8) (async) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 1m28.306894078s ago: executing program 7 (id=1259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x21) 1m27.816578909s ago: executing program 7 (id=1261): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000300000040c0072511403a0002030109022d020301030d09210090090122520a09048103000406020809050203f9ff01f1a6"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f000034e000/0x3000)=nil, 0x3000, 0x8000000005}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r4, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) ioctl$EVIOCGLED(r7, 0x80044520, &(0x7f0000000000)=""/85) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000001240)={0x28, 0x1, r4, 0x0, 0x1, 0x9, 0x400}) r8 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r8, &(0x7f0000001100)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000340)=""/63, 0x3f}], 0x4}, 0xa}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x3, &(0x7f0000000680)=""/4, 0x4}, 0x8}, {{&(0x7f00000006c0)=@l2, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/114, 0x72}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/66, 0x42}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/191, 0xbf}, {&(0x7f0000000a80)=""/71, 0x47}, {&(0x7f0000000b00)=""/134, 0xfffffffffffffe63}, {&(0x7f0000000bc0)=""/90, 0x5a}], 0x9, &(0x7f0000000d00)=""/249, 0xf9}, 0x3}, {{&(0x7f0000000e00)=@nfc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/178, 0xb2}, {&(0x7f0000000f40)=""/180, 0xb4}], 0x2, &(0x7f0000001040)=""/164, 0xa4}, 0x1}], 0x4, 0x2, &(0x7f0000001200)={0x77359400}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r9, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7ff}) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0xc, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7f, 0x4, 0x3, 0x40, 0x4}, 0x164, &(0x7f0000000080)={0x5, 0xf, 0x164, 0x4, [@generic={0x6e, 0x10, 0x3, "60631f68573bdcc434f1da6dfbbd89f445b150b87f6c3d673cff298b4ccfc2146eaf5ddab1d838a0721bb229bad4b1ffffe650da0d0e80c531ced775b3a2fa889e9b5117138efa925a32a51340a34978c86fa2aa6039ec800038a8c032bb504c0c32e6f0b69740f3cfc94e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x58, 0x8, 0x0, 0xb7f6, 0x5}, @generic={0xdf, 0x10, 0xb, "52e7170511bf868f4c32dff282af4ef57ad0cf2cd1f22c0b1763c75c3355440b7420f37b2f5775222b98cce105ea91b6dd45c7364620b96f1a35dbd181b23c29bacfe6478105866e7a74f8082549c0098b2df5ae22a9d7f96e674e065cbef0f9d6e3482b0404a162aa2994a95edd0b5ee0dda6376515ce7a8379e2f5fb63d8944e57b1599da3899099f56a66ff80b6986c12c43e404f168ce7bce7005e3b30598bc38b8e9944ad9915c43f9e427289aae257548e988bb975fbe807050693879282ec3fdbb54580f5889441f13016cf84cd2035764664d90d73fe995b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0x6, 0x7}]}, 0x9, [{0xb3, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="2af6237f9e9a6c1fa96d949d02683551a03f1448f95e2839619b5d7ae1e1f5eeb248"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c53}}, {0xf2, &(0x7f00000003c0)=@string={0xf2, 0x3, "a15c00d3d40429216303c7b43925c198efd3674aca51679b24d624f52d4262d18446b25f181e0e788a984ff7683b36660aed08102686905fc138ff035854eb0662c3bbda6b19b50f0acdf5ac9b497f7c3b3d55ed7b5aa9f032ae43e21bdeee9eeef30aa851735cdfb73e230c16852dec33438bf5af70f38a4122bbb5d750a4519f18f3f5752a12de3811866038234be2577c0d150d4bf5620113c7190f7ec92d09ab7e50f584b10033d41eb0c00e2782b24075c4fdcadee7540b808eff471fe350ca34e339cb37675303706cd9bb160eb910f9e531cfdbe0041e09f53b164614e2786622412710cc18e96cde0bcf88a3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x402}}, {0x61, &(0x7f0000000580)=@string={0x61, 0x3, "60add07441fdcae8992d68357933323c217f0db58e7f4f2f8afbd88127e6f0e4f67042c4800cef9a41dd830f378523e3e5e02b312b70fafd4c56ffd86cc695020b1d9e220639c1939ddca0ed6126811fd8f917d0b65865bece6aa312abf13e"}}, {0xb, &(0x7f0000000600)=@string={0xb, 0x3, "e9a063d19c5be4a62a"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_ep_read(r1, 0x43, 0xcc, &(0x7f0000000c40)=""/204) 1m27.463595352s ago: executing program 52 (id=1261): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000300000040c0072511403a0002030109022d020301030d09210090090122520a09048103000406020809050203f9ff01f1a6"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f000034e000/0x3000)=nil, 0x3000, 0x8000000005}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r4, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r4, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) ioctl$EVIOCGLED(r7, 0x80044520, &(0x7f0000000000)=""/85) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000001240)={0x28, 0x1, r4, 0x0, 0x1, 0x9, 0x400}) r8 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r8, &(0x7f0000001100)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000340)=""/63, 0x3f}], 0x4}, 0xa}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x3, &(0x7f0000000680)=""/4, 0x4}, 0x8}, {{&(0x7f00000006c0)=@l2, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/114, 0x72}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/66, 0x42}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/191, 0xbf}, {&(0x7f0000000a80)=""/71, 0x47}, {&(0x7f0000000b00)=""/134, 0xfffffffffffffe63}, {&(0x7f0000000bc0)=""/90, 0x5a}], 0x9, &(0x7f0000000d00)=""/249, 0xf9}, 0x3}, {{&(0x7f0000000e00)=@nfc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/178, 0xb2}, {&(0x7f0000000f40)=""/180, 0xb4}], 0x2, &(0x7f0000001040)=""/164, 0xa4}, 0x1}], 0x4, 0x2, &(0x7f0000001200)={0x77359400}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r9, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7ff}) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0xc, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7f, 0x4, 0x3, 0x40, 0x4}, 0x164, &(0x7f0000000080)={0x5, 0xf, 0x164, 0x4, [@generic={0x6e, 0x10, 0x3, "60631f68573bdcc434f1da6dfbbd89f445b150b87f6c3d673cff298b4ccfc2146eaf5ddab1d838a0721bb229bad4b1ffffe650da0d0e80c531ced775b3a2fa889e9b5117138efa925a32a51340a34978c86fa2aa6039ec800038a8c032bb504c0c32e6f0b69740f3cfc94e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x58, 0x8, 0x0, 0xb7f6, 0x5}, @generic={0xdf, 0x10, 0xb, "52e7170511bf868f4c32dff282af4ef57ad0cf2cd1f22c0b1763c75c3355440b7420f37b2f5775222b98cce105ea91b6dd45c7364620b96f1a35dbd181b23c29bacfe6478105866e7a74f8082549c0098b2df5ae22a9d7f96e674e065cbef0f9d6e3482b0404a162aa2994a95edd0b5ee0dda6376515ce7a8379e2f5fb63d8944e57b1599da3899099f56a66ff80b6986c12c43e404f168ce7bce7005e3b30598bc38b8e9944ad9915c43f9e427289aae257548e988bb975fbe807050693879282ec3fdbb54580f5889441f13016cf84cd2035764664d90d73fe995b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0x6, 0x7}]}, 0x9, [{0xb3, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="2af6237f9e9a6c1fa96d949d02683551a03f1448f95e2839619b5d7ae1e1f5eeb248"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c53}}, {0xf2, &(0x7f00000003c0)=@string={0xf2, 0x3, "a15c00d3d40429216303c7b43925c198efd3674aca51679b24d624f52d4262d18446b25f181e0e788a984ff7683b36660aed08102686905fc138ff035854eb0662c3bbda6b19b50f0acdf5ac9b497f7c3b3d55ed7b5aa9f032ae43e21bdeee9eeef30aa851735cdfb73e230c16852dec33438bf5af70f38a4122bbb5d750a4519f18f3f5752a12de3811866038234be2577c0d150d4bf5620113c7190f7ec92d09ab7e50f584b10033d41eb0c00e2782b24075c4fdcadee7540b808eff471fe350ca34e339cb37675303706cd9bb160eb910f9e531cfdbe0041e09f53b164614e2786622412710cc18e96cde0bcf88a3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x402}}, {0x61, &(0x7f0000000580)=@string={0x61, 0x3, "60add07441fdcae8992d68357933323c217f0db58e7f4f2f8afbd88127e6f0e4f67042c4800cef9a41dd830f378523e3e5e02b312b70fafd4c56ffd86cc695020b1d9e220639c1939ddca0ed6126811fd8f917d0b65865bece6aa312abf13e"}}, {0xb, &(0x7f0000000600)=@string={0xb, 0x3, "e9a063d19c5be4a62a"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_ep_read(r1, 0x43, 0xcc, &(0x7f0000000c40)=""/204) 10.818304785s ago: executing program 8 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.050557858s ago: executing program 8 (id=1636): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000200)="917054") 5.990657568s ago: executing program 3 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80) (fail_nth: 5) 5.852585681s ago: executing program 3 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.85191698s ago: executing program 8 (id=1646): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) listen(r2, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x14ab) 5.668918835s ago: executing program 8 (id=1647): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x82, 0x1, "b3"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000540)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.889130845s ago: executing program 3 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000000)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0xd, 0x2120, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r1, 0x34e5f000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r1, 0x34e5f000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'wlan1\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x7fffffff, 0x5, 0x8000}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000200)={[0xc]}, 0x8) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000520001fe"], 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd2a, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x240040c8}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd2a, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x240040c8}, 0x0) 4.730008689s ago: executing program 3 (id=1650): r0 = userfaultfd(0x80801) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=0xffffffffffffffff], 0x20}, 0x1, 0x0, 0x0, 0x20042884}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd0, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES64=r0, @ANYRESHEX=r4, @ANYBLOB="43c0ed21bfa6c29649d14917a94730afa2117e41406ccc18d1af07d73ad3c4", @ANYRESDEC], 0x0) 3.659385813s ago: executing program 6 (id=1653): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) close(r0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)='\t^', 0x2}], 0x1) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="000300000000226a7e789f71cae6b950078db556eedc028ec3251f56dd01c775ebcec907061a224694fd07ffbf3965a062cda5fc37c02ba6d6862ed2dac8eec625ed020459740b39f5f6105e0bf3d3b5fbfd975f44f98916e6d1bcfde51ec27549ffd5cadb2ff3d85574ad54920e1ceb5c5895b7a0309b59c4e760052ca843f60f8f95a19c533a302839f22b98e7b85387ed6c9db9baea02a8b78a5142e7dba6d85e8e5762dad74754894333b174df1b8b7100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x5, "e98f2475a7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.81600897s ago: executing program 8 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x3b, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x48, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a}]}}}}}}, 0x7e) 2.726105839s ago: executing program 8 (id=1655): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000200)="917054") 1.634578683s ago: executing program 3 (id=1656): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) listen(r2, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x14ab) 1.568000846s ago: executing program 3 (id=1658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000dbc000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0xb}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x28800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000740)={0x0, 0x7ff, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x20000010) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x93, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x400, 0x3, 0x1, {0x22, 0x842}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x9, 0x4, 0x40, 0xa4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x49, &(0x7f00000001c0)=@string={0x49, 0x3, "f862ccd6c06f012420c9d49ab6c5e0eae323b77f787fe71f28c3b12755c18c653a92f356da4f992d13f0ddf24e48875aaa4f7033a90ef2f3c75f6c3c76e01b7527b3c205aef1da"}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "b7e8c270510025b5bc655e50d0b29e886439b79e2ca4b7a35d698e2c6cabf1757661d895982e7381f0dda4bbd9fbb775d64fb1a87c07c6cb3b54576be36752753576637a3ea1d7dcf8c93e87689a9ef1072c1e08dcbbe31b6e33f00e583e0a68297b58027bcb69da17ecadf5cc62546c928735bfe9e0e173537ee68d167650492aa9872de593c21900d1069b2e4c8876e30473bd808cc9e2b05335c236b7757a6921f6ab579cbc2573d141850085de61"}}]}) ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x40046411, &(0x7f0000000040)=0x1) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.207324409s ago: executing program 0 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x91}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc038563c, &(0x7f0000000100)={0x0, 0x1, @raw_data}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x5) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x8001, 0x6, 0x79e, 0x4, {0x2, 0xfffffffffffffffb, 0xd, 0xfe, 0xfffffffffffffffc, 0x9, 0x9, 0x2, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x9, 0x8}}, {0x2, 0x1, 0x6, 0xfffff1e2, 'bond0\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) 932.784729ms ago: executing program 6 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0) (fail_nth: 7) 902.506612ms ago: executing program 6 (id=1662): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000240)='./file1\x00', 0x185242, 0x1df2a23c5997fa1f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x85, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2000, 0x7f03) 791.512541ms ago: executing program 6 (id=1663): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x6, '\nI'}, @main=@item_4={0x3, 0x0, 0x9, "fc2614cb"}]}}, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a4", 0x35}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3a8, 0xe8, 0x1d8, 0xe8, 0x2c0, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xdf}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @local, 0xff000000, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xdc, 0x2, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000b80)) (async) sendmmsg$inet6(r3, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1, &(0x7f0000001840)=ANY=[], 0x130}}], 0x1, 0x400c404) sendto$inet6(r3, 0x0, 0x0, 0x40854, 0x0, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7ff}, @in6={0xa, 0x4e24, 0x7, @local, 0x7}], 0x38) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) 559.845577ms ago: executing program 6 (id=1664): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x4028af11, &(0x7f0000000c00)={{0x0, 0x80, 0x9, 0x9, 0x9, 0x3, 0x9, 0x2ac, 0x1, 0x2, 0x101, 0x6, 0x4aa, 0x2, 0x9}}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) 501.534184ms ago: executing program 6 (id=1665): userfaultfd(0x80801) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x89901) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 376.185136ms ago: executing program 0 (id=1666): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) listen(r2, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x14ab) 300.908938ms ago: executing program 0 (id=1667): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 138.838911ms ago: executing program 0 (id=1668): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x105000, 0x102) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x4, 0xc8, 0x2, 0x6}}}, 0x9) 97.85115ms ago: executing program 0 (id=1669): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 0s ago: executing program 0 (id=1670): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51facd6bb49000000000000000100000000", 0x16}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x20040090) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0x4004556e, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x7, 0x3, "984bc8bbf4687db060341d13623d9b930d37159826dc68353251253f"}, 0xffffffa4) kernel console output (not intermixed with test programs): 8/0x100 [ 395.417066][T14464] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 395.417093][T14464] ? dup_task_struct+0x52/0x840 [ 395.417121][T14464] dup_task_struct+0x52/0x840 [ 395.417155][T14464] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.417183][T14464] copy_process+0x89b/0x4430 [ 395.417234][T14464] ? __pfx_copy_process+0x10/0x10 [ 395.417266][T14464] ? mutex_init_lockdep+0xdf/0x110 [ 395.417285][T14464] vhost_task_create+0x1f9/0x380 [ 395.417307][T14464] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 395.417327][T14464] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 395.417347][T14464] ? __pfx_vhost_task_create+0x10/0x10 [ 395.417376][T14464] ? __pfx_vhost_task_fn+0x10/0x10 [ 395.417401][T14464] ? __lock_acquire+0x6b5/0x2cf0 [ 395.417429][T14464] ? kasan_save_track+0x4f/0x80 [ 395.417451][T14464] ? kasan_save_track+0x3e/0x80 [ 395.417473][T14464] ? kasan_save_free_info+0x46/0x50 [ 395.417492][T14464] ? __kasan_slab_free+0x5c/0x80 [ 395.417514][T14464] ? kfree+0x1c5/0x640 [ 395.417539][T14464] kvm_mmu_post_init_vm+0x147/0x2d0 [ 395.417562][T14464] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 395.417592][T14464] ? __mutex_trylock_common+0x158/0x260 [ 395.417612][T14464] ? look_up_lock_class+0x57/0x110 [ 395.417629][T14464] ? register_lock_class+0x31/0x2e0 [ 395.417653][T14464] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 395.417676][T14464] ? __lock_acquire+0x6b5/0x2cf0 [ 395.417702][T14464] ? __mutex_lock+0x320/0x1420 [ 395.417729][T14464] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.417764][T14464] ? do_raw_write_lock+0x11d/0x260 [ 395.417800][T14464] kvm_vcpu_ioctl+0xa62/0xfd0 [ 395.417826][T14464] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.417843][T14464] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 395.417881][T14464] ? __fget_files+0x2a/0x420 [ 395.417906][T14464] ? __fget_files+0x2a/0x420 [ 395.417927][T14464] ? __fget_files+0x3a0/0x420 [ 395.417947][T14464] ? __fget_files+0x2a/0x420 [ 395.417972][T14464] ? bpf_lsm_file_ioctl+0x9/0x20 [ 395.417990][T14464] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.418009][T14464] __se_sys_ioctl+0xfc/0x170 [ 395.418031][T14464] do_syscall_64+0x14d/0xf80 [ 395.418049][T14464] ? trace_irq_disable+0x3b/0x140 [ 395.418068][T14464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.418087][T14464] ? clear_bhb_loop+0x40/0x90 [ 395.418108][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.418132][T14464] RIP: 0033:0x7f2f4cb9c799 [ 395.418150][T14464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.418164][T14464] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.418183][T14464] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 395.418196][T14464] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 395.418207][T14464] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 395.418218][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.418228][T14464] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 395.418258][T14464] [ 395.432847][ T7927] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 395.937764][T14439] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1337'. [ 396.054220][ T7927] usb 7-1: USB disconnect, device number 21 [ 396.080005][ T7927] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 396.102045][ T7927] ftdi_sio 7-1:0.0: device disconnected [ 396.285304][ T5924] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 396.448872][ T5924] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 396.477463][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.517838][ T5924] usb 1-1: Product: syz [ 396.531828][ T5924] usb 1-1: Manufacturer: syz [ 396.557271][ T5924] usb 1-1: SerialNumber: syz [ 396.585423][ T5924] usb 1-1: config 0 descriptor?? [ 396.618510][ T5924] hub 1-1:0.0: bad descriptor, ignoring hub [ 396.626410][ T5924] hub 1-1:0.0: probe with driver hub failed with error -5 [ 396.833817][T14518] overlayfs: overlapping lowerdir path [ 396.833894][ T5924] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 396.863303][T14518] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 396.868341][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.892427][T14518] overlayfs: overlapping lowerdir path [ 396.925516][ T5924] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 396.953815][ T5924] usb 1-1: media controller created [ 396.989309][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.008710][T14525] FAULT_INJECTION: forcing a failure. [ 397.008710][T14525] name failslab, interval 1, probability 0, space 0, times 0 [ 397.052527][T14525] CPU: 0 UID: 0 PID: 14525 Comm: syz.8.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.052557][T14525] Tainted: [L]=SOFTLOCKUP [ 397.052563][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.052574][T14525] Call Trace: [ 397.052581][T14525] [ 397.052589][T14525] dump_stack_lvl+0xe8/0x150 [ 397.052626][T14525] should_fail_ex+0x412/0x560 [ 397.052650][T14525] should_failslab+0xa8/0x100 [ 397.052670][T14525] __kmalloc_cache_noprof+0x88/0x660 [ 397.052697][T14525] ? binder_alloc_new_buf+0x27d/0x3030 [ 397.052728][T14525] binder_alloc_new_buf+0x27d/0x3030 [ 397.052759][T14525] ? binder_debug+0x155/0x1d0 [ 397.052782][T14525] ? __pfx_binder_debug+0x10/0x10 [ 397.052805][T14525] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 397.052830][T14525] ? __kmalloc_cache_noprof+0x31c/0x660 [ 397.052862][T14525] binder_transaction+0x28d8/0x7070 [ 397.052880][T14525] ? arch_stack_walk+0xfb/0x150 [ 397.052916][T14525] ? ima_match_policy+0x112/0x21e0 [ 397.052949][T14525] ? __pfx_binder_transaction+0x10/0x10 [ 397.052983][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 397.053014][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 397.053040][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 397.053067][T14525] ? __might_fault+0xaf/0x130 [ 397.053090][T14525] ? __might_fault+0xaf/0x130 [ 397.053130][T14525] binder_ioctl_write_read+0xb45/0xa590 [ 397.053167][T14525] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.053201][T14525] ? stack_trace_save+0xa9/0x100 [ 397.053221][T14525] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 397.053238][T14525] ? kasan_save_free_info+0x46/0x50 [ 397.053261][T14525] ? stack_depot_save_flags+0x33/0x810 [ 397.053294][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 397.053340][T14525] ? __pfx_binder_debug+0x10/0x10 [ 397.053356][T14525] ? do_raw_spin_lock+0x12b/0x2f0 [ 397.053390][T14525] ? _raw_spin_unlock+0x28/0x50 [ 397.053414][T14525] ? binder_get_thread+0x177/0x6d0 [ 397.053436][T14525] binder_ioctl+0x423/0x1b10 [ 397.053454][T14525] ? tomoyo_path_number_perm+0x219/0x630 [ 397.053478][T14525] ? tomoyo_path_number_perm+0x219/0x630 [ 397.053505][T14525] ? do_vfs_ioctl+0x1166/0x1530 [ 397.053523][T14525] ? __pfx_binder_ioctl+0x10/0x10 [ 397.053542][T14525] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.053569][T14525] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 397.053614][T14525] ? __fget_files+0x2a/0x420 [ 397.053639][T14525] ? __fget_files+0x2a/0x420 [ 397.053658][T14525] ? __fget_files+0x3a0/0x420 [ 397.053680][T14525] ? __fget_files+0x2a/0x420 [ 397.053702][T14525] ? bpf_lsm_file_ioctl+0x9/0x20 [ 397.053720][T14525] ? __pfx_binder_ioctl+0x10/0x10 [ 397.053738][T14525] __se_sys_ioctl+0xfc/0x170 [ 397.053757][T14525] do_syscall_64+0x14d/0xf80 [ 397.053775][T14525] ? trace_irq_disable+0x3b/0x140 [ 397.053794][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.053809][T14525] ? clear_bhb_loop+0x40/0x90 [ 397.053825][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.053838][T14525] RIP: 0033:0x7f9da1d9c799 [ 397.053851][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.053862][T14525] RSP: 002b:00007f9da2c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.053878][T14525] RAX: ffffffffffffffda RBX: 00007f9da2015fa0 RCX: 00007f9da1d9c799 [ 397.053888][T14525] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 397.053897][T14525] RBP: 00007f9da2c77090 R08: 0000000000000000 R09: 0000000000000000 [ 397.053906][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.053915][T14525] R13: 00007f9da2016038 R14: 00007f9da2015fa0 R15: 00007fff74bb27b8 [ 397.053936][T14525] [ 397.419456][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.449895][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.476116][ T5924] DVB: Unable to find symbol dib7000p_attach() [ 397.483489][ T5924] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 397.562163][ T5924] rc_core: IR keymap rc-dib0700-rc5 not found [ 397.568287][ T5924] Registered IR keymap rc-empty [ 397.574669][ T5924] dvb-usb: could not initialize remote control. [ 397.580931][ T5924] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 397.831477][ T5924] usb 1-1: USB disconnect, device number 36 [ 397.890821][ T5924] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 398.345333][T14569] FAULT_INJECTION: forcing a failure. [ 398.345333][T14569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.367561][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1361'. [ 398.379701][T14569] CPU: 1 UID: 0 PID: 14569 Comm: syz.6.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.379728][T14569] Tainted: [L]=SOFTLOCKUP [ 398.379735][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.379746][T14569] Call Trace: [ 398.379753][T14569] [ 398.379761][T14569] dump_stack_lvl+0xe8/0x150 [ 398.379790][T14569] should_fail_ex+0x412/0x560 [ 398.379814][T14569] _copy_to_user+0x31/0xb0 [ 398.379839][T14569] simple_read_from_buffer+0xe1/0x170 [ 398.379875][T14569] proc_fail_nth_read+0x1bb/0x230 [ 398.379901][T14569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.379927][T14569] ? rw_verify_area+0x2a6/0x4d0 [ 398.379951][T14569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.379975][T14569] vfs_read+0x20c/0xa70 [ 398.379998][T14569] ? fdget_pos+0x246/0x320 [ 398.380022][T14569] ? __pfx___mutex_lock+0x10/0x10 [ 398.380042][T14569] ? __pfx_vfs_read+0x10/0x10 [ 398.380067][T14569] ? __fget_files+0x2a/0x420 [ 398.380092][T14569] ? __fget_files+0x3a0/0x420 [ 398.380114][T14569] ? __fget_files+0x2a/0x420 [ 398.380144][T14569] ksys_read+0x150/0x270 [ 398.380171][T14569] ? __pfx_ksys_read+0x10/0x10 [ 398.380195][T14569] ? __pfx_sock_ioctl+0x10/0x10 [ 398.380226][T14569] do_syscall_64+0x14d/0xf80 [ 398.380244][T14569] ? trace_irq_disable+0x3b/0x140 [ 398.380264][T14569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.380283][T14569] ? clear_bhb_loop+0x40/0x90 [ 398.380305][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.380322][T14569] RIP: 0033:0x7f0e6cb5cfce [ 398.380339][T14569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.380353][T14569] RSP: 002b:00007f0e6db06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.380373][T14569] RAX: ffffffffffffffda RBX: 00007f0e6db076c0 RCX: 00007f0e6cb5cfce [ 398.380386][T14569] RDX: 000000000000000f RSI: 00007f0e6db070a0 RDI: 0000000000000003 [ 398.380397][T14569] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 398.380408][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.380419][T14569] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 398.380447][T14569] [ 398.708049][ T5924] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 398.812965][T14583] netlink: get zone limit has 8 unknown bytes [ 398.862174][ T5924] usb 9-1: device descriptor read/64, error -71 [ 398.878459][T14585] netlink: get zone limit has 8 unknown bytes [ 398.983962][ T5844] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 399.122154][ T5924] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 399.144526][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 399.153095][ T5844] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.168213][ T5844] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 399.183723][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.194391][ T5844] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 399.203778][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.222344][ T5844] usb 1-1: Product: syz [ 399.232123][ T5844] usb 1-1: Manufacturer: syz [ 399.238274][ T5844] usb 1-1: SerialNumber: syz [ 399.254787][ T5844] usb 1-1: config 0 descriptor?? [ 399.274398][ T5924] usb 9-1: device descriptor read/64, error -71 [ 399.392706][ T5924] usb usb9-port1: attempt power cycle [ 399.685056][ T5844] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 399.752241][ T5924] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 399.783884][ T5924] usb 9-1: device descriptor read/8, error -71 [ 400.032187][ T5924] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 400.082852][ T5924] usb 9-1: device descriptor read/8, error -71 [ 400.097253][ T5844] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 400.170028][ T5844] usb 1-1: USB disconnect, device number 37 [ 400.223861][ T5924] usb usb9-port1: unable to enumerate USB device [ 401.096133][ T7927] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 401.274921][ T7927] usb 1-1: Using ep0 maxpacket: 8 [ 401.306720][ T7927] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.340795][ T7927] usb 1-1: config 0 has no interface number 0 [ 401.378647][ T7927] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.450402][ T7927] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.494574][ T7927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.537227][ T7927] usb 1-1: config 0 descriptor?? [ 401.567932][ T7927] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 401.722198][ T5844] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 401.757335][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 401.766510][ T7927] usb 1-1: USB disconnect, device number 38 [ 401.882155][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 401.889094][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.900190][ T5844] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 401.909268][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.919330][ T5844] usb 9-1: config 0 descriptor?? [ 401.979620][T14627] Invalid argument reading file caps for ./file0 [ 402.337871][ T5844] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 402.739541][ T7927] usb 9-1: USB disconnect, device number 58 [ 403.359512][T14671] netlink: get zone limit has 8 unknown bytes [ 403.412162][ T7927] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 403.542177][ T7927] usb 1-1: device descriptor read/64, error -71 [ 403.783289][ T7927] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 403.932500][ T7927] usb 1-1: device descriptor read/64, error -71 [ 404.044606][ T7927] usb usb1-port1: attempt power cycle [ 404.165976][T14641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.393062][ T7927] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 404.437889][T14683] netlink: get zone limit has 8 unknown bytes [ 404.462563][ T7927] usb 1-1: device descriptor read/8, error -71 [ 404.632265][ T5924] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 404.722478][ T7927] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 404.755375][ T7927] usb 1-1: device descriptor read/8, error -71 [ 404.802137][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 404.819564][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.846111][ T5924] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 404.869869][ T5924] usb 4-1: config 86 has no interface number 0 [ 404.884123][ T7927] usb usb1-port1: unable to enumerate USB device [ 404.885213][ T5924] usb 4-1: config 86 interface 78 altsetting 128 has an endpoint descriptor with address 0x78, changing to 0x8 [ 404.925605][ T5924] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 1024 [ 404.950298][ T5924] usb 4-1: config 86 interface 78 altsetting 128 endpoint 0x5 has invalid maxpacket 12336, setting to 64 [ 404.978492][ T5924] usb 4-1: config 86 interface 78 has no altsetting 0 [ 404.997987][ T5924] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 405.019568][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.038156][ T5924] usb 4-1: Product: syz [ 405.048793][ T5924] usb 4-1: Manufacturer: syz [ 405.072187][ T5924] usb 4-1: SerialNumber: syz [ 405.088122][T14680] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 405.311191][T14680] loop4: detected capacity change from 0 to 7 [ 405.338066][T14680] Dev loop4: unable to read RDB block 7 [ 405.356683][T14680] loop4: AHDI p1 p2 p3 [ 405.368299][T14680] loop4: partition table partially beyond EOD, truncated [ 405.396947][T14680] loop4: p1 start 1601398130 is beyond EOD, truncated [ 405.408731][ T5924] kvaser_usb 4-1:86.78: error -ENODEV: Cannot get usb endpoint(s) [ 405.424740][T14680] loop4: p2 start 1702059890 is beyond EOD, truncated [ 405.479698][ T5924] usb 4-1: USB disconnect, device number 36 [ 405.712227][ T808] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 405.853387][ T808] usb 7-1: device descriptor read/64, error -71 [ 406.092416][ T808] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 406.255880][ T808] usb 7-1: device descriptor read/64, error -71 [ 406.382775][ T808] usb usb7-port1: attempt power cycle [ 406.722158][ T7927] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 406.743072][ T808] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 406.795169][ T808] usb 7-1: device descriptor read/8, error -71 [ 406.816929][T14747] netlink: get zone limit has 8 unknown bytes [ 406.895901][ T7927] usb 4-1: Using ep0 maxpacket: 16 [ 406.908609][ T7927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.929140][ T7927] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.957342][ T7927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.993935][ T7927] usb 4-1: config 0 descriptor?? [ 407.052313][ T808] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 407.096997][ T808] usb 7-1: device descriptor read/8, error -71 [ 407.232963][ T808] usb usb7-port1: unable to enumerate USB device [ 407.351663][T14764] FAULT_INJECTION: forcing a failure. [ 407.351663][T14764] name failslab, interval 1, probability 0, space 0, times 0 [ 407.368281][T14764] CPU: 1 UID: 0 PID: 14764 Comm: syz.8.1392 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.368312][T14764] Tainted: [L]=SOFTLOCKUP [ 407.368318][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.368328][T14764] Call Trace: [ 407.368336][T14764] [ 407.368344][T14764] dump_stack_lvl+0xe8/0x150 [ 407.368375][T14764] should_fail_ex+0x412/0x560 [ 407.368401][T14764] should_failslab+0xa8/0x100 [ 407.368422][T14764] __kmalloc_noprof+0xe8/0x760 [ 407.368449][T14764] ? tomoyo_encode+0x28b/0x550 [ 407.368478][T14764] tomoyo_encode+0x28b/0x550 [ 407.368507][T14764] tomoyo_realpath_from_path+0x58d/0x5d0 [ 407.368539][T14764] ? tomoyo_path_number_perm+0x219/0x630 [ 407.368561][T14764] tomoyo_path_number_perm+0x246/0x630 [ 407.368587][T14764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 407.368609][T14764] ? __lock_acquire+0x6b5/0x2cf0 [ 407.368646][T14764] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 407.368685][T14764] ? __fget_files+0x2a/0x420 [ 407.368709][T14764] ? __fget_files+0x2a/0x420 [ 407.368731][T14764] ? __fget_files+0x3a0/0x420 [ 407.368752][T14764] ? __fget_files+0x2a/0x420 [ 407.368778][T14764] security_file_ioctl+0xc3/0x2a0 [ 407.368800][T14764] __se_sys_ioctl+0x47/0x170 [ 407.368821][T14764] do_syscall_64+0x14d/0xf80 [ 407.368839][T14764] ? trace_irq_disable+0x3b/0x140 [ 407.368859][T14764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.368876][T14764] ? clear_bhb_loop+0x40/0x90 [ 407.368898][T14764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.368915][T14764] RIP: 0033:0x7f9da1d9c799 [ 407.368931][T14764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.368946][T14764] RSP: 002b:00007f9da2c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.368971][T14764] RAX: ffffffffffffffda RBX: 00007f9da2015fa0 RCX: 00007f9da1d9c799 [ 407.368984][T14764] RDX: 0000200000000500 RSI: 0000000000005415 RDI: 0000000000000003 [ 407.368996][T14764] RBP: 00007f9da2c77090 R08: 0000000000000000 R09: 0000000000000000 [ 407.369007][T14764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.369017][T14764] R13: 00007f9da2016038 R14: 00007f9da2015fa0 R15: 00007fff74bb27b8 [ 407.369046][T14764] [ 407.369086][T14764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 407.608036][ T7927] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 407.888573][ T5924] usb 4-1: USB disconnect, device number 37 [ 408.069863][T14789] netlink: get zone limit has 8 unknown bytes [ 408.855074][ T5844] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 408.906677][T14814] netlink: get zone limit has 8 unknown bytes [ 409.025625][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.056970][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.080081][ T5844] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.101831][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.131857][ T5844] usb 7-1: config 0 descriptor?? [ 409.569973][ T5844] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 409.594626][ T5844] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 409.616079][ T5844] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 409.630846][T14838] openvswitch: netlink: Key type 3100 is out of range max 32 [ 409.635429][ T5844] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 409.658500][ T5844] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 409.697660][ T5844] cm6533_jd 0003:0D8C:0022.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 409.811341][ T5844] usb 7-1: USB disconnect, device number 26 [ 410.052388][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 410.193748][ T24] usb 4-1: device descriptor read/64, error -71 [ 410.452145][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 410.466767][T14869] FAULT_INJECTION: forcing a failure. [ 410.466767][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 410.481245][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.481271][T14869] Tainted: [L]=SOFTLOCKUP [ 410.481278][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.481288][T14869] Call Trace: [ 410.481296][T14869] [ 410.481304][T14869] dump_stack_lvl+0xe8/0x150 [ 410.481334][T14869] should_fail_ex+0x412/0x560 [ 410.481356][T14869] ? ovl_alloc_inode+0x2c/0xa0 [ 410.481377][T14869] should_failslab+0xa8/0x100 [ 410.481397][T14869] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 410.481429][T14869] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 410.481446][T14869] ovl_alloc_inode+0x2c/0xa0 [ 410.481465][T14869] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 410.481481][T14869] alloc_inode+0x6a/0x1b0 [ 410.481499][T14869] ? __pfx_ovl_inode_test+0x10/0x10 [ 410.481517][T14869] ? __pfx_ovl_inode_set+0x10/0x10 [ 410.481535][T14869] iget5_locked+0x4a/0xa0 [ 410.481559][T14869] ovl_get_inode+0x6a4/0xfe0 [ 410.481591][T14869] ? __pfx_ovl_get_inode+0x10/0x10 [ 410.481612][T14869] ? do_raw_spin_unlock+0xf5/0x210 [ 410.481650][T14869] ovl_lookup+0x1926/0x1c80 [ 410.481698][T14869] ? __pfx_ovl_lookup+0x10/0x10 [ 410.481721][T14869] ? __pfx_d_alloc_parallel+0x10/0x10 [ 410.481744][T14869] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.481768][T14869] ? __raw_spin_lock_init+0x45/0x100 [ 410.481790][T14869] ? __init_waitqueue_head+0xa9/0x150 [ 410.481815][T14869] __lookup_slow+0x2b7/0x410 [ 410.481841][T14869] ? __pfx___lookup_slow+0x10/0x10 [ 410.481877][T14869] ? down_read+0x270/0x2e0 [ 410.481901][T14869] lookup_slow+0x53/0x70 [ 410.481925][T14869] path_lookupat+0x3f5/0x8c0 [ 410.481961][T14869] filename_lookup+0x256/0x5d0 [ 410.481989][T14869] ? __pfx_filename_lookup+0x10/0x10 [ 410.482034][T14869] ? strncpy_from_user+0x150/0x2b0 [ 410.482060][T14869] ? do_getname+0x151/0x250 [ 410.482081][T14869] do_sys_truncate+0xbb/0x1c0 [ 410.482098][T14869] ? __pfx_do_sys_truncate+0x10/0x10 [ 410.482115][T14869] ? __pfx_ksys_write+0x10/0x10 [ 410.482138][T14869] __x64_sys_truncate+0x5b/0x70 [ 410.482156][T14869] do_syscall_64+0x14d/0xf80 [ 410.482174][T14869] ? trace_irq_disable+0x3b/0x140 [ 410.482193][T14869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.482210][T14869] ? clear_bhb_loop+0x40/0x90 [ 410.482232][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.482249][T14869] RIP: 0033:0x7f0e6cb9c799 [ 410.482266][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.482281][T14869] RSP: 002b:00007f0e6db07028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 410.482299][T14869] RAX: ffffffffffffffda RBX: 00007f0e6ce15fa0 RCX: 00007f0e6cb9c799 [ 410.482312][T14869] RDX: 0000000000000000 RSI: 00000000000000e2 RDI: 0000200000000140 [ 410.482321][T14869] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 410.482332][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.482342][T14869] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 410.482370][T14869] [ 410.799590][T14869] overlayfs: failed to get inode (-12) [ 410.858731][ T24] usb 4-1: device descriptor read/64, error -71 [ 410.864084][T14874] netlink: get zone limit has 8 unknown bytes [ 410.922155][ T808] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 410.974736][ T24] usb usb4-port1: attempt power cycle [ 411.073540][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 411.080420][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.092425][ T808] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.101474][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.131499][ T808] usb 1-1: config 0 descriptor?? [ 411.312212][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 411.333766][ T24] usb 4-1: device descriptor read/8, error -71 [ 411.422148][ T5844] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 411.554685][ T808] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 411.572573][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 411.581915][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.593804][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 21, changing to 8 [ 411.603848][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 411.606129][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 17515, setting to 1024 [ 411.627178][ T5844] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 411.637463][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.644423][ T24] usb 4-1: device descriptor read/8, error -71 [ 411.645880][ T5844] usb 9-1: Product: syz [ 411.656379][ T5844] usb 9-1: Manufacturer: syz [ 411.671417][ T5844] usb 9-1: SerialNumber: syz [ 411.692028][ T5844] usb 9-1: config 0 descriptor?? [ 411.709264][T14888] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 411.721662][ T5844] pegasus_notetaker 9-1:0.0: packet size is too small (0) [ 411.735566][ T5844] pegasus_notetaker 9-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 411.773918][ T24] usb usb4-port1: unable to enumerate USB device [ 411.876943][T14911] netlink: get zone limit has 8 unknown bytes [ 411.931007][ T5844] usb 9-1: USB disconnect, device number 59 [ 411.955956][ T5949] usb 1-1: USB disconnect, device number 43 [ 412.613096][T14929] fuseblk: Unknown parameter ']§er;ž2d¨2 ¤„̺W40x0000000000000005' [ 412.667396][T14929] netlink: 'syz.8.1414': attribute type 11 has an invalid length. [ 413.010545][T14945] netlink: get zone limit has 8 unknown bytes [ 413.417576][T14948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.509186][T14968] FAULT_INJECTION: forcing a failure. [ 413.509186][T14968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.571505][T14968] CPU: 0 UID: 0 PID: 14968 Comm: syz.8.1425 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.571534][T14968] Tainted: [L]=SOFTLOCKUP [ 413.571541][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.571551][T14968] Call Trace: [ 413.571558][T14968] [ 413.571565][T14968] dump_stack_lvl+0xe8/0x150 [ 413.571595][T14968] should_fail_ex+0x412/0x560 [ 413.571618][T14968] _copy_from_iter+0x1d3/0x1670 [ 413.571640][T14968] ? sock_alloc_send_pskb+0x896/0x990 [ 413.571667][T14968] ? __pfx__copy_from_iter+0x10/0x10 [ 413.571695][T14968] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 413.571723][T14968] skb_copy_datagram_from_iter+0xf5/0x710 [ 413.571748][T14968] ? dev_get_by_index+0x22/0x2f0 [ 413.571771][T14968] ? skb_put+0x11b/0x210 [ 413.571793][T14968] packet_sendmsg+0x37a6/0x5150 [ 413.571843][T14968] ? __lock_acquire+0x6b5/0x2cf0 [ 413.571882][T14968] ? __pfx_packet_sendmsg+0x10/0x10 [ 413.571909][T14968] ? __might_fault+0xaf/0x130 [ 413.571939][T14968] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.571960][T14968] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 413.571994][T14968] ? __pfx_packet_sendmsg+0x10/0x10 [ 413.572017][T14968] sock_sendmsg_nosec+0x112/0x150 [ 413.572043][T14968] __sys_sendto+0x3ff/0x590 [ 413.572063][T14968] ? __pfx___sys_sendto+0x10/0x10 [ 413.572079][T14968] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 413.572108][T14968] ? __fget_files+0x3a0/0x420 [ 413.572139][T14968] ? ksys_write+0x242/0x270 [ 413.572157][T14968] ? __pfx_ksys_write+0x10/0x10 [ 413.572179][T14968] __x64_sys_sendto+0xde/0x100 [ 413.572200][T14968] do_syscall_64+0x14d/0xf80 [ 413.572218][T14968] ? trace_irq_disable+0x3b/0x140 [ 413.572238][T14968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.572256][T14968] ? clear_bhb_loop+0x40/0x90 [ 413.572277][T14968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.572295][T14968] RIP: 0033:0x7f9da1d9c799 [ 413.572312][T14968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.572326][T14968] RSP: 002b:00007f9da2c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.572352][T14968] RAX: ffffffffffffffda RBX: 00007f9da2015fa0 RCX: 00007f9da1d9c799 [ 413.572366][T14968] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 413.572377][T14968] RBP: 00007f9da2c77090 R08: 00002000000000c0 R09: 0000000000000014 [ 413.572389][T14968] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 413.572400][T14968] R13: 00007f9da2016038 R14: 00007f9da2015fa0 R15: 00007fff74bb27b8 [ 413.572428][T14968] [ 413.835823][ T5949] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 413.856099][ T808] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 414.002196][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 414.009741][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.021740][ T5949] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 414.022860][ T808] usb 4-1: device descriptor read/64, error -71 [ 414.030863][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.048384][ T5949] usb 7-1: config 0 descriptor?? [ 414.167763][T14993] netlink: get zone limit has 8 unknown bytes [ 414.342185][ T808] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 414.470740][ T5949] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 414.487813][ T808] usb 4-1: device descriptor read/64, error -71 [ 414.615059][ T808] usb usb4-port1: attempt power cycle [ 414.878809][ T7830] usb 7-1: USB disconnect, device number 27 [ 414.982956][ T808] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 415.027503][ T808] usb 4-1: device descriptor read/8, error -71 [ 415.177378][T15014] netlink: get zone limit has 8 unknown bytes [ 415.283015][ T808] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 415.324096][ T808] usb 4-1: device descriptor read/8, error -71 [ 415.444638][ T808] usb usb4-port1: unable to enumerate USB device [ 415.731575][T15035] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 415.812323][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 415.982869][ T24] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 416.005591][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.023728][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.042506][ T24] usb 7-1: Product: syz [ 416.052449][ T24] usb 7-1: Manufacturer: syz [ 416.058641][ T24] usb 7-1: SerialNumber: syz [ 416.091954][ T24] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.114182][ T5891] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.795566][ T5949] usb 7-1: USB disconnect, device number 28 [ 416.940112][T15068] netlink: get zone limit has 8 unknown bytes [ 416.981592][T15070] netlink: get zone limit has 8 unknown bytes [ 417.197661][T15075] FAULT_INJECTION: forcing a failure. [ 417.197661][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.221086][ T5891] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 417.241536][ T5891] ath9k_htc: Failed to initialize the device [ 417.254906][ T5949] usb 7-1: ath9k_htc: USB layer deinitialized [ 417.265025][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.3.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.265052][T15075] Tainted: [L]=SOFTLOCKUP [ 417.265059][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.265069][T15075] Call Trace: [ 417.265077][T15075] [ 417.265084][T15075] dump_stack_lvl+0xe8/0x150 [ 417.265116][T15075] should_fail_ex+0x412/0x560 [ 417.265142][T15075] _copy_to_user+0x31/0xb0 [ 417.265166][T15075] simple_read_from_buffer+0xe1/0x170 [ 417.265195][T15075] proc_fail_nth_read+0x1bb/0x230 [ 417.265221][T15075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.265247][T15075] ? rw_verify_area+0x2a6/0x4d0 [ 417.265272][T15075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.265296][T15075] vfs_read+0x20c/0xa70 [ 417.265321][T15075] ? fdget_pos+0x246/0x320 [ 417.265347][T15075] ? __pfx___mutex_lock+0x10/0x10 [ 417.265368][T15075] ? __pfx_vfs_read+0x10/0x10 [ 417.265395][T15075] ? __fget_files+0x2a/0x420 [ 417.265421][T15075] ? __fget_files+0x3a0/0x420 [ 417.265442][T15075] ? __fget_files+0x2a/0x420 [ 417.265472][T15075] ksys_read+0x150/0x270 [ 417.265499][T15075] ? __pfx_ksys_read+0x10/0x10 [ 417.265523][T15075] ? __pfx_tty_ioctl+0x10/0x10 [ 417.265555][T15075] do_syscall_64+0x14d/0xf80 [ 417.265573][T15075] ? trace_irq_disable+0x3b/0x140 [ 417.265593][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.265611][T15075] ? clear_bhb_loop+0x40/0x90 [ 417.265633][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.265651][T15075] RIP: 0033:0x7f2f4cb5cfce [ 417.265667][T15075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.265682][T15075] RSP: 002b:00007f2f4db40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.265702][T15075] RAX: ffffffffffffffda RBX: 00007f2f4db416c0 RCX: 00007f2f4cb5cfce [ 417.265715][T15075] RDX: 000000000000000f RSI: 00007f2f4db410a0 RDI: 0000000000000004 [ 417.265726][T15075] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 417.265738][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.265749][T15075] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 417.265777][T15075] [ 417.782143][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 417.932433][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 417.953088][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.964293][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 417.974694][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.991121][ T24] usb 4-1: config 0 descriptor?? [ 418.163253][ T5891] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 418.234678][T15092] netlink: 57 bytes leftover after parsing attributes in process `syz.8.1448'. [ 418.336079][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.351078][ T5891] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.377719][ T5891] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.390457][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.400819][ T5891] usb 7-1: SerialNumber: syz [ 418.594554][T15100] netlink: get zone limit has 8 unknown bytes [ 418.614168][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 418.627400][ T5891] usb 7-1: 0:2 : does not exist [ 418.637838][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 418.684222][ T24] usb 4-1: USB disconnect, device number 46 [ 418.762114][ T5891] usb 7-1: USB disconnect, device number 29 [ 418.874912][T15105] FAULT_INJECTION: forcing a failure. [ 418.874912][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 418.915525][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.0.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.915553][T15105] Tainted: [L]=SOFTLOCKUP [ 418.915560][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.915569][T15105] Call Trace: [ 418.915576][T15105] [ 418.915584][T15105] dump_stack_lvl+0xe8/0x150 [ 418.915613][T15105] should_fail_ex+0x412/0x560 [ 418.915639][T15105] should_failslab+0xa8/0x100 [ 418.915661][T15105] ? security_inode_alloc+0x39/0x310 [ 418.915687][T15105] kmem_cache_alloc_noprof+0x87/0x650 [ 418.915719][T15105] security_inode_alloc+0x39/0x310 [ 418.915744][T15105] inode_init_always_gfp+0x9ed/0xdc0 [ 418.915771][T15105] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 418.915791][T15105] alloc_inode+0x82/0x1b0 [ 418.915822][T15105] new_inode+0x22/0x170 [ 418.915847][T15105] __debugfs_create_file+0xb8/0x400 [ 418.915874][T15105] debugfs_create_file_full+0x3f/0x60 [ 418.915898][T15105] ref_tracker_dir_debugfs+0x197/0x360 [ 418.915920][T15105] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 418.915963][T15105] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 418.915981][T15105] ? alloc_netdev_mqs+0xa8/0x1200 [ 418.916009][T15105] ? __raw_spin_lock_init+0x45/0x100 [ 418.916033][T15105] alloc_netdev_mqs+0x2b9/0x1200 [ 418.916054][T15105] ? __pfx_bnep_net_setup+0x10/0x10 [ 418.916080][T15105] bnep_add_connection+0x214/0xca0 [ 418.916107][T15105] ? __pfx_bnep_add_connection+0x10/0x10 [ 418.916126][T15105] ? __fget_files+0x3a0/0x420 [ 418.916158][T15105] do_bnep_sock_ioctl+0x40b/0x650 [ 418.916181][T15105] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 418.916207][T15105] ? tomoyo_path_number_perm+0x219/0x630 [ 418.916247][T15105] sock_do_ioctl+0x101/0x320 [ 418.916274][T15105] ? __pfx_sock_do_ioctl+0x10/0x10 [ 418.916295][T15105] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 418.916329][T15105] sock_ioctl+0x5c6/0x7f0 [ 418.916353][T15105] ? __pfx_sock_ioctl+0x10/0x10 [ 418.916376][T15105] ? __fget_files+0x2a/0x420 [ 418.916396][T15105] ? __fget_files+0x3a0/0x420 [ 418.916416][T15105] ? __fget_files+0x2a/0x420 [ 418.916442][T15105] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.916460][T15105] ? __pfx_sock_ioctl+0x10/0x10 [ 418.916482][T15105] __se_sys_ioctl+0xfc/0x170 [ 418.916503][T15105] do_syscall_64+0x14d/0xf80 [ 418.916521][T15105] ? trace_irq_disable+0x3b/0x140 [ 418.916540][T15105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.916558][T15105] ? clear_bhb_loop+0x40/0x90 [ 418.916578][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.916593][T15105] RIP: 0033:0x7fd28e39c799 [ 418.916610][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.916625][T15105] RSP: 002b:00007fd28f321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.916643][T15105] RAX: ffffffffffffffda RBX: 00007fd28e615fa0 RCX: 00007fd28e39c799 [ 418.916656][T15105] RDX: 00002000000003c0 RSI: 00000000400442c8 RDI: 0000000000000005 [ 418.916667][T15105] RBP: 00007fd28f321090 R08: 0000000000000000 R09: 0000000000000000 [ 418.916677][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.916688][T15105] R13: 00007fd28e616038 R14: 00007fd28e615fa0 R15: 00007ffcb94ee418 [ 418.916715][T15105] [ 418.916763][T15105] debugfs: out of free dentries, can not create file 'netdev@ffff88807a1f2630' [ 419.532910][T15118] FAULT_INJECTION: forcing a failure. [ 419.532910][T15118] name failslab, interval 1, probability 0, space 0, times 0 [ 419.546290][T15118] CPU: 0 UID: 0 PID: 15118 Comm: syz.8.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.546318][T15118] Tainted: [L]=SOFTLOCKUP [ 419.546325][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.546336][T15118] Call Trace: [ 419.546344][T15118] [ 419.546352][T15118] dump_stack_lvl+0xe8/0x150 [ 419.546384][T15118] should_fail_ex+0x412/0x560 [ 419.546410][T15118] should_failslab+0xa8/0x100 [ 419.546431][T15118] __kmalloc_noprof+0xe8/0x760 [ 419.546458][T15118] ? tomoyo_encode+0x28b/0x550 [ 419.546488][T15118] tomoyo_encode+0x28b/0x550 [ 419.546518][T15118] tomoyo_mount_permission+0x3a2/0x9d0 [ 419.546545][T15118] ? stack_depot_save_flags+0x33/0x810 [ 419.546566][T15118] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 419.546590][T15118] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 419.546665][T15118] security_sb_mount+0xe4/0x320 [ 419.546695][T15118] path_mount+0xbc/0x10e0 [ 419.546723][T15118] ? user_path_at+0xd4/0x160 [ 419.546749][T15118] __se_sys_mount+0x31d/0x420 [ 419.546777][T15118] ? __pfx___se_sys_mount+0x10/0x10 [ 419.546806][T15118] ? __x64_sys_mount+0x20/0xc0 [ 419.546830][T15118] do_syscall_64+0x14d/0xf80 [ 419.546849][T15118] ? trace_irq_disable+0x3b/0x140 [ 419.546869][T15118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.546886][T15118] ? clear_bhb_loop+0x40/0x90 [ 419.546908][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.546926][T15118] RIP: 0033:0x7f9da1d9c799 [ 419.546942][T15118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.546957][T15118] RSP: 002b:00007f9da2c35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 419.546976][T15118] RAX: ffffffffffffffda RBX: 00007f9da2016180 RCX: 00007f9da1d9c799 [ 419.546989][T15118] RDX: 0000200000000040 RSI: 0000200000000a00 RDI: 0000200000000000 [ 419.547002][T15118] RBP: 00007f9da2c35090 R08: 0000000000000000 R09: 0000000000000000 [ 419.547013][T15118] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 419.547024][T15118] R13: 00007f9da2016218 R14: 00007f9da2016180 R15: 00007fff74bb27b8 [ 419.547053][T15118] [ 419.908413][T15128] FAULT_INJECTION: forcing a failure. [ 419.908413][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 419.921147][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.6.1457 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.921174][T15128] Tainted: [L]=SOFTLOCKUP [ 419.921180][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.921190][T15128] Call Trace: [ 419.921205][T15128] [ 419.921212][T15128] dump_stack_lvl+0xe8/0x150 [ 419.921243][T15128] should_fail_ex+0x412/0x560 [ 419.921268][T15128] should_failslab+0xa8/0x100 [ 419.921288][T15128] __kmalloc_noprof+0xe8/0x760 [ 419.921315][T15128] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 419.921346][T15128] tomoyo_realpath_from_path+0xe3/0x5d0 [ 419.921372][T15128] ? tomoyo_domain+0xd7/0x130 [ 419.921394][T15128] ? tomoyo_path_number_perm+0x219/0x630 [ 419.921417][T15128] tomoyo_path_number_perm+0x246/0x630 [ 419.921441][T15128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 419.921462][T15128] ? __lock_acquire+0x6b5/0x2cf0 [ 419.921501][T15128] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 419.921538][T15128] ? __fget_files+0x2a/0x420 [ 419.921563][T15128] ? __fget_files+0x2a/0x420 [ 419.921584][T15128] ? __fget_files+0x3a0/0x420 [ 419.921604][T15128] ? __fget_files+0x2a/0x420 [ 419.921629][T15128] security_file_ioctl+0xc3/0x2a0 [ 419.921652][T15128] __se_sys_ioctl+0x47/0x170 [ 419.921672][T15128] do_syscall_64+0x14d/0xf80 [ 419.921690][T15128] ? trace_irq_disable+0x3b/0x140 [ 419.921708][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.921726][T15128] ? clear_bhb_loop+0x40/0x90 [ 419.921748][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.921765][T15128] RIP: 0033:0x7f0e6cb9c799 [ 419.921782][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.921796][T15128] RSP: 002b:00007f0e6db07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.921814][T15128] RAX: ffffffffffffffda RBX: 00007f0e6ce15fa0 RCX: 00007f0e6cb9c799 [ 419.921827][T15128] RDX: 00002000000003c0 RSI: 00000000400442c8 RDI: 0000000000000005 [ 419.921839][T15128] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 419.921850][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.921861][T15128] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 419.921889][T15128] [ 419.921896][T15128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.084033][ T5161] Bluetooth: hci3: link tx timeout [ 420.151147][T15134] netlink: get zone limit has 8 unknown bytes [ 420.159979][ T5161] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.193525][ T5846] Bluetooth: hci3: link tx timeout [ 420.199432][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.284435][T15137] netlink: get zone limit has 8 unknown bytes [ 420.303440][ T5846] Bluetooth: hci3: link tx timeout [ 420.308985][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.383304][ T5846] Bluetooth: hci3: link tx timeout [ 420.388483][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.777472][ T5891] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 420.808293][T15160] sp0: Synchronizing with TNC [ 420.862610][ T7579] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 420.953780][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.974319][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.997198][ T5891] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.016260][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.025945][ T7579] usb 4-1: Using ep0 maxpacket: 16 [ 421.039132][ T7579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.052510][ T5891] usb 1-1: SerialNumber: syz [ 421.071041][ T7579] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 421.105847][ T7579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.142140][ T7579] usb 4-1: config 0 descriptor?? [ 421.310143][ T5891] usb 1-1: 0:2 : does not exist [ 421.334420][ T5846] Bluetooth: hci3: link tx timeout [ 421.339813][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 421.457004][ T5846] Bluetooth: hci3: link tx timeout [ 421.462743][ T5891] usb 1-1: USB disconnect, device number 44 [ 421.469190][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 421.553042][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.561081][T15182] syzkaller1: entered promiscuous mode [ 421.590203][T15182] syzkaller1: entered allmulticast mode [ 421.644565][T15184] FAULT_INJECTION: forcing a failure. [ 421.644565][T15184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.657985][T15184] CPU: 1 UID: 0 PID: 15184 Comm: syz.6.1468 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.658021][T15184] Tainted: [L]=SOFTLOCKUP [ 421.658027][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.658037][T15184] Call Trace: [ 421.658044][T15184] [ 421.658050][T15184] dump_stack_lvl+0xe8/0x150 [ 421.658078][T15184] should_fail_ex+0x412/0x560 [ 421.658101][T15184] _copy_from_user+0x2d/0xb0 [ 421.658124][T15184] kstrtouint_from_user+0xd6/0x180 [ 421.658145][T15184] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 421.658175][T15184] proc_fail_nth_write+0x8e/0x210 [ 421.658198][T15184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.658224][T15184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.658248][T15184] vfs_write+0x29a/0xb90 [ 421.658278][T15184] ? __pfx_vfs_write+0x10/0x10 [ 421.658303][T15184] ? __fget_files+0x2a/0x420 [ 421.658329][T15184] ? __fget_files+0x3a0/0x420 [ 421.658350][T15184] ? __fget_files+0x2a/0x420 [ 421.658378][T15184] ksys_write+0x150/0x270 [ 421.658394][T15184] ? __pfx_ksys_write+0x10/0x10 [ 421.658418][T15184] do_syscall_64+0x14d/0xf80 [ 421.658439][T15184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.658453][T15184] ? clear_bhb_loop+0x40/0x90 [ 421.658479][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.658495][T15184] RIP: 0033:0x7f0e6cb5cfce [ 421.658511][T15184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.658526][T15184] RSP: 002b:00007f0e6db06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.658542][T15184] RAX: ffffffffffffffda RBX: 00007f0e6db076c0 RCX: 00007f0e6cb5cfce [ 421.658552][T15184] RDX: 0000000000000001 RSI: 00007f0e6db070a0 RDI: 0000000000000003 [ 421.658562][T15184] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 421.658571][T15184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.658579][T15184] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 421.658603][T15184] [ 421.884327][ T7579] usbhid 4-1:0.0: can't add hid device: -71 [ 421.890364][ T7579] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 421.900816][ T7579] usb 4-1: USB disconnect, device number 47 [ 422.028347][T15189] netlink: 'syz.8.1470': attribute type 11 has an invalid length. [ 422.055038][T15190] netlink: get zone limit has 8 unknown bytes [ 422.151331][ T5846] Bluetooth: hci3: link tx timeout [ 422.156564][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 422.252354][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 422.259220][ T5846] Bluetooth: hci3: link tx timeout [ 422.280616][T15201] netlink: get zone limit has 8 unknown bytes [ 422.402759][T15200] syzkaller1: entered promiscuous mode [ 422.424645][ T5924] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 422.437314][T15200] syzkaller1: entered allmulticast mode [ 422.592164][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 422.605773][ T5924] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.633981][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 422.650819][ T5924] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 422.674040][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.693849][ T5924] usb 1-1: config 0 descriptor?? [ 423.038559][T15213] (syz.6.1478,15213,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 423.048220][T15213] (syz.6.1478,15213,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 423.447830][ T5924] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 423.687602][ T5924] usb 1-1: USB disconnect, device number 45 [ 423.746800][T15214] fido_id[15214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 423.921560][T15222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.935624][T15222] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.1482'. [ 423.949277][T15222] bridge_slave_1: default FDB implementation only supports local addresses [ 424.004701][T15224] netlink: get zone limit has 8 unknown bytes [ 424.022156][ T7830] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 424.173894][ T7830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.184121][ T7830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.195341][ T7830] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.204930][ T7830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.213278][ T7830] usb 7-1: SerialNumber: syz [ 424.448280][ T7830] usb 7-1: 0:2 : does not exist [ 424.494316][ T5971] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 424.509355][ T7830] usb 7-1: USB disconnect, device number 30 [ 424.551093][T15244] netlink: get zone limit has 8 unknown bytes [ 424.575010][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.652283][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 424.658981][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.671093][ T5971] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 424.680379][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.688520][ T7579] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 424.699961][ T5971] usb 1-1: config 0 descriptor?? [ 424.852204][ T7579] usb 9-1: Using ep0 maxpacket: 8 [ 424.860654][ T7579] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 424.870890][ T7579] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 424.884311][ T7579] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 424.897016][ T7579] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 424.908484][ T7579] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 424.925571][ T7579] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.939421][ T7579] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.948985][ T7579] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.197479][ T7579] usb 9-1: GET_CAPABILITIES returned 0 [ 425.203648][ T7579] usbtmc 9-1:16.0: can't read capabilities [ 425.312223][ T808] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 425.327944][ T5971] usbhid 1-1:0.0: can't add hid device: -71 [ 425.334208][ T5971] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 425.358842][ T5971] usb 1-1: USB disconnect, device number 46 [ 425.410853][T15242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.419851][T15242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.431691][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 425.447033][T15242] usbtmc 9-1:16.0: Unable to send data, error -71 [ 425.456274][ T7830] usb 9-1: USB disconnect, device number 60 [ 425.458033][T15251] netlink: get zone limit has 8 unknown bytes [ 425.473316][ T808] usb 7-1: device descriptor read/64, error -71 [ 425.722194][ T808] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 425.852158][ T808] usb 7-1: device descriptor read/64, error -71 [ 425.969321][ T808] usb usb7-port1: attempt power cycle [ 426.298714][T15287] netlink: get zone limit has 8 unknown bytes [ 426.332225][ T808] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 426.352876][ T808] usb 7-1: device descriptor read/8, error -71 [ 426.388884][ T3579] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 426.432233][ T7579] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 426.532174][ T7830] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 426.592124][ T7579] usb 1-1: Using ep0 maxpacket: 8 [ 426.599264][ T7579] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.609855][ T808] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 426.624263][ T7579] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 426.633767][ T7579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.644624][ T7579] usb 1-1: config 0 descriptor?? [ 426.657735][ T7579] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 426.665587][ T808] usb 7-1: device descriptor read/8, error -71 [ 426.696090][ T7830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.706873][ T7830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.720031][ T7830] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.729415][ T7830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.739326][ T7830] usb 4-1: SerialNumber: syz [ 426.787920][ T808] usb usb7-port1: unable to enumerate USB device [ 426.966184][ T7830] usb 4-1: 0:2 : does not exist [ 427.038063][ T7830] usb 4-1: USB disconnect, device number 48 [ 427.055352][ T7579] gspca_vc032x: reg_w err -71 [ 427.071340][ T7579] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 427.115845][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.118533][ T7579] usb 1-1: USB disconnect, device number 47 [ 427.206057][T15292] netlink: get zone limit has 8 unknown bytes [ 427.752174][ T808] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 427.882203][ T7830] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 427.902212][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 427.909152][ T808] usb 4-1: too many endpoints for config 1 interface 0 altsetting 46: 254, using maximum allowed: 30 [ 427.920743][ T808] usb 4-1: config 1 interface 0 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 427.934274][ T808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 427.940931][ T808] usb 4-1: New USB device found, idVendor=0899, idProduct=0000, bcdDevice= 0.00 [ 427.950033][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.000861][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 428.000876][ T29] audit: type=1804 audit(5321997187.177:53): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1508" name="/newroot/273/file1" dev="tmpfs" ino=1472 res=1 errno=0 [ 428.053962][ T7830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.070070][ T7830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.080318][ T7830] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.080346][ T7830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.080366][ T7830] usb 1-1: SerialNumber: syz [ 428.230199][T15313] netlink: get zone limit has 8 unknown bytes [ 428.249952][T15315] netlink: get zone limit has 8 unknown bytes [ 428.266169][ T808] usb 4-1: string descriptor 0 read error: -71 [ 428.281257][ T808] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.296130][ T808] usb 4-1: MIDIStreaming interface descriptor not found [ 428.409806][ T7830] usb 1-1: 0:2 : does not exist [ 428.414928][ T808] usb 4-1: USB disconnect, device number 49 [ 428.458357][ T7830] usb 1-1: USB disconnect, device number 48 [ 428.564990][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 428.792138][ T5971] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 428.955789][ T5971] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.979830][ T5971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.003046][ T5971] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.018933][ T5971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.028198][ T5971] usb 7-1: SerialNumber: syz [ 429.247522][ T5971] usb 7-1: 0:2 : does not exist [ 429.272860][ T5971] usb 7-1: USB disconnect, device number 35 [ 429.315911][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.322385][ T7830] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 429.482963][T15346] netlink: get zone limit has 8 unknown bytes [ 429.496737][T15349] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 429.512162][ T7830] usb 1-1: Using ep0 maxpacket: 16 [ 429.525906][ T7830] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.540033][ T7830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 429.546953][ T7830] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 429.558123][ T7830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.570593][ T7830] usb 1-1: config 0 descriptor?? [ 429.701040][T15358] fuse: Unknown parameter '›I*ÿÿÿÿ¥‰ª;Kfo' [ 429.786643][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.796163][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.808483][T15363] FAULT_INJECTION: forcing a failure. [ 429.808483][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 429.824655][T15363] CPU: 1 UID: 0 PID: 15363 Comm: syz.6.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.824681][T15363] Tainted: [L]=SOFTLOCKUP [ 429.824688][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.824699][T15363] Call Trace: [ 429.824715][T15363] [ 429.824723][T15363] dump_stack_lvl+0xe8/0x150 [ 429.824753][T15363] should_fail_ex+0x412/0x560 [ 429.824779][T15363] should_failslab+0xa8/0x100 [ 429.824800][T15363] __kmalloc_cache_noprof+0x88/0x660 [ 429.824828][T15363] ? fuse_lookup_name+0x1d0/0x8b0 [ 429.824851][T15363] fuse_lookup_name+0x1d0/0x8b0 [ 429.824874][T15363] ? lockdep_unlock+0x5d/0xd0 [ 429.824898][T15363] ? __pfx_fuse_lookup_name+0x10/0x10 [ 429.824916][T15363] ? fuse_lock_inode+0xd3/0x120 [ 429.824957][T15363] ? d_alloc_parallel+0x44a/0x1610 [ 429.824989][T15363] fuse_lookup+0x213/0x4e0 [ 429.825010][T15363] ? __pfx_fuse_lookup+0x10/0x10 [ 429.825029][T15363] ? d_alloc_parallel+0x14c7/0x1610 [ 429.825073][T15363] fuse_atomic_open+0x196/0x430 [ 429.825097][T15363] ? __pfx_fuse_atomic_open+0x10/0x10 [ 429.825116][T15363] atomic_open+0x14f/0x370 [ 429.825139][T15363] path_openat+0x10e9/0x3860 [ 429.825169][T15363] ? __kernel_text_address+0xd/0x30 [ 429.825206][T15363] ? __pfx_path_openat+0x10/0x10 [ 429.825221][T15363] ? stack_trace_save+0xa9/0x100 [ 429.825246][T15363] ? stack_depot_save_flags+0x33/0x810 [ 429.825274][T15363] do_file_open+0x23e/0x4a0 [ 429.825304][T15363] ? __pfx_do_file_open+0x10/0x10 [ 429.825351][T15363] ? __might_fault+0xaf/0x130 [ 429.825374][T15363] ? build_open_flags+0x44a/0x5b0 [ 429.825403][T15363] file_open_name+0x162/0x1c0 [ 429.825427][T15363] ? __pfx_file_open_name+0x10/0x10 [ 429.825457][T15363] ? do_getname+0x151/0x250 [ 429.825479][T15363] __se_sys_acct+0xf3/0x9c0 [ 429.825499][T15363] ? ksys_write+0x242/0x270 [ 429.825517][T15363] ? __pfx___se_sys_acct+0x10/0x10 [ 429.825548][T15363] do_syscall_64+0x14d/0xf80 [ 429.825570][T15363] ? trace_irq_disable+0x3b/0x140 [ 429.825588][T15363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.825606][T15363] ? clear_bhb_loop+0x40/0x90 [ 429.825628][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.825643][T15363] RIP: 0033:0x7f0e6cb9c799 [ 429.825660][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.825674][T15363] RSP: 002b:00007f0e6db07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 429.825693][T15363] RAX: ffffffffffffffda RBX: 00007f0e6ce15fa0 RCX: 00007f0e6cb9c799 [ 429.825714][T15363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 429.825725][T15363] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 429.825735][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.825744][T15363] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 429.825772][T15363] [ 430.219362][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 430.401785][T15371] netlink: get zone limit has 8 unknown bytes [ 430.520232][ T7830] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 430.677464][T15375] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 431.032378][ T5924] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 431.201569][ T5924] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.230967][ T5924] usb 7-1: config 0 has an invalid interface number: 175 but max is 0 [ 431.241906][ T5924] usb 7-1: config 0 has no interface number 0 [ 431.249598][ T5924] usb 7-1: config 0 interface 175 has no altsetting 0 [ 431.271084][ T5924] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=22.1a [ 431.291316][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.309543][ T5924] usb 7-1: Product: syz [ 431.319232][ T5924] usb 7-1: Manufacturer: syz [ 431.333383][ T5924] usb 7-1: SerialNumber: syz [ 431.357101][ T5924] usb 7-1: config 0 descriptor?? [ 431.549593][T15398] FAULT_INJECTION: forcing a failure. [ 431.549593][T15398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.578296][T15397] netlink: get zone limit has 8 unknown bytes [ 431.596313][T15398] CPU: 1 UID: 0 PID: 15398 Comm: syz.3.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.596342][T15398] Tainted: [L]=SOFTLOCKUP [ 431.596349][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.596365][T15398] Call Trace: [ 431.596371][T15398] [ 431.596379][T15398] dump_stack_lvl+0xe8/0x150 [ 431.596407][T15398] should_fail_ex+0x412/0x560 [ 431.596429][T15398] _copy_to_user+0x31/0xb0 [ 431.596452][T15398] wext_handle_ioctl+0x145/0x1d0 [ 431.596472][T15398] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 431.596487][T15398] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 431.596519][T15398] sock_ioctl+0x159/0x7f0 [ 431.596545][T15398] ? __pfx_sock_ioctl+0x10/0x10 [ 431.596565][T15398] ? __fget_files+0x2a/0x420 [ 431.596586][T15398] ? __fget_files+0x3a0/0x420 [ 431.596604][T15398] ? __fget_files+0x2a/0x420 [ 431.596628][T15398] ? bpf_lsm_file_ioctl+0x9/0x20 [ 431.596646][T15398] ? __pfx_sock_ioctl+0x10/0x10 [ 431.596667][T15398] __se_sys_ioctl+0xfc/0x170 [ 431.596684][T15398] do_syscall_64+0x14d/0xf80 [ 431.596702][T15398] ? trace_irq_disable+0x3b/0x140 [ 431.596720][T15398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.596738][T15398] ? clear_bhb_loop+0x40/0x90 [ 431.596758][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.596776][T15398] RIP: 0033:0x7f2f4cb9c799 [ 431.596793][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.596807][T15398] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.596826][T15398] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 431.596839][T15398] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000003 [ 431.596850][T15398] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 431.596861][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.596872][T15398] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 431.596899][T15398] [ 431.597630][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.845929][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.882744][ T5924] usb_ehset_test 7-1:0.175: probe with driver usb_ehset_test failed with error -32 [ 431.915359][ T5924] usb 7-1: USB disconnect, device number 36 [ 431.968120][T15404] Invalid argument reading file caps for ./file0 [ 432.026590][ T5846] Bluetooth: Unexpected continuation frame (len 57) [ 432.027628][ T7579] usb 1-1: USB disconnect, device number 49 [ 432.727454][ T7579] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 432.803627][ T5971] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 432.884685][ T7579] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.912164][ T7579] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.922395][ T7579] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.934363][ T7579] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.962244][ T7579] usb 7-1: SerialNumber: syz [ 432.966927][ T5971] usb 9-1: Using ep0 maxpacket: 32 [ 432.979801][ T5971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.002260][ T5971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.022242][ T5971] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.042246][ T5971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.072623][ T5971] usb 9-1: config 0 descriptor?? [ 433.080694][ T5971] hub 9-1:0.0: USB hub found [ 433.186345][ T7579] usb 7-1: 0:2 : does not exist [ 433.248585][ T7579] usb 7-1: USB disconnect, device number 37 [ 433.288887][ T5971] hub 9-1:0.0: 1 port detected [ 433.760004][T15465] netlink: get zone limit has 8 unknown bytes [ 433.911715][ T5971] hub 9-1:0.0: activate --> -90 [ 434.232321][T15493] netlink: get zone limit has 8 unknown bytes [ 434.350919][ T5971] usb 9-1-port1: config error [ 434.351285][ T7830] usb 9-1: USB disconnect, device number 61 [ 434.738070][T15508] Invalid argument reading file caps for ./file0 [ 434.749668][T15510] Invalid logical block size (2) [ 434.782659][ T5846] Bluetooth: Unexpected continuation frame (len 57) [ 435.135167][T15521] FAULT_INJECTION: forcing a failure. [ 435.135167][T15521] name failslab, interval 1, probability 0, space 0, times 0 [ 435.183863][T15521] CPU: 1 UID: 0 PID: 15521 Comm: syz.3.1546 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.183893][T15521] Tainted: [L]=SOFTLOCKUP [ 435.183900][T15521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.183910][T15521] Call Trace: [ 435.183917][T15521] [ 435.183925][T15521] dump_stack_lvl+0xe8/0x150 [ 435.183956][T15521] should_fail_ex+0x412/0x560 [ 435.183981][T15521] should_failslab+0xa8/0x100 [ 435.184003][T15521] __kmalloc_noprof+0xe8/0x760 [ 435.184028][T15521] ? trace_kmalloc+0x2a/0xf0 [ 435.184050][T15521] ? tomoyo_encode+0x28b/0x550 [ 435.184080][T15521] tomoyo_encode+0x28b/0x550 [ 435.184110][T15521] tomoyo_realpath_from_path+0x58d/0x5d0 [ 435.184137][T15521] ? tomoyo_domain+0xd7/0x130 [ 435.184169][T15521] tomoyo_path_perm+0x283/0x560 [ 435.184190][T15521] ? tomoyo_path_perm+0x251/0x560 [ 435.184212][T15521] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 435.184272][T15521] security_inode_getattr+0x12b/0x310 [ 435.184294][T15521] vfs_getattr+0x23/0x70 [ 435.184316][T15521] vfs_statx_path+0x2b/0x230 [ 435.184337][T15521] ? vfs_statx+0x107/0x200 [ 435.184359][T15521] vfs_statx+0x12e/0x200 [ 435.184382][T15521] ? __pfx_vfs_statx+0x10/0x10 [ 435.184405][T15521] ? do_getname+0x151/0x250 [ 435.184429][T15521] __x64_sys_newlstat+0x125/0x1e0 [ 435.184450][T15521] ? __pfx___x64_sys_newlstat+0x10/0x10 [ 435.184489][T15521] ? __pfx_ksys_write+0x10/0x10 [ 435.184516][T15521] do_syscall_64+0x14d/0xf80 [ 435.184535][T15521] ? trace_irq_disable+0x3b/0x140 [ 435.184554][T15521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.184572][T15521] ? clear_bhb_loop+0x40/0x90 [ 435.184594][T15521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.184611][T15521] RIP: 0033:0x7f2f4cb9c799 [ 435.184629][T15521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.184643][T15521] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 435.184664][T15521] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 435.184678][T15521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000003880 [ 435.184689][T15521] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 435.184700][T15521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.184711][T15521] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 435.184740][T15521] [ 435.190359][T15521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.342176][ T5949] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 435.627536][ T5949] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.639198][ T5949] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.708522][ T5949] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.729959][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.739302][ T5949] usb 9-1: SerialNumber: syz [ 435.985273][ T5949] usb 9-1: 0:2 : does not exist [ 436.160648][ T5949] usb 9-1: USB disconnect, device number 62 [ 436.217383][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.268618][T15553] netlink: get zone limit has 8 unknown bytes [ 436.367395][T15557] netlink: get zone limit has 8 unknown bytes [ 436.464518][T15553] fuse: Bad value for 'fd' [ 436.946638][T15581] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.1558'. [ 437.702457][ T7927] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 437.892194][ T5971] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 437.907314][ T7927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.929019][ T7927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.952792][ T7927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 437.971884][ T7927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.989186][ T7927] usb 4-1: SerialNumber: syz [ 438.075128][ T5971] usb 9-1: Using ep0 maxpacket: 32 [ 438.084563][ T5971] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 438.098770][ T5971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.112532][ T5971] usb 9-1: config 0 descriptor?? [ 438.133754][ T5971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 438.256019][ T7927] usb 4-1: 0:2 : does not exist [ 438.360212][ T7927] usb 4-1: USB disconnect, device number 50 [ 438.465640][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.613480][T15625] netlink: get zone limit has 8 unknown bytes [ 438.669191][T15625] fuse: Bad value for 'fd' [ 438.747234][T15604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.795762][ T5971] gspca_sunplus: reg_r err -71 [ 438.806637][ T5971] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 438.845419][ T5971] usb 9-1: USB disconnect, device number 63 [ 438.964326][T15639] netlink: get zone limit has 8 unknown bytes [ 439.739208][T15673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.763007][ T7579] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 439.867336][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.902408][ T7579] usb 9-1: device descriptor read/64, error -71 [ 439.933623][T15685] openvswitch: netlink: Message has 4 unknown bytes. [ 439.956844][T15685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.152492][ T7579] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 440.233380][ T5891] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 440.292240][ T7579] usb 9-1: device descriptor read/64, error -71 [ 440.349822][T15698] netlink: get zone limit has 8 unknown bytes [ 440.365448][T15698] fuse: Bad value for 'fd' [ 440.382186][ T5971] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 440.392169][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 440.399381][ T5891] usb 7-1: unable to get BOS descriptor or descriptor too short [ 440.412798][ T7579] usb usb9-port1: attempt power cycle [ 440.425969][ T5891] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 440.441910][ T5891] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 440.451134][ T5891] usb 7-1: Manufacturer: syz [ 440.456582][ T5891] usb 7-1: SerialNumber: syz [ 440.553873][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.564105][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.577512][ T5971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 440.587986][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 440.597191][ T5971] usb 1-1: SerialNumber: syz [ 440.671811][ T5891] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 440.684248][ T5891] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.695236][ T5891] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 440.703238][ T5891] usb 7-1: media controller created [ 440.716373][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.739044][ T5891] zl10353_read_register: readreg error (reg=127, ret==0) [ 440.770637][ T5891] usb 7-1: USB disconnect, device number 38 [ 440.776757][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 440.788865][ T7579] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 440.816005][ T5971] usb 1-1: 0:2 : does not exist [ 440.822817][ T7579] usb 9-1: device descriptor read/8, error -71 [ 440.853868][ T5971] usb 1-1: USB disconnect, device number 50 [ 440.963643][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 440.974517][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 440.986516][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 440.996520][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.005002][ T24] usb 4-1: Product: syz [ 441.009177][ T24] usb 4-1: Manufacturer: syz [ 441.013953][ T24] usb 4-1: SerialNumber: syz [ 441.020256][ T24] usb 4-1: config 0 descriptor?? [ 441.026692][T15702] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.034354][T15702] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.072252][ T7579] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 441.092692][ T7579] usb 9-1: device descriptor read/8, error -71 [ 441.202570][ T7579] usb usb9-port1: unable to enumerate USB device [ 441.246742][T15702] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.254431][T15702] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.360656][T15706] netlink: get zone limit has 8 unknown bytes [ 441.462207][ T5949] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 441.592174][ T5949] usb 7-1: device descriptor read/64, error -71 [ 441.671628][ T24] Error reading MAC address [ 441.683830][ T24] usb 4-1: USB disconnect, device number 51 [ 441.832150][ T5949] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 441.962216][ T5949] usb 7-1: device descriptor read/64, error -71 [ 442.074262][ T5949] usb usb7-port1: attempt power cycle [ 442.268802][T15709] FAULT_INJECTION: forcing a failure. [ 442.268802][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 442.285005][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.3.1584 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.285032][T15709] Tainted: [L]=SOFTLOCKUP [ 442.285039][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.285049][T15709] Call Trace: [ 442.285057][T15709] [ 442.285064][T15709] dump_stack_lvl+0xe8/0x150 [ 442.285094][T15709] should_fail_ex+0x412/0x560 [ 442.285122][T15709] should_failslab+0xa8/0x100 [ 442.285143][T15709] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 442.285169][T15709] ? dup_task_struct+0x52/0x840 [ 442.285198][T15709] dup_task_struct+0x52/0x840 [ 442.285220][T15709] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.285249][T15709] copy_process+0x89b/0x4430 [ 442.285300][T15709] ? __pfx_copy_process+0x10/0x10 [ 442.285330][T15709] ? mutex_init_lockdep+0xdf/0x110 [ 442.285351][T15709] vhost_task_create+0x1f9/0x380 [ 442.285372][T15709] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 442.285391][T15709] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 442.285412][T15709] ? __pfx_vhost_task_create+0x10/0x10 [ 442.285439][T15709] ? __pfx_vhost_task_fn+0x10/0x10 [ 442.285464][T15709] ? __lock_acquire+0x6b5/0x2cf0 [ 442.285490][T15709] ? kasan_save_track+0x4f/0x80 [ 442.285511][T15709] ? kasan_save_track+0x3e/0x80 [ 442.285531][T15709] ? kasan_save_free_info+0x46/0x50 [ 442.285550][T15709] ? __kasan_slab_free+0x5c/0x80 [ 442.285572][T15709] ? kfree+0x1c5/0x640 [ 442.285596][T15709] kvm_mmu_post_init_vm+0x147/0x2d0 [ 442.285619][T15709] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 442.285648][T15709] ? __mutex_trylock_common+0x158/0x260 [ 442.285668][T15709] ? look_up_lock_class+0x57/0x110 [ 442.285687][T15709] ? register_lock_class+0x31/0x2e0 [ 442.285711][T15709] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 442.285734][T15709] ? __lock_acquire+0x6b5/0x2cf0 [ 442.285759][T15709] ? __mutex_lock+0x320/0x1420 [ 442.285784][T15709] ? kasan_quarantine_put+0xbb/0x1f0 [ 442.285820][T15709] ? do_raw_write_lock+0x11d/0x260 [ 442.285857][T15709] kvm_vcpu_ioctl+0xa62/0xfd0 [ 442.285882][T15709] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 442.285899][T15709] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 442.285936][T15709] ? __fget_files+0x2a/0x420 [ 442.285961][T15709] ? __fget_files+0x2a/0x420 [ 442.285987][T15709] ? __fget_files+0x3a0/0x420 [ 442.286005][T15709] ? __fget_files+0x2a/0x420 [ 442.286025][T15709] ? bpf_lsm_file_ioctl+0x9/0x20 [ 442.286042][T15709] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 442.286058][T15709] __se_sys_ioctl+0xfc/0x170 [ 442.286078][T15709] do_syscall_64+0x14d/0xf80 [ 442.286092][T15709] ? trace_irq_disable+0x3b/0x140 [ 442.286109][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.286127][T15709] ? clear_bhb_loop+0x40/0x90 [ 442.286147][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.286163][T15709] RIP: 0033:0x7f2f4cb9c799 [ 442.286179][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.286193][T15709] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.286212][T15709] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 442.286224][T15709] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 442.286235][T15709] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 442.286246][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.286256][T15709] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 442.286283][T15709] [ 442.310599][T15711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1585'. [ 442.425491][ T5949] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 442.682851][ T5949] usb 7-1: device descriptor read/8, error -71 [ 442.798549][T15721] netlink: get zone limit has 8 unknown bytes [ 442.936318][ T5949] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 442.963789][ T5949] usb 7-1: device descriptor read/8, error -71 [ 443.012176][ T5891] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 443.083225][ T5949] usb usb7-port1: unable to enumerate USB device [ 443.176917][ T5891] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 443.195154][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.203289][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 443.211136][ T5891] usb 1-1: Product: syz [ 443.220670][ T5891] usb 1-1: Manufacturer: syz [ 443.230048][T15734] netlink: 'syz.8.1591': attribute type 9 has an invalid length. [ 443.232215][ T5891] usb 1-1: SerialNumber: syz [ 443.238889][T15734] netlink: 'syz.8.1591': attribute type 11 has an invalid length. [ 443.253405][T15734] netlink: 'syz.8.1591': attribute type 12 has an invalid length. [ 443.261260][T15734] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.1591'. [ 443.266338][ T5891] usb 1-1: config 0 descriptor?? [ 443.274717][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1591'. [ 443.362135][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 443.378917][ T24] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 443.387774][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 443.397880][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 443.409757][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.417854][ T24] usb 4-1: Product: syz [ 443.423606][ T24] usb 4-1: Manufacturer: syz [ 443.428246][ T24] usb 4-1: SerialNumber: syz [ 443.436570][ T24] usb 4-1: config 0 descriptor?? [ 443.612251][ T9] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 443.770803][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.806374][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.837362][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 443.846654][ T9] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.869891][ T24] usb 4-1: setting power ON [ 443.876833][ T5891] usb 1-1: f81604_write: reg: 105 data: 28 failed: -EPROTO [ 443.880077][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.890004][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 443.900484][ T5891] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 443.919344][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.925002][ T9] usb 9-1: SerialNumber: syz [ 443.935296][ T5891] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 443.947347][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 443.970141][ T5891] usb 1-1: USB disconnect, device number 51 [ 443.978335][ T24] usb 4-1: media controller created [ 444.001859][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.064569][ T24] usb 4-1: selecting invalid altsetting 6 [ 444.071514][ T24] usb 4-1: digital interface selection failed (-22) [ 444.078643][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 444.089001][ T24] usb 4-1: setting power OFF [ 444.095727][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 444.103909][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 444.113474][ T24] (NULL device *): no alternate interface [ 444.146725][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 444.190328][ T24] usb 4-1: USB disconnect, device number 52 [ 444.216819][ T9] usb 9-1: 0:2 : does not exist [ 444.329815][ T9] usb 9-1: USB disconnect, device number 68 [ 444.468217][T15775] netlink: get zone limit has 8 unknown bytes [ 444.793563][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 444.824254][T15792] netlink: get zone limit has 8 unknown bytes [ 444.880440][T15794] (syz.3.1599,15794,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 444.890002][T15794] (syz.3.1599,15794,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 444.963191][ T24] usb 1-1: device descriptor read/64, error -71 [ 445.142241][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 445.212387][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 445.258164][T15809] FAULT_INJECTION: forcing a failure. [ 445.258164][T15809] name failslab, interval 1, probability 0, space 0, times 0 [ 445.287567][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.8.1600 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.287597][T15809] Tainted: [L]=SOFTLOCKUP [ 445.287604][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.287615][T15809] Call Trace: [ 445.287622][T15809] [ 445.287630][T15809] dump_stack_lvl+0xe8/0x150 [ 445.287659][T15809] should_fail_ex+0x412/0x560 [ 445.287691][T15809] should_failslab+0xa8/0x100 [ 445.287714][T15809] __kmalloc_noprof+0xe8/0x760 [ 445.287739][T15809] ? snd_pcm_oss_set_fragment+0x510/0x740 [ 445.287756][T15809] ? vb2_core_reqbufs+0x971/0x1410 [ 445.287774][T15809] ? __kmalloc_noprof+0x1b8/0x760 [ 445.287800][T15809] vb2_core_reqbufs+0x971/0x1410 [ 445.287837][T15809] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 445.287864][T15809] ? __kmalloc_cache_noprof+0x31c/0x660 [ 445.287888][T15809] ? __vb2_init_fileio+0x1e8/0xff0 [ 445.287908][T15809] ? __kmalloc_cache_noprof+0x15b/0x660 [ 445.287935][T15809] __vb2_init_fileio+0x318/0xff0 [ 445.287955][T15809] ? trace_irq_disable+0x3b/0x140 [ 445.287992][T15809] vb2_core_poll+0x4c1/0x840 [ 445.288019][T15809] vb2_fop_poll+0x193/0x310 [ 445.288041][T15809] ? __fget_files+0x2a/0x420 [ 445.288066][T15809] ? __pfx_vb2_fop_poll+0x10/0x10 [ 445.288089][T15809] v4l2_poll+0x147/0x2c0 [ 445.288112][T15809] ? __pfx_v4l2_poll+0x10/0x10 [ 445.288134][T15809] do_sys_poll+0x969/0x1120 [ 445.288161][T15809] ? do_sys_poll+0x3d1/0x1120 [ 445.288184][T15809] ? __pfx_do_sys_poll+0x10/0x10 [ 445.288209][T15809] ? aa_file_perm+0x192/0x15e0 [ 445.288233][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288254][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288277][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288304][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288326][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288350][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288372][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288396][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288418][T15809] ? __pfx_pollwake+0x10/0x10 [ 445.288474][T15809] ? set_user_sigmask+0xcd/0x1c0 [ 445.288499][T15809] ? __pfx_set_user_sigmask+0x10/0x10 [ 445.288533][T15809] __se_sys_ppoll+0x209/0x2b0 [ 445.288553][T15809] ? fput+0xa0/0xd0 [ 445.288577][T15809] ? __pfx___se_sys_ppoll+0x10/0x10 [ 445.288598][T15809] ? __pfx_ksys_write+0x10/0x10 [ 445.288620][T15809] ? __x64_sys_ppoll+0x20/0xc0 [ 445.288643][T15809] do_syscall_64+0x14d/0xf80 [ 445.288661][T15809] ? trace_irq_disable+0x3b/0x140 [ 445.288680][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.288703][T15809] ? clear_bhb_loop+0x40/0x90 [ 445.288725][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.288743][T15809] RIP: 0033:0x7f9da1d9c799 [ 445.288760][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.288775][T15809] RSP: 002b:00007f9da2c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 445.288794][T15809] RAX: ffffffffffffffda RBX: 00007f9da2015fa0 RCX: 00007f9da1d9c799 [ 445.288806][T15809] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 445.288817][T15809] RBP: 00007f9da2c77090 R08: 0000000000000000 R09: 0000000000000000 [ 445.288828][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.288839][T15809] R13: 00007f9da2016038 R14: 00007f9da2015fa0 R15: 00007fff74bb27b8 [ 445.288868][T15809] [ 445.622131][ T24] usb 1-1: device descriptor read/64, error -71 [ 445.666597][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 445.674857][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 445.692867][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 445.704676][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.714416][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 445.725544][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 445.735265][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 445.746775][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.748688][ T24] usb usb1-port1: attempt power cycle [ 445.765726][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 445.775136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.783370][ T9] usb 4-1: Product: syz [ 445.787549][ T9] usb 4-1: Manufacturer: syz [ 445.792199][ T9] usb 4-1: SerialNumber: syz [ 445.799810][ T9] usb 4-1: config 0 descriptor?? [ 445.806277][T15794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 445.820629][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.064232][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 446.122141][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 446.126854][ T9] usb 4-1: USB disconnect, device number 53 [ 446.175828][ T24] usb 1-1: device descriptor read/8, error -71 [ 446.228242][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.432206][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 446.463703][ T24] usb 1-1: device descriptor read/8, error -71 [ 446.572376][ T24] usb usb1-port1: unable to enumerate USB device [ 446.692161][ T7579] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 446.750739][T15842] netlink: get zone limit has 8 unknown bytes [ 446.772236][ T5891] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 446.845703][ T7579] usb 9-1: unable to get BOS descriptor or descriptor too short [ 446.857671][ T7579] usb 9-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 446.869217][ T7579] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.878005][ T7579] usb 9-1: Product: syz [ 446.883207][ T7579] usb 9-1: Manufacturer: syz [ 446.888483][ T7579] usb 9-1: SerialNumber: syz [ 446.924387][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.936691][ T5891] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.947516][ T5891] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.958229][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.966831][ T5891] usb 7-1: SerialNumber: syz [ 447.115656][ T7579] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 447.129923][ T7579] usb 9-1: unit 2 not found! [ 447.137512][ T7579] usb 9-1: unit 8 not found! [ 447.212977][ T5891] usb 7-1: 0:2 : does not exist [ 447.235559][ T7579] usb 9-1: USB disconnect, device number 69 [ 447.310793][ T5891] usb 7-1: USB disconnect, device number 43 [ 447.411680][ T9606] udevd[9606]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 447.637220][T15845] netlink: get zone limit has 8 unknown bytes [ 448.012154][ T7579] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 448.173784][ T7579] usb 9-1: Using ep0 maxpacket: 8 [ 448.180622][ T7579] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 448.188896][ T7579] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.198683][ T7579] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.209043][ T7579] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.219010][ T7579] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.232633][ T7579] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.241707][ T7579] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.362223][ T5949] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 448.457523][ T7579] usb 9-1: GET_CAPABILITIES returned 0 [ 448.468621][ T7579] usbtmc 9-1:16.0: can't read capabilities [ 448.492800][ T5949] usb 4-1: device descriptor read/64, error -71 [ 448.538607][T15866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.684662][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.694059][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.703165][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.712258][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.725056][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.734154][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.743227][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.760449][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.791841][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.803190][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.816698][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.823891][ T5949] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 448.829845][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.842547][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.851639][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.860713][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.871370][ T9] usb 9-1: USB disconnect, device number 70 [ 448.952234][ T5949] usb 4-1: device descriptor read/64, error -71 [ 449.073585][ T5949] usb usb4-port1: attempt power cycle [ 449.152950][T15876] sctp: [Deprecated]: syz.6.1620 (pid 15876) Use of int in maxseg socket option. [ 449.152950][T15876] Use struct sctp_assoc_value instead [ 449.372137][ T7579] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 449.422146][ T5949] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 449.432205][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 449.442834][ T5949] usb 4-1: device descriptor read/8, error -71 [ 449.524082][ T7579] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.534684][ T7579] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.545396][ T7579] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.554624][ T7579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.562680][ T7579] usb 1-1: SerialNumber: syz [ 449.582898][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 449.590890][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 449.602407][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 32768, setting to 1024 [ 449.613729][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 449.620372][ T9] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 449.629491][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.642471][ T9] usb 7-1: config 0 descriptor?? [ 449.692264][ T5949] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.712824][ T5949] usb 4-1: device descriptor read/8, error -71 [ 449.796615][ T7579] usb 1-1: 0:2 : does not exist [ 449.823984][ T5949] usb usb4-port1: unable to enumerate USB device [ 449.840144][ T7579] usb 1-1: USB disconnect, device number 56 [ 449.884685][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.375574][T15886] netlink: get zone limit has 8 unknown bytes [ 450.441508][T15888] netlink: get zone limit has 8 unknown bytes [ 450.580261][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 450.588935][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 450.604141][ T9] usb 7-1: USB disconnect, device number 44 [ 451.622542][T15907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.659933][T15907] FAULT_INJECTION: forcing a failure. [ 451.659933][T15907] name failslab, interval 1, probability 0, space 0, times 0 [ 451.701880][T15907] CPU: 1 UID: 0 PID: 15907 Comm: syz.3.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.701908][T15907] Tainted: [L]=SOFTLOCKUP [ 451.701915][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.701926][T15907] Call Trace: [ 451.701933][T15907] [ 451.701941][T15907] dump_stack_lvl+0xe8/0x150 [ 451.701970][T15907] should_fail_ex+0x412/0x560 [ 451.701994][T15907] should_failslab+0xa8/0x100 [ 451.702015][T15907] __kmalloc_noprof+0xe8/0x760 [ 451.702041][T15907] ? kobject_get_path+0xc5/0x2f0 [ 451.702059][T15907] ? __kasan_kmalloc+0x93/0xb0 [ 451.702077][T15907] kobject_get_path+0xc5/0x2f0 [ 451.702095][T15907] ? kobject_uevent_env+0x28c/0x9e0 [ 451.702119][T15907] kobject_uevent_env+0x2a1/0x9e0 [ 451.702141][T15907] ? kobject_put+0x516/0x560 [ 451.702166][T15907] device_del+0x750/0x8f0 [ 451.702198][T15907] ? __pfx_device_del+0x10/0x10 [ 451.702230][T15907] device_unregister+0x21/0xf0 [ 451.702256][T15907] iommufd_fops_release+0x186/0x3b0 [ 451.702282][T15907] ? __pfx_iommufd_fops_release+0x10/0x10 [ 451.702307][T15907] ? evm_file_release+0x107/0x1e0 [ 451.702326][T15907] ? __pfx_iommufd_fops_release+0x10/0x10 [ 451.702348][T15907] __fput+0x451/0x8c0 [ 451.702378][T15907] fput_close_sync+0x11f/0x240 [ 451.702400][T15907] ? __pfx_fput_close_sync+0x10/0x10 [ 451.702433][T15907] __x64_sys_close+0x7e/0x110 [ 451.702457][T15907] do_syscall_64+0x14d/0xf80 [ 451.702474][T15907] ? trace_irq_disable+0x3b/0x140 [ 451.702494][T15907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.702511][T15907] ? clear_bhb_loop+0x40/0x90 [ 451.702531][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.702549][T15907] RIP: 0033:0x7f2f4cb9c799 [ 451.702573][T15907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.702588][T15907] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 451.702607][T15907] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 451.702620][T15907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 451.702631][T15907] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 451.702643][T15907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.702654][T15907] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 451.702681][T15907] [ 452.373148][T15927] netlink: get zone limit has 8 unknown bytes [ 452.392152][ T5924] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 452.472149][ T7579] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 452.522755][ T5924] usb 4-1: device descriptor read/64, error -71 [ 452.562246][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 452.622217][ T7579] usb 9-1: device descriptor read/64, error -71 [ 452.723498][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 452.733648][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 452.743006][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.751084][ T9] usb 1-1: Product: syz [ 452.756131][ T9] usb 1-1: Manufacturer: syz [ 452.760818][ T9] usb 1-1: SerialNumber: syz [ 452.766407][ T5924] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 452.788314][ T9] usb 1-1: config 0 descriptor?? [ 452.802453][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 452.810666][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 452.810666][ T9] [ 452.818268][ T9] usb 1-1: selecting invalid altsetting 3 [ 452.825612][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 452.825612][ T9] [ 452.836203][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 452.850498][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.861390][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 452.870810][ T9] usb 1-1: media controller created [ 452.872141][ T7579] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 452.876282][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 452.890563][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 452.898803][ T9] dvb-usb: MAC address reading failed. [ 452.912134][ T5924] usb 4-1: device descriptor read/64, error -71 [ 452.924875][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.983822][ T9] DVB: Unable to find symbol stb0899_attach() [ 452.990178][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 453.022779][ T7579] usb 9-1: device descriptor read/64, error -71 [ 453.024689][ T5924] usb usb4-port1: attempt power cycle [ 453.082200][ T9] rc_core: IR keymap rc-tt-1500 not found [ 453.088207][ T9] Registered IR keymap rc-empty [ 453.099209][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 453.116375][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input33 [ 453.130670][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 453.139991][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 453.139991][ T9] [ 453.148218][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 453.162705][ T7579] usb usb9-port1: attempt power cycle [ 453.163083][T15932] dvb-usb: bulk message failed: -22 (7/0) [ 453.181747][T15932] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 453.243544][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 453.254137][ T9] dvb-usb: error -22 while querying for an remote control event. [ 453.379880][T15939] FAULT_INJECTION: forcing a failure. [ 453.379880][T15939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.382615][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 453.399988][ T5924] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 453.409418][ T9] dvb-usb: error -22 while querying for an remote control event. [ 453.414014][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.6.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.414040][T15939] Tainted: [L]=SOFTLOCKUP [ 453.414046][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.414057][T15939] Call Trace: [ 453.414065][T15939] [ 453.414073][T15939] dump_stack_lvl+0xe8/0x150 [ 453.414102][T15939] should_fail_ex+0x412/0x560 [ 453.414126][T15939] _copy_from_user+0x2d/0xb0 [ 453.414150][T15939] drm_mode_atomic_ioctl+0x77c/0xdd0 [ 453.414184][T15939] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 453.414224][T15939] ? do_raw_spin_unlock+0xf5/0x210 [ 453.414248][T15939] ? _raw_spin_unlock+0x28/0x50 [ 453.414272][T15939] ? drm_is_current_master+0x19f/0x200 [ 453.414295][T15939] drm_ioctl_kernel+0x2df/0x3b0 [ 453.414323][T15939] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 453.414342][T15939] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 453.414376][T15939] drm_ioctl+0x6ba/0xb80 [ 453.414404][T15939] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 453.414427][T15939] ? __pfx_drm_ioctl+0x10/0x10 [ 453.414463][T15939] ? __fget_files+0x2a/0x420 [ 453.414488][T15939] ? bpf_lsm_file_ioctl+0x9/0x20 [ 453.414506][T15939] ? __pfx_drm_ioctl+0x10/0x10 [ 453.414529][T15939] __se_sys_ioctl+0xfc/0x170 [ 453.414550][T15939] do_syscall_64+0x14d/0xf80 [ 453.414567][T15939] ? trace_irq_disable+0x3b/0x140 [ 453.414587][T15939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.414605][T15939] ? clear_bhb_loop+0x40/0x90 [ 453.414626][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.414643][T15939] RIP: 0033:0x7f0e6cb9c799 [ 453.414660][T15939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.414674][T15939] RSP: 002b:00007f0e6db07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.414692][T15939] RAX: ffffffffffffffda RBX: 00007f0e6ce15fa0 RCX: 00007f0e6cb9c799 [ 453.414705][T15939] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 453.414717][T15939] RBP: 00007f0e6db07090 R08: 0000000000000000 R09: 0000000000000000 [ 453.414727][T15939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.414738][T15939] R13: 00007f0e6ce16038 R14: 00007f0e6ce15fa0 R15: 00007ffc337fc168 [ 453.414767][T15939] [ 453.532197][ T7579] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 453.553442][ T5924] usb 4-1: device descriptor read/8, error -71 [ 453.632870][ T7579] usb 9-1: device descriptor read/8, error -71 [ 453.642234][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 453.673679][ T9] dvb-usb: error -22 while querying for an remote control event. [ 453.786395][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 453.793053][ T9] dvb-usb: error -22 while querying for an remote control event. [ 453.872176][ T5924] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 453.892275][ T7579] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 453.893636][ T5924] usb 4-1: device descriptor read/8, error -71 [ 453.906367][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 453.912248][ T9] dvb-usb: error -22 while querying for an remote control event. [ 453.924307][ T7579] usb 9-1: device descriptor read/8, error -71 [ 454.022408][ T5924] usb usb4-port1: unable to enumerate USB device [ 454.029085][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.034896][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.043274][ T7579] usb usb9-port1: unable to enumerate USB device [ 454.152162][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.158683][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.172204][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 454.272251][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.278084][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.334803][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.347073][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 454.356202][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.366979][ T9] usb 7-1: config 0 descriptor?? [ 454.395201][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.401030][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.512808][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.518638][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.576653][ T9] usb 7-1: string descriptor 0 read error: -71 [ 454.633596][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.639400][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.752128][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.757903][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.873055][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.878857][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 454.992230][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 454.998036][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 455.112430][ T5844] dvb-usb: bulk message failed: -22 (4/0) [ 455.118193][ T5844] dvb-usb: error -22 while querying for an remote control event. [ 455.180920][T15949] FAULT_INJECTION: forcing a failure. [ 455.180920][T15949] name failslab, interval 1, probability 0, space 0, times 0 [ 455.193759][T15949] CPU: 1 UID: 0 PID: 15949 Comm: syz.3.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.193786][T15949] Tainted: [L]=SOFTLOCKUP [ 455.193793][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.193804][T15949] Call Trace: [ 455.193812][T15949] [ 455.193820][T15949] dump_stack_lvl+0xe8/0x150 [ 455.193849][T15949] should_fail_ex+0x412/0x560 [ 455.193875][T15949] should_failslab+0xa8/0x100 [ 455.193894][T15949] ? skb_clone+0x212/0x3a0 [ 455.193915][T15949] kmem_cache_alloc_noprof+0x87/0x650 [ 455.193949][T15949] skb_clone+0x212/0x3a0 [ 455.193974][T15949] __netlink_deliver_tap+0x424/0x8b0 [ 455.194004][T15949] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.194023][T15949] netlink_deliver_tap+0x19c/0x1b0 [ 455.194042][T15949] netlink_unicast+0x7e3/0x9b0 [ 455.194075][T15949] ? __pfx_netlink_unicast+0x10/0x10 [ 455.194101][T15949] ? netlink_sendmsg+0x650/0xb40 [ 455.194114][T15949] ? skb_put+0x11b/0x210 [ 455.194132][T15949] netlink_sendmsg+0x813/0xb40 [ 455.194154][T15949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.194173][T15949] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 455.194205][T15949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.194230][T15949] sock_sendmsg_nosec+0x112/0x150 [ 455.194255][T15949] ____sys_sendmsg+0x589/0x8c0 [ 455.194272][T15949] ? __might_fault+0xaf/0x130 [ 455.194299][T15949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.194327][T15949] ? import_iovec+0x73/0xa0 [ 455.194351][T15949] ___sys_sendmsg+0x2a5/0x360 [ 455.194370][T15949] ? __lock_acquire+0x6b5/0x2cf0 [ 455.194397][T15949] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.194441][T15949] ? __fget_files+0x2a/0x420 [ 455.194462][T15949] ? __fget_files+0x3a0/0x420 [ 455.194491][T15949] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.194505][T15949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.194521][T15949] ? __pfx_ksys_write+0x10/0x10 [ 455.194536][T15949] do_syscall_64+0x14d/0xf80 [ 455.194550][T15949] ? trace_irq_disable+0x3b/0x140 [ 455.194567][T15949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.194584][T15949] ? clear_bhb_loop+0x40/0x90 [ 455.194605][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.194625][T15949] RIP: 0033:0x7f2f4cb9c799 [ 455.194641][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.194655][T15949] RSP: 002b:00007f2f4db41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.194674][T15949] RAX: ffffffffffffffda RBX: 00007f2f4ce15fa0 RCX: 00007f2f4cb9c799 [ 455.194687][T15949] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 455.194698][T15949] RBP: 00007f2f4db41090 R08: 0000000000000000 R09: 0000000000000000 [ 455.194709][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.194720][T15949] R13: 00007f2f4ce16038 R14: 00007f2f4ce15fa0 R15: 00007ffca6cc4168 [ 455.194748][T15949] [ 455.233672][ T5924] dvb-usb: bulk message failed: -22 (4/0) [ 455.399417][T15952] netlink: get zone limit has 8 unknown bytes [ 455.411368][ T9] usb 7-1: reset high-speed USB device number 45 using dummy_hcd [ 455.517691][ T7579] usb 1-1: USB disconnect, device number 57 [ 455.519477][ T5924] dvb-usb: error -22 while querying for an remote control event. [ 455.624021][T15958] netlink: get zone limit has 8 unknown bytes [ 455.657816][ T7579] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 455.832141][ T5924] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 455.910864][ T7579] usb 7-1: USB disconnect, device number 45 [ 456.006846][ T5924] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 456.021444][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.034582][ T5924] usb 9-1: Product: syz [ 456.038828][ T5924] usb 9-1: Manufacturer: syz [ 456.046072][ T5924] usb 9-1: SerialNumber: syz [ 456.469531][ T5924] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 456.484020][ T5924] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 456.772969][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 456.793229][ T5844] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 456.832229][ T5949] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 456.912115][ T9] usb 4-1: device descriptor read/64, error -71 [ 456.962422][ T5949] usb 1-1: device descriptor read/64, error -71 [ 457.008229][ T5844] usb 7-1: unable to get BOS descriptor or descriptor too short [ 457.017609][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 457.026729][ T5844] usb 7-1: can't read configurations, error -71 [ 457.152180][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 457.202170][ T5949] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 457.282169][ T9] usb 4-1: device descriptor read/64, error -71 [ 457.333948][ T5949] usb 1-1: device descriptor read/64, error -71 [ 457.392352][ T9] usb usb4-port1: attempt power cycle [ 457.415909][ T170] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.442587][ T5949] usb usb1-port1: attempt power cycle [ 457.732133][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 457.752699][ T9] usb 4-1: device descriptor read/8, error -71 [ 457.782315][ T5949] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 457.802892][ T5949] usb 1-1: device descriptor read/8, error -71 [ 457.809809][ T5924] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 457.821933][ T5924] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 457.831989][ T5924] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 457.843344][ T5924] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 457.856374][ T5924] usb 9-1: USB disconnect, device number 75 [ 457.862577][ T5844] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 457.992352][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 458.013439][ T9] usb 4-1: device descriptor read/8, error -71 [ 458.025512][ T5844] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 458.035268][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.043912][ T5949] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 458.052227][ T5844] usb 7-1: Product: syz [ 458.056417][ T5844] usb 7-1: Manufacturer: syz [ 458.060995][ T5844] usb 7-1: SerialNumber: syz [ 458.082798][ T5949] usb 1-1: device descriptor read/8, error -71 [ 458.122950][ T9] usb usb4-port1: unable to enumerate USB device [ 458.192589][ T5949] usb usb1-port1: unable to enumerate USB device [ 458.475945][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 458.488713][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 458.712204][ T7579] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 458.842179][ T7579] usb 9-1: device descriptor read/64, error -71 [ 459.082164][ T7579] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 459.213719][ T7579] usb 9-1: device descriptor read/64, error -71 [ 459.332960][ T7579] usb usb9-port1: attempt power cycle [ 459.682366][ T7579] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 459.703347][ T7579] usb 9-1: device descriptor read/8, error -71 [ 459.715282][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 459.732003][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 459.759084][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 459.776124][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 459.790955][ T5844] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 459.803215][ T5844] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 459.819590][ T5844] usb 7-1: USB disconnect, device number 47 [ 459.942671][ T7579] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 459.961694][T15991] netlink: get zone limit has 8 unknown bytes [ 459.983045][ T7579] usb 9-1: device descriptor read/8, error -71 [ 460.012150][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 460.092672][ T7579] usb usb9-port1: unable to enumerate USB device [ 460.182223][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 460.188696][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.201037][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 460.210216][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.220095][ T9] usb 4-1: config 0 descriptor?? [ 460.311959][ T29] audit: type=1800 audit(5321997219.487:54): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1662" name="file1" dev="overlay" ino=557 res=0 errno=0 [ 460.381112][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.393852][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.434443][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.449914][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.670459][ T9] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 460.865772][ T5924] usb 4-1: USB disconnect, device number 66 [ 461.022185][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 461.153287][ T24] usb 7-1: device descriptor read/64, error -71 [ 461.237917][T15258] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 461.249831][T15258] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 461.258233][T15258] CPU: 1 UID: 0 PID: 15258 Comm: syz.0.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.269154][T15258] Tainted: [L]=SOFTLOCKUP [ 461.273462][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.283502][T15258] RIP: 0010:klist_remove+0x156/0x340 [ 461.288775][T15258] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd ed 7d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e ed 7d f6 49 8b 44 24 58 48 89 44 24 08 [ 461.308368][T15258] RSP: 0018:ffffc900020df620 EFLAGS: 00010202 [ 461.314429][T15258] RAX: 000000000000000b RBX: ffff88802d02db80 RCX: 0000000000000000 [ 461.322383][T15258] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 461.330337][T15258] RBP: ffffc900020df720 R08: ffffffff901aa823 R09: 1ffffffff2035504 [ 461.338294][T15258] R10: dffffc0000000000 R11: fffffbfff2035505 R12: 0000000000000000 [ 461.346252][T15258] R13: 1ffff1100b25710c R14: ffff8880592b8860 R15: dffffc0000000000 [ 461.354206][T15258] FS: 0000000000000000(0000) GS:ffff8881250f4000(0000) knlGS:0000000000000000 [ 461.363117][T15258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.369681][T15258] CR2: 00007ffc7d5e8dd8 CR3: 000000005a538000 CR4: 00000000003526f0 [ 461.377640][T15258] Call Trace: [ 461.380909][T15258] [ 461.383827][T15258] ? __pfx_klist_remove+0x10/0x10 [ 461.388836][T15258] ? kobject_move+0x5de/0x720 [ 461.393496][T15258] ? __pfx_kobject_move+0x10/0x10 [ 461.398506][T15258] ? do_raw_spin_unlock+0xf5/0x210 [ 461.403604][T15258] ? get_device_parent+0x366/0x3a0 [ 461.408707][T15258] device_move+0x193/0x730 [ 461.413105][T15258] hci_conn_del_sysfs+0xb8/0x1a0 [ 461.418031][T15258] hci_conn_del+0xc36/0x1230 [ 461.422607][T15258] hci_conn_hash_flush+0x191/0x260 [ 461.427710][T15258] hci_dev_close_sync+0x821/0x10e0 [ 461.432808][T15258] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 461.438339][T15258] ? up_write+0x1ab/0x410 [ 461.442655][T15258] ? rcu_is_watching+0x15/0xb0 [ 461.447404][T15258] hci_unregister_dev+0x21a/0x5a0 [ 461.452414][T15258] vhci_release+0x152/0x1a0 [ 461.456905][T15258] ? __pfx_vhci_release+0x10/0x10 [ 461.461914][T15258] __fput+0x451/0x8c0 [ 461.465882][T15258] task_work_run+0x1d9/0x270 [ 461.470459][T15258] ? __pfx_task_work_run+0x10/0x10 [ 461.475555][T15258] ? do_exit+0x921/0x2490 [ 461.479872][T15258] ? kmem_cache_free+0x182/0x650 [ 461.484790][T15258] ? put_net+0x191/0x260 [ 461.489019][T15258] do_exit+0x926/0x2490 [ 461.493159][T15258] ? __pfx_do_exit+0x10/0x10 [ 461.497738][T15258] do_group_exit+0x21b/0x2d0 [ 461.502338][T15258] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.507528][T15258] get_signal+0x1284/0x1330 [ 461.512025][T15258] arch_do_signal_or_restart+0xbc/0x830 [ 461.517560][T15258] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 461.522741][T15258] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 461.528879][T15258] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 461.534588][T15258] exit_to_user_mode_loop+0x86/0x480 [ 461.539862][T15258] ? rcu_is_watching+0x15/0xb0 [ 461.544609][T15258] do_syscall_64+0x32d/0xf80 [ 461.549198][T15258] ? trace_irq_disable+0x3b/0x140 [ 461.554206][T15258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.560266][T15258] ? clear_bhb_loop+0x40/0x90 [ 461.564945][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.570831][T15258] RIP: 0033:0x7fd28e35cfce [ 461.575241][T15258] Code: Unable to access opcode bytes at 0x7fd28e35cfa4. [ 461.582242][T15258] RSP: 002b:00007fd28f320f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 461.590645][T15258] RAX: fffffffffffffdfc RBX: 00007fd28f3216c0 RCX: 00007fd28e35cfce [ 461.598611][T15258] RDX: 00007fd28f320fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.606580][T15258] RBP: 00007fd28e432c99 R08: 0000000000000000 R09: 0000000000000000 [ 461.614538][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.622492][T15258] R13: 00007fd28e616038 R14: 00007fd28e615fa0 R15: 00007ffcb94ee418 [ 461.630460][T15258] [ 461.633477][T15258] Modules linked in: [ 461.640342][T15258] ---[ end trace 0000000000000000 ]--- [ 461.689138][T15258] RIP: 0010:klist_remove+0x156/0x340 [ 461.695577][T15258] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd ed 7d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e ed 7d f6 49 8b 44 24 58 48 89 44 24 08 [ 461.715531][T15258] RSP: 0018:ffffc900020df620 EFLAGS: 00010202 [ 461.724957][T15258] RAX: 000000000000000b RBX: ffff88802d02db80 RCX: 0000000000000000 [ 461.735951][T15258] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 461.751444][T15258] RBP: ffffc900020df720 R08: ffffffff901aa823 R09: 1ffffffff2035504 [ 461.775083][T15258] R10: dffffc0000000000 R11: fffffbfff2035505 R12: 0000000000000000 [ 461.784323][T15258] R13: 1ffff1100b25710c R14: ffff8880592b8860 R15: dffffc0000000000 [ 461.793950][ T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 461.794174][T15258] FS: 0000000000000000(0000) GS:ffff888124ff4000(0000) knlGS:0000000000000000 [ 461.812127][T15258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.819007][T15258] CR2: 00007ffc7d5ed288 CR3: 000000001d3dc000 CR4: 00000000003526f0 [ 461.827217][T15258] Kernel panic - not syncing: Fatal exception [ 461.833553][T15258] Kernel Offset: disabled [ 461.837858][T15258] Rebooting in 86400 seconds..