last executing test programs: 20m59.215059534s ago: executing program 32 (id=1046): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xa3, 0x99, 0x94, 0x10, 0x12d1, 0x8bec, 0x2974, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xe, 0x10, 0x96, "", [{{0x9, 0x4, 0x8e, 0x9, 0x0, 0xff, 0x4, 0x64, 0x3}}]}}]}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) socket(0x0, 0x803, 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x8, 0x98000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0400000000ffdbdf", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="148a00002d000b03000000ff0000000009000000a30ec0cb58453b6943ada7cd938ea240f549a6f7f182209b602f7031e3a253fb8ccafef379ad3ab79ba42714a28779bcd971371819edcfd34852b21d8b12a8526e29fbf0956904684e0a47a0ef732d399c54051f229a3f77e2be340b263f9a89cde42888a8d418dce1be34a09b47026416f430a79a7465d378966bf8d531bdb325e069330303000000c8b25c403455075880397d3c629092b75d72f2a96c1a327c06fef28f68b1851f6d229a647f025cb4bb3583ff0aff9b4229ac6c896fa11b9b18af40294ea596cf630e69d4d2e7c0065e3a49a9d5"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRESOCT], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x8}, &(0x7f0000000480)=0x8) 15m58.590258851s ago: executing program 33 (id=3606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000140001002bb57000fedbdf25ff0100001c8fe20a304a7fc900000001ffffffff0000000000000000000000004e2100104e2080040200002007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000380108006400080000022c0113790351812fa17e2daefbed8d5a705699109d88e35fd8e7132914e0301aa078aae856234cdbf0ad18e4b7872bd198f5d90401d25b133e29ad129d10c3f2928de93d8f99893d168509cc2c3b4d62ec9c79abf7901e6e7ce8ba1103168a33479173e699640467ff5cb3e71da903c4c5cfeb4bd2cfc856d446b6499c56863f50c3345b92000400f52a4819269b644e0efb6dd0c67815ca60fc6cf40e01f9afeeb8e81d4fdea01efa76dd3c6f7218c0c156ed8f5edb30b0f756ac55202305383d82685fad051083313be55a2d2fed14cc3b4dec043219be9781c4a4f6cd8e40161b748a2fa6185fd6ee52c608c778aa12b5e50c366fa01c37ae45e401eb2dc18be04c1d46eedb0b789af64985c544bce799890090be999a8a2fbf97087ab0bdcb172425ab0cb912533a38574bc80c001500"], 0x194}, 0x1, 0x0, 0x0, 0x20008801}, 0x40080) 14m48.434864996s ago: executing program 34 (id=4055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x11f}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068d542bab5c97caba72ac16f5bc7741f5158ec0938626e40f5b86baaab3ced2903dddcca7363065dcaba065147a234a37da348f1b4674d76b0c1082e3b05a7b4ae2b09", 0x7a}, {&(0x7f0000001980)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde80", 0x48}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d2", 0xab}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ab9af264df85d4598d711f214896cc1b41c69a9868bfe470ae01ca4", 0x71}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0", 0xb7}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c21dac7fa1210c9447c04280f15323586b95a25dd43caf003485edf322562a00b43181318ae3bfcea72de3037f7df5359077a896792091a036aba4e0c3ef293f697c44727b36f3bf42cb3c71530bbed474a", 0x73}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f700000000ff", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 14m45.860371648s ago: executing program 35 (id=4064): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x11f}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068d542bab5c97caba72ac16f5bc7741f5158ec0938626e40f5b86baaab3ced2903dddcca7363065dcaba065147a234a37da348f1b4674d76b0c1082e3b05a7b4ae2b09", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d2", 0xab}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ab9af264df85d4598d711f214896cc1b41c69a9868bfe470ae01ca415120b", 0x74}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c9802", 0x65}], 0x2, 0x0, 0x0, 0xecffffff}}], 0x3, 0x4000000) 14m6.794522412s ago: executing program 36 (id=4167): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 13m40.71376662s ago: executing program 37 (id=4298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000004100000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13m32.843878563s ago: executing program 38 (id=4347): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003100), 0x80002, 0x0) r1 = socket(0x1e, 0x6, 0x0) listen(r1, 0x7f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x807, 0x83, 0x7, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x8, 0x7f, 0x6, 0x49, 0xb9, 0x5f, 0x6, 0x5, 0xffff2d37, 0x3, 0x46, 0xbb, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0xff8, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x41, 0xcb7, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x7, 0x0, 0x5, 0x0, 0x8000005, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xce, 0x40c, 0x9, 0x2bf, 0x6c9, 0x4000001, 0xfffffffc, 0x3, 0x0, 0x3, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x10, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0xfffffffc, 0x6, 0x7, 0x8000, 0xffffffff, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x9, 0x5, 0x8, 0x83, 0x4000003, 0x0, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x8005, 0x1, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x5, 0x2, 0x3, 0x0, 0xfffff7f9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x8013, 0xa2ed, 0x404, 0x25], [0x9, 0x5, 0x296, 0xb, 0x5, 0x938, 0xd, 0x6, 0x0, 0x5, 0xce7, 0x53f53804, 0x0, 0xa, 0x80005, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc4, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0xfffffffc, 0xc639, 0x20000002, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x8000, 0x6, 0x5, 0xb1e, 0x800, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000003140)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000003100), 0x80002, 0x0) (async) socket(0x1e, 0x6, 0x0) (async) listen(r1, 0x7f) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x807, 0x83, 0x7, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x8, 0x7f, 0x6, 0x49, 0xb9, 0x5f, 0x6, 0x5, 0xffff2d37, 0x3, 0x46, 0xbb, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0xff8, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x41, 0xcb7, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x7, 0x0, 0x5, 0x0, 0x8000005, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xce, 0x40c, 0x9, 0x2bf, 0x6c9, 0x4000001, 0xfffffffc, 0x3, 0x0, 0x3, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x10, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0xfffffffc, 0x6, 0x7, 0x8000, 0xffffffff, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x9, 0x5, 0x8, 0x83, 0x4000003, 0x0, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x8005, 0x1, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x5, 0x2, 0x3, 0x0, 0xfffff7f9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x8013, 0xa2ed, 0x404, 0x25], [0x9, 0x5, 0x296, 0xb, 0x5, 0x938, 0xd, 0x6, 0x0, 0x5, 0xce7, 0x53f53804, 0x0, 0xa, 0x80005, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc4, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0xfffffffc, 0xc639, 0x20000002, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x8000, 0x6, 0x5, 0xb1e, 0x800, 0x200, 0xffff3441, 0x7]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000003140)) (async) 13m10.021502569s ago: executing program 3 (id=4413): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a0200320905"], 0x0) 13m8.612166951s ago: executing program 3 (id=4415): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000900)={0xa, 0xe24, 0x9, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000005000000", 0xfe60) 13m7.760567616s ago: executing program 3 (id=4417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x34}}, 0xc080) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbf6e, 0x26}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0x804) 13m7.428065373s ago: executing program 3 (id=4419): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814cef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f008000000b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675bd7cfca148dc488f735da15d99cb458ed37b23535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577ae1057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24d2fa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f10000000000000002b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4af09b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929e1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88ca1bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46a095b11cad830aa64bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe7237e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c48a821d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa4779321ae01051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a37bd163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baafac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b63b6bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xffffffffffffffff, 0xa003, 0x1ff, {0x8, 0x5, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x8000, 0x0, 0x0, r2, 0xe6f, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 13m6.713626835s ago: executing program 3 (id=4421): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="60595fbf57", 0x5}], 0x1) r1 = epoll_create1(0x80000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x2000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x8000000000000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r5, &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000200)={0x0, 0x8, 0x3, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000600)={r6, "3137cc1c3a252b556c302a830d3da377"}) mount(&(0x7f0000001600)=@sg0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='xfs\x00', 0x40828, &(0x7f00000016c0)='/dev/random\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001700)={0x0, 0x8, 0x6, 0x23}, &(0x7f0000001740)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001780)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}}, &(0x7f0000001840)=0x84) pipe2$9p(&(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0) ioctl$KDSKBLED(r10, 0x4b65, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000001900), 0x8, 0x20102) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001940), 0x482, 0x0) ioctl$PIO_SCRNMAP(r11, 0x4b41, &(0x7f0000001980)="70906cfb10504f6446beb32eec2c16250208c1baf885d419d152b06c1c3d61e64186af4eb0103d30faa952329440d711aee09aa39ef9e00f94e2b810af3f330a29d798a7fa7355845457a670c1f1d5027c69699094b9d73ed212cde1db08e27d4e79448d960f27f49488c47ed4522b9a") landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000001a00)={0x804, r9}, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001a40)={r6, 0x7, 0x3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001e40)={r8, 0x80000001}, &(0x7f0000001e80)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001ec0)={r12, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001f00)='./binderfs/custom0\x00', 0x1002, 0x0) fchownat(r4, &(0x7f0000001f40)='./file0\x00', r5, 0x0, 0x1000) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) pipe2$9p(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAME(r13, &(0x7f0000001fc0)={0x7, 0x15, 0x2}, 0x7) fallocate(0xffffffffffffffff, 0x40, 0x600, 0x63bee40e) 13m4.615656139s ago: executing program 3 (id=4426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48895}, 0x0) 13m4.078731342s ago: executing program 39 (id=4426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48895}, 0x0) 12m56.931437405s ago: executing program 8 (id=4446): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be14443cfffe8000000000000000000000000000aaff020000000000000000600000000001"], 0xfdef) 12m55.949217026s ago: executing program 8 (id=4447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0xffb, 0x10ffff, 0xfffffffd}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setstatus(r5, 0x4, 0x2400) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x11, 0x7, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) msync(&(0x7f0000460000/0x4000)=nil, 0x4000, 0x2) setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f00000007c0)=0x2, 0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0xd, 0x6, 0x7fff, 0x7, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r7, 0x10, 0x70bd28, 0x0, {{}, {@void, @val={0xc, 0x99, {0x20000001, 0x5a}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x44) 12m54.915529067s ago: executing program 8 (id=4448): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010003007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x110) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 12m54.57657844s ago: executing program 8 (id=4449): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) 12m54.229275497s ago: executing program 8 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5422, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'syzkaller0\x00'}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x4eb203cb656c8f17}) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000240)={0x0, 0xff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130700000000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000600000000000000005c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1"], 0x14c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030047"], 0x128}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 12m51.515382928s ago: executing program 8 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 12m51.047478974s ago: executing program 40 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000001000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 12m26.852400112s ago: executing program 1 (id=4523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x2e9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x8, 0x10, 0x100000002, 0xfffffffffffffffd, 0xfff, 0xffffffffffffb473, 0x7}, {0xa, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x300, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 12m26.637419655s ago: executing program 1 (id=4524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x4000054) 12m26.586111981s ago: executing program 1 (id=4526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002600090122bd7008f9ffffff860000000800030047000000a5d5cc9c2621a621af4c7d92a564f67a862d334bd1868230d45de9d96999ae49677f2a40a7694f21fce24d5d05625d0fe0699301ecd312867f4a161d6831b191eb7127b16724c1fcd469b546ce0d91e1a516d81cbb668487f6c6c30c228ca1722af4c45abe7e7efb4eb25c04727471132cd58dd2dcd05a21d979d20316a24a6789c8ca3ee8b5ad5e"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12m25.733737098s ago: executing program 1 (id=4528): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x480}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 12m25.56161969s ago: executing program 1 (id=4530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x200000000000000}], 0x0, 0x0, 0x0}) 12m23.200564981s ago: executing program 1 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000060000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m22.979093422s ago: executing program 41 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000060000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m52.839570623s ago: executing program 9 (id=4591): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) 11m52.654101335s ago: executing program 9 (id=4592): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x20, {0x20, 0x1, "b154e8b6cc113a54c85fc09f34e924d1695651f06880434f4810df60f66b"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x40, 0x0, 0xf5, "c1d00837e7eada665aa217a4cbdb028d424fe0f0531529c21e6b34ef7615e651fe8d60b3fee62b0687db5a63afff41e346a6e4f84f6a286e68b885ff6e0af064169943d190c6de36559adc2cc1dd3397691e4b39d62e469e19c5844a56a8754193a5be83848d85173d49ef7dbe7b28c44079c3d2a187451fa20553b232a0635d993dd48524ecfaaafed49fd69552cc322fe4c075c3953ec4c42dcb5af01afd89da20dfd870f29b76cef89820ca7356987a46a2e7660f15d0a70432cd1ba1b8cb1413036da3f5eaf6354966217c5ef160075337df68701e3bb469e8cf0dabb34c588e09ff2b999b5127fbf87ee57ae842d1f4744c87"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9c}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000200)="fcea81a9413c4d7f87647334d194ed2c70675bca983ae7e076137aedc40db9be6e54f9e43161e8bb706685e956b508fb6914d431a3fec0971598343fc401e488deb1db74de3d83197973755df60ebe0d105081ec3c3c0cd2f9e636d204534737f622a78065b12952fb7bfb315c8f9633c96fd15168b3245cf937d22ec334bac40929d7b4ecec192283b643e5d38a102807017762b8c91468d8ef4f9b6033f7c4bb") mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 11m50.355942174s ago: executing program 9 (id=4593): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x398}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ffffe, 0x8, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x231, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x2000, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 11m48.834534258s ago: executing program 9 (id=4594): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_io_uring_setup(0x2af8, &(0x7f0000000100)={0x0, 0x0, 0x13090, 0x3}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r0, &(0x7f00000020c0)=[{&(0x7f0000002080)}], 0x1, 0x2, 0x52) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 11m48.301554114s ago: executing program 9 (id=4595): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x1411, 0x301, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) 11m46.61064796s ago: executing program 9 (id=4596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0xf0ffffff, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x1, 0x3e}, @fd, @fda={0x66646185, 0x4, 0x1, 0xd8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 11m46.205127942s ago: executing program 42 (id=4596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0xf0ffffff, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x1, 0x3e}, @fd, @fda={0x66646185, 0x4, 0x1, 0xd8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 11m5.296019225s ago: executing program 2 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32], 0xc4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001480)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x134}, 0x1, 0x0, 0x0, 0x4080}, 0x48800) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000001200)=ANY=[@ANYBLOB="e4006d4fa00000", @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf253700000008005700f9ffffff08005700d50000000800a00001000000050019010b0000000800570000010000050019010a0000000800a10009000000080022012b030000080026006c09000008002600ad16000008009f0006000000050019010700000008002700020000000800a1000400000008005700060000000800a100050000000500190105000000050019010b000000050019010c00000008002700010000000800a00007000000080022011f0200000800270003000000080027000300000005001901040000000800570001000100"], 0xe4}, 0x1, 0x0, 0x0, 0x890}, 0x4890) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/157, 0x9d}, 0x8000}], 0x6, 0x40000002, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'netpci0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x8, 0x0, @random="35a116b7"}, {0x11, 0x0, @random="c44d9ee91abab23798c299eae2"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008848", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11m4.704065551s ago: executing program 2 (id=4642): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d6650000003f00", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) 11m4.423804761s ago: executing program 2 (id=4644): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={0x0, 0xffffffffffffff1f, 0x1}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x11, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x0, 0x7, 0x7ffb, 0x6, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10002, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20200008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x9, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x620bb16b, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0x7fa, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0x0, 0x2, {{0x4a, 0x4, 0x0, 0x8, 0x128, 0x64, 0x0, 0x4a, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, {[@lsrr={0x83, 0x13, 0xb8, [@local, @multicast2, @multicast2, @private=0xa010102]}, @rr={0x7, 0x1b, 0x8b, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x18, 0x2, [{0x7, 0x12, "74fba3ca4d51bd0203e0a97bc8a036be"}]}, @rr={0x7, 0xf, 0xb6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2]}, @lsrr={0x83, 0xb, 0xf0, [@local, @local]}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x12, "158a57d21f190eb907773cdb07b052b5"}, {0x5, 0x6, "ac376817"}]}, @cipso={0x86, 0x59, 0xffffffffffffffff, [{0x0, 0x9, "62cc31982dd1d0"}, {0x5, 0xe, "2f5df7151459096337c9b5cc"}, {0x0, 0x2}, {0x0, 0x6, "59de3431"}, {0x7, 0xe, "f23e0299f616c8164740f7be"}, {0x2, 0x3, 'x'}, {0x2, 0x11, "b5bf70d60b511dcc3371cad2570da4"}, {0x2, 0xe, "ce2cb4107f90589e79223d2b"}, {0x5, 0x4, "d41b"}]}, @timestamp_addr={0x44, 0x3c, 0xef, 0x1, 0x0, [{@multicast1, 0x6}, {@broadcast, 0x3}, {@remote, 0x4}, {@broadcast, 0xb5}, {@loopback, 0x10000}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000540)={0x0, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x4, 0x5, 0x8e, 0x4, 0x1}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a0200320905"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 11m2.275892192s ago: executing program 2 (id=4648): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xffffffffffffffff, 0xa003, 0x1ff, {0x8, 0x5, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x8000, 0x0, 0x0, r2, 0xe6f, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 11m1.479412777s ago: executing program 2 (id=4650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48895}, 0x0) 10m59.195481682s ago: executing program 2 (id=4658): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x3c, r4, 0x8c864ca4e0b522ed, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "cc99bd92c7f896e0b7713f98d8898c85"}, @NL80211_ATTR_SSID={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x23c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@migrate={0xac, 0x21, 0x1, 0x70bd2c, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x0, 0x0, 0x2, 0xc0, 0x80, 0x2f}}, [@offload={0xc}, @migrate={0xffffffffffffffaa, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@multicast2, @in6=@remote, 0x0, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m58.412929914s ago: executing program 43 (id=4658): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x3c, r4, 0x8c864ca4e0b522ed, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "cc99bd92c7f896e0b7713f98d8898c85"}, @NL80211_ATTR_SSID={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) write$P9_RSTATu(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="3c0200007d00000005fb000000030020001000000000000000000000000000004008000000000400000082120000000000002900046e6f646576056314000000000000008108000000000031ff0b6afe704a86cec602007dfa673effeb0904351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8806b494e11200000000ad6ba97000000000000000000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d97983fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1408d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f752ddd9d52a3641aea9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd0739e1c2d87fff000000000000000000000000000000000080db5edc40eae47879f6edef12a173dcb0e6a35b45fd9fd6"], 0x23c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@migrate={0xac, 0x21, 0x1, 0x70bd2c, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x0, 0x0, 0x2, 0xc0, 0x80, 0x2f}}, [@offload={0xc}, @migrate={0xffffffffffffffaa, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@multicast2, @in6=@remote, 0x0, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m50.78146818s ago: executing program 7 (id=4688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900028473797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 10m50.057386474s ago: executing program 7 (id=4694): memfd_secret(0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x20, &(0x7f0000002340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@fowner_gt={'fowner>', r2}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r3}}, {@permit_directio}]}}) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xdc, 0x3a, '*/', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x4f, 0x43, 0x43, 0x46, 0x50, 0x50, 0x50, 0x50]}, 0x33) 10m49.843697438s ago: executing program 7 (id=4696): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000140)={0x1, 0x0, [0x4, 0x7, 0xffff, 0xa9d, 0x2, 0x8, 0x6, 0xfffffc01]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1d3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)='/dev/kvm\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x3, 0x4002004c2, 0x1, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @private1, 0x100006}, 0x3) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 10m48.805610134s ago: executing program 7 (id=4697): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xfffffffffffffffd) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 10m48.271769033s ago: executing program 7 (id=4699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000000000010000000c00020002000000400000001c0007800c000180", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) 10m43.540177408s ago: executing program 7 (id=4705): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be14443cfffe8000000000000000000000000000aaff020000000000000000000100000001"], 0xfdef) 10m43.143818856s ago: executing program 44 (id=4705): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be14443cfffe8000000000000000000000000000aaff020000000000000000000100000001"], 0xfdef) 6.939756795s ago: executing program 5 (id=8959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000050a01030000000000000000030000000900010073797a30000000000900030073797a300000000008000a4000000003280004"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 6.857976896s ago: executing program 5 (id=8961): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000040a01040000000000000000010080000900010073797a300000000000000000030a01010000000000000000010000030900010073797a3000000073797a320000000050000000060a010400000000000000000100000008000b73c70f043864896856cb6c12803fc48f400000000028000480240001800b0001007470726f7879000014000280"], 0xc4}, 0x1, 0x0, 0x0, 0x420c0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) shutdown(r3, 0x0) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x101) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.317795218s ago: executing program 6 (id=8965): socket$inet6_sctp(0xa, 0x5, 0x84) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40a40, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000f5050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 6.184713854s ago: executing program 6 (id=8966): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x2000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000001c0)) setresuid(0xee01, r0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@allocspi={0x1c8, 0x16, 0x100, 0x70bd27, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@empty, 0x4e21, 0x0, 0x4e24, 0x7, 0x2, 0x20, 0x20, 0x1f, r4, r0}, {@in=@loopback, 0x80000001, 0x6c}, @in6=@empty, {0xffffffffffffffff, 0xffff, 0x20080000000000, 0x5, 0x44, 0x0, 0x1, 0x3}, {0x6bd1, 0xf0df, 0x8000, 0x2}, {0x749a513c, 0x7, 0x1}, 0x70bd2b, 0x0, 0x2, 0x2, 0x5, 0x60}, 0x5, 0x5}, [@algo_crypt={0xd0, 0x2, {{'ctr(aes)\x00'}, 0x440, "5bb8a1a1473b78e23590de80402df3d37418e0c118f57bd2eb3d31e70bba7e117280a7c69bc658612b3cad3cb6f50821bf640a35cc91f24f63c564068926ed14476c657960434ceb30759c2f5981d5d654b8af922755c94935f15c8f847daf48af3f445679f670a2924d165cd4cf77856854519b1762635e82590cc75a261698856be552da797d5e"}}]}, 0x1c8}}, 0x4000004) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@allocspi={0x1c8, 0x16, 0x100, 0x70bd27, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@empty, 0x4e21, 0x0, 0x4e24, 0x7, 0x2, 0x20, 0x20, 0x1f, r4, r0}, {@in=@loopback, 0x80000001, 0x6c}, @in6=@empty, {0xffffffffffffffff, 0xffff, 0x20080000000000, 0x5, 0x44, 0x0, 0x1, 0x3}, {0x6bd1, 0xf0df, 0x8000, 0x2}, {0x749a513c, 0x7, 0x1}, 0x70bd2b, 0x0, 0x2, 0x2, 0x5, 0x60}, 0x5, 0x5}, [@algo_crypt={0xd0, 0x2, {{'ctr(aes)\x00'}, 0x440, "5bb8a1a1473b78e23590de80402df3d37418e0c118f57bd2eb3d31e70bba7e117280a7c69bc658612b3cad3cb6f50821bf640a35cc91f24f63c564068926ed14476c657960434ceb30759c2f5981d5d654b8af922755c94935f15c8f847daf48af3f445679f670a2924d165cd4cf77856854519b1762635e82590cc75a261698856be552da797d5e"}}]}, 0x1c8}}, 0x4000004) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000600)=0xffffffffffffffff) syz_io_uring_setup(0x1dc5, &(0x7f0000000080)={0x0, 0x68d6, 0x8000, 0x2, 0x316}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000004c0)) r11 = mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x0, 0x10010, r9, 0x82442c63) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r14 = syz_ublk_setup_io_uring(0x1873, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x1db, 0x0, r13}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r15, r16, r17, &(0x7f00000029c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r12}) syz_ublk_add_dev(r14, r15, r16, r17, &(0x7f0000000080)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x4a4, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x4c}}}, 0x0) (async) syz_ublk_add_dev(r14, r15, r16, r17, &(0x7f0000000080)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x4a4, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x4c}}}, 0x0) syz_ublk_add_dev(r6, r10, r11, r17, &(0x7f0000000540)={0x2e, 0x42, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0xf90, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x10}}}, &(0x7f00000005c0)) (async) syz_ublk_add_dev(r6, r10, r11, r17, &(0x7f0000000540)={0x2e, 0x42, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0xf90, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x10}}}, &(0x7f00000005c0)) r18 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r18, 0x6, 0x0, 0x0, 0x0) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x4c, r19, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x1004, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x4c, r19, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x1004, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) setregid(0xffffffffffffffff, r8) (async) setregid(0xffffffffffffffff, r8) r21 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r21, 0x0, 0x0) (async) syz_usb_control_io$hid(r21, 0x0, 0x0) syz_usb_control_io(r21, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0xd0, {0xd0, 0x3, "663e91b2f0187ff047000080000000000300000000000100340c62d356a8e3b64f8efb94ff843f34d141a740e7a23866d3a1f088648ea23e65e1c91062f53da449886c5dbddca39bbc144e0c1572e2ff0aada819f03646c556b9d74acbbac2de74c35570d07d313ec60234d963ccef2c6aab1490d181efa37c76b70762355f67ba222bdee185bc7a7d0a5d80c9e69d81b2e1b52d413bfcdbb892f4ba3508822de6b8454b7524acf14d31617a417638c1e619c15afdb90d38c5c6a569f9ecc3dae90961c89a5f9b35d053f5d403c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.233266042s ago: executing program 4 (id=8972): write(0xffffffffffffffff, &(0x7f0000000000)="727652a2b6b9518c45fc981736", 0xd) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 4.23293491s ago: executing program 6 (id=8973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x2e9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x8, 0x10, 0x100000002, 0xfffffffffffffffd, 0xfff, 0xffffffffffffb473, 0x7}, {0xa, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x80ffffffffffffff, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 4.08193172s ago: executing program 6 (id=8974): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x1f, 0x1f000801}, 0x0) 3.962568122s ago: executing program 6 (id=8975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="660f3880293e36660f38811e05003ef20f5c0e00a02ec12f24f0119e00d0660f38817b99d9e9673edbc2640f01c3440f20c066350a000000440f22c0", 0x3c}], 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x3}) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0x8000000000000000, 0xbae) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) shutdown(r5, 0x1) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x1c, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@typed={0x7, 0xf4, 0x0, 0x0, @str='}\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) getsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.464994013s ago: executing program 5 (id=8978): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000005500911fdabcf8b30771a54a07"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x7}) 3.304633501s ago: executing program 0 (id=8979): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000ffffffffffffff80000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.260947655s ago: executing program 4 (id=8980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0xfff0}, 0x4000054) 3.009301232s ago: executing program 5 (id=8981): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x84) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pidfd_getfd(r3, r3, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000009580)={'veth0_to_batadv\x00', &(0x7f0000009480)=@ethtool_rxnfc={0x30, 0xd, 0x1, {0x11, @udp_ip4_spec={@remote, @empty, 0x4e23, 0x4e22, 0x3}, {0x0, @random="c90303b1961c", 0x9, 0x6, [0x9, 0x2d7]}, @ah_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0xb, 0x2}, {0x0, @local, 0xcf0, 0x1ff, [0x8, 0x9c9]}, 0x1, 0xfffffff8}}}) 3.008853344s ago: executing program 4 (id=8982): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb3218541b012ff7c4500085a8a73f16de7da7e09fd60d12af378f0d4e45a39c1249", 0x4d}, {&(0x7f0000001c00)="e146badcd6aca2", 0x7}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x1300, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.936462059s ago: executing program 4 (id=8983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000050a01030000000000000000090000000900010073797a30000000000900030073797a300000000008000a4000000003280004"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 2.686561379s ago: executing program 4 (id=8984): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000180)={0x31, 0x59, &(0x7f0000000080)="ce23dd8a2f74e9aa1b2c29fd354ee266f981fee39f0280fdad5c273e4e6c892cb80546c3712028687deea3e431ffa69f589bce8eaa7384ae5ef2348a482123af38a06617c25b24e4515eac35ca5b4fb8f7b9274233275665cf67c0fb68c4466737f87007dbfbd418abe5ab471d0dfce0768276bfdcbb8e6c8ae6b2920d0b131fb48e8bd6482f76cb6a710b0faad2a7efbedcbb776dcf8d9c0aa74b41cbc34b1257eb9cb5f21ce1c4700ef10e8cfd44ba01964adeff884b6cd78d14a62139ebe4f91d9da449e308bb56c0d07a7fe6a74c1dd6538b3b33a3d4aeff", {0x8, 0x1a81, 0x36314d4e, 0x9, 0x7f, 0x5, 0xa, 0xffffffff}}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r3, 0x8920, &(0x7f0000000380)={'veth1_to_bridge\x00', @ifru_ivalue=0xd3d4}) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffc, 0x86}, &(0x7f0000000040)=0x90) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="001503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.505138919s ago: executing program 0 (id=8985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000000)=0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz1\x00', 0x7}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000080004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r8, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002080)={'ip_vti0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000003800)) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000280)={0x0, 0x3}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}}, 0x4044) 2.32598914s ago: executing program 0 (id=8986): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x398}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ffffe, 0x8, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x231, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xc0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 1.264418863s ago: executing program 5 (id=8987): socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_setup(0x31c5, &(0x7f0000000640)={0x0, 0xd3b3, 0x2, 0x1, 0x3}, &(0x7f0000000040), &(0x7f00000003c0), 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030803000000000000000000010000080500030001009f267672c254b9a4452300000c00"], 0xe}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x9, 0x2, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x7, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x7fffffff, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5963, 0xaf97, 0x0, 0xd7, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x0, 0x0, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x980d, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) (async) chown(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req={0x0, 0x6, 0x8, 0x4}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 989.428462ms ago: executing program 0 (id=8988): write(0xffffffffffffffff, &(0x7f0000000000)="727652a2b6b9518c45fc981736", 0xd) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 884.568919ms ago: executing program 5 (id=8989): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x77004c70, 0x82202) ioctl$EVIOCGABS20(r0, 0x80184520, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) r3 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbfu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\xae\xb3\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcD\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba^\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\x04[\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xa5\x0f\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2pV2\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)\xa86\xb1\xf7z\aA\xf8x\xe5J\x96\xaa\xec\xcebn \xfb\xf2\x88\xfaI\xff\xdd\x80\x96_\xecu\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5q\x04\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0-\xe0\xfa\xab\x99?v\x01\x060l\xdc\x89D\xa5\xc6\x84\xf0\xa0\x8e\xa44RR\xd2@x\x91\xe4\xac&@U\x8c\xa9\xab\xbfr\x82\xd6\x8c\x94P\xd4}I\a\n\x02\xd7\xd0xx\xe7|\xf4U\x8f\x9a\xd2\xb1/l\x14\xd7\xe2f\xf4T\xec\xd5\xaa\xd3Po)\xb0\xf5h\xd3_\x11U\x83\x915\x97', 0x3) write$binfmt_misc(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x1a0b, 0x1000, 0x1, 0x336}, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x353f, 0x2000, 0x3, 0x2f8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xead6, 0x0, 0x0, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e0d, 0x80000, 0x3, 0xe1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x511, 0x100, 0x1, 0x2b3}}], 0x4, &(0x7f0000002b40)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8000}, 0x0, 0x0, '\x00', {0x3, 0x2c9, 0x0, &(0x7f0000001b40)=@buf_1k="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"}}, &(0x7f0000002bc0)) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0x800bde, 0x400, 0x10300}}) 821.269314ms ago: executing program 4 (id=8990): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) unshare(0x40400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) r4 = inotify_init1(0x80800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xa2000010) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000380)={@any, 0x779, 0x401, 0x101, 0x1, 0x6, "ff69cba77726407e2dbd2d66410c50f72b942b1f86bb055aa116eb467377211c68911bad987e5707c865bb9a99501c4dfc66b18555e19dd37f34ae3e5d679086fc13dc90104be89b26c862005026b50f0f0277bb616481b1f7bc85b4bb1803dcd2ad2f9dc5a465e44a8ab7d2f5d00d6adfddc5196bf1d49b96eab8cb55b25485"}) read$FUSE(r5, &(0x7f0000006100)={0x2020}, 0x2020) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000004100)) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100, 0x0, 0x2}, 0x30, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f0000000040)={0x3, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x90, 0x31, 0x9, 0x709d2a, 0x0, {0x2}, [@typed={0x0, 0x85, 0x0, 0x0, @str='memory.swap.events\x00'}, @nested={0x0, 0x89, 0x0, 0x1, [@generic="1e3f1579da89979986e9ae59b4ca1fdd8be298554281324e211a05509bba322fefba51194fc9d5282499cdef2155c506612f0510d8e0cfaae7cb959d1c17bbee62397daa0bd7440789b859ea45ce604d860d8c202c9d1d38f4d221c1717b358aab450bda8a5a86cdae6c3e79f14c07e7362f5f1748014c31aacdc03a22e5ccbeaf4a4039de8fe62abbb79bf6d75365ca0a99d88c05fe"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x2004844) landlock_restrict_self(r9, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) ptrace(0x10, r0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 715.898145ms ago: executing program 0 (id=8991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x7cb8, &(0x7f0000000000)={0x0, 0x3c9d, 0x4000, 0x2, 0x18a}, 0x0, 0x0, 0x0) (fail_nth: 57) 129.456013ms ago: executing program 0 (id=8992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000001400000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) 0s ago: executing program 6 (id=8993): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f730e8f99b5d1dee82deffffff1000", "00020700", "0300", "0001ffff", ['\x00', "808e88de00", "0cdd42000000000000c20d00", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) kernel console output (not intermixed with test programs): .040995][T32684] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1412.041015][T32684] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1412.041038][T32684] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1412.041069][T32684] ? __pfx_ksys_write+0x10/0x10 [ 1412.041091][T32684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.041109][T32684] do_syscall_64+0x174/0x580 [ 1412.041126][T32684] ? trace_irq_disable+0x3b/0x140 [ 1412.041141][T32684] ? clear_bhb_loop+0x40/0x90 [ 1412.041161][T32684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.041177][T32684] RIP: 0033:0x7f8ce9a1de59 [ 1412.041193][T32684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.041208][T32684] RSP: 002b:00007f8ce7c75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1412.041225][T32684] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f8ce9a1de59 [ 1412.041237][T32684] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1412.041248][T32684] RBP: 00007f8ce7c76090 R08: 0000000000000000 R09: 0000000000000101 [ 1412.041258][T32684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1412.041268][T32684] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff1e026288 [ 1412.041291][T32684] [ 1412.065429][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1412.611644][T32697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8547'. [ 1412.656273][ T5609] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1412.675882][T32693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.679065][T32693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.071782][T32712] loop8: detected capacity change from 0 to 8 [ 1413.080941][T32712] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1413.080971][T32712] loop8: partition table partially beyond EOD, truncated [ 1413.081222][T32712] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1413.165784][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1413.256394][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1413.315689][T20007] udevd[20007]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1413.425704][T32720] loop8: detected capacity change from 0 to 7 [ 1413.443774][T32720] Dev loop8: unable to read RDB block 7 [ 1413.443825][T32720] loop8: unable to read partition table [ 1413.444067][T32720] loop8: partition table beyond EOD, truncated [ 1413.457071][T32720] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1413.526327][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1413.624020][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1414.076492][T20077] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1414.107944][T32731] FAULT_INJECTION: forcing a failure. [ 1414.107944][T32731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1414.107979][T32731] CPU: 1 UID: 0 PID: 32731 Comm: syz.5.8561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1414.108002][T32731] Tainted: [L]=SOFTLOCKUP [ 1414.108008][T32731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1414.108019][T32731] Call Trace: [ 1414.108025][T32731] [ 1414.108036][T32731] dump_stack_lvl+0xe8/0x150 [ 1414.108063][T32731] should_fail_ex+0x467/0x600 [ 1414.108093][T32731] prepare_alloc_pages+0x223/0x650 [ 1414.108123][T32731] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1414.108152][T32731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1414.108183][T32731] ? __pfx_policy_nodemask+0x10/0x10 [ 1414.108209][T32731] ? filemap_get_entry+0x374/0x3f0 [ 1414.108235][T32731] ? __pfx_filemap_get_entry+0x10/0x10 [ 1414.108261][T32731] alloc_pages_mpol+0xd4/0x280 [ 1414.108290][T32731] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1414.108318][T32731] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1414.108357][T32731] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1414.108376][T32731] ? __lock_acquire+0x6df/0x2e40 [ 1414.108395][T32731] ? __css_rstat_updated+0x235/0x540 [ 1414.108415][T32731] shmem_fault+0x170/0x380 [ 1414.108442][T32731] __do_fault+0x138/0x2a0 [ 1414.108468][T32731] do_pte_missing+0x659/0x28f0 [ 1414.108499][T32731] ? handle_mm_fault+0xe9/0x1520 [ 1414.108552][T32731] handle_mm_fault+0xe0b/0x1520 [ 1414.108590][T32731] ? handle_mm_fault+0xe9/0x1520 [ 1414.108624][T32731] ? __pfx_handle_mm_fault+0x10/0x10 [ 1414.108655][T32731] ? follow_page_pte+0xaf1/0xe80 [ 1414.108688][T32731] ? __pfx_follow_page_pte+0x10/0x10 [ 1414.108718][T32731] __get_user_pages+0x166b/0x2590 [ 1414.108760][T32731] __gup_longterm_locked+0x7d2/0x15c0 [ 1414.108798][T32731] gup_fast_fallback+0x1cf7/0x2040 [ 1414.108837][T32731] ? io_pin_pages+0xac/0x1a0 [ 1414.108865][T32731] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1414.108885][T32731] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1414.108911][T32731] ? is_valid_gup_args+0x11f/0x200 [ 1414.108934][T32731] ? pin_user_pages_fast+0x4d/0xb0 [ 1414.108957][T32731] io_pin_pages+0xc7/0x1a0 [ 1414.108983][T32731] io_region_pin_pages+0x7d/0x190 [ 1414.109002][T32731] io_create_region+0x388/0x490 [ 1414.109033][T32731] io_allocate_scq_urings+0x1f4/0x7f0 [ 1414.109053][T32731] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1414.109076][T32731] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1414.109098][T32731] ? bpf_lsm_capable+0x9/0x20 [ 1414.109114][T32731] ? security_capable+0x74/0x280 [ 1414.109146][T32731] io_uring_create+0x46c/0x990 [ 1414.109169][T32731] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1414.109190][T32731] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1414.109214][T32731] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1414.109245][T32731] ? __pfx_ksys_write+0x10/0x10 [ 1414.109267][T32731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.109285][T32731] do_syscall_64+0x174/0x580 [ 1414.109302][T32731] ? trace_irq_disable+0x3b/0x140 [ 1414.109317][T32731] ? clear_bhb_loop+0x40/0x90 [ 1414.109338][T32731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.109354][T32731] RIP: 0033:0x7f8ce9a1de59 [ 1414.109371][T32731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.109385][T32731] RSP: 002b:00007f8ce7c75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1414.109402][T32731] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f8ce9a1de59 [ 1414.109414][T32731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1414.109425][T32731] RBP: 00007f8ce7c76090 R08: 0000000000000000 R09: 0000000000000101 [ 1414.109435][T32731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1414.109445][T32731] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff1e026288 [ 1414.109468][T32731] [ 1414.212567][T20077] usb 7-1: device descriptor read/64, error -71 [ 1414.664112][T20077] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1414.812340][T20077] usb 7-1: device descriptor read/64, error -71 [ 1414.891338][T32741] FAULT_INJECTION: forcing a failure. [ 1414.891338][T32741] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.891377][T32741] CPU: 1 UID: 0 PID: 32741 Comm: syz.0.8564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1414.891407][T32741] Tainted: [L]=SOFTLOCKUP [ 1414.891416][T32741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1414.891430][T32741] Call Trace: [ 1414.891439][T32741] [ 1414.891449][T32741] dump_stack_lvl+0xe8/0x150 [ 1414.891481][T32741] should_fail_ex+0x467/0x600 [ 1414.891520][T32741] should_failslab+0xa8/0x100 [ 1414.891557][T32741] __kmalloc_cache_noprof+0xa1/0x670 [ 1414.891589][T32741] ? nfnetlink_rcv+0x102a/0x28d0 [ 1414.891627][T32741] ? nfnetlink_rcv+0x102a/0x28d0 [ 1414.891666][T32741] nfnetlink_rcv+0x102a/0x28d0 [ 1414.891733][T32741] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1414.891781][T32741] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1414.891807][T32741] ? ref_tracker_free+0x668/0x820 [ 1414.891853][T32741] ? skb_clone+0x246/0x3a0 [ 1414.891879][T32741] ? __netlink_deliver_tap+0x838/0x880 [ 1414.891909][T32741] ? netlink_deliver_tap+0x2e/0x1b0 [ 1414.891935][T32741] ? netlink_deliver_tap+0x2e/0x1b0 [ 1414.891962][T32741] netlink_unicast+0x7f5/0x990 [ 1414.892023][T32741] netlink_sendmsg+0x813/0xb40 [ 1414.892056][T32741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.892082][T32741] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1414.892111][T32741] ? __kernel_text_address+0xd/0x30 [ 1414.892143][T32741] ? unwind_get_return_address+0x4d/0x90 [ 1414.892168][T32741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.892191][T32741] sock_sendmsg_nosec+0x13a/0x180 [ 1414.892221][T32741] ____sys_sendmsg+0x565/0x870 [ 1414.892265][T32741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.892310][T32741] ? import_iovec+0x73/0xa0 [ 1414.892340][T32741] ___sys_sendmsg+0x2a5/0x360 [ 1414.892375][T32741] ? __lock_acquire+0x6df/0x2e40 [ 1414.892402][T32741] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.892475][T32741] ? __fget_files+0x2a/0x420 [ 1414.892508][T32741] ? __fget_files+0x3a8/0x420 [ 1414.892554][T32741] __x64_sys_sendmsg+0x1b7/0x290 [ 1414.892580][T32741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1414.892628][T32741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.892654][T32741] do_syscall_64+0x174/0x580 [ 1414.892677][T32741] ? trace_irq_disable+0x3b/0x140 [ 1414.892700][T32741] ? clear_bhb_loop+0x40/0x90 [ 1414.892729][T32741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.892753][T32741] RIP: 0033:0x7ff1b66fde59 [ 1414.892774][T32741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.892796][T32741] RSP: 002b:00007ff1b4956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.892821][T32741] RAX: ffffffffffffffda RBX: 00007ff1b6985fa0 RCX: 00007ff1b66fde59 [ 1414.892837][T32741] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1414.892853][T32741] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.892867][T32741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.892880][T32741] R13: 00007ff1b6986038 R14: 00007ff1b6985fa0 R15: 00007ffeabd857f8 [ 1414.892915][T32741] [ 1414.938189][T20077] usb usb7-port1: attempt power cycle [ 1415.492084][T20077] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1415.504586][T20053] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1415.512585][T20077] usb 7-1: device descriptor read/8, error -71 [ 1415.641779][T20053] usb 6-1: device descriptor read/64, error -71 [ 1415.761814][T20077] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1415.782634][T20077] usb 7-1: device descriptor read/8, error -71 [ 1415.881718][T20053] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1415.899901][T20077] usb usb7-port1: unable to enumerate USB device [ 1416.011599][T20053] usb 6-1: device descriptor read/64, error -71 [ 1416.122139][T20053] usb usb6-port1: attempt power cycle [ 1416.433807][T32757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.434467][T32757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.471448][T20053] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1416.492454][T20053] usb 6-1: device descriptor read/8, error -71 [ 1416.751171][T20053] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1416.771984][T20053] usb 6-1: device descriptor read/8, error -71 [ 1416.886017][T20053] usb usb6-port1: unable to enumerate USB device [ 1417.302759][ T300] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1417.302832][ T300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1417.302852][ T300] netlink: 'syz.0.8573': attribute type 1 has an invalid length. [ 1417.543642][ T304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.544331][ T304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.996931][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8580'. [ 1417.996966][ T314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8580'. [ 1418.467158][ T323] loop8: detected capacity change from 0 to 7 [ 1418.540298][ T323] Dev loop8: unable to read RDB block 7 [ 1418.540344][ T323] loop8: unable to read partition table [ 1418.540556][ T323] loop8: partition table beyond EOD, truncated [ 1418.540598][ T323] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1418.608879][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1418.660036][T20053] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1418.789719][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8586'. [ 1418.860809][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1419.114774][ T340] binder: 336:340 ioctl c0306201 200000004a40 returned -22 [ 1419.875770][T20053] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1419.889812][T20053] usb 7-1: too many configurations: 49, using maximum allowed: 8 [ 1419.900312][T20053] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1419.900353][T20053] usb 7-1: can't read configurations, error -71 [ 1419.962419][ T354] tipc: Started in network mode [ 1419.962454][ T354] tipc: Node identity 080211, cluster identity 4711 [ 1420.012922][ T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.016399][ T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.083524][ T354] tipc: Enabled bearer , priority 10 [ 1420.199265][T20077] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1420.349157][T20077] usb 6-1: Using ep0 maxpacket: 32 [ 1420.357128][T20077] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1420.367514][T20077] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.367546][T20077] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.393269][T20077] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1420.393300][T20077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.393322][T20077] usb 6-1: Product: syz [ 1420.393337][T20077] usb 6-1: Manufacturer: syz [ 1420.393351][T20077] usb 6-1: SerialNumber: syz [ 1420.741003][T20077] usb 6-1: USB disconnect, device number 106 [ 1420.787821][ T5791] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1420.816895][T20007] udevd[20007]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1420.945785][ T377] FAULT_INJECTION: forcing a failure. [ 1420.945785][ T377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1420.945816][ T377] CPU: 1 UID: 0 PID: 377 Comm: syz.0.8605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1420.945839][ T377] Tainted: [L]=SOFTLOCKUP [ 1420.945845][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1420.945856][ T377] Call Trace: [ 1420.945863][ T377] [ 1420.945870][ T377] dump_stack_lvl+0xe8/0x150 [ 1420.945897][ T377] should_fail_ex+0x467/0x600 [ 1420.945927][ T377] prepare_alloc_pages+0x223/0x650 [ 1420.945957][ T377] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1420.945986][ T377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1420.946015][ T377] ? __pfx_policy_nodemask+0x10/0x10 [ 1420.946040][ T377] ? filemap_get_entry+0x374/0x3f0 [ 1420.946065][ T377] ? __pfx_filemap_get_entry+0x10/0x10 [ 1420.946091][ T377] alloc_pages_mpol+0xd4/0x280 [ 1420.946128][ T377] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1420.946156][ T377] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1420.946195][ T377] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1420.946215][ T377] ? __lock_acquire+0x6df/0x2e40 [ 1420.946233][ T377] ? __css_rstat_updated+0x235/0x540 [ 1420.946253][ T377] shmem_fault+0x170/0x380 [ 1420.946280][ T377] __do_fault+0x138/0x2a0 [ 1420.946307][ T377] do_pte_missing+0x659/0x28f0 [ 1420.946338][ T377] ? handle_mm_fault+0xe9/0x1520 [ 1420.946362][ T377] handle_mm_fault+0xe0b/0x1520 [ 1420.946388][ T377] ? handle_mm_fault+0xe9/0x1520 [ 1420.946411][ T377] ? __pfx_handle_mm_fault+0x10/0x10 [ 1420.946434][ T377] ? follow_page_pte+0xaf1/0xe80 [ 1420.946462][ T377] ? __pfx_follow_page_pte+0x10/0x10 [ 1420.946491][ T377] __get_user_pages+0x166b/0x2590 [ 1420.946533][ T377] __gup_longterm_locked+0x7d2/0x15c0 [ 1420.946571][ T377] gup_fast_fallback+0x1cf7/0x2040 [ 1420.946612][ T377] ? io_pin_pages+0xac/0x1a0 [ 1420.946640][ T377] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1420.946660][ T377] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1420.946686][ T377] ? is_valid_gup_args+0x11f/0x200 [ 1420.946709][ T377] ? pin_user_pages_fast+0x4d/0xb0 [ 1420.946731][ T377] io_pin_pages+0xc7/0x1a0 [ 1420.946758][ T377] io_region_pin_pages+0x7d/0x190 [ 1420.946777][ T377] io_create_region+0x388/0x490 [ 1420.946808][ T377] io_allocate_scq_urings+0x1f4/0x7f0 [ 1420.946828][ T377] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 1420.946850][ T377] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1420.946872][ T377] ? bpf_lsm_capable+0x9/0x20 [ 1420.946888][ T377] ? security_capable+0x74/0x280 [ 1420.946919][ T377] io_uring_create+0x46c/0x990 [ 1420.946940][ T377] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1420.946960][ T377] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1420.946984][ T377] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1420.947015][ T377] ? __pfx_ksys_write+0x10/0x10 [ 1420.947037][ T377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.947055][ T377] do_syscall_64+0x174/0x580 [ 1420.947072][ T377] ? trace_irq_disable+0x3b/0x140 [ 1420.947087][ T377] ? clear_bhb_loop+0x40/0x90 [ 1420.947112][ T377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.947128][ T377] RIP: 0033:0x7ff1b66fde59 [ 1420.947144][ T377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.947158][ T377] RSP: 002b:00007ff1b4955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1420.947175][ T377] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff1b66fde59 [ 1420.947188][ T377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1420.947199][ T377] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000101 [ 1420.947209][ T377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1420.947219][ T377] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeabd857f8 [ 1420.947242][ T377] [ 1420.952481][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 1421.138751][ T5603] tipc: Node number set to 134353152 [ 1421.234605][ T5791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.234765][ T5791] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1421.394208][ T5791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1421.394241][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.394264][ T5791] usb 5-1: Product: syz [ 1421.394281][ T5791] usb 5-1: Manufacturer: syz [ 1421.394297][ T5791] usb 5-1: SerialNumber: syz [ 1421.454092][ T5791] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1421.465580][ T5791] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1421.479617][ T5791] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1421.638624][ T5791] usb 5-1: USB disconnect, device number 28 [ 1421.664459][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.683497][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.769279][ T410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.787535][ T38] kauditd_printk_skb: 150 callbacks suppressed [ 1422.787552][ T38] audit: type=1326 audit(1783497328.712:280): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=409 comm="syz.0.8615" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1b66fde59 code=0x0 [ 1423.142259][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.142365][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.319066][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8620'. [ 1423.319091][ T422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8620'. [ 1423.635796][ T430] loop8: detected capacity change from 0 to 7 [ 1423.644111][ T430] Dev loop8: unable to read RDB block 7 [ 1423.644157][ T430] loop8: unable to read partition table [ 1423.644358][ T430] loop8: partition table beyond EOD, truncated [ 1423.644381][ T430] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1423.731826][ T432] netlink: 'syz.6.8625': attribute type 4 has an invalid length. [ 1423.763795][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1423.849141][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1424.039454][ T441] JFS: charset not found [ 1424.219983][ T5791] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1424.378722][ T5791] usb 7-1: Using ep0 maxpacket: 32 [ 1424.381125][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.381163][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1424.381237][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1424.381363][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1424.381450][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1424.381509][ T5791] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1424.406469][ T5791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1424.406564][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1424.406639][ T5791] usb 7-1: SerialNumber: syz [ 1424.446848][ T5603] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 1424.512780][ T438] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1424.526351][ T5791] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1424.539710][ T5791] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1424.599586][ T5603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1424.600904][ T5603] usb 6-1: config 8 has an invalid interface number: 109 but max is 0 [ 1424.600934][ T5603] usb 6-1: config 8 has no interface number 0 [ 1424.600986][ T5603] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1424.601007][ T5603] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 1424.601028][ T5603] usb 6-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1424.674295][ T5603] usb 6-1: string descriptor 0 read error: -22 [ 1424.674401][ T5603] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1424.674419][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.708013][ T450] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1424.725836][ T5603] metro_usb 6-1:8.109: Metrologic USB to Serial converter detected [ 1424.761293][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.761817][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.787884][ T5603] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1424.845174][T20053] usb 7-1: USB disconnect, device number 23 [ 1424.943156][ T450] netlink: 'syz.5.8631': attribute type 2 has an invalid length. [ 1424.943178][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8631'. [ 1425.201153][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 1425.335061][ T460] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1425.630505][ T466] FAULT_INJECTION: forcing a failure. [ 1425.630505][ T466] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.630545][ T466] CPU: 1 UID: 0 PID: 466 Comm: syz.6.8636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1425.630576][ T466] Tainted: [L]=SOFTLOCKUP [ 1425.630585][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1425.630599][ T466] Call Trace: [ 1425.630607][ T466] [ 1425.630615][ T466] dump_stack_lvl+0xe8/0x150 [ 1425.630645][ T466] should_fail_ex+0x467/0x600 [ 1425.630680][ T466] should_failslab+0xa8/0x100 [ 1425.630709][ T466] __kmalloc_noprof+0xfb/0x790 [ 1425.630747][ T466] ? tomoyo_realpath_from_path+0xef/0x640 [ 1425.630768][ T466] ? tomoyo_realpath_from_path+0xef/0x640 [ 1425.630795][ T466] tomoyo_realpath_from_path+0xef/0x640 [ 1425.630823][ T466] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1425.630852][ T466] tomoyo_path_number_perm+0x246/0x5f0 [ 1425.630882][ T466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1425.630910][ T466] ? __lock_acquire+0x6df/0x2e40 [ 1425.630940][ T466] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1425.630960][ T466] ? lockdep_hardirqs_on+0x7a/0x110 [ 1425.630993][ T466] ? __fget_files+0x2a/0x420 [ 1425.631023][ T466] ? __fget_files+0x2a/0x420 [ 1425.631049][ T466] ? __fget_files+0x3a8/0x420 [ 1425.631075][ T466] ? __fget_files+0x2a/0x420 [ 1425.631106][ T466] security_file_ioctl+0xb9/0x260 [ 1425.631134][ T466] __se_sys_ioctl+0x47/0x170 [ 1425.631156][ T466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.631176][ T466] do_syscall_64+0x174/0x580 [ 1425.631195][ T466] ? trace_irq_disable+0x3b/0x140 [ 1425.631212][ T466] ? clear_bhb_loop+0x40/0x90 [ 1425.631237][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.631255][ T466] RIP: 0033:0x7fbbec73de59 [ 1425.631273][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.631290][ T466] RSP: 002b:00007fbbea996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.631310][ T466] RAX: ffffffffffffffda RBX: 00007fbbec9c5fa0 RCX: 00007fbbec73de59 [ 1425.631323][ T466] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 1425.631335][ T466] RBP: 00007fbbea996090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.631346][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.631357][ T466] R13: 00007fbbec9c6038 R14: 00007fbbec9c5fa0 R15: 00007ffc8339bc18 [ 1425.631385][ T466] [ 1425.631534][ T466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1425.646243][T20077] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1425.808412][T20077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1425.808450][T20077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1425.808477][T20077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1425.808505][T20077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1425.811464][T20077] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1425.811498][T20077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.811521][T20077] usb 5-1: Product: syz [ 1425.811538][T20077] usb 5-1: Manufacturer: syz [ 1425.811556][T20077] usb 5-1: SerialNumber: syz [ 1425.818277][T20077] usb 5-1: config 0 descriptor?? [ 1426.025965][ T468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8638'. [ 1426.134039][ T450] : entered promiscuous mode [ 1426.313563][ T32] usb 6-1: USB disconnect, device number 107 [ 1426.387568][T20077] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1426.389122][ T474] lo: entered allmulticast mode [ 1426.437530][T20077] usb 5-1: USB disconnect, device number 29 [ 1426.465254][ T32] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1426.471729][ T32] metro_usb 6-1:8.109: device disconnected [ 1426.887089][T20077] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1426.974072][ T487] fuse: Invalid rootmode [ 1426.974766][ T487] netlink: 'syz.5.8645': attribute type 3 has an invalid length. [ 1427.045476][T20077] usb 5-1: Using ep0 maxpacket: 8 [ 1427.048542][T20077] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1427.049845][T20077] usb 5-1: config 9 has an invalid interface number: 186 but max is 0 [ 1427.049875][T20077] usb 5-1: config 9 has no interface number 0 [ 1427.049910][T20077] usb 5-1: config 9 interface 186 has no altsetting 0 [ 1427.052263][T20077] usb 5-1: New USB device found, idVendor=19d2, idProduct=e74a, bcdDevice=a8.54 [ 1427.052297][T20077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.052312][T20077] usb 5-1: Product: syz [ 1427.052323][T20077] usb 5-1: Manufacturer: syz [ 1427.052335][T20077] usb 5-1: SerialNumber: syz [ 1427.288086][ T32] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1427.342259][T20077] rndis_host 5-1:9.186: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1427.362847][T20077] usb 5-1: USB disconnect, device number 30 [ 1427.435859][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 1427.456882][ T32] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1427.456914][ T32] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1427.456933][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.461851][ T32] usb 7-1: config 0 descriptor?? [ 1427.621859][ T501] FAULT_INJECTION: forcing a failure. [ 1427.621859][ T501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1427.621891][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.0.8652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1427.621914][ T501] Tainted: [L]=SOFTLOCKUP [ 1427.621920][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1427.621930][ T501] Call Trace: [ 1427.621936][ T501] [ 1427.621944][ T501] dump_stack_lvl+0xe8/0x150 [ 1427.621974][ T501] should_fail_ex+0x467/0x600 [ 1427.622003][ T501] prepare_alloc_pages+0x223/0x650 [ 1427.622033][ T501] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1427.622062][ T501] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1427.622091][ T501] ? __pfx_policy_nodemask+0x10/0x10 [ 1427.622116][ T501] ? filemap_get_entry+0x374/0x3f0 [ 1427.622142][ T501] ? __pfx_filemap_get_entry+0x10/0x10 [ 1427.622167][ T501] alloc_pages_mpol+0xd4/0x280 [ 1427.622196][ T501] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1427.622224][ T501] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1427.622263][ T501] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1427.622282][ T501] ? __lock_acquire+0x6df/0x2e40 [ 1427.622300][ T501] ? __css_rstat_updated+0x235/0x540 [ 1427.622320][ T501] shmem_fault+0x170/0x380 [ 1427.622347][ T501] __do_fault+0x138/0x2a0 [ 1427.622374][ T501] do_pte_missing+0x659/0x28f0 [ 1427.622405][ T501] ? handle_mm_fault+0xe9/0x1520 [ 1427.622429][ T501] handle_mm_fault+0xe0b/0x1520 [ 1427.622455][ T501] ? handle_mm_fault+0xe9/0x1520 [ 1427.622479][ T501] ? __pfx_handle_mm_fault+0x10/0x10 [ 1427.622501][ T501] ? follow_page_pte+0xaf1/0xe80 [ 1427.622536][ T501] ? __pfx_follow_page_pte+0x10/0x10 [ 1427.622565][ T501] __get_user_pages+0x166b/0x2590 [ 1427.622607][ T501] __gup_longterm_locked+0x7d2/0x15c0 [ 1427.622645][ T501] gup_fast_fallback+0x1cf7/0x2040 [ 1427.622685][ T501] ? io_pin_pages+0xac/0x1a0 [ 1427.622713][ T501] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1427.622733][ T501] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1427.622759][ T501] ? is_valid_gup_args+0x11f/0x200 [ 1427.622782][ T501] ? pin_user_pages_fast+0x4d/0xb0 [ 1427.622805][ T501] io_pin_pages+0xc7/0x1a0 [ 1427.622832][ T501] io_region_pin_pages+0x7d/0x190 [ 1427.622851][ T501] io_create_region+0x388/0x490 [ 1427.622883][ T501] io_allocate_scq_urings+0x1f4/0x7f0 [ 1427.622902][ T501] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1427.622925][ T501] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1427.622948][ T501] ? bpf_lsm_capable+0x9/0x20 [ 1427.622963][ T501] ? security_capable+0x74/0x280 [ 1427.622994][ T501] io_uring_create+0x46c/0x990 [ 1427.623015][ T501] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1427.623036][ T501] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1427.623060][ T501] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1427.623090][ T501] ? __pfx_ksys_write+0x10/0x10 [ 1427.623113][ T501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.623132][ T501] do_syscall_64+0x174/0x580 [ 1427.623147][ T501] ? trace_irq_disable+0x3b/0x140 [ 1427.623163][ T501] ? clear_bhb_loop+0x40/0x90 [ 1427.623183][ T501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.623200][ T501] RIP: 0033:0x7ff1b66fde59 [ 1427.623215][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.623229][ T501] RSP: 002b:00007ff1b4955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1427.623246][ T501] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff1b66fde59 [ 1427.623259][ T501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1427.623269][ T501] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000101 [ 1427.623280][ T501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1427.623290][ T501] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeabd857f8 [ 1427.623313][ T501] [ 1428.200057][ T506] overlayfs: failed to resolve './file2': -2 [ 1428.237235][ T32] hid (null): invalid report_size 54881 [ 1428.407163][ T32] nintendo 0003:057E:200E.001E: unknown main item tag 0x2 [ 1428.407204][ T32] nintendo 0003:057E:200E.001E: unknown main item tag 0x6 [ 1428.407299][ T32] nintendo 0003:057E:200E.001E: ignoring exceeding usage max [ 1428.409296][ T32] nintendo 0003:057E:200E.001E: invalid report_size 54881 [ 1428.409323][ T32] nintendo 0003:057E:200E.001E: item 0 2 1 7 parsing failed [ 1428.410216][ T32] nintendo 0003:057E:200E.001E: HID parse failed [ 1428.531620][ T32] nintendo 0003:057E:200E.001E: probe - fail = -22 [ 1428.531759][ T32] nintendo 0003:057E:200E.001E: probe with driver nintendo failed with error -22 [ 1428.606804][ T5603] usb 7-1: USB disconnect, device number 24 [ 1428.709146][ T520] Invalid logical block size (8192) [ 1429.445400][ T5709] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1429.457052][T20077] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1429.560089][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1429.560122][ T539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1429.594839][ T5709] usb 7-1: Using ep0 maxpacket: 16 [ 1429.597392][ T5709] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1429.597425][ T5709] usb 7-1: config 0 has no interface number 0 [ 1429.597473][ T5709] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1429.597502][ T5709] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1429.601979][ T5709] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1429.602013][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.602036][ T5709] usb 7-1: Product: syz [ 1429.602052][ T5709] usb 7-1: Manufacturer: syz [ 1429.602068][ T5709] usb 7-1: SerialNumber: syz [ 1429.686804][T20077] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1429.686839][T20077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.686863][T20077] usb 6-1: Product: syz [ 1429.686880][T20077] usb 6-1: Manufacturer: syz [ 1429.686898][T20077] usb 6-1: SerialNumber: syz [ 1429.691116][ T5709] usb 7-1: config 0 descriptor?? [ 1429.692647][ T536] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1429.693495][ T536] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1429.775776][T20077] usb 6-1: config 0 descriptor?? [ 1429.975719][ T536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.000003][ T536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.022478][T20077] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1430.102248][ T536] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1430.102400][ T536] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1430.374849][ T5709] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1430.409918][ T5709] asix 7-1:0.34: probe with driver asix failed with error -71 [ 1430.500039][ T5709] usb 7-1: USB disconnect, device number 25 [ 1431.414457][ T569] loop8: detected capacity change from 0 to 7 [ 1431.470437][ T569] Dev loop8: unable to read RDB block 7 [ 1431.470483][ T569] loop8: unable to read partition table [ 1431.470698][ T569] loop8: partition table beyond EOD, truncated [ 1431.472085][ T569] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1431.526041][T20077] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1431.570952][T20077] usb 6-1: USB disconnect, device number 108 [ 1431.646425][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1431.751244][ T579] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 1431.812850][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1432.004423][ T32] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1432.077094][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8682'. [ 1432.155221][ T32] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.155281][ T32] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1432.155312][ T32] usb 7-1: config 2 interface 0 has no altsetting 0 [ 1432.160582][ T32] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1432.160613][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.160635][ T32] usb 7-1: Product: syz [ 1432.160651][ T32] usb 7-1: Manufacturer: syz [ 1432.160667][ T32] usb 7-1: SerialNumber: syz [ 1432.499332][ T32] ims_pcu 7-1:2.0: Zero length descriptor [ 1432.499400][ T32] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 1432.529288][ T32] usb 7-1: USB disconnect, device number 26 [ 1432.635552][ T592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1432.635589][ T592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1432.762440][ T5603] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1432.921477][ T5603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1432.934737][ T5603] usb 6-1: not running at top speed; connect to a high speed hub [ 1432.944873][ T5603] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 208, changing to 4 [ 1432.948102][ T5603] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1432.948135][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.948159][ T5603] usb 6-1: Product: syz [ 1432.948176][ T5603] usb 6-1: Manufacturer: syz [ 1432.948198][ T5603] usb 6-1: SerialNumber: syz [ 1433.303771][ T599] netlink: 'syz.6.8688': attribute type 4 has an invalid length. [ 1433.446519][ T5603] usb 6-1: USB disconnect, device number 109 [ 1433.602266][T20092] udevd[20092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.610099][ T603] loop8: detected capacity change from 0 to 8 [ 1433.638444][ T603] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1433.638474][ T603] loop8: partition table partially beyond EOD, truncated [ 1433.638736][ T603] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1433.738410][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1433.823783][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1433.891021][T20007] udevd[20007]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1434.081571][ T5603] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1434.245911][ T5603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.245941][ T5603] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1434.246007][ T5603] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1434.250011][ T5603] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1434.250043][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.250067][ T5603] usb 5-1: Product: syz [ 1434.250083][ T5603] usb 5-1: Manufacturer: syz [ 1434.250100][ T5603] usb 5-1: SerialNumber: syz [ 1434.372913][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.374018][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.400493][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.410194][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.065232][ T628] loop8: detected capacity change from 0 to 7 [ 1435.097240][ T628] Dev loop8: unable to read RDB block 7 [ 1435.097355][ T628] loop8: unable to read partition table [ 1435.097717][ T628] loop8: partition table beyond EOD, truncated [ 1435.097739][ T628] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1435.230561][ T627] Flush: task=syz.6.8699[627] dev=loop8 state=2 [ 1435.600960][ T627] Teardown: task=syz.6.8699[627] dev=loop8 state=2 [ 1436.028612][ T631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.046042][ T631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.034284][ T645] FAULT_INJECTION: forcing a failure. [ 1437.034284][ T645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.034327][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz.5.8704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1437.034359][ T645] Tainted: [L]=SOFTLOCKUP [ 1437.034367][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1437.034386][ T645] Call Trace: [ 1437.034395][ T645] [ 1437.034405][ T645] dump_stack_lvl+0xe8/0x150 [ 1437.034442][ T645] should_fail_ex+0x467/0x600 [ 1437.034484][ T645] _copy_to_user+0x31/0xb0 [ 1437.034514][ T645] video_usercopy+0xdf4/0x1430 [ 1437.034550][ T645] ? __pfx___video_do_ioctl+0x10/0x10 [ 1437.034579][ T645] ? __pfx_video_usercopy+0x10/0x10 [ 1437.034615][ T645] ? __fget_files+0x2a/0x420 [ 1437.034651][ T645] ? __fget_files+0x2a/0x420 [ 1437.034683][ T645] ? __fget_files+0x3a8/0x420 [ 1437.034722][ T645] v4l2_ioctl+0x190/0x1e0 [ 1437.034748][ T645] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1437.034771][ T645] __se_sys_ioctl+0xff/0x170 [ 1437.034798][ T645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.034823][ T645] do_syscall_64+0x174/0x580 [ 1437.034846][ T645] ? trace_irq_disable+0x3b/0x140 [ 1437.034868][ T645] ? clear_bhb_loop+0x40/0x90 [ 1437.034897][ T645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.034919][ T645] RIP: 0033:0x7f8ce9a1de59 [ 1437.034940][ T645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.034961][ T645] RSP: 002b:00007f8ce7c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.034986][ T645] RAX: ffffffffffffffda RBX: 00007f8ce9ca5fa0 RCX: 00007f8ce9a1de59 [ 1437.035003][ T645] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 1437.035019][ T645] RBP: 00007f8ce7c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.035033][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.035047][ T645] R13: 00007f8ce9ca6038 R14: 00007f8ce9ca5fa0 R15: 00007fff1e026288 [ 1437.035082][ T645] [ 1437.323262][ T649] openvswitch: netlink: IP tunnel dst address not specified [ 1437.412408][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.413198][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.497604][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.500643][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.553798][ T650] fuse: fd is not a fuse device [ 1437.688817][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.694148][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.752182][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.753031][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.186635][ T664] veth0_vlan: entered allmulticast mode [ 1439.426567][ T5603] usb 5-1: 0:2 : does not exist [ 1439.519954][ T663] vlan1: entered promiscuous mode [ 1439.520220][ T663] vlan1: entered allmulticast mode [ 1439.958840][ T5603] usb 5-1: USB disconnect, device number 31 [ 1440.169130][ T684] loop8: detected capacity change from 0 to 7 [ 1440.262709][ T684] Dev loop8: unable to read RDB block 7 [ 1440.262758][ T684] loop8: unable to read partition table [ 1440.262994][ T684] loop8: partition table beyond EOD, truncated [ 1440.263028][ T684] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1440.368298][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1440.538292][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1440.723324][ T694] overlayfs: conflicting options: userxattr,metacopy=on [ 1440.727357][ T693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.956295][ T697] netlink: 'syz.6.8719': attribute type 10 has an invalid length. [ 1440.956321][ T697] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8719'. [ 1441.044138][ T699] netlink: 'syz.5.8720': attribute type 4 has an invalid length. [ 1441.173859][ T703] loop8: detected capacity change from 0 to 8 [ 1441.181944][ T703] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1441.182025][ T703] loop8: partition table partially beyond EOD, truncated [ 1441.182705][ T703] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1441.231245][ T705] FAULT_INJECTION: forcing a failure. [ 1441.231245][ T705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.231284][ T705] CPU: 0 UID: 0 PID: 705 Comm: syz.6.8723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1441.231314][ T705] Tainted: [L]=SOFTLOCKUP [ 1441.231322][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1441.231336][ T705] Call Trace: [ 1441.231345][ T705] [ 1441.231355][ T705] dump_stack_lvl+0xe8/0x150 [ 1441.231391][ T705] should_fail_ex+0x467/0x600 [ 1441.231431][ T705] _copy_to_user+0x31/0xb0 [ 1441.231472][ T705] simple_read_from_buffer+0xe1/0x170 [ 1441.231512][ T705] proc_fail_nth_read+0x1be/0x230 [ 1441.231552][ T705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.231590][ T705] ? rw_verify_area+0x250/0x4d0 [ 1441.231617][ T705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.231651][ T705] vfs_read+0x219/0xa90 [ 1441.231682][ T705] ? __pfx_vfs_read+0x10/0x10 [ 1441.231708][ T705] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1441.231733][ T705] ? lockdep_hardirqs_on+0x7a/0x110 [ 1441.231757][ T705] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1441.231781][ T705] ? mutex_lock_nested+0x152/0x1d0 [ 1441.231810][ T705] ? fdget_pos+0x252/0x320 [ 1441.231852][ T705] ksys_read+0x156/0x270 [ 1441.231876][ T705] ? __pfx_ksys_read+0x10/0x10 [ 1441.231898][ T705] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1441.231929][ T705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.231955][ T705] do_syscall_64+0x174/0x580 [ 1441.231977][ T705] ? trace_irq_disable+0x3b/0x140 [ 1441.231999][ T705] ? clear_bhb_loop+0x40/0x90 [ 1441.232028][ T705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.232051][ T705] RIP: 0033:0x7fbbec6fe68e [ 1441.232072][ T705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1441.232093][ T705] RSP: 002b:00007fbbea995fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1441.232117][ T705] RAX: ffffffffffffffda RBX: 00007fbbea9966c0 RCX: 00007fbbec6fe68e [ 1441.232134][ T705] RDX: 000000000000000f RSI: 00007fbbea9960a0 RDI: 0000000000000004 [ 1441.232149][ T705] RBP: 00007fbbea996090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.232164][ T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.232178][ T705] R13: 00007fbbec9c6038 R14: 00007fbbec9c5fa0 R15: 00007ffc8339bc18 [ 1441.232213][ T705] [ 1441.513455][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1441.599195][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1441.770171][T20007] udevd[20007]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1441.902813][ T721] openvswitch: netlink: Message has -2 unknown bytes. [ 1441.902851][ T721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.928654][ T721] openvswitch: netlink: Message has -2 unknown bytes. [ 1441.928691][ T721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.967460][T20053] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1442.177042][T20053] usb 6-1: device descriptor read/64, error -71 [ 1442.455821][ T738] FAULT_INJECTION: forcing a failure. [ 1442.455821][ T738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1442.455867][ T738] CPU: 0 UID: 0 PID: 738 Comm: syz.6.8735 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1442.455898][ T738] Tainted: [L]=SOFTLOCKUP [ 1442.455908][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1442.455922][ T738] Call Trace: [ 1442.455931][ T738] [ 1442.455943][ T738] dump_stack_lvl+0xe8/0x150 [ 1442.455979][ T738] should_fail_ex+0x467/0x600 [ 1442.456019][ T738] prepare_alloc_pages+0x223/0x650 [ 1442.456061][ T738] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1442.456101][ T738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1442.456140][ T738] ? __pfx_policy_nodemask+0x10/0x10 [ 1442.456173][ T738] ? filemap_get_entry+0x374/0x3f0 [ 1442.456213][ T738] ? __pfx_filemap_get_entry+0x10/0x10 [ 1442.456249][ T738] alloc_pages_mpol+0xd4/0x280 [ 1442.456290][ T738] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1442.456339][ T738] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1442.456394][ T738] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1442.456421][ T738] ? __lock_acquire+0x6df/0x2e40 [ 1442.456448][ T738] ? __css_rstat_updated+0x235/0x540 [ 1442.456477][ T738] shmem_fault+0x170/0x380 [ 1442.456515][ T738] __do_fault+0x138/0x2a0 [ 1442.456551][ T738] do_pte_missing+0x659/0x28f0 [ 1442.456594][ T738] ? handle_mm_fault+0xe9/0x1520 [ 1442.456628][ T738] handle_mm_fault+0xe0b/0x1520 [ 1442.456665][ T738] ? handle_mm_fault+0xe9/0x1520 [ 1442.456696][ T738] ? __pfx_handle_mm_fault+0x10/0x10 [ 1442.456728][ T738] ? follow_page_pte+0xaf1/0xe80 [ 1442.456766][ T738] ? __pfx_follow_page_pte+0x10/0x10 [ 1442.456806][ T738] __get_user_pages+0x166b/0x2590 [ 1442.456868][ T738] __gup_longterm_locked+0x7d2/0x15c0 [ 1442.456922][ T738] gup_fast_fallback+0x1cf7/0x2040 [ 1442.456979][ T738] ? io_pin_pages+0xac/0x1a0 [ 1442.457017][ T738] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1442.457045][ T738] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1442.457080][ T738] ? is_valid_gup_args+0x11f/0x200 [ 1442.457110][ T738] ? pin_user_pages_fast+0x4d/0xb0 [ 1442.457143][ T738] io_pin_pages+0xc7/0x1a0 [ 1442.457181][ T738] io_region_pin_pages+0x7d/0x190 [ 1442.457208][ T738] io_create_region+0x388/0x490 [ 1442.457252][ T738] io_allocate_scq_urings+0x1f4/0x7f0 [ 1442.457280][ T738] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1442.457319][ T738] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1442.457350][ T738] ? bpf_lsm_capable+0x9/0x20 [ 1442.457371][ T738] ? security_capable+0x74/0x280 [ 1442.457431][ T738] io_uring_create+0x46c/0x990 [ 1442.457461][ T738] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1442.457489][ T738] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1442.457523][ T738] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1442.457568][ T738] ? __pfx_ksys_write+0x10/0x10 [ 1442.457601][ T738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.457627][ T738] do_syscall_64+0x174/0x580 [ 1442.457650][ T738] ? trace_irq_disable+0x3b/0x140 [ 1442.457671][ T738] ? clear_bhb_loop+0x40/0x90 [ 1442.457700][ T738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.457723][ T738] RIP: 0033:0x7fbbec73de59 [ 1442.457745][ T738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.457766][ T738] RSP: 002b:00007fbbea995fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1442.457790][ T738] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fbbec73de59 [ 1442.457808][ T738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1442.457824][ T738] RBP: 00007fbbea996090 R08: 0000000000000000 R09: 0000000000000101 [ 1442.457839][ T738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1442.457853][ T738] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc8339bc18 [ 1442.457887][ T738] [ 1442.496868][T20053] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1442.651562][T20053] usb 6-1: device descriptor read/64, error -71 [ 1442.776870][T20053] usb usb6-port1: attempt power cycle [ 1443.024439][ T743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8736'. [ 1443.226058][ T752] FAULT_INJECTION: forcing a failure. [ 1443.226058][ T752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1443.226104][ T752] CPU: 0 UID: 0 PID: 752 Comm: syz.4.8741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1443.226135][ T752] Tainted: [L]=SOFTLOCKUP [ 1443.226143][ T752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1443.226158][ T752] Call Trace: [ 1443.226167][ T752] [ 1443.226178][ T752] dump_stack_lvl+0xe8/0x150 [ 1443.226215][ T752] should_fail_ex+0x467/0x600 [ 1443.226259][ T752] prepare_alloc_pages+0x223/0x650 [ 1443.226301][ T752] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1443.226340][ T752] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1443.226379][ T752] ? __pfx_policy_nodemask+0x10/0x10 [ 1443.226412][ T752] ? filemap_get_entry+0x374/0x3f0 [ 1443.226448][ T752] ? __pfx_filemap_get_entry+0x10/0x10 [ 1443.226483][ T752] alloc_pages_mpol+0xd4/0x280 [ 1443.226522][ T752] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1443.226562][ T752] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1443.226617][ T752] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1443.226645][ T752] ? __lock_acquire+0x6df/0x2e40 [ 1443.226673][ T752] ? __css_rstat_updated+0x235/0x540 [ 1443.226701][ T752] shmem_fault+0x170/0x380 [ 1443.226748][ T752] __do_fault+0x138/0x2a0 [ 1443.226787][ T752] do_pte_missing+0x659/0x28f0 [ 1443.226830][ T752] ? handle_mm_fault+0xe9/0x1520 [ 1443.226865][ T752] handle_mm_fault+0xe0b/0x1520 [ 1443.226901][ T752] ? handle_mm_fault+0xe9/0x1520 [ 1443.226935][ T752] ? __pfx_handle_mm_fault+0x10/0x10 [ 1443.226967][ T752] ? follow_page_pte+0xaf1/0xe80 [ 1443.227008][ T752] ? __pfx_follow_page_pte+0x10/0x10 [ 1443.227050][ T752] __get_user_pages+0x166b/0x2590 [ 1443.227112][ T752] __gup_longterm_locked+0x7d2/0x15c0 [ 1443.227165][ T752] gup_fast_fallback+0x1cf7/0x2040 [ 1443.227222][ T752] ? io_pin_pages+0xac/0x1a0 [ 1443.227260][ T752] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1443.227289][ T752] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1443.227325][ T752] ? is_valid_gup_args+0x11f/0x200 [ 1443.227357][ T752] ? pin_user_pages_fast+0x4d/0xb0 [ 1443.227389][ T752] io_pin_pages+0xc7/0x1a0 [ 1443.227450][ T752] io_region_pin_pages+0x7d/0x190 [ 1443.227478][ T752] io_create_region+0x388/0x490 [ 1443.227521][ T752] io_allocate_scq_urings+0x1f4/0x7f0 [ 1443.227548][ T752] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 1443.227579][ T752] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1443.227611][ T752] ? bpf_lsm_capable+0x9/0x20 [ 1443.227634][ T752] ? security_capable+0x74/0x280 [ 1443.227678][ T752] io_uring_create+0x46c/0x990 [ 1443.227715][ T752] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1443.227743][ T752] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1443.227775][ T752] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1443.227819][ T752] ? __pfx_ksys_write+0x10/0x10 [ 1443.227852][ T752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.227878][ T752] do_syscall_64+0x174/0x580 [ 1443.227901][ T752] ? trace_irq_disable+0x3b/0x140 [ 1443.227922][ T752] ? clear_bhb_loop+0x40/0x90 [ 1443.227951][ T752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.227975][ T752] RIP: 0033:0x7f63a476de59 [ 1443.227998][ T752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.228018][ T752] RSP: 002b:00007f63a29c5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1443.228043][ T752] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f63a476de59 [ 1443.228060][ T752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1443.228075][ T752] RBP: 00007f63a29c6090 R08: 0000000000000000 R09: 0000000000000101 [ 1443.228090][ T752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1443.228104][ T752] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffba8aa7a8 [ 1443.228138][ T752] [ 1443.229365][T20053] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1443.438849][T20053] usb 6-1: device descriptor read/8, error -71 [ 1443.817765][T20053] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1443.836736][T20053] usb 6-1: device descriptor read/8, error -71 [ 1443.988779][T20053] usb usb6-port1: unable to enumerate USB device [ 1444.077918][ T756] loop8: detected capacity change from 0 to 7 [ 1444.103662][ T756] Dev loop8: unable to read RDB block 7 [ 1444.103711][ T756] loop8: unable to read partition table [ 1444.103932][ T756] loop8: partition table beyond EOD, truncated [ 1444.103953][ T756] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1444.199264][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1444.349320][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1444.511307][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8747'. [ 1444.543621][ T764] loop8: detected capacity change from 0 to 7 [ 1444.555999][ T764] Dev loop8: unable to read RDB block 7 [ 1444.556045][ T764] loop8: unable to read partition table [ 1444.556271][ T764] loop8: partition table beyond EOD, truncated [ 1444.556292][ T764] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1444.603455][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1444.630617][ T766] Invalid logical block size (8192) [ 1444.697007][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1444.909395][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1445.229677][ T792] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8754'. [ 1445.655737][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 1445.728335][ T809] FAULT_INJECTION: forcing a failure. [ 1445.728335][ T809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1445.728375][ T809] CPU: 1 UID: 0 PID: 809 Comm: syz.5.8761 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1445.728402][ T809] Tainted: [L]=SOFTLOCKUP [ 1445.728409][ T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1445.728422][ T809] Call Trace: [ 1445.728430][ T809] [ 1445.728439][ T809] dump_stack_lvl+0xe8/0x150 [ 1445.728472][ T809] should_fail_ex+0x467/0x600 [ 1445.728506][ T809] prepare_alloc_pages+0x223/0x650 [ 1445.728541][ T809] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1445.728576][ T809] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1445.728624][ T809] ? __pfx_policy_nodemask+0x10/0x10 [ 1445.728651][ T809] ? filemap_get_entry+0x374/0x3f0 [ 1445.728680][ T809] ? __pfx_filemap_get_entry+0x10/0x10 [ 1445.728708][ T809] alloc_pages_mpol+0xd4/0x280 [ 1445.728741][ T809] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1445.728773][ T809] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1445.728817][ T809] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1445.728838][ T809] ? __lock_acquire+0x6df/0x2e40 [ 1445.728860][ T809] ? __css_rstat_updated+0x235/0x540 [ 1445.728884][ T809] shmem_fault+0x170/0x380 [ 1445.728918][ T809] __do_fault+0x138/0x2a0 [ 1445.728950][ T809] do_pte_missing+0x659/0x28f0 [ 1445.728986][ T809] ? handle_mm_fault+0xe9/0x1520 [ 1445.729017][ T809] handle_mm_fault+0xe0b/0x1520 [ 1445.729050][ T809] ? handle_mm_fault+0xe9/0x1520 [ 1445.729081][ T809] ? __pfx_handle_mm_fault+0x10/0x10 [ 1445.729112][ T809] ? follow_page_pte+0xaf1/0xe80 [ 1445.729148][ T809] ? __pfx_follow_page_pte+0x10/0x10 [ 1445.729181][ T809] __get_user_pages+0x166b/0x2590 [ 1445.729228][ T809] __gup_longterm_locked+0x7d2/0x15c0 [ 1445.729272][ T809] gup_fast_fallback+0x1cf7/0x2040 [ 1445.729317][ T809] ? io_pin_pages+0xac/0x1a0 [ 1445.729350][ T809] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1445.729375][ T809] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1445.729406][ T809] ? is_valid_gup_args+0x11f/0x200 [ 1445.729432][ T809] ? pin_user_pages_fast+0x4d/0xb0 [ 1445.729458][ T809] io_pin_pages+0xc7/0x1a0 [ 1445.729489][ T809] io_region_pin_pages+0x7d/0x190 [ 1445.729511][ T809] io_create_region+0x388/0x490 [ 1445.729548][ T809] io_allocate_scq_urings+0x1f4/0x7f0 [ 1445.729571][ T809] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1445.729608][ T809] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1445.729636][ T809] ? bpf_lsm_capable+0x9/0x20 [ 1445.729656][ T809] ? security_capable+0x74/0x280 [ 1445.729695][ T809] io_uring_create+0x46c/0x990 [ 1445.729723][ T809] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1445.729748][ T809] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1445.729777][ T809] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1445.729813][ T809] ? __pfx_ksys_write+0x10/0x10 [ 1445.729842][ T809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.729862][ T809] do_syscall_64+0x174/0x580 [ 1445.729882][ T809] ? trace_irq_disable+0x3b/0x140 [ 1445.729900][ T809] ? clear_bhb_loop+0x40/0x90 [ 1445.729924][ T809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.729944][ T809] RIP: 0033:0x7f8ce9a1de59 [ 1445.729967][ T809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.729986][ T809] RSP: 002b:00007f8ce7c75fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1445.730006][ T809] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f8ce9a1de59 [ 1445.730020][ T809] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1445.730032][ T809] RBP: 00007f8ce7c76090 R08: 0000000000000000 R09: 0000000000000101 [ 1445.730044][ T809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1445.730054][ T809] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff1e026288 [ 1445.730081][ T809] [ 1446.042077][ T5603] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1446.297129][ T5603] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1446.297167][ T5603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1446.297195][ T5603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1446.297221][ T5603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1446.462930][ T5603] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1446.462966][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.462989][ T5603] usb 5-1: Product: syz [ 1446.463005][ T5603] usb 5-1: Manufacturer: syz [ 1446.463031][ T5603] usb 5-1: SerialNumber: syz [ 1446.505246][ T5603] usb 5-1: config 0 descriptor?? [ 1446.682261][ T814] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8763'. [ 1446.682313][ T814] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8763'. [ 1446.682326][ T814] netlink: 'syz.0.8763': attribute type 1 has an invalid length. [ 1446.864438][ T5603] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1447.014828][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 1447.017305][ T5603] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1447.017348][ T5603] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1447.017387][ T5603] usb 6-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 1447.017417][ T5603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.052010][ T5603] usb 6-1: config 0 descriptor?? [ 1447.369342][ T832] nfs: Unknown parameter 'ip6gre0' [ 1447.470570][ T5792] usb 5-1: USB disconnect, device number 32 [ 1447.646207][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x2 [ 1447.646247][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x6 [ 1447.646276][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.646305][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.647385][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1447.665273][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.665598][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.665681][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.665762][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.665845][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.665918][ T5603] ntrig 0003:1B96:0001.001F: unknown main item tag 0x0 [ 1447.666179][ T5603] ntrig 0003:1B96:0001.001F: collection stack underflow [ 1447.666251][ T5603] ntrig 0003:1B96:0001.001F: item 0 4 0 12 parsing failed [ 1447.801369][ T839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.813220][ T839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.831137][ T5603] ntrig 0003:1B96:0001.001F: parse failed [ 1447.831360][ T5603] ntrig 0003:1B96:0001.001F: probe with driver ntrig failed with error -22 [ 1448.003977][ T5792] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1448.167790][ T5792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1448.169023][ T5792] usb 5-1: config 64 has an invalid interface number: 155 but max is 0 [ 1448.169053][ T5792] usb 5-1: config 64 has no interface number 0 [ 1448.169100][ T5792] usb 5-1: config 64 interface 155 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1448.169131][ T5792] usb 5-1: config 64 interface 155 has no altsetting 0 [ 1448.171689][ T5792] usb 5-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.52 [ 1448.171720][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.171743][ T5792] usb 5-1: Product: ⠉ [ 1448.171761][ T5792] usb 5-1: Manufacturer: 뾀쑊臷╣摲橅슼돰海㏗劆ꖫ値Ὰ礦Ұ䕺姖ࠀⲘ鉃䗹旉჉ [ 1448.171783][ T5792] usb 5-1: SerialNumber: ж [ 1448.268040][ T844] tipc: Invalid UDP bearer configuration [ 1448.268090][ T844] tipc: Enabling of bearer rejected, failed to enable media [ 1448.438678][ T836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.440531][ T836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.514891][ T836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.516896][ T836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.541742][T32182] Bluetooth: hci0: command 0x0406 tx timeout [ 1448.560450][ T811] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1448.574003][ T5792] ums-cypress 5-1:64.155: USB Mass Storage device detected [ 1448.578794][T20077] usb 6-1: USB disconnect, device number 114 [ 1448.894810][ T5792] usb 5-1: USB disconnect, device number 33 [ 1449.129667][ T860] loop8: detected capacity change from 0 to 7 [ 1449.139728][ T860] Dev loop8: unable to read RDB block 7 [ 1449.139842][ T860] loop8: unable to read partition table [ 1449.140731][ T860] loop8: partition table beyond EOD, truncated [ 1449.140842][ T860] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1449.222008][T20007] Flush: task=udevd[20007] dev=loop8 state=2 [ 1449.328024][ T867] netlink: 'syz.4.8780': attribute type 10 has an invalid length. [ 1449.329576][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.361541][ T856] XFS (nullb0): Invalid superblock magic number [ 1449.385782][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.405011][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.405307][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.405843][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.406018][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.444890][ T867] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1449.523289][T20007] Teardown: task=udevd[20007] dev=loop8 state=2 [ 1449.805344][ T874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8782'. [ 1449.949798][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.950416][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.647134][ T893] netlink: 'syz.0.8789': attribute type 3 has an invalid length. [ 1450.647881][ T893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8789'. [ 1450.647909][ T893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8789'. [ 1450.826170][ T5603] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1451.022238][ T5603] usb 7-1: Using ep0 maxpacket: 32 [ 1451.041239][ T5603] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 1451.041271][ T5603] usb 7-1: config 2 has no interface number 0 [ 1451.041317][ T5603] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1451.041347][ T5603] usb 7-1: config 2 interface 88 has no altsetting 0 [ 1451.047232][ T5603] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1451.047359][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1451.047421][ T5603] usb 7-1: Product: syz [ 1451.047463][ T5603] usb 7-1: Manufacturer: syz [ 1451.047506][ T5603] usb 7-1: SerialNumber: syz [ 1451.083220][ T890] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1451.123022][ T898] netlink: 'syz.5.8791': attribute type 3 has an invalid length. [ 1451.123080][ T898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8791'. [ 1451.279266][ T904] loop8: detected capacity change from 0 to 8 [ 1451.300664][ T887] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1451.312746][ T904] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1451.312774][ T904] loop8: partition table partially beyond EOD, truncated [ 1451.313510][ T904] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1451.410653][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1451.481839][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1451.499908][ T908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8795'. [ 1451.533811][T32182] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1451.740340][ T5603] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1451.740601][ T5603] asix 7-1:2.88: probe with driver asix failed with error -71 [ 1451.808490][ T5603] usb 7-1: USB disconnect, device number 27 [ 1451.900247][T20341] udevd[20341]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1452.013348][ T915] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1452.070929][ T915] bridge0: port 3(syz_tun) entered blocking state [ 1452.090430][ T915] bridge0: port 3(syz_tun) entered disabled state [ 1452.090766][ T915] syz_tun: entered allmulticast mode [ 1452.114221][ T916] netlink: 'syz.4.8797': attribute type 10 has an invalid length. [ 1452.129461][ T915] syz_tun: entered promiscuous mode [ 1452.196858][ T915] bridge0: port 3(syz_tun) entered blocking state [ 1452.197017][ T915] bridge0: port 3(syz_tun) entered forwarding state [ 1452.254947][ T916] bridge0: port 3(syz_tun) entered disabled state [ 1452.255236][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.255474][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.411599][T20077] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1452.571212][T20077] usb 5-1: Using ep0 maxpacket: 8 [ 1452.601401][T20077] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1452.601433][T20077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1452.601454][T20077] usb 5-1: Product: syz [ 1452.601470][T20077] usb 5-1: Manufacturer: syz [ 1452.601485][T20077] usb 5-1: SerialNumber: syz [ 1452.660085][T20077] usb 5-1: config 0 descriptor?? [ 1452.687927][T20077] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1453.026071][ T931] autofs4:pid:931:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1453.158885][T20077] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1453.158987][T20077] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 1453.305888][T20077] usb 5-1: USB disconnect, device number 34 [ 1453.511076][ T940] binfmt_misc: register: failed to install interpreter file ./file0 [ 1453.582917][ T943] Invalid logical block size (8192) [ 1453.982895][ T960] FAULT_INJECTION: forcing a failure. [ 1453.982895][ T960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.982937][ T960] CPU: 1 UID: 0 PID: 960 Comm: syz.4.8809 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1453.982967][ T960] Tainted: [L]=SOFTLOCKUP [ 1453.982975][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1453.982989][ T960] Call Trace: [ 1453.982998][ T960] [ 1453.983008][ T960] dump_stack_lvl+0xe8/0x150 [ 1453.983044][ T960] should_fail_ex+0x467/0x600 [ 1453.983085][ T960] _copy_from_user+0x2d/0xb0 [ 1453.983114][ T960] mptcp_setsockopt+0x208b/0x3570 [ 1453.983148][ T960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1453.983180][ T960] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1453.983220][ T960] ? __fget_files+0x2a/0x420 [ 1453.983259][ T960] ? sock_common_setsockopt+0x36/0xc0 [ 1453.983288][ T960] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1453.983321][ T960] do_sock_setsockopt+0x17c/0x1b0 [ 1453.983360][ T960] __x64_sys_setsockopt+0x143/0x1b0 [ 1453.983407][ T960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.983433][ T960] do_syscall_64+0x174/0x580 [ 1453.983456][ T960] ? trace_irq_disable+0x3b/0x140 [ 1453.983478][ T960] ? clear_bhb_loop+0x40/0x90 [ 1453.983506][ T960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.983528][ T960] RIP: 0033:0x7f63a476de59 [ 1453.983549][ T960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.983570][ T960] RSP: 002b:00007f63a29c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1453.983594][ T960] RAX: ffffffffffffffda RBX: 00007f63a49f5fa0 RCX: 00007f63a476de59 [ 1453.983611][ T960] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 1453.983625][ T960] RBP: 00007f63a29c6090 R08: 0000000000000004 R09: 0000000000000000 [ 1453.983639][ T960] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.983655][ T960] R13: 00007f63a49f6038 R14: 00007f63a49f5fa0 R15: 00007fffba8aa7a8 [ 1453.983690][ T960] [ 1454.140011][ T957] sg_write: data in/out 176517/136 bytes for SCSI command 0x0-- guessing data in; [ 1454.140011][ T957] program syz.6.8807 not setting count and/or reply_len properly [ 1454.590103][ T5792] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1454.752131][ T5792] usb 6-1: config 50 has an invalid descriptor of length 200, skipping remainder of the config [ 1454.752164][ T5792] usb 6-1: config 50 has 0 interfaces, different from the descriptor's value: 1 [ 1454.752204][ T5792] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1454.752231][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.916751][ T983] FAULT_INJECTION: forcing a failure. [ 1454.916751][ T983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1454.916790][ T983] CPU: 0 UID: 0 PID: 983 Comm: syz.0.8816 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1454.916817][ T983] Tainted: [L]=SOFTLOCKUP [ 1454.916824][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1454.916835][ T983] Call Trace: [ 1454.916843][ T983] [ 1454.916850][ T983] dump_stack_lvl+0xe8/0x150 [ 1454.916882][ T983] should_fail_ex+0x467/0x600 [ 1454.916916][ T983] prepare_alloc_pages+0x223/0x650 [ 1454.916950][ T983] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1454.916982][ T983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1454.917015][ T983] ? __pfx_policy_nodemask+0x10/0x10 [ 1454.917041][ T983] ? filemap_get_entry+0x374/0x3f0 [ 1454.917071][ T983] ? __pfx_filemap_get_entry+0x10/0x10 [ 1454.917099][ T983] alloc_pages_mpol+0xd4/0x280 [ 1454.917132][ T983] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1454.917164][ T983] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1454.917208][ T983] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1454.917230][ T983] ? __lock_acquire+0x6df/0x2e40 [ 1454.917253][ T983] ? __css_rstat_updated+0x235/0x540 [ 1454.917276][ T983] shmem_fault+0x170/0x380 [ 1454.917308][ T983] __do_fault+0x138/0x2a0 [ 1454.917339][ T983] do_pte_missing+0x659/0x28f0 [ 1454.917375][ T983] ? handle_mm_fault+0xe9/0x1520 [ 1454.917404][ T983] handle_mm_fault+0xe0b/0x1520 [ 1454.917435][ T983] ? handle_mm_fault+0xe9/0x1520 [ 1454.917464][ T983] ? __pfx_handle_mm_fault+0x10/0x10 [ 1454.917491][ T983] ? follow_page_pte+0xaf1/0xe80 [ 1454.917525][ T983] ? __pfx_follow_page_pte+0x10/0x10 [ 1454.917559][ T983] __get_user_pages+0x166b/0x2590 [ 1454.917607][ T983] __gup_longterm_locked+0x7d2/0x15c0 [ 1454.917651][ T983] gup_fast_fallback+0x1cf7/0x2040 [ 1454.917696][ T983] ? io_pin_pages+0xac/0x1a0 [ 1454.917729][ T983] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1454.917762][ T983] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1454.917792][ T983] ? is_valid_gup_args+0x11f/0x200 [ 1454.917817][ T983] ? pin_user_pages_fast+0x4d/0xb0 [ 1454.917844][ T983] io_pin_pages+0xc7/0x1a0 [ 1454.917874][ T983] io_region_pin_pages+0x7d/0x190 [ 1454.917898][ T983] io_create_region+0x388/0x490 [ 1454.917938][ T983] io_allocate_scq_urings+0x1f4/0x7f0 [ 1454.917959][ T983] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1454.917985][ T983] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1454.918010][ T983] ? bpf_lsm_capable+0x9/0x20 [ 1454.918027][ T983] ? security_capable+0x74/0x280 [ 1454.918062][ T983] io_uring_create+0x46c/0x990 [ 1454.918086][ T983] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1454.918108][ T983] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1454.918135][ T983] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1454.918169][ T983] ? __pfx_ksys_write+0x10/0x10 [ 1454.918195][ T983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.918215][ T983] do_syscall_64+0x174/0x580 [ 1454.918234][ T983] ? trace_irq_disable+0x3b/0x140 [ 1454.918253][ T983] ? clear_bhb_loop+0x40/0x90 [ 1454.918276][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.918295][ T983] RIP: 0033:0x7ff1b66fde59 [ 1454.918315][ T983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.918332][ T983] RSP: 002b:00007ff1b4955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1454.918352][ T983] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff1b66fde59 [ 1454.918366][ T983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1454.918378][ T983] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000101 [ 1454.918390][ T983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1454.918401][ T983] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeabd857f8 [ 1454.918428][ T983] [ 1455.090078][T20077] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1455.455789][ T5792] usb 6-1: string descriptor 0 read error: -71 [ 1455.472054][ T5792] usb 6-1: USB disconnect, device number 115 [ 1455.569727][T32182] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1455.606459][T32182] Bluetooth: hci2: Injecting HCI hardware error event [ 1455.635876][ T5609] Bluetooth: hci2: hardware error 0x00 [ 1455.755617][ T986] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1455.793794][ T989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8818'. [ 1455.793825][ T989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8818'. [ 1457.619548][ T1013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.622706][ T1013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.448012][ T5609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1458.457997][ T5603] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1458.613464][ T5603] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1458.624849][ T5603] usb 5-1: config 64 has an invalid interface number: 155 but max is 0 [ 1458.624883][ T5603] usb 5-1: config 64 has no interface number 0 [ 1458.624931][ T5603] usb 5-1: config 64 interface 155 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1458.624963][ T5603] usb 5-1: config 64 interface 155 has no altsetting 0 [ 1458.678306][ T5603] usb 5-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.52 [ 1458.678341][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.678364][ T5603] usb 5-1: Product: ⠉ [ 1458.678380][ T5603] usb 5-1: Manufacturer: 뾀쑊臷╣摲橅슼돰海㏗劆ꖫ値Ὰ礦Ұ䕺姖ࠀⲘ鉃䗹旉჉ [ 1458.678403][ T5603] usb 5-1: SerialNumber: ж [ 1459.057903][ T1032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.059402][ T1032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.116102][ T5603] ums-cypress 5-1:64.155: USB Mass Storage device detected [ 1459.468891][ T5603] usb 5-1: USB disconnect, device number 35 [ 1460.159520][ T1052] FAULT_INJECTION: forcing a failure. [ 1460.159520][ T1052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1460.159562][ T1052] CPU: 0 UID: 0 PID: 1052 Comm: syz.4.8834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1460.159592][ T1052] Tainted: [L]=SOFTLOCKUP [ 1460.159601][ T1052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1460.159616][ T1052] Call Trace: [ 1460.159624][ T1052] [ 1460.159635][ T1052] dump_stack_lvl+0xe8/0x150 [ 1460.159671][ T1052] should_fail_ex+0x467/0x600 [ 1460.159715][ T1052] prepare_alloc_pages+0x223/0x650 [ 1460.159756][ T1052] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1460.159797][ T1052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1460.159836][ T1052] ? __pfx_policy_nodemask+0x10/0x10 [ 1460.159869][ T1052] ? filemap_get_entry+0x374/0x3f0 [ 1460.159913][ T1052] ? __pfx_filemap_get_entry+0x10/0x10 [ 1460.159950][ T1052] alloc_pages_mpol+0xd4/0x280 [ 1460.159991][ T1052] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1460.160030][ T1052] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1460.160083][ T1052] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1460.160111][ T1052] ? __lock_acquire+0x6df/0x2e40 [ 1460.160137][ T1052] ? __css_rstat_updated+0x235/0x540 [ 1460.160164][ T1052] shmem_fault+0x170/0x380 [ 1460.160202][ T1052] __do_fault+0x138/0x2a0 [ 1460.160239][ T1052] do_pte_missing+0x659/0x28f0 [ 1460.160283][ T1052] ? handle_mm_fault+0xe9/0x1520 [ 1460.160316][ T1052] handle_mm_fault+0xe0b/0x1520 [ 1460.160353][ T1052] ? handle_mm_fault+0xe9/0x1520 [ 1460.160391][ T1052] ? __pfx_handle_mm_fault+0x10/0x10 [ 1460.160423][ T1052] ? follow_page_pte+0xaf1/0xe80 [ 1460.160464][ T1052] ? __pfx_follow_page_pte+0x10/0x10 [ 1460.160506][ T1052] __get_user_pages+0x166b/0x2590 [ 1460.160566][ T1052] __gup_longterm_locked+0x7d2/0x15c0 [ 1460.160621][ T1052] gup_fast_fallback+0x1cf7/0x2040 [ 1460.160680][ T1052] ? io_pin_pages+0xac/0x1a0 [ 1460.160719][ T1052] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1460.160749][ T1052] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1460.160785][ T1052] ? is_valid_gup_args+0x11f/0x200 [ 1460.160839][ T1052] ? pin_user_pages_fast+0x4d/0xb0 [ 1460.160872][ T1052] io_pin_pages+0xc7/0x1a0 [ 1460.160917][ T1052] io_region_pin_pages+0x7d/0x190 [ 1460.160946][ T1052] io_create_region+0x388/0x490 [ 1460.160990][ T1052] io_allocate_scq_urings+0x1f4/0x7f0 [ 1460.161018][ T1052] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1460.161051][ T1052] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1460.161083][ T1052] ? bpf_lsm_capable+0x9/0x20 [ 1460.161106][ T1052] ? security_capable+0x74/0x280 [ 1460.161150][ T1052] io_uring_create+0x46c/0x990 [ 1460.161179][ T1052] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1460.161208][ T1052] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1460.161242][ T1052] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1460.161286][ T1052] ? __pfx_ksys_write+0x10/0x10 [ 1460.161321][ T1052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.161347][ T1052] do_syscall_64+0x174/0x580 [ 1460.161369][ T1052] ? trace_irq_disable+0x3b/0x140 [ 1460.161392][ T1052] ? clear_bhb_loop+0x40/0x90 [ 1460.161422][ T1052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.161445][ T1052] RIP: 0033:0x7f63a476de59 [ 1460.161468][ T1052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.161489][ T1052] RSP: 002b:00007f63a29c5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1460.161513][ T1052] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f63a476de59 [ 1460.161530][ T1052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1460.161545][ T1052] RBP: 00007f63a29c6090 R08: 0000000000000000 R09: 0000000000000101 [ 1460.161559][ T1052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1460.161572][ T1052] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffba8aa7a8 [ 1460.161606][ T1052] [ 1460.902026][ T1056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8835'. [ 1460.932960][ T1054] Invalid logical block size (8192) [ 1461.175378][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8839'. [ 1461.678138][ T5586] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1461.748634][ T1075] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1461.898433][ T5586] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1461.898466][ T5586] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1461.898489][ T5586] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1461.898512][ T5586] usb 6-1: config 250 has no interface number 0 [ 1461.898562][ T5586] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 1461.898593][ T5586] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1461.898619][ T5586] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1461.898649][ T5586] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1461.900440][ T5586] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1461.900470][ T5586] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1461.900494][ T5586] usb 6-1: Product: syz [ 1461.900511][ T5586] usb 6-1: SerialNumber: syz [ 1461.963334][ T5586] hub 6-1:250.228: bad descriptor, ignoring hub [ 1461.963465][ T5586] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1462.290424][ T5586] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 116 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1462.436013][ T5792] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1462.468986][ T5586] usb 6-1: USB disconnect, device number 116 [ 1462.479561][ T5586] usblp0: removed [ 1462.585696][ T5792] usb 5-1: Using ep0 maxpacket: 16 [ 1462.596845][ T5792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.596905][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.596935][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1462.596959][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.606485][ T5792] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1462.606580][ T5792] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1462.606651][ T5792] usb 5-1: Manufacturer: syz [ 1462.688277][ T5792] usb 5-1: config 0 descriptor?? [ 1462.914310][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.914952][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.958210][ T1101] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8849'. [ 1462.958285][ T1101] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8849'. [ 1462.958304][ T1101] netlink: 'syz.6.8849': attribute type 1 has an invalid length. [ 1462.962239][ T1094] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1463.261978][ T1113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.270174][ T1113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.306709][ T1113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.310093][ T1113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.360899][T20053] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1463.482212][ T1118] Bluetooth: MGMT ver 1.23 [ 1463.535128][T20053] usb 6-1: Using ep0 maxpacket: 16 [ 1463.538726][T20053] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1463.538759][T20053] usb 6-1: config 251 has no interface number 0 [ 1463.538795][T20053] usb 6-1: too many endpoints for config 251 interface 202 altsetting 1: 165, using maximum allowed: 30 [ 1463.538850][T20053] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid maxpacket 2048, setting to 1024 [ 1463.538881][T20053] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1463.538909][T20053] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1463.539158][T20053] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1463.539190][T20053] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1463.539220][T20053] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.539245][T20053] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1463.539271][T20053] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 165 [ 1463.539384][T20053] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1463.542062][T20053] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1463.542096][T20053] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1463.542119][T20053] usb 6-1: Product: syz [ 1463.542136][T20053] usb 6-1: SerialNumber: syz [ 1463.917850][ T1108] netlink: 'syz.5.8852': attribute type 28 has an invalid length. [ 1464.178414][T20053] cxacru 6-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1464.193297][ T1127] cxacru 6-1:251.202: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1464.193342][ T1127] cxacru 6-1:251.202: Falling back to sysfs fallback for: cxacru-fw.bin [ 1464.287733][T20053] usb 6-1: USB disconnect, device number 117 [ 1465.169069][T20077] usb 5-1: USB disconnect, device number 36 [ 1465.598673][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8862'. [ 1465.613708][ T5709] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1465.783874][ T5709] usb 7-1: Using ep0 maxpacket: 16 [ 1465.786859][ T5709] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1465.786888][ T5709] usb 7-1: config 0 has no interface number 0 [ 1465.786947][ T5709] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1465.786977][ T5709] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1465.790961][ T5709] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1465.790994][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.791018][ T5709] usb 7-1: Product: syz [ 1465.791035][ T5709] usb 7-1: Manufacturer: syz [ 1465.791052][ T5709] usb 7-1: SerialNumber: syz [ 1465.880799][ T5709] usb 7-1: config 0 descriptor?? [ 1465.881668][ T1140] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1465.881801][ T1140] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1466.113715][ T1137] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1466.113864][ T1137] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1466.334266][ T5709] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1466.572470][ T5709] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1466.572505][ T5709] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1466.572956][ T5709] asix 7-1:0.34: probe with driver asix failed with error -61 [ 1466.675032][ T1159] Invalid logical block size (8192) [ 1466.845179][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.847963][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.936484][ T5709] usb 7-1: USB disconnect, device number 29 [ 1467.383105][ T5709] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1467.546986][ T5709] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1467.547018][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.547040][ T5709] usb 5-1: config 0 has no interface number 0 [ 1467.547089][ T5709] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1467.547119][ T5709] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1467.547144][ T5709] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1467.547174][ T5709] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1467.547211][ T5709] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1467.547237][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.641153][ T5709] usb 5-1: config 0 descriptor?? [ 1467.666741][ T1172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8873'. [ 1467.702884][ T5709] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1467.703291][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 1467.731304][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1467.731397][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1467.748833][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1467.748911][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1467.748980][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1467.749049][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1467.791565][ T5709] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1467.803591][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1467.803670][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1467.803748][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1467.803832][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1467.803899][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1467.803969][ T5709] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1467.879915][ T5709] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1467.922723][ T5586] usb 5-1: USB disconnect, device number 37 [ 1468.016584][ T1172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8873'. [ 1468.119840][ T1174] loop8: detected capacity change from 0 to 7 [ 1468.120939][ T1174] Dev loop8: unable to read RDB block 7 [ 1468.120983][ T1174] loop8: unable to read partition table [ 1468.121222][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8875'. [ 1468.121260][ T1177] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8875'. [ 1468.146527][ T1174] loop8: partition table beyond EOD, truncated [ 1468.165398][ T1174] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1468.197038][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.198352][ T5586] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1468.200571][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.254547][ T5586] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1468.256826][T20092] Flush: task=udevd[20092] dev=loop8 state=2 [ 1468.276831][ T5586] keyspan 5-1:0.11: device disconnected [ 1468.413698][T20092] Teardown: task=udevd[20092] dev=loop8 state=2 [ 1468.647426][ T1194] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8880'. [ 1468.647500][ T1194] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8880'. [ 1468.647518][ T1194] netlink: 'syz.6.8880': attribute type 1 has an invalid length. [ 1468.872614][ T1207] netlink: 'syz.6.8883': attribute type 4 has an invalid length. [ 1469.599934][ T1225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8887'. [ 1469.746551][ T1230] netlink: 'syz.5.8889': attribute type 10 has an invalid length. [ 1469.761722][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.761754][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.854030][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.854062][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.930487][ T1233] FAULT_INJECTION: forcing a failure. [ 1469.930487][ T1233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1469.930529][ T1233] CPU: 1 UID: 0 PID: 1233 Comm: syz.6.8890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1469.930570][ T1233] Tainted: [L]=SOFTLOCKUP [ 1469.930579][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1469.930592][ T1233] Call Trace: [ 1469.930601][ T1233] [ 1469.930611][ T1233] dump_stack_lvl+0xe8/0x150 [ 1469.930647][ T1233] should_fail_ex+0x467/0x600 [ 1469.930688][ T1233] prepare_alloc_pages+0x223/0x650 [ 1469.930728][ T1233] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1469.930767][ T1233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1469.930805][ T1233] ? __pfx_policy_nodemask+0x10/0x10 [ 1469.930838][ T1233] ? filemap_get_entry+0x374/0x3f0 [ 1469.930873][ T1233] ? __pfx_filemap_get_entry+0x10/0x10 [ 1469.930908][ T1233] alloc_pages_mpol+0xd4/0x280 [ 1469.930946][ T1233] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1469.930984][ T1233] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1469.931037][ T1233] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1469.931066][ T1233] ? __lock_acquire+0x6df/0x2e40 [ 1469.931093][ T1233] ? __css_rstat_updated+0x235/0x540 [ 1469.931122][ T1233] shmem_fault+0x170/0x380 [ 1469.931161][ T1233] __do_fault+0x138/0x2a0 [ 1469.931199][ T1233] do_pte_missing+0x659/0x28f0 [ 1469.931241][ T1233] ? handle_mm_fault+0xe9/0x1520 [ 1469.931275][ T1233] handle_mm_fault+0xe0b/0x1520 [ 1469.931311][ T1233] ? handle_mm_fault+0xe9/0x1520 [ 1469.931344][ T1233] ? __pfx_handle_mm_fault+0x10/0x10 [ 1469.931379][ T1233] ? follow_page_pte+0xaf1/0xe80 [ 1469.931418][ T1233] ? __pfx_follow_page_pte+0x10/0x10 [ 1469.931459][ T1233] __get_user_pages+0x166b/0x2590 [ 1469.931518][ T1233] __gup_longterm_locked+0x7d2/0x15c0 [ 1469.931582][ T1233] gup_fast_fallback+0x1cf7/0x2040 [ 1469.931640][ T1233] ? io_pin_pages+0xac/0x1a0 [ 1469.931680][ T1233] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1469.931710][ T1233] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1469.931747][ T1233] ? is_valid_gup_args+0x11f/0x200 [ 1469.931779][ T1233] ? pin_user_pages_fast+0x4d/0xb0 [ 1469.931811][ T1233] io_pin_pages+0xc7/0x1a0 [ 1469.931848][ T1233] io_region_pin_pages+0x7d/0x190 [ 1469.931876][ T1233] io_create_region+0x388/0x490 [ 1469.931917][ T1233] io_allocate_scq_urings+0x1f4/0x7f0 [ 1469.931945][ T1233] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1469.931979][ T1233] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1469.932012][ T1233] ? bpf_lsm_capable+0x9/0x20 [ 1469.932035][ T1233] ? security_capable+0x74/0x280 [ 1469.932080][ T1233] io_uring_create+0x46c/0x990 [ 1469.932110][ T1233] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1469.932137][ T1233] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1469.932170][ T1233] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1469.932215][ T1233] ? __pfx_ksys_write+0x10/0x10 [ 1469.932246][ T1233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.932271][ T1233] do_syscall_64+0x174/0x580 [ 1469.932294][ T1233] ? trace_irq_disable+0x3b/0x140 [ 1469.932315][ T1233] ? clear_bhb_loop+0x40/0x90 [ 1469.932343][ T1233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.932368][ T1233] RIP: 0033:0x7fbbec73de59 [ 1469.932390][ T1233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.932412][ T1233] RSP: 002b:00007fbbea995fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1469.932436][ T1233] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fbbec73de59 [ 1469.932453][ T1233] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1469.932468][ T1233] RBP: 00007fbbea996090 R08: 0000000000000000 R09: 0000000000000101 [ 1469.932482][ T1233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1469.932495][ T1233] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc8339bc18 [ 1469.932528][ T1233] [ 1470.411831][ T1235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.422564][ T1235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.558413][ T1258] overlayfs: failed to resolve './file2': -2 [ 1471.842537][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8898'. [ 1471.868667][ T1217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1472.118198][ T1264] loop8: detected capacity change from 0 to 8 [ 1472.134924][ T1264] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1472.134955][ T1264] loop8: partition table partially beyond EOD, truncated [ 1472.135264][ T1264] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1472.308160][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1472.411990][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1472.507014][ T1279] Invalid logical block size (8192) [ 1472.643088][ T1275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1472.682660][T20341] udevd[20341]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1472.716312][ T1286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8907'. [ 1472.797558][ T1288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.798289][ T1288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.880026][ T5702] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1472.904541][ T1294] tipc: Invalid UDP bearer configuration [ 1472.904585][ T1294] tipc: Enabling of bearer rejected, failed to enable media [ 1473.031007][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 1473.045506][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1473.048021][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.048107][ T5702] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1473.092117][ T5702] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1473.092151][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.092174][ T5702] usb 5-1: Product: syz [ 1473.092191][ T5702] usb 5-1: Manufacturer: syz [ 1473.092207][ T5702] usb 5-1: SerialNumber: syz [ 1473.262428][ T1302] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8913'. [ 1473.262501][ T1302] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8913'. [ 1473.262521][ T1302] netlink: 'syz.6.8913': attribute type 1 has an invalid length. [ 1473.343309][ T1306] netlink: 'syz.5.8914': attribute type 4 has an invalid length. [ 1473.400683][ T5702] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1473.401254][ T5702] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1473.547992][ T5702] usb 5-1: 2:1 : can't get High Capability descriptor [ 1473.875483][ T5702] usb 5-1: USB disconnect, device number 38 [ 1473.956482][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8917'. [ 1474.165838][ T1317] binder: 1316:1317 ioctl c00c620f 0 returned -14 [ 1474.425012][ T1323] Invalid ELF header magic: != ELF [ 1474.447532][ T1323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.556004][ T1323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.789049][ T5709] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1475.020891][ T5709] usb 7-1: device descriptor read/64, error -71 [ 1475.172479][ T1342] netlink: 'syz.4.8928': attribute type 10 has an invalid length. [ 1475.172506][ T1342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8928'. [ 1475.272557][ T5709] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1475.459043][ T5709] usb 7-1: device descriptor read/64, error -71 [ 1475.569031][ T5709] usb usb7-port1: attempt power cycle [ 1475.711254][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8932'. [ 1475.918957][ T5709] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1475.939284][ T5709] usb 7-1: device descriptor read/8, error -71 [ 1476.070976][ T1362] loop8: detected capacity change from 0 to 8 [ 1476.075821][ T1362] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1476.075855][ T1362] loop8: partition table partially beyond EOD, truncated [ 1476.076169][ T1362] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 1476.189397][ T5709] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1476.197783][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1476.213695][ T5709] usb 7-1: device descriptor read/8, error -71 [ 1476.267750][ T1367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8940'. [ 1476.290789][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1476.318976][ T5709] usb usb7-port1: unable to enumerate USB device [ 1476.361408][T20341] udevd[20341]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1476.622544][ T1381] FAULT_INJECTION: forcing a failure. [ 1476.622544][ T1381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1476.622590][ T1381] CPU: 0 UID: 0 PID: 1381 Comm: syz.4.8943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1476.622619][ T1381] Tainted: [L]=SOFTLOCKUP [ 1476.622628][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1476.622644][ T1381] Call Trace: [ 1476.622653][ T1381] [ 1476.622664][ T1381] dump_stack_lvl+0xe8/0x150 [ 1476.622700][ T1381] should_fail_ex+0x467/0x600 [ 1476.622741][ T1381] prepare_alloc_pages+0x223/0x650 [ 1476.622782][ T1381] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1476.622821][ T1381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1476.622861][ T1381] ? __pfx_policy_nodemask+0x10/0x10 [ 1476.622894][ T1381] ? filemap_get_entry+0x374/0x3f0 [ 1476.622930][ T1381] ? __pfx_filemap_get_entry+0x10/0x10 [ 1476.622967][ T1381] alloc_pages_mpol+0xd4/0x280 [ 1476.623007][ T1381] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1476.623046][ T1381] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1476.623099][ T1381] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1476.623124][ T1381] ? __lock_acquire+0x6df/0x2e40 [ 1476.623151][ T1381] ? __css_rstat_updated+0x235/0x540 [ 1476.623180][ T1381] shmem_fault+0x170/0x380 [ 1476.623219][ T1381] __do_fault+0x138/0x2a0 [ 1476.623260][ T1381] do_pte_missing+0x659/0x28f0 [ 1476.623302][ T1381] ? handle_mm_fault+0xe9/0x1520 [ 1476.623335][ T1381] handle_mm_fault+0xe0b/0x1520 [ 1476.623370][ T1381] ? handle_mm_fault+0xe9/0x1520 [ 1476.623404][ T1381] ? __pfx_handle_mm_fault+0x10/0x10 [ 1476.623435][ T1381] ? follow_page_pte+0xaf1/0xe80 [ 1476.623478][ T1381] ? __pfx_follow_page_pte+0x10/0x10 [ 1476.623518][ T1381] __get_user_pages+0x166b/0x2590 [ 1476.623573][ T1381] __gup_longterm_locked+0x7d2/0x15c0 [ 1476.623624][ T1381] gup_fast_fallback+0x1cf7/0x2040 [ 1476.623677][ T1381] ? io_pin_pages+0xac/0x1a0 [ 1476.623715][ T1381] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1476.623741][ T1381] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1476.623775][ T1381] ? is_valid_gup_args+0x11f/0x200 [ 1476.623807][ T1381] ? pin_user_pages_fast+0x4d/0xb0 [ 1476.623839][ T1381] io_pin_pages+0xc7/0x1a0 [ 1476.623875][ T1381] io_region_pin_pages+0x7d/0x190 [ 1476.623902][ T1381] io_create_region+0x388/0x490 [ 1476.623945][ T1381] io_allocate_scq_urings+0x1f4/0x7f0 [ 1476.623971][ T1381] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1476.624005][ T1381] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1476.624036][ T1381] ? bpf_lsm_capable+0x9/0x20 [ 1476.624058][ T1381] ? security_capable+0x74/0x280 [ 1476.624101][ T1381] io_uring_create+0x46c/0x990 [ 1476.624131][ T1381] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1476.624158][ T1381] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1476.624191][ T1381] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1476.624235][ T1381] ? __pfx_ksys_write+0x10/0x10 [ 1476.624265][ T1381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.624289][ T1381] do_syscall_64+0x174/0x580 [ 1476.624311][ T1381] ? trace_irq_disable+0x3b/0x140 [ 1476.624333][ T1381] ? clear_bhb_loop+0x40/0x90 [ 1476.624360][ T1381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.624383][ T1381] RIP: 0033:0x7f63a476de59 [ 1476.624405][ T1381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.624425][ T1381] RSP: 002b:00007f63a29c5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1476.624449][ T1381] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f63a476de59 [ 1476.624467][ T1381] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1476.624491][ T1381] RBP: 00007f63a29c6090 R08: 0000000000000000 R09: 0000000000000101 [ 1476.624505][ T1381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1476.624519][ T1381] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffba8aa7a8 [ 1476.624552][ T1381] [ 1476.684128][ T1379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.745893][ T1382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.163296][ T1385] netlink: 'syz.0.8946': attribute type 4 has an invalid length. [ 1477.269795][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.270480][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.276048][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.276728][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.152503][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8959'. [ 1478.289516][ T5702] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1478.449311][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 1478.451803][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.451844][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.451888][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1478.451912][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.460488][ T5702] usb 5-1: config 0 descriptor?? [ 1478.514415][ T5702] hub 5-1:0.0: USB hub found [ 1478.687660][ T1434] syz_tun: mtu greater than device maximum [ 1478.714254][ T5702] hub 5-1:0.0: 1 port detected [ 1479.206470][ T5603] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1479.350813][ T5702] hub 5-1:0.0: activate --> -90 [ 1479.393330][ T5603] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1479.393370][ T5603] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1479.393407][ T5603] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1479.393434][ T5603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.407295][ T5603] usb 7-1: config 0 descriptor?? [ 1479.624233][ T1444] loop8: detected capacity change from 0 to 7 [ 1479.627926][ T1444] Dev loop8: unable to read RDB block 7 [ 1479.628121][ T1444] loop8: unable to read partition table [ 1479.630133][ T1444] loop8: partition table beyond EOD, truncated [ 1479.630167][ T1444] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1479.743842][T20341] Flush: task=udevd[20341] dev=loop8 state=2 [ 1479.768251][ T5709] usb 5-1-port1: config error [ 1479.781384][ T5709] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1479.781413][ T5709] usb 5-1-port1: connect-debounce failed [ 1479.783733][ T5792] usb 5-1: USB disconnect, device number 39 [ 1479.887554][ T5603] koneplus 0003:1E7D:2E22.0020: reserved main item tag 0xd [ 1479.887591][ T5603] hid_parser_main: 7 callbacks suppressed [ 1479.887608][ T5603] koneplus 0003:1E7D:2E22.0020: unknown main item tag 0x0 [ 1479.887637][ T5603] koneplus 0003:1E7D:2E22.0020: unexpected long global item [ 1479.940411][ T5603] koneplus 0003:1E7D:2E22.0020: parse failed [ 1479.940496][ T5603] koneplus 0003:1E7D:2E22.0020: probe with driver koneplus failed with error -22 [ 1479.997454][T20341] Teardown: task=udevd[20341] dev=loop8 state=2 [ 1480.073012][ T5586] usb 7-1: USB disconnect, device number 34 [ 1480.571368][ T1452] Invalid logical block size (8192) [ 1481.139212][ T1463] FAULT_INJECTION: forcing a failure. [ 1481.139212][ T1463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1481.139257][ T1463] CPU: 0 UID: 0 PID: 1463 Comm: syz.0.8976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1481.139288][ T1463] Tainted: [L]=SOFTLOCKUP [ 1481.139296][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1481.139311][ T1463] Call Trace: [ 1481.139321][ T1463] [ 1481.139331][ T1463] dump_stack_lvl+0xe8/0x150 [ 1481.139367][ T1463] should_fail_ex+0x467/0x600 [ 1481.139407][ T1463] prepare_alloc_pages+0x223/0x650 [ 1481.139448][ T1463] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1481.139487][ T1463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1481.139531][ T1463] ? __pfx_policy_nodemask+0x10/0x10 [ 1481.139563][ T1463] ? filemap_get_entry+0x374/0x3f0 [ 1481.139597][ T1463] ? __pfx_filemap_get_entry+0x10/0x10 [ 1481.139632][ T1463] alloc_pages_mpol+0xd4/0x280 [ 1481.139676][ T1463] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1481.139718][ T1463] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1481.139774][ T1463] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1481.139801][ T1463] ? __lock_acquire+0x6df/0x2e40 [ 1481.139828][ T1463] ? __css_rstat_updated+0x235/0x540 [ 1481.139857][ T1463] shmem_fault+0x170/0x380 [ 1481.139895][ T1463] __do_fault+0x138/0x2a0 [ 1481.139931][ T1463] do_pte_missing+0x659/0x28f0 [ 1481.139976][ T1463] ? handle_mm_fault+0xe9/0x1520 [ 1481.140011][ T1463] handle_mm_fault+0xe0b/0x1520 [ 1481.140049][ T1463] ? handle_mm_fault+0xe9/0x1520 [ 1481.140082][ T1463] ? __pfx_handle_mm_fault+0x10/0x10 [ 1481.140114][ T1463] ? follow_page_pte+0xaf1/0xe80 [ 1481.140154][ T1463] ? __pfx_follow_page_pte+0x10/0x10 [ 1481.140195][ T1463] __get_user_pages+0x166b/0x2590 [ 1481.140258][ T1463] __gup_longterm_locked+0x7d2/0x15c0 [ 1481.140311][ T1463] gup_fast_fallback+0x1cf7/0x2040 [ 1481.140368][ T1463] ? io_pin_pages+0xac/0x1a0 [ 1481.140407][ T1463] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1481.140437][ T1463] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1481.140474][ T1463] ? is_valid_gup_args+0x11f/0x200 [ 1481.140506][ T1463] ? pin_user_pages_fast+0x4d/0xb0 [ 1481.140538][ T1463] io_pin_pages+0xc7/0x1a0 [ 1481.140576][ T1463] io_region_pin_pages+0x7d/0x190 [ 1481.140604][ T1463] io_create_region+0x388/0x490 [ 1481.140648][ T1463] io_allocate_scq_urings+0x1f4/0x7f0 [ 1481.140684][ T1463] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 1481.140715][ T1463] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1481.140748][ T1463] ? bpf_lsm_capable+0x9/0x20 [ 1481.140769][ T1463] ? security_capable+0x74/0x280 [ 1481.140813][ T1463] io_uring_create+0x46c/0x990 [ 1481.140843][ T1463] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1481.140871][ T1463] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1481.140912][ T1463] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1481.140956][ T1463] ? __pfx_ksys_write+0x10/0x10 [ 1481.140988][ T1463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.141014][ T1463] do_syscall_64+0x174/0x580 [ 1481.141036][ T1463] ? trace_irq_disable+0x3b/0x140 [ 1481.141058][ T1463] ? clear_bhb_loop+0x40/0x90 [ 1481.141087][ T1463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.141110][ T1463] RIP: 0033:0x7ff1b66fde59 [ 1481.141132][ T1463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.141153][ T1463] RSP: 002b:00007ff1b4955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1481.141177][ T1463] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff1b66fde59 [ 1481.141194][ T1463] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1481.141209][ T1463] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000101 [ 1481.141224][ T1463] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1481.141238][ T1463] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeabd857f8 [ 1481.141271][ T1463] [ 1481.622314][ T1468] veth0_to_hsr: entered allmulticast mode [ 1481.637293][ T1466] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8975'. [ 1481.637387][ T1466] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8975'. [ 1481.850208][ T1475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8980'. [ 1482.014901][ T5702] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1482.198372][ T5702] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.198441][ T5702] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1482.198469][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.207769][ T5702] usb 7-1: config 0 descriptor?? [ 1482.274197][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8983'. [ 1482.684505][ T5586] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1482.845867][ T5586] usb 5-1: Using ep0 maxpacket: 32 [ 1482.864851][ T5586] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1482.864883][ T5586] usb 5-1: config 0 has no interface number 0 [ 1482.864935][ T5586] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1482.864966][ T5586] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1482.934031][ T5586] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1482.934066][ T5586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.934090][ T5586] usb 5-1: Product: syz [ 1482.934106][ T5586] usb 5-1: Manufacturer: syz [ 1482.934121][ T5586] usb 5-1: SerialNumber: syz [ 1483.100486][ T5586] usb 5-1: config 0 descriptor?? [ 1483.324901][ T5586] radio-si470x 5-1:0.35: this is not a si470x device. [ 1483.535749][ T5586] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1483.560031][ T5586] usb 5-1: USB disconnect, device number 40 [ 1483.823902][ T5702] ath6kl: Failed to read usb control message: -71 [ 1483.823967][ T5702] ath6kl: Unable to read the bmi data from the device: -71 [ 1483.823984][ T5702] ath6kl: Unable to recv target info: -71 [ 1483.828117][ T5702] ath6kl: Failed to init ath6kl core: -71 [ 1483.828710][ T5702] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1483.975531][ T5702] usb 7-1: USB disconnect, device number 35 [ 1484.406456][ T1510] FAULT_INJECTION: forcing a failure. [ 1484.406456][ T1510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1484.406501][ T1510] CPU: 1 UID: 0 PID: 1510 Comm: syz.0.8991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1484.406532][ T1510] Tainted: [L]=SOFTLOCKUP [ 1484.406541][ T1510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1484.406556][ T1510] Call Trace: [ 1484.406565][ T1510] [ 1484.406576][ T1510] dump_stack_lvl+0xe8/0x150 [ 1484.406614][ T1510] should_fail_ex+0x467/0x600 [ 1484.406654][ T1510] prepare_alloc_pages+0x223/0x650 [ 1484.406696][ T1510] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1484.406736][ T1510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1484.406775][ T1510] ? __pfx_policy_nodemask+0x10/0x10 [ 1484.406810][ T1510] ? filemap_get_entry+0x374/0x3f0 [ 1484.406847][ T1510] ? __pfx_filemap_get_entry+0x10/0x10 [ 1484.406882][ T1510] alloc_pages_mpol+0xd4/0x280 [ 1484.406921][ T1510] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1484.406959][ T1510] shmem_get_folio_gfp+0x6ee/0x1c40 [ 1484.407012][ T1510] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1484.407039][ T1510] ? __lock_acquire+0x6df/0x2e40 [ 1484.407065][ T1510] ? __css_rstat_updated+0x235/0x540 [ 1484.407094][ T1510] shmem_fault+0x170/0x380 [ 1484.407132][ T1510] __do_fault+0x138/0x2a0 [ 1484.407170][ T1510] do_pte_missing+0x659/0x28f0 [ 1484.407212][ T1510] ? handle_mm_fault+0xe9/0x1520 [ 1484.407247][ T1510] handle_mm_fault+0xe0b/0x1520 [ 1484.407291][ T1510] ? handle_mm_fault+0xe9/0x1520 [ 1484.407326][ T1510] ? __pfx_handle_mm_fault+0x10/0x10 [ 1484.407358][ T1510] ? follow_page_pte+0xaf1/0xe80 [ 1484.407399][ T1510] ? __pfx_follow_page_pte+0x10/0x10 [ 1484.407439][ T1510] __get_user_pages+0x166b/0x2590 [ 1484.407498][ T1510] __gup_longterm_locked+0x7d2/0x15c0 [ 1484.407551][ T1510] gup_fast_fallback+0x1cf7/0x2040 [ 1484.407609][ T1510] ? io_pin_pages+0xac/0x1a0 [ 1484.407648][ T1510] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1484.407676][ T1510] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 1484.407712][ T1510] ? is_valid_gup_args+0x11f/0x200 [ 1484.407744][ T1510] ? pin_user_pages_fast+0x4d/0xb0 [ 1484.407778][ T1510] io_pin_pages+0xc7/0x1a0 [ 1484.407816][ T1510] io_region_pin_pages+0x7d/0x190 [ 1484.407843][ T1510] io_create_region+0x388/0x490 [ 1484.407888][ T1510] io_allocate_scq_urings+0x1f4/0x7f0 [ 1484.407915][ T1510] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 1484.407946][ T1510] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1484.407977][ T1510] ? bpf_lsm_capable+0x9/0x20 [ 1484.408000][ T1510] ? security_capable+0x74/0x280 [ 1484.408043][ T1510] io_uring_create+0x46c/0x990 [ 1484.408073][ T1510] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1484.408101][ T1510] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1484.408134][ T1510] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1484.408178][ T1510] ? __pfx_ksys_write+0x10/0x10 [ 1484.408212][ T1510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.408238][ T1510] do_syscall_64+0x174/0x580 [ 1484.408264][ T1510] ? clear_bhb_loop+0x40/0x90 [ 1484.408302][ T1510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.408325][ T1510] RIP: 0033:0x7ff1b66fde59 [ 1484.408348][ T1510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.408368][ T1510] RSP: 002b:00007ff1b4955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1484.408392][ T1510] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff1b66fde59 [ 1484.408409][ T1510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007cb8 [ 1484.408423][ T1510] RBP: 00007ff1b4956090 R08: 0000000000000000 R09: 0000000000000101 [ 1484.408438][ T1510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1484.408451][ T1510] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeabd857f8 [ 1484.408484][ T1510] [ 1484.885772][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.885891][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.029692][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8992'. [ 1485.076579][ T39] INFO: task kworker/u8:17:27013 blocked for more than 143 seconds. [ 1485.076612][ T39] Tainted: G L syzkaller #0 [ 1485.076626][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1485.076638][ T39] task:kworker/u8:17 state:D stack:19656 pid:27013 tgid:27013 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1485.076699][ T39] Workqueue: netns cleanup_net [ 1485.076736][ T39] Call Trace: [ 1485.076745][ T39] [ 1485.076761][ T39] __schedule+0x1709/0x5530 [ 1485.076800][ T39] ? __lock_acquire+0x6df/0x2e40 [ 1485.076828][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1485.076857][ T39] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1485.076909][ T39] ? __pfx___schedule+0x10/0x10 [ 1485.076942][ T39] ? lock_acquire+0x115/0x350 [ 1485.076973][ T39] ? schedule+0x90/0x2b0 [ 1485.077012][ T39] schedule+0x164/0x2b0 [ 1485.077049][ T39] rxrpc_destroy_all_calls+0x443/0x570 [ 1485.077188][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1485.077227][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 1485.077272][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1485.077297][ T39] ? __timer_delete_sync+0x538/0x600 [ 1485.077325][ T39] rxrpc_exit_net+0x6f/0xc0 [ 1485.077357][ T39] ops_undo_list+0x43d/0x8d0 [ 1485.077397][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1485.077427][ T39] ? rt_spin_unlock+0x157/0x200 [ 1485.077461][ T39] ? idr_destroy+0x21b/0x2a0 [ 1485.077528][ T39] ? rt_spin_unlock+0x163/0x200 [ 1485.077561][ T39] cleanup_net+0x575/0x810 [ 1485.077595][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 1485.077633][ T39] ? rcu_is_watching+0x15/0xb0 [ 1485.077662][ T39] ? process_one_work+0x7fd/0x1480 [ 1485.077688][ T39] process_one_work+0xaaf/0x1480 [ 1485.077735][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1485.077757][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1485.077796][ T39] ? assign_work+0x3cf/0x5d0 [ 1485.077850][ T39] worker_thread+0xb05/0x10d0 [ 1485.077903][ T39] kthread+0x388/0x470 [ 1485.077935][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1485.077960][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.077993][ T39] ret_from_fork+0x514/0xb70 [ 1485.078030][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1485.078063][ T39] ? __switch_to+0xc89/0x1420 [ 1485.078093][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.078125][ T39] ret_from_fork_asm+0x1a/0x30 [ 1485.078176][ T39] [ 1485.078232][ T39] [ 1485.078232][ T39] Showing all locks held in the system: [ 1485.078245][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 1485.078263][ T39] #0: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1485.078357][ T39] locks held by getty/5350: 2, on CPU#0: [ 1485.078374][ T39] #0: ffff8880363230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1485.078432][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1485.078501][ T39] locks held by kworker/u8:23/13255: 7, last CPU#0: [ 1485.078518][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.078572][ T39] #1: ffffc90007a9fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.078630][ T39] #2: ffff88802a138310 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1485.078690][ T39] #3: ffff88805dfc5d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1485.078745][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1485.078803][ T39] #5: ffff8880b8636988 ((batched_entropy_u8.lock)){+.+.}-{3:3}, at: get_random_u8+0x1dc/0x8a0 [ 1485.078943][ T39] #6: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1485.079003][ T39] locks held by kworker/u8:31/13784: 5, last CPU#1: [ 1485.079020][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.079073][ T39] #1: ffffc9000e5cfc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.079128][ T39] #2: ffffffff8e251c70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1485.079190][ T39] #3: ffffffff8e498f98 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1485.079246][ T39] #4: ffffffff8e268598 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1485.093213][ T39] locks held by udevd/20007: 4, on CPU#1: [ 1485.093266][ T39] #0: ffff88802b38c1a8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1485.093473][ T39] #1: ffff888050f87478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1485.093603][ T39] #2: ffff888060aa0c38 (kn->active#34){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1485.093767][ T39] #3: ffff888060ca6210 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 1485.094019][ T39] locks held by kworker/0:8/20053: 5, on CPU#0: [ 1485.094072][ T39] #0: ffff88801b393538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.094214][ T39] #1: ffffc90004387c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.094369][ T39] #2: ffff88802a5ac210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1485.099408][ T39] #3: ffff888060ca6210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 1485.099532][ T39] #4: ffff88805d0e41d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1485.099739][ T39] locks held by kworker/u8:1/27003: 13, last CPU#1: [ 1485.099813][ T39] #0: ffff88802aea0938 ((wq_completion)wg-kex-wg1#37){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.100000][ T39] #1: ffffc900087bfc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.100168][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1485.100309][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1485.100627][ T39] #4: ffff888025199798 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1485.100804][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 1485.108680][ T39] #6: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1485.108872][ T39] #7: ffffffff8e3c38a0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 1485.109045][ T39] #8: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 1485.109208][ T39] #9: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x1100 [ 1485.109380][ T39] #10: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1485.109607][ T39] #11: ffff888027bac0a8 (&n->lock){++..}-{3:3}, at: __neigh_event_send+0x53/0x14e0 [ 1485.110002][ T39] #12: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_write_lock+0x86/0x220 [ 1485.110204][ T39] locks held by kworker/u8:17/27013: 3, on CPU#1: [ 1485.110249][ T39] #0: ffff88801bee0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.128679][ T39] #1: ffffc90008087c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1485.128832][ T39] #2: ffffffff8f7b17c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1485.129026][ T39] locks held by syz-executor/30858: 9, last CPU#1: [ 1485.129078][ T39] #0: ffffffff8e4969d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1485.129505][ T39] #1: ffff8880660091b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d40 [ 1485.129667][ T39] #2: ffff888036dbba30 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d40 [ 1485.129847][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1485.130002][ T39] #4: ffff88805f6ad7d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1485.130172][ T39] #5: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 1485.138184][ T39] #6: ffff8880b873b920 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1485.138354][ T39] #7: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 1485.138522][ T39] #8: ffff8880372c2258 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 1485.138692][ T39] locks held by cxacru/1127: 1, on CPU#1: [ 1485.138744][ T39] #0: ffffffff8e260880 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1485.138873][ T39] locks held by syz.4.8990/1504: 1, last CPU#0: [ 1485.138891][ T39] #0: ffff888040b33a30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1485.139021][ T39] locks held by syz.0.8992/1513: 1, last CPU#0: [ 1485.139065][ T39] #0: ffff88805cda9cc8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1485.139668][ T39] [ 1485.139689][ T39] ============================================= [ 1485.139689][ T39] [ 1485.151009][ T39] NMI backtrace for cpu 1 [ 1485.151096][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.151181][ T39] Tainted: [L]=SOFTLOCKUP [ 1485.151204][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.151239][ T39] Call Trace: [ 1485.151270][ T39] [ 1485.151294][ T39] dump_stack_lvl+0xe8/0x150 [ 1485.151432][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1485.151528][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1485.151626][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1485.151728][ T39] sys_info+0x135/0x170 [ 1485.151797][ T39] watchdog+0xfd7/0x1030 [ 1485.151939][ T39] ? watchdog+0x1c7/0x1030 [ 1485.152045][ T39] kthread+0x388/0x470 [ 1485.152131][ T39] ? __pfx_watchdog+0x10/0x10 [ 1485.152216][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.152304][ T39] ret_from_fork+0x514/0xb70 [ 1485.152412][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1485.152499][ T39] ? __switch_to+0xc89/0x1420 [ 1485.152576][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.152659][ T39] ret_from_fork_asm+0x1a/0x30 [ 1485.152817][ T39] [ 1485.152899][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1485.153016][ C0] NMI backtrace for cpu 0 [ 1485.153034][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.153061][ C0] Tainted: [L]=SOFTLOCKUP [ 1485.153068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.153080][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1485.153206][ C0] Code: e8 fe eb 66 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f d8 d2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1485.153223][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 1485.153258][ C0] RAX: 1ffffffff3410e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1485.153272][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1485.153284][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1485.153297][ C0] R10: dffffc0000000000 R11: ffffffff855e4ea0 R12: dffffc0000000000 [ 1485.153312][ C0] R13: 0000000000000000 R14: ffffffff9a087580 R15: 0000000000000000 [ 1485.153326][ C0] FS: 0000000000000000(0000) GS:ffff888125a03000(0000) knlGS:0000000000000000 [ 1485.153343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1485.153357][ C0] CR2: 000000110c45a249 CR3: 0000000036776000 CR4: 00000000003526f0 [ 1485.153374][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1485.153387][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1485.153400][ C0] Call Trace: [ 1485.153407][ C0] [ 1485.153416][ C0] wait_for_lsr+0x190/0x300 [ 1485.153446][ C0] serial8250_console_write+0x113a/0x1b40 [ 1485.153480][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1485.153511][ C0] ? console_flush_one_record+0x472/0xb50 [ 1485.153545][ C0] console_flush_one_record+0x642/0xb50 [ 1485.153578][ C0] ? console_flush_one_record+0xfa/0xb50 [ 1485.153609][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1485.153641][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1485.153664][ C0] legacy_kthread_func+0x1b6/0x250 [ 1485.153694][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1485.153724][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1485.153753][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1485.153777][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1485.153802][ C0] kthread+0x388/0x470 [ 1485.153827][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1485.153862][ C0] ? __pfx_kthread+0x10/0x10 [ 1485.153888][ C0] ret_from_fork+0x514/0xb70 [ 1485.153917][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1485.153943][ C0] ? __switch_to+0xc89/0x1420 [ 1485.153967][ C0] ? __pfx_kthread+0x10/0x10 [ 1485.153993][ C0] ret_from_fork_asm+0x1a/0x30 [ 1485.154029][ C0] [ 1485.172637][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1485.172718][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.172811][ T39] Tainted: [L]=SOFTLOCKUP [ 1485.172835][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.172873][ T39] Call Trace: [ 1485.172902][ T39] [ 1485.172912][ T39] vpanic+0x5d9/0xad0 [ 1485.172954][ T39] ? __pfx_vpanic+0x10/0x10 [ 1485.173024][ T39] ? __pfx___schedule+0x10/0x10 [ 1485.173163][ T39] panic+0xc5/0xd0 [ 1485.173223][ T39] ? __pfx_panic+0x10/0x10 [ 1485.173282][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1485.173407][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1485.173487][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1485.173596][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1485.173693][ T39] watchdog+0x1030/0x1030 [ 1485.173739][ T39] ? watchdog+0x1c7/0x1030 [ 1485.173785][ T39] kthread+0x388/0x470 [ 1485.173819][ T39] ? __pfx_watchdog+0x10/0x10 [ 1485.173854][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.173890][ T39] ret_from_fork+0x514/0xb70 [ 1485.173935][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1485.173969][ T39] ? __switch_to+0xc89/0x1420 [ 1485.173999][ T39] ? __pfx_kthread+0x10/0x10 [ 1485.174033][ T39] ret_from_fork_asm+0x1a/0x30 [ 1485.174085][ T39] [ 1485.174723][ T39] Kernel Offset: disabled