last executing test programs: 2m54.440867279s ago: executing program 0 (id=268): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000005345f9876311d5e277d4c0c850bb81ae0000000000000000576b4432be6f1b2e6ea3a593ca09ef440020001467859fc3339121fe6bb99829", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf251200000005002d000000000008003b009295000008000b000000000005002900000000000a000900aaaaaaaaaa0c000005002a0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 2m54.411845846s ago: executing program 0 (id=269): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) (async) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) (async) r0 = socket(0x1e, 0x1, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x802) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000001c0)) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) rt_sigtimedwait(&(0x7f0000000340)={[0x7ff]}, &(0x7f0000000380), &(0x7f0000000400), 0x8) (async) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, 0x0) (async) ioctl$KVM_SET_PIT2(r3, 0xae71, &(0x7f00000002c0)={[{0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0xff, 0x7, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3ba}, {0xffffffff, 0x2fa, 0x7, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x4, 0xfe, 0x0, 0x800}]}) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0), 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x10', 0x0, &(0x7f0000000080)={@align=0xef2, {0xe, 0x3, 0x8}}, 0x7c8, &(0x7f00000000c0), &(0x7f0000000100)=0x9b}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) accept$inet6(r0, 0x0, 0x0) 2m54.296137323s ago: executing program 0 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000000)) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r4, 0x0, 0x460e, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x58}, 0x0) 2m50.844927119s ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x6) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x9, 0x8000}) (async) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x6) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (async) 2m50.352963565s ago: executing program 0 (id=290): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m48.725409552s ago: executing program 0 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa2d11f48745da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a1602000000a6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb280c2000000cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45", 0x6d}], 0x1}}], 0x2, 0x2090) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$packet(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x5) syz_open_procfs(0x0, 0x0) sendfile(r2, r2, 0x0, 0x6fecb1) sendmsg$can_raw(r4, &(0x7f0000000380)={&(0x7f00000000c0), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x3e, 0x1, 0x0, 0x0, "c93aac4797e91d7d1c97e1935e9c4e86ecf7ae30b764328bfe59204f009dbc874a7fb3abd32428554e8882483287a5d6170a732afcc757763764d7c141cf4197"}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x20000004) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x81900) r7 = fcntl$dupfd(r6, 0x406, r5) ioctl$TIOCCONS(r7, 0x541d) 2m48.229068455s ago: executing program 32 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa2d11f48745da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a1602000000a6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb280c2000000cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45", 0x6d}], 0x1}}], 0x2, 0x2090) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$packet(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x5) syz_open_procfs(0x0, 0x0) sendfile(r2, r2, 0x0, 0x6fecb1) sendmsg$can_raw(r4, &(0x7f0000000380)={&(0x7f00000000c0), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x3e, 0x1, 0x0, 0x0, "c93aac4797e91d7d1c97e1935e9c4e86ecf7ae30b764328bfe59204f009dbc874a7fb3abd32428554e8882483287a5d6170a732afcc757763764d7c141cf4197"}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x20000004) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x81900) r7 = fcntl$dupfd(r6, 0x406, r5) ioctl$TIOCCONS(r7, 0x541d) 2m34.962156537s ago: executing program 2 (id=328): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf256300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099008401c71d7eacb66f"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc85]}) 2m34.188792947s ago: executing program 2 (id=329): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) (async) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) 2m33.949070138s ago: executing program 2 (id=330): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x309, 0x5e, 0x1, 0x1, 0x5, @multicast}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 2m33.068015834s ago: executing program 2 (id=334): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r1 = signalfd(r0, &(0x7f0000000100)={[0x7]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x10d402, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r4, 0x8}, 0x8) close_range(r3, r2, 0x2) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xfffff000, 0x7f}}, './file0\x00'}) timerfd_settime(r5, 0x2, &(0x7f0000000940)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000b00)) write$P9_RREMOVE(r0, &(0x7f0000000340)={0x7, 0x7b, 0x2}, 0x7) file_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x8020, 0x5, 0x7, 0x100, 0x800}, 0x18, 0x1000) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000b40)={r4, 0x6}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x3, 0x2, 0x7, 0x1, '\x00', 0x8}, 0x0, [0x1, 0x6, 0x7, 0x7fff, 0x94, 0x8000, 0x40, 0x6, 0x0, 0x71d, 0xd4b3, 0x9, 0x9, 0x4, 0x4, 0xed, 0x4, 0x800000000, 0x4, 0x10, 0x2, 0x8, 0x7, 0xfffffffffffffb9a, 0x3, 0x8, 0x4, 0x2b59, 0x4, 0x610de131, 0x18, 0xd14, 0x100000000, 0xf6cd, 0x4, 0x8000, 0x1344d6e5, 0xff, 0x4, 0x400, 0x8e7, 0x9, 0x20001, 0x8, 0x8000000000000000, 0xe92, 0x2e75, 0x100, 0xbee6, 0x8, 0x8, 0x4, 0x7, 0x2, 0x3ff, 0x4, 0xffffffff, 0x2, 0x1, 0x4, 0xffffffff, 0x6, 0x8, 0x400, 0xd, 0x70, 0x1, 0xffffffffffffffff, 0xc, 0x2, 0x3, 0x6, 0xa, 0x7, 0x4, 0x599d000000000000, 0x9, 0x0, 0xf5, 0xf, 0x9, 0x1ff, 0x6, 0x9, 0xd913, 0xee, 0xfffffffffffffffb, 0x5, 0x80000001, 0x2, 0x8, 0x7, 0x6, 0x4b7f293b, 0xfffffffffffffffe, 0x1, 0xa9a7, 0x6, 0x8, 0x30ec4df4, 0x8, 0x1ff, 0xffffffffffffffff, 0x80, 0x800, 0x100, 0x31ae, 0xffffffffffff8001, 0x18804247, 0x101, 0x8, 0x7, 0xffff, 0x2, 0x2, 0x6, 0x38, 0xe58, 0xfff, 0x0, 0x9db, 0x7, 0x1, 0x100000000, 0xff, 0x8, 0xffffffffffffffff, 0x7]}) r6 = syz_open_dev$dmmidi(&(0x7f0000000900), 0x7, 0xc00) r7 = dup(r6) statx(r0, &(0x7f0000000980)='./file0\x00', 0x4000, 0x8, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100) fchownat(r7, 0x0, r8, 0x0, 0x1000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="04080407c800ff"], 0x7) socket$inet6(0xa, 0x4, 0x2) 2m32.499961318s ago: executing program 2 (id=335): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1) connect$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null]}, 0x48) chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000000)=r1) 2m32.458247278s ago: executing program 2 (id=336): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}}, 0x40000) r3 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac2(r3, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_connect$midi(0x5, 0xe7, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x9, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x40, 0xb, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0xe, 0x0, [], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x9}], [{{0x9, 0x5, 0x7, 0x3, 0x240, 0x5, 0x0, 0xf9, {0xd, 0x25, 0x1, 0x9, "46196290bc4b517ed0"}}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x6, 0x4, 0x7, {0x12, 0x25, 0x1, 0xe, "7ea906f5a96364485f2be4702abb"}}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x4, 0x74, {0x11, 0x25, 0x1, 0xd, "fa3c29d60e52ac9507864fb2c4"}}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x80, 0x1, 0xa1, {0x9, 0x25, 0x1, 0x5, "bbc44cfe25"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x40, 0x2, 0xe, {0x13, 0x25, 0x1, 0xf, "96c2540ac39656ea97d98ae9679c79"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x81, 0x9, 0x4, {0x8, 0x25, 0x1, 0x4, "ffa5da70"}}}, {{0x9, 0x5, 0x5, 0x2cb4b1e3b48eb879, 0x3ff, 0x81, 0x5, 0x7, {0xe, 0x25, 0x1, 0xa, "fdc4b3ddae013ade2867"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xf, 0x9, 0x20, {0x5, 0x25, 0x1, 0x1, 'x'}}}]}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x0, 0x1, 0x20, 0xd9}, 0x67, &(0x7f0000000180)={0x5, 0xf, 0x67, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x3, 0x400}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "accebff017ae5fb10b23231ffddb1f96"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fdedf0c7999055336e7c230a125bf91c"}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0xa, 0x7, 0x36}, @ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0xf, 0xf, 0x101, [0xffc0, 0x3f00, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x24, 0x2, 0x0, 0xff00, 0x7, [0xf0, 0xff00c0]}]}, 0x6, [{0xae, &(0x7f0000000200)=@string={0xae, 0x3, "cd7f589f74d601f88ddcfd23ccd62cfb7304bc342db04c581de74635b0e3370cafdea14dc4316e2c866a3d8ea99ae80a17ebbc1674dd6005b0dc8cec751b8b7cf9aea5b495a2cb55992d205e8e753be70232d9b41e678e91d6b8719e0b19962a79db2bd757a676a81ed64a973b136be5e4edbfa8343cf144abd24e5aaba25194281e4021a054ea04c26763861b122b91620ebdc743463e4f8f359383f6e21e321df10d1687eb94a5463ae494"}}, {0x54, &(0x7f00000002c0)=ANY=[@ANYBLOB="5403dba53efb9f4ea72fe93fbb58f0cecfaf7e65168ac1a1200d4a642237a0523b6ad47ed822e91a4c06f58276d5669c0f0550a95af7030f21aa249a004676fa31ebb7cd34000013384d74f221a45e9c7797d14b"]}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "fa3161cc5f7b753af227d658454f46829def2b2d07bda91e6b883261b9b2159012b238befe4c17750eb5ba9f12770e1c2ec14866f5762aa8498c342869295726f969fb16133f2906277073262c0764d95bd1e0f4689df38525fc829cda70dfb609435431a09ecd7d8946768dade63be04310014423eb872c11097555efd75c118546c999468ba614b0656b58bf065ed3bddeaa6e71e9f668b161213b86cb2b7817284b02b6bb139b3211d788d2c88eda6af6e7b35476693c1520e7c9611b9c2ac7c6ff2f6140031fc1427b5204"}}, {0x9a, &(0x7f0000000440)=@string={0x9a, 0x3, "c1b88ddf91331b06b7be0fb7173e26d25cb1ba130d71159de160e43eff75e2e7023be4bb24228f88c2d976deea47cd8c7613ccdf9402f63504d2704820e3aefa78170794bc6c5b7dc569098e87a9604c804d76f73c5577e1e736b0ab1e4c2ca77e6f191971c311e2348ea5c199a992eb9cb47f9fb8bcebced19daf23925b70adc453ea2a2bf7868010e7fc2efff1b658f4accb95996689e2"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100a}}, {0x67, &(0x7f0000000540)=@string={0x67, 0x3, "d7ab7c5c2a943bbe1b13c24a819eaade0cf59e18cd20e9334fdd0ced12333eb5d1089fc3551900fa8b5cf700dd3c39e4add1f89b8b1640a3145d023188c7571c4de68d765ee92f2e4870acb0b58d23c7c05c4e29d4c81b06525f48fd1521abd1b2d42c3d02"}}]}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x95, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x1, 0x10, 0x80, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x10, {{0xb, 0x24, 0x6, 0x0, 0x0, "a687a783bbec"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x14, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0xc, 0x1b55}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0x1, 0x6f, 0x9, 0x9, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x2, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x620, 0x9, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x3, 0xb2, 0x4, 0x20, 0x8e}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}}) 2m17.337005208s ago: executing program 33 (id=336): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}}, 0x40000) r3 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac2(r3, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_connect$midi(0x5, 0xe7, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x9, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x40, 0xb, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0xe, 0x0, [], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x9}], [{{0x9, 0x5, 0x7, 0x3, 0x240, 0x5, 0x0, 0xf9, {0xd, 0x25, 0x1, 0x9, "46196290bc4b517ed0"}}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x6, 0x4, 0x7, {0x12, 0x25, 0x1, 0xe, "7ea906f5a96364485f2be4702abb"}}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x4, 0x74, {0x11, 0x25, 0x1, 0xd, "fa3c29d60e52ac9507864fb2c4"}}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x80, 0x1, 0xa1, {0x9, 0x25, 0x1, 0x5, "bbc44cfe25"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x40, 0x2, 0xe, {0x13, 0x25, 0x1, 0xf, "96c2540ac39656ea97d98ae9679c79"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x81, 0x9, 0x4, {0x8, 0x25, 0x1, 0x4, "ffa5da70"}}}, {{0x9, 0x5, 0x5, 0x2cb4b1e3b48eb879, 0x3ff, 0x81, 0x5, 0x7, {0xe, 0x25, 0x1, 0xa, "fdc4b3ddae013ade2867"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xf, 0x9, 0x20, {0x5, 0x25, 0x1, 0x1, 'x'}}}]}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x0, 0x1, 0x20, 0xd9}, 0x67, &(0x7f0000000180)={0x5, 0xf, 0x67, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x3, 0x400}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "accebff017ae5fb10b23231ffddb1f96"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fdedf0c7999055336e7c230a125bf91c"}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0xa, 0x7, 0x36}, @ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0xf, 0xf, 0x101, [0xffc0, 0x3f00, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x24, 0x2, 0x0, 0xff00, 0x7, [0xf0, 0xff00c0]}]}, 0x6, [{0xae, &(0x7f0000000200)=@string={0xae, 0x3, "cd7f589f74d601f88ddcfd23ccd62cfb7304bc342db04c581de74635b0e3370cafdea14dc4316e2c866a3d8ea99ae80a17ebbc1674dd6005b0dc8cec751b8b7cf9aea5b495a2cb55992d205e8e753be70232d9b41e678e91d6b8719e0b19962a79db2bd757a676a81ed64a973b136be5e4edbfa8343cf144abd24e5aaba25194281e4021a054ea04c26763861b122b91620ebdc743463e4f8f359383f6e21e321df10d1687eb94a5463ae494"}}, {0x54, &(0x7f00000002c0)=ANY=[@ANYBLOB="5403dba53efb9f4ea72fe93fbb58f0cecfaf7e65168ac1a1200d4a642237a0523b6ad47ed822e91a4c06f58276d5669c0f0550a95af7030f21aa249a004676fa31ebb7cd34000013384d74f221a45e9c7797d14b"]}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "fa3161cc5f7b753af227d658454f46829def2b2d07bda91e6b883261b9b2159012b238befe4c17750eb5ba9f12770e1c2ec14866f5762aa8498c342869295726f969fb16133f2906277073262c0764d95bd1e0f4689df38525fc829cda70dfb609435431a09ecd7d8946768dade63be04310014423eb872c11097555efd75c118546c999468ba614b0656b58bf065ed3bddeaa6e71e9f668b161213b86cb2b7817284b02b6bb139b3211d788d2c88eda6af6e7b35476693c1520e7c9611b9c2ac7c6ff2f6140031fc1427b5204"}}, {0x9a, &(0x7f0000000440)=@string={0x9a, 0x3, "c1b88ddf91331b06b7be0fb7173e26d25cb1ba130d71159de160e43eff75e2e7023be4bb24228f88c2d976deea47cd8c7613ccdf9402f63504d2704820e3aefa78170794bc6c5b7dc569098e87a9604c804d76f73c5577e1e736b0ab1e4c2ca77e6f191971c311e2348ea5c199a992eb9cb47f9fb8bcebced19daf23925b70adc453ea2a2bf7868010e7fc2efff1b658f4accb95996689e2"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x100a}}, {0x67, &(0x7f0000000540)=@string={0x67, 0x3, "d7ab7c5c2a943bbe1b13c24a819eaade0cf59e18cd20e9334fdd0ced12333eb5d1089fc3551900fa8b5cf700dd3c39e4add1f89b8b1640a3145d023188c7571c4de68d765ee92f2e4870acb0b58d23c7c05c4e29d4c81b06525f48fd1521abd1b2d42c3d02"}}]}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x95, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x1, 0x10, 0x80, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x10, {{0xb, 0x24, 0x6, 0x0, 0x0, "a687a783bbec"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x14, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0xc, 0x1b55}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0x1, 0x6f, 0x9, 0x9, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x2, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x620, 0x9, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x3, 0xb2, 0x4, 0x20, 0x8e}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}}) 2m10.643787907s ago: executing program 1 (id=394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="53000010", @ANYRES16=r1, @ANYBLOB="010020000000000000000100000004000480080002000100000008000100000000000400088004000c80"], 0x30}}, 0x0) 2m10.294886013s ago: executing program 1 (id=396): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x3a, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f00)={&(0x7f0000007e80)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x2404c044) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 2m10.134575051s ago: executing program 1 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) epoll_create1(0x80000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x10d, 0x6, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x6, [{@private=0xa010100, 0x6}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9f}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1ff}, {@local, 0x9}, {@loopback, 0x44}]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x4, "fb10"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000085}, 0x80) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25137c0000080001800400ab80"], 0x1c}}, 0xc000) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x2}}], [{@context={'context', 0x3d, 'system_u'}}]}) 2m8.930402446s ago: executing program 1 (id=400): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20000003}}}, 0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x20002, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000280)={0x4000000, 0x0, &(0x7f0000000000), 0x2002, 0x4000007}) r2 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000140)={@local}, &(0x7f0000000180)=0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './bus/file0', [{0x20, '.'}]}, 0x29) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 2m8.45275056s ago: executing program 1 (id=402): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33424752, 0x0, @stepwise}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f00000007c0)={0x40, 0x12, 0x4, "bc2243d8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m5.085594228s ago: executing program 1 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sync() 1m49.795974175s ago: executing program 34 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sync() 4.891479246s ago: executing program 3 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) (async) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/180, 0xb4}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x48201, 0x0) (async) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x48201, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) fchownat(r3, &(0x7f0000000140)='./file0\x00', r4, r5, 0x100) (async) fchownat(r3, &(0x7f0000000140)='./file0\x00', r4, r5, 0x100) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x20000000, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 4.252433857s ago: executing program 5 (id=736): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x29a) syz_clone3(&(0x7f0000000280)={0x80000880, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x3c}, &(0x7f0000000100)=""/39, 0x27, &(0x7f0000000140)=""/233, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) kcmp(0xffffffffffffffff, r2, 0x5, r0, 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000040}, 0x42) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94b73dcb46b50f1d}, 0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x11, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x40810) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r10, 0xabd8c1df85c64fe7, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000085}, 0x40840) (async) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)="e5059da8d8577cfbd525086d5b38b0b8dca4af40162f2e8416d520f05e453717f8a210a16916033d688b33b1dfb40042520b3bab38256d820430e81865112af9890cd9f30f296539c512a9a86f823e26299d1853be4aca8e9e3f5fad8a127df54e51689a3f61c1b850e2ea3235314de7aa57b058f72af5ed43dd43e41900061a8217303aa339f125f62e6f7d3f35bcfbfb93b2b53c2949939644b88782df6793eb34a82b12f8070f86395f4b3cdf9409ea28d2a41bfd045ae8dd44517d59706eac1be8cfd5543a9018b4ceaf42fc9e", 0xcf}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x64}, 0x1, 0x0, 0x0, 0x240088d0}, 0x40000) (async) wait4(r2, &(0x7f0000000e40), 0x2, &(0x7f0000000e80)) (async) socket$packet(0x11, 0x3, 0x300) (async) wait4(r3, &(0x7f0000000f40), 0x80000000, &(0x7f0000000f80)) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$sock(r12, &(0x7f0000002700)={&(0x7f0000001040)=@l2={0x1f, 0x3, @none, 0x1000, 0x2}, 0x80, &(0x7f0000002540)=[{&(0x7f00000010c0)="bc7f92eee72994f96efadd983d064f47f9e11d1a120846a5bd9151a6513e37c076b0955081462accd3580b1a84c128dba889c0788b0a115b417031117edcfea9a022d72f55633fdd9a34c3017b8ceb81fba4f873c5f2364c6a622a730165fcd01cd0beab22faafd6f95e0dff58f207e8cadf4e1e072fb3757755dc6b69635f335055ceed459059179fcaedbeefdf98627fcefcb9b1520633f37620516a74f9c66c73a564e7df8eb9", 0xa8}, {&(0x7f0000001180)="ed775ce165e459d8467771ab6e405590c2e340643bd55b10c91900761274696c26ae4c2baf6f3b975408aa72bd16aa0638d5c2ac3843a0c27efdcb11ec4b8ffa29228f80dae1d0cfdbd6c2a7c471712b25e0ac70d8079b3cdd65c908500542ced61f3067809bcba9f827ac3b3da2dd7d1bbf66a3689ab82be7a9b148a65248a4cf9c9f8fa05bb6115708d22815ff088a58012f19d834a0b3b566cee8553f5b71372b01f42ee4445bc9544c91af5ada6a7ffc76209e3737cd41075b36eed4ec429106ec99a5fc2ec9c6baa9330e21363da209431bd98ce6dc5279f00df7c7f4af4cda157e480226aa097d5d4428c7e2c78c02eea6dfcd07f4623179df2751928a7752bb2b3a43e1759b302b637d41dc6945e089a0eac52f90cffa806a58044248311222b57dd3b4a7ac09790c398a37b5a4c5c530461ed6888db3f7af3f74a4b6fb435a939630d97914d485b566be311e7b3541ba850a2338c46472087014b53c3f57ce84e67d450fc6c395e894431c2135fc30f7cabf74d87e45dc568a0b2afb632347692dfbea31e023740c785a44533bad66dff75833506b749992ba8c25a7e3bc9e8b7cefa482788dcebbc512ea811792d2a9b0ae763243f2e84600a93773a7854cbe197f5452df4a4e00f480259393d03dad1055927e4b0ce57506672d50c264311ec3624c5e685d8b4b4f68f8052d29d8bf1f6ad955ff6cbd3bdf5c8ae34218ee6fa183c57bb95468c549897b058bdd4f8c470b028c9896e0025ddb4fdbc238e7716bc9134d98ffaef6e1ade1aeb194715506d3a2a1ec3c6291ac0478f5a5835e27b0141b903ae0b92aa2b695f5216f3d210009d53d61f3623e0dac881f96d816a79edfe269af350fe049c6a5781f7fbb0959418e0f28c63aa75dfeb042d08127df660556c8e129b8996d351163d125d080accdbe692eab35605807546d75cb2e40c1c8270e262e1b5e032cb84a88902d7693182c81e841961fc008e1c1a047f953457c576f5aef2d26e9de2753320d29b559d1ab3bfc9192f4533c25f42f335fde08c766ea871d34fa750ff18551f17d0a52641602c53745e08baad930312f1d07a363c6a3a94cfd6c95b9c70ae0b9388ca6d9500783158b579936cb0c0b7877f58976d4c84741c9ef239318f1e40553c0fe51a666c6880ca5bdd55c2e89c713b9582c7dab1f4a818a588ecb04f7932a3df5b7097dc2b3bfe07c34400d48dc9a7764e17f716e8c57df80e916cdff1f78016cce6fb264309f68e58c0ed68a423539dd0ee93a19a2d3733294b4540795b26efe3d8ee47bd8d8f80e11eb0ca72bb966b08547d23db3609c1e8a26d0a2b786b44ae500ec7299378c72b969f7a2561413f3d827f3457d2a2b63dc2916bdd03fc312b955d6b53746b73114d98a767a7757b143028c5f709d0b4e978f60a2961357363b17d25e21afef869ab6d542f07cfaf9f6e78e9094f30af2762bf1c204d8ceb5199609959293fd16cd2d6e902d78520cfb2c3051d1157fd7bfc95fdc4925884b1bf420d42cb7d05751e4da55162317234bb00fc351d45b0eb5da8a586286332331817d18dc8560e7e3720e1de603ccc0ba33c3d12a78086af739ccea9869e283676d18074e8fb4bad0c5d806e791e3ca801b07b113268015c73bc06bfc973b0c80afd6777b338077aa8959d866bd628319cec8c535037baea3070c7ce44db97086c3a8c69ff26e49a7a9bca8b95e25932d4fb021827a8152183288775d5f6e5581e850ba80258729131ffa98e5b0a5c9698237006ed0b3ed4378abb047fa24256fad313795d1f513a305052cd0d6d51f5e493e017a7fb31c3ee43e666f660f122678cfd026b4b312d337cb38bb571e4a0d89f1f9c2b87cdb3d205f7cb9e2d123b83728c1e4c669bbfcb4f9923c272d4fb1067c3d09272cdf49d636ccd320767b394d754708316005e7e50cb976692997ead42bc916481b1aaeed53c85672aaa611c2b6d85d81113e36044544628df258582fb45ad13eb348d3c2aadd5aa8903471e6e290beb8e35572f5c4877eb5ef688a2bcf20f9068b0e43af81ed03a3b21a8c96907b841680afefb050e9175cb19bf0f731351d7f72585f75a9dc20bacaf302e0b3e0c1ea5f0e61eebccaad973d7c3fbc01f28df3571cde68278f4b53aee3584efd0fd866dfc5d84f1fd76aadaaa96c42eae59831f0803973a8bcb28421ba204abcd73906f26d853687947b835ae83a1abe4cfa5117903ceaf49c777f6ad8a0e33e283f7aea90b5c897d9f3109315254496995ff015004a5d568fa6935e696684649eedf9adc6961e192648cd1a6d62c8de0a3a1324d630d8a71092441f432df36abd5c135fe9471d7d8040a87fa5d3411487eedc59d10895e18f6aead80e4d7804e111a195042cae18c10171ccdbe581a9336519c69930fd4e260db2d921e90744aba65aee6e8051cc67f0d0646d4e5068bbf38d8077e9bb9be853f9df190908fe7fc4d23a431e377b906e04854b0f0a92c607420027492159b862e9a4bd2c15347d260d6b02a638418d4caed6c7b120133313531582cde5cc0324231e316d14098ad7077a9729f61c621ad7184f09d06c3e52ba590a9f0eade5f4e9d9dcd18bd43e71827b2bb03683d94c1d49d45ad7e4acf9f3672d086079dfd4173603c2567c2c6b5503b8064f8927667bb3bdb2a586de1ea016ecabd485888c58e041e5329904beed25f80dfc116368b08f2dcc1fec2c76d9ef9d0aa799366311cb37dcfb03f94e5898568502281eb7973a8a14c9b60e083e81deda627aebe178ed06295bc8b265c51eae7e3db6c4903749c3f615d15af4c1749d5cd41a22da9a76752f0429c53d05cbb67c2f00fe7645513849bd62cfbe771b0d05c815d539fe39f731f19a507feb97721d0ea9d86e52512ee9fb352d84b21caeb127254431ffc8625e429b9849930305331dcfe360d6bf0e289e4927094a5fda0cd2d23c1de5ca1b30bdb12d29b2c9baf95bd95b7c32651898d37e6231c99e5993d7c6ce2cfb01a12358e7bc13d8b9407d2737e38d7fc1a246ad3b155e5bd53d2cae0c3bab8735d3086f7dbfe5100e9c233269000ce6411b5ba47e9456d67e61e3029889e3d2882f110b472ba76069a566a2818d47f727f17c739562e96358e2b3db92ceb11601a10f7968a308b60517fdf489c3b9fce550ce076502c5899b4f87264e4908b07a77b660d32d6e53abbcbad9555aca594049b7448c17a296d6d44c5dbf6ae84f549fb04e9f7471537b48bc1d8a164705d91e78db25ff694684c8706b35b78a47733b352da6db8772219d007e8f1514956c17b3c7fd8f25ca0bedc1cf0622dd3fefc817271d0ef9448d7e1187634140a231d925c284b87029d912dc52143b4420ef912dcc50a4709dcc4592d565137d03c3b2c1368bfa10295b8626492b5c07abb02eb74f37131cd8f2fe3348102712c4d73fa375adcf7a3e1badabd1175ee9e5c213a630e2f017d2012e9866dbe5a72da7e206f5b8401f0f8e7106df8155a57efae948f8a000b8ed1b5f323d02f84965d3b346955886441fa3b0ec827c151c993dcb82680b23f0ea82a84b998ab6fa97dd4696a28d49075ef1b5645410b86c96911d45bb3dda6f3aec5bd7747b760223da6869675ca7b3f23256ab36086b8e340b0279408d8ac488f50306262fc5eed40b6a5006889b9dfc0f7d711aa069b08b0a9c1bdc8d3a95f181871dc1cd7d682f78388679f7db8514519246275d9c3f7a9a62cbbf1304a3079cf621852b828e954ed98d63fad4568c4b7d6db7199612456521f55dcfd58e142e8ea4f52d8b32c6bad9cc0176415d7cb3fed106842d0cdddf07fc55a3d68243f81409842c94904efe5be6259214bab52b95055e3508e0a8ceca3bedb1cc18d84f0b993dc20ed467204096830dfe5b8d2a470d3f78ae807e38dc23c3543d9752bbc6e3558289fc5eb5996f01fc62f96e4c65aae3226e8982c7ee52ddce35aa70035757e5e258b093870d91da1d273dc81da03769422d8c03c4e9e2d10a655eb8092f4a34fac1687484da0ade4352145fd77c2a54703876684bc2cb2334f6ef49b9ca57c7756bc3f1d4c2e0a8f430d16cc5cee5dc2cb6ccbcce288725ee692f015d0db0d03da4a11998123ef0bf7d4a28d00c62563db6ca02d08407343e8247772a4bfcfccd2e2b7e5d19e9f2edf4a09902f05eaa180bcb228fd101ea0f6f85ebfac4863548c5d03db704ca810e13005b56d4671dc070b47fe02b2836c902b186fbbd6a6b71b20ba35b9001c6e8c2f5735e7655c59acaba8595d890ce972ad74e8c5e901e668b7258bddc51d093cf7bb3006797fbb36c6ebf715bc952f11334fa9ce5cb86c8ca9b3065cde30a1eed4438e20936d93a87d6aa7dcf0531dbd614592850dd3a628b9260b70a7e3a584e840168f5b2c749165ba53f07421602343d96082215b50b6ad053afe165586c3b55e0fe1d1f6880e202550e1a7d1d82646abec89c4261522fd9a6253790e3cda15b62570844b93cccd8ad1c1153cb7a84053f2bd733921c2c8ad56c218a8fcfdc7f57f49c669d667eba361a78f5762d82e522211fb22c28803a435b154af9c69584d77e41ece3d2873f6aa083c4dd85b21b9c52775a93a04e0603586d8e230b208ffd046875840283f871c550eed09c76d72402036c8350cc91745e62d9060ff5a78a4d5e65154c7369525fba31f4a7151274c809ebc38f43bb6c1a57805b67abc96090a243008fa9736afba0bb95d636c594447b47f9e70feef7eb1353132f37633fa1358f56e8e20acb3cdaced377efa140c84c4b35504674103eaf083e78fba28afbb306382394ed974201bf338e17ab5837560201c0307589629ff59b45c02c885eff06848fdf329d9007089a492c596591a13c3f7ba4415d8726f0961e8fe3dcbc552ba3cb9295d6973744be86be2539214c63db082a6f8ff8fb20e9a6feeeabf007fbdee2f53d086ce23b3962f696e1e52e12298774a1d87dde73845acfdaeba8b4ce98496a50d6875fa2cda55297b948006442b22e02558aae43dbc43c10d91560ad848e1cef2045604de97695e0a24fd493addb1cb12157293b4007a77169492f27ac3444c39b98438e4a5e1831c41efa0db5b39a4dcefafc67a358ccaa240a9940e1c3a19484cf7be1eb3e0685f09e3154f6e15b3ac8a78dab61a2f3a2a1a76047ffa1bf05e66c0802fa52adf63f70c63acf03bec55265260cdd21d24f8d626e303d8997dbf35968d0d071591a55d93b396810213feaa80f4161e9ce2ec25b44688555d64a8164c93cf2cb5c25ecffd10b360d9be644b8fc90b1fadb9e245641b4e3bd0a7f7ea97618a34d11bcb64732684e0dbc9b6240fcc609dabe58edea29e74ff66021bde9d0aaee085f0f06c2db47eac4d440bdf712ef71a925a98c55af9dcbc16d641dcd8025705daa5f32f8c78cd605c8604a368f59137efb6c5ee43bb766351b8751a41b07c0f22244c3e0a4c3c7fa3a471c0926669a6aed15362c937e1039ab0c121fe8cc04192ff0ad27771c91ae5415f3e7a982f1e0e690d34f0346a0694bad9a83d8815377b5676bab9324d7435c2c203ded6369a51b0d86e1b4c7c9797629c0f320bbe214e7679309a967184c788fc606ad7c0007d599bb8a6991224a1bec7bc476e2b9508b0ff60fa779b9cccae789316d08b5ee6de7209f060a2ecbfa33294677301ec8a634d67b594274143394e11d9e115d647a9a1bb64db7f72d40592c6949970f353424ea8f266862f437bea8e4da67c97dec3ccb5cee7f127d59aad8f53cd07630cf5ecbd8b98aa6f5", 0x1000}, {&(0x7f0000002180)="18ee69cc6f4c554f39f4a66fcb42d1cd2c72c9bc0915dd518df7653fdad6f30430179f6190cd0eec78ae3c0c324b11cf7cabf40cec02a75e3691d6313e3b0097c162c491412a09050ed5fbabae9d755b543492f886c089e0a7e3b122bd", 0x5d}, {&(0x7f0000002200)="c4be1988", 0x4}, {&(0x7f0000002240)="b09bd33f581b07f8c464cc37c182d7e02c81ef697a64c64423bd5bc414ae", 0x1e}, {&(0x7f0000002280)="2d498b2bb9e0fc5f42e898ba068dc637eddf5f737d85e3940870d885acf32db75756a61a78d1b0539133675a62e4ad57e7dad60ded914d994f535551f118349644ab96cc0cef27ee49ee6f82b77ecf7356efb6c8196c2a023babaa80de64f77f2ef8acbe393eb9237220cc3225a3d83c9d67", 0x72}, {&(0x7f0000002300)="639e62d585edcb51cef4b50c8d9c48b174aea5d33192b7de2c039d82a242b32b67a512caf27ba47b6203c77b75475ba0fb94ddd4db06a8c19fd3d1c8bf9901e0730809e16c1d9e32968ffd0dd35c979ea258ce17e7d3213ba05c02cd9bab01740ee8abebad4711f3f21f6d1b5f49e63d446c1020cb7f0bab3fabff545e9b3a93632302ebca66a2af970d0dbf0000a22670d8640c8a5fde449f6c33e94adb3a80cfd4e408c4d978a19760153b34", 0xad}, {&(0x7f00000023c0)="2b20666d8ac34f3b135ed84a7b2eea77a4f2ee41f59c0d76706b8f0bafa34f83165241ba0b35693858ab3d40abc3e3449bb62e9bc6ef7758503a5adce81100e306e8ef791e64fb0bed5a0626a7b1788920c8ea907ad6baa00cc37842a795f187e18de5d905a4b67186a56f0f4f02b07c4556cc44e58ef7317847b9eb3a9a70f485930f5b6102b1d89f4c92ede4d83b935ea478b73ca48494fe6b2fc048d1165a8b4bfd45b2e24d6d906167b6987a52c89a0071bd80b3436e91ef96f7730a", 0xbe}, {&(0x7f0000002480)="db141db46a5126d144ad65809e23bd30499d28c02d0fd8ba2c23ae916acd86a433a0aedfd753a556f6449e96313ede26089ac7d01ba0084da57a08e5f589d8f52b28189bbd", 0x45}, {&(0x7f0000002500)="7808f8ed563de32a30e4258612be3859c4f9ac8ad34af16f6956ba79b71ee5569cec7f742a0715c83a0f", 0x2a}], 0xa, &(0x7f0000002600)=[@mark={{0x14, 0x1, 0x24, 0x4e}}, @mark={{0x14, 0x1, 0x24, 0x7b81}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0xd8}, 0x1) (async) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002740), 0x24503, 0x0) setsockopt$PNPIPE_HANDLE(r13, 0x113, 0x3, &(0x7f0000002780)=0x200, 0x4) (async) ioctl$DRM_IOCTL_ADD_BUFS(r13, 0xc0206416, &(0x7f00000027c0)={0xaf, 0x7000, 0x5f, 0x2, 0x3, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000002800)) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000045}, 0x20008040) 4.249943564s ago: executing program 3 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 12) 4.100929542s ago: executing program 3 (id=738): write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003", 0x1f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0xb, 0x9, 0xfffffffffffffffd, 0x10000003, 0x10000, 0x3, 0x4002004c2, 0x10002, 0x9, 0x3, 0x400, 0x4, 0x89, 0xfffffffffffffffe, 0x8, 0x8b], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000e0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 3.664771458s ago: executing program 5 (id=740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (rerun: 32) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e24, @multicast1}, {0x1, @remote}, 0x48, {0x2, 0x4e24, @multicast1}, 'batadv0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="e46ef17f9a27c67f3ad3c45f58d8e5fc908714506bd618def16e03248ab2c2b7f72f883761dbee6e603e49e7c740e7e6e089d1de6bb2529ed1acf6a3162fa0466b9ba8e9fb2057fbf382ee5b65a3b8afafa0906274a8d092009ec62f7debea2a337b", 0x62}], 0x1, 0x0, 0x0, 0x3fe213806be4a3d1}, 0x4000) (async) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/231, 0xe7}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) 3.488403563s ago: executing program 5 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x22, 0x2, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0xc, 0x34, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x0, 0xc7}]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004180) 3.357800582s ago: executing program 6 (id=742): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffff"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r6) (async) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="240000001200010027bd700000000000310000000c000000000000000000000004003180"], 0x24}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.212824776s ago: executing program 5 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x1f4, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.961284582s ago: executing program 5 (id=744): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000406307331040000102030109028e000301ffc010080b0002010130070904000000010130000a2402102a0007000100132403ff01040606020200000005007f0080000d24070202"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x6, 0x401, {{0xd, 0x4, 0x0, 0x2e, 0x34, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0xf, 0xa5, [@remote, @multicast1, @multicast2]}, @ssrr={0x89, 0xb, 0xa3, [@local, @loopback]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r6, &(0x7f0000000300)={0x11, 0xf5, r7, 0x1, 0xc, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r8, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b60c5352a6eb6f7d34384ff6feafb4e3"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "ab58ba42571acdfb1229e5c11218df56"}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.224841113s ago: executing program 4 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000400)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.411058621s ago: executing program 4 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x200000, 0x180) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}}) 1.343903526s ago: executing program 6 (id=749): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/224, 0xe0}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x3, 0x6, 0x3) (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/224, 0xe0}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x3, 0x6, 0x3) preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/202, 0xca}], 0x1, 0x70, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040801}, 0x40000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)='\r\n', 0x2, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000003a80)=""/4051, 0xfd3, 0x10023, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000500)={r0, &(0x7f00000003c0)='\x00', 0x40002, &(0x7f0000000400)={@align=0xc7, {0x9, 0xc, 0xcd2c, 0x816}}, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x800000}) 1.108784533s ago: executing program 6 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.074832211s ago: executing program 4 (id=751): syz_usb_connect(0x6, 0xb1, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x33, 0x72, 0xd6, 0x8, 0x5d8, 0x810b, 0xc3d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x8, 0x90, 0x5, "", [{{0x9, 0x4, 0x63, 0x7, 0x0, 0xf5, 0x94, 0x9f, 0x5, [@generic={0x55, 0x1f, "a57f010444bdfa60c2f386578a9b6e233595afd3fa6e7ecc6d37cc2b49ccfe06a15c56a73fcf6fb6145b38a02212bdc56e28b61e1273070ffbabb80740d62a6c0a5c395f5e2d061a97724fc7fc087712c1df1a"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x81, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x1, 0x6, 0xf9}, @as_header={0x7, 0x24, 0x1, 0xa, 0x8, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc, 0x0, 0x2, 0x4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x0, 0x75, 0x3, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x3, 0x6, 0x0, "79a08508e45f6365"}]}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x407}}]}) 933.093108ms ago: executing program 6 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x300, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 890.385299ms ago: executing program 3 (id=753): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x16, 0x4) 784.772538ms ago: executing program 5 (id=754): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x882, 0x0, 0x80}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000002600)={0x100e, 0x1, 0x1ff, 0x5d, 0x92, 0x5, 0x7}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, r7, 0x101, 0x123, 0x80234, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffd72}]}, 0x1c}}, 0x2804c800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf251e00000008000100", @ANYRES32=0x0, @ANYBLOB="002b4c3364fe98139deacb0000000000", @ANYRES32=r8, @ANYBLOB="080004000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="4701000000000000003220000000000000000000", 0x14, 0x81, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0xe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x2802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000001180)=0x40) ioctl$SNDCTL_DSP_SYNC(r12, 0x5001, 0x0) syz_usb_ep_write(r11, 0x81, 0x0, 0x0) 753.458791ms ago: executing program 6 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 14) 688.990635ms ago: executing program 3 (id=756): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x7, 0x4, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)={0x14, 0x14, 0x229, 0x0, 0x25dfdbfd, {0x2}}, 0x14}}, 0x880) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x1, 0x82, 0x8, 0x3ff, 0x1dce5ece}, {0xffffffff, 0xfffffff9, 0x6, 0x37c, 0x45, 0x8}], ['\x00', '\x00']}) 544.725425ms ago: executing program 6 (id=757): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 452.522875ms ago: executing program 3 (id=758): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000000)=0x20e9b, 0x4) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0xc0105303, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 'queue0\x00'}) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 323.297196ms ago: executing program 4 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='overlay\x00', 0x36, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414330000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000fc79000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000200000028bd7000000000000200040000000000000000006800120067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e65726963290000000000000000000000000000000000000000000000000000e000000080"], 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x22a, 0x2a}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 173.105001ms ago: executing program 4 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 0s ago: executing program 4 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x133481, 0x0) fcntl$notify(r0, 0x402, 0x80000017) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r3, 0x131, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000d00)={0x14, &(0x7f0000000100)={0x20, 0x31, 0x37, {0x37, 0x31, "c6006a8f4e5f0ecf66b851e5620190972aafcd4c0d54c8a6118bf51fbd15cf2ea610579bb375557e6dbd13b0c994886452a73925fd"}}, &(0x7f0000000c40)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "ae14f66ef6749d2e88cd8b4d435d56e7d08e1a8b178bb8e5272296e92d9f92ada089aed13c78ec658a0a774030843fb2a410c8b13b7c2c46a059351bd93250896d77518643995d2ed66a31edbc2fc4b474952ecab0d015d7033a81f2aa3da44caa2156ebe8b7dfa53d385182405d00dd3ba7567c1414671090cb931a026f043bd14d55c503a47398ec6b03ee198840ca27337856ff9421fb82690fb5b3b91e206753b21e30470a4768c822d9f35d"}}}, &(0x7f0000001280)={0x1c, &(0x7f0000000d40)={0x20, 0x10, 0x7e, "60e6365ab5b9e20cd16b1d1a558ef44b5d7d092796a821abd5f99ad126b2fd6eebc23295ef42e4d8ea20513b861a09468d1100a6d6006b4573087f04bc0ce19be521b894756c9c4a8c54ad10de766170e5a4dbe7d878988334885abf8912364130378d5573c1f990ec7d1732eaca3b49315f3359b9cd7791578be6ac4ffd"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001240)}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x210, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000080), {[{{@arp={@local, @loopback, 0x0, 0x0, 0x1, 0xd, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0x7fff, 0x5, 0x0, 0x3, 'virt_wifi0\x00', 'wg1\x00', {0xff}, {0xff}, 0x0, 0x211}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0x7, {0x8000000000000000}}}}, {{@arp={@multicast2, @rand_addr=0x64010100, 0xff, 0xff000000, 0x10, 0xc, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3ff, 0xb, 0x2, 0x5, 0x9, 0x8000, 'hsr0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x1c0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @empty, @local, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @remote, 0xffffff00, 0x0, 0xc, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x9ce, 0x0, 0x7, 0x1, 0xedd7, 'veth0_virt_wifi\x00', 'veth1_vlan\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1346, 0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_usb_control_io$printer(r1, &(0x7f0000000840)={0x14, &(0x7f0000000240)={0x20, 0x0, 0xc3, {0xc3, 0x11, "f0761143be75271216fe757b40053511cd360a3094f23e954302bc86b601ccebf72d0425c03f721598e9c3113a685aa096cc462da0a6cda10ba2f1d6b89eb0e1d05671e4bc76062b0d71a5892eb2270224e56aee5166b60d884a2417f259480d79ef67a9cba654c1c79ec5115fb293de9d6323c5888a93f3871fc1a45c6a3bfa7fbd37ffc4757526b6f3afd516fc89ff31ac631608ae889ac2c025ab8bcf284ae73ec1004ba0ea6f3e19644bebe3ae74a5ea49f81dd92801d1f100a631e513279a"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x0, 0x16, 0x3b, "c94a25eaab1e9dfacf9798c809f944c3c34f5a4658eaaa330a6452d0c09c402a6848c7780e5e5cc738e5e821a08eae71595e80def6277df0944ab0"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000980)=ANY=[@ANYBLOB="20006f000000006d5e5e164dbbdfcd8fc9a34adf5c6f2d8a01c72c84134b1309db5f4988b17ea12e74f93b713de8d8aaa68a3692ca4cbc1fc67f4366169eecd08a95814dcb65d3a7df0ebf8101e7ece1ea9e17f7ec841a09e8c163be15d010bd7601791ee773f17fc08511128e56348ec91741099c"], &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x49}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xe}}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000b00)=ANY=[], 0x8) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0xfffffffb}, {{&(0x7f00000012c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0xbcfc}, {{&(0x7f0000002400)=@qipcrtr, 0x28, &(0x7f00000035c0)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/120, 0x78}, {&(0x7f0000003500)=""/132, 0x84}], 0x3, &(0x7f0000003600)=""/172, 0xac}, 0x45}], 0x3, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): e number 5 [ 239.901123][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.135583][ T7666] chnl_net:caif_netlink_parms(): no params data found [ 240.319516][ T7703] netlink: 'syz.3.494': attribute type 13 has an invalid length. [ 240.319893][ T7699] IPVS: Unknown mcast interface: pimreg0 [ 240.465273][ T60] Bluetooth: hci5: command tx timeout [ 240.776751][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.782501][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.782821][ T7666] bridge_slave_0: entered allmulticast mode [ 240.786282][ T7666] bridge_slave_0: entered promiscuous mode [ 240.805210][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.805588][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.805910][ T7666] bridge_slave_1: entered allmulticast mode [ 240.810740][ T7666] bridge_slave_1: entered promiscuous mode [ 240.836161][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 240.962688][ T7666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.973022][ T7666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.978224][ T9] usb 5-1: device descriptor read/64, error -71 [ 241.161932][ T7721] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 241.161951][ T7721] PKCS7: Only support pkcs7_signedData type [ 241.162433][ T7721] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 241.162446][ T7721] PKCS7: Only support pkcs7_signedData type [ 241.208501][ T7666] team0: Port device team_slave_0 added [ 241.228150][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.335114][ T7666] team0: Port device team_slave_1 added [ 241.358100][ T9] usb 5-1: device descriptor read/64, error -71 [ 241.423946][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.423960][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.423977][ T7666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.430737][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.430754][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.430782][ T7666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.527161][ T9] usb usb5-port1: attempt power cycle [ 241.542800][ T7666] hsr_slave_0: entered promiscuous mode [ 241.544167][ T7666] hsr_slave_1: entered promiscuous mode [ 241.545232][ T7666] debugfs: 'hsr0' already exists in 'hsr' [ 241.545257][ T7666] Cannot create hsr debugfs directory [ 241.878153][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.899408][ T9] usb 5-1: device descriptor read/8, error -71 [ 241.946113][ T7732] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.503'. [ 242.138571][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.158878][ T9] usb 5-1: device descriptor read/8, error -71 [ 242.272895][ T9] usb usb5-port1: unable to enumerate USB device [ 242.300800][ T5813] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 242.495093][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 242.495154][ T5813] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 242.495180][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.542004][ T60] Bluetooth: hci5: command tx timeout [ 242.575899][ T5813] usb 4-1: config 0 descriptor?? [ 242.584022][ T7737] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.845449][ T5813] hid (null): global environment stack underflow [ 242.876824][ T5813] hid_parser_main: 28 callbacks suppressed [ 242.876851][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.876882][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.876909][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.876944][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.876969][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.876995][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.877018][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.877042][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.877069][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.877095][ T5813] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 242.964186][ T5813] asus 0003:0B05:1ABE.0007: global environment stack underflow [ 242.964211][ T5813] asus 0003:0B05:1ABE.0007: item 0 1 1 11 parsing failed [ 242.966281][ T5813] asus 0003:0B05:1ABE.0007: Asus hid parse failed: -22 [ 242.966410][ T5813] asus 0003:0B05:1ABE.0007: probe with driver asus failed with error -22 [ 243.011912][ T5813] usb 4-1: USB disconnect, device number 51 [ 243.277179][ T7666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.315851][ T7666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.316655][ T7666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.363743][ T7666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.371905][ T7666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.568767][ T5813] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 243.667314][ T7666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.677721][ T7666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.736532][ T5813] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 243.736567][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 243.736587][ T5813] usb 4-1: Product: syz [ 243.736601][ T5813] usb 4-1: SerialNumber: syz [ 243.772167][ T5813] usb 4-1: config 0 descriptor?? [ 243.782578][ T7666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.056122][ T7765] loop3: detected capacity change from 0 to 14 [ 244.155553][ T7775] netlink: 'syz.3.508': attribute type 11 has an invalid length. [ 244.166836][ T5813] hso 4-1:0.0: Failed to find INT IN ep [ 244.496367][ T32] IPVS: starting estimator thread 0... [ 244.603337][ T32] libceph: connect (1)[b::]:6789 error -101 [ 244.604149][ T32] libceph: mon0 (1)[b::]:6789 connect error [ 244.621410][ T5829] Bluetooth: hci5: command tx timeout [ 244.633445][ T7765] Dev loop3: unable to read RDB block 14 [ 244.633483][ T7765] loop3: AHDI p3 p4 [ 244.633541][ T7765] loop3: partition table partially beyond EOD, truncated [ 244.650807][ T5937] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 244.692970][ T7781] IPVS: using max 8 ests per chain, 19200 per kthread [ 244.725903][ T32] libceph: connect (1)[b::]:6789 error -101 [ 244.726195][ T32] libceph: mon0 (1)[b::]:6789 connect error [ 244.745732][ T7766] ceph: No mds server is up or the cluster is laggy [ 244.817066][ T7666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.925102][ T7765] loop3: p3 start 1702000233 is beyond EOD, truncated [ 244.974155][ T7666] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.975951][ T9] usb 4-1: USB disconnect, device number 52 [ 245.001919][ T32] libceph: connect (1)[b::]:6789 error -101 [ 245.002136][ T32] libceph: mon0 (1)[b::]:6789 connect error [ 245.024606][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.024773][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.127170][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.127354][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.721007][ T5937] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 245.724551][ T7786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 245.724754][ T7786] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 245.863242][ T7786] fuse: Bad value for 'fd' [ 245.892621][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 245.892660][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 245.892685][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 245.919408][ T7793] fuse: Bad value for 'fd' [ 245.928863][ T5937] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 245.928894][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.928915][ T5937] usb 5-1: Product: syz [ 245.928938][ T5937] usb 5-1: Manufacturer: syz [ 245.928952][ T5937] usb 5-1: SerialNumber: syz [ 245.934839][ T5937] usb 5-1: config 0 descriptor?? [ 245.971024][ T7787] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 246.044207][ T5937] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 246.181089][ T1228] usb 5-1: USB disconnect, device number 25 [ 246.313267][ T7800] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.474210][ T7802] netlink: 'syz.5.516': attribute type 10 has an invalid length. [ 246.474237][ T7802] netlink: 'syz.5.516': attribute type 29 has an invalid length. [ 246.563913][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.698032][ T5829] Bluetooth: hci5: command tx timeout [ 247.390360][ T5937] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 247.545679][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 247.570948][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.570986][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.571030][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.571055][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.606542][ T5937] usb 4-1: config 0 descriptor?? [ 247.616893][ T5937] hub 4-1:0.0: USB hub found [ 247.808260][ T5813] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.829906][ T5937] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 247.982524][ T7666] veth0_vlan: entered promiscuous mode [ 248.084390][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 248.084527][ T5937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.234875][ T5937] usb 4-1: USB disconnect, device number 53 [ 248.316931][ T7666] veth1_vlan: entered promiscuous mode [ 248.388198][ T1228] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 248.452930][ T7666] veth0_macvtap: entered promiscuous mode [ 248.469292][ T7666] veth1_macvtap: entered promiscuous mode [ 248.531369][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.553849][ T1228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.554420][ T1228] usb 5-1: not running at top speed; connect to a high speed hub [ 248.555868][ T1228] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 248.555894][ T1228] usb 5-1: config 0 has no interface number 0 [ 248.555924][ T1228] usb 5-1: config 0 interface 230 has no altsetting 0 [ 248.562274][ T1228] usb 5-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=4f.dc [ 248.562306][ T1228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.562329][ T1228] usb 5-1: Product: syz [ 248.562344][ T1228] usb 5-1: Manufacturer: syz [ 248.562359][ T1228] usb 5-1: SerialNumber: syz [ 248.571475][ T1228] usb 5-1: config 0 descriptor?? [ 248.710709][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.851726][ T44] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.877007][ T44] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.877610][ T1228] gspca_main: spca500-2.14.0 probing 06bd:0404 [ 248.883960][ T7853] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 248.884612][ T44] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.924495][ T44] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.002512][ T1228] usb 5-1: USB disconnect, device number 26 [ 249.271205][ T5920] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 249.498818][ T5920] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 249.498856][ T5920] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 249.498881][ T5920] usb 4-1: config 1 interface 0 has no altsetting 0 [ 249.501897][ T5920] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 249.501927][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.501957][ T5920] usb 4-1: Product: syz [ 249.501972][ T5920] usb 4-1: Manufacturer: syz [ 249.501986][ T5920] usb 4-1: SerialNumber: syz [ 249.711041][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.722619][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.879663][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.880836][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.885189][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.886288][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.931657][ T7855] netlink: 'syz.3.530': attribute type 12 has an invalid length. [ 250.931683][ T7855] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.530'. [ 251.002632][ T5920] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:d2:1f:4f:58:38 [ 251.110895][ T5937] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 251.196988][ T5920] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 251.221051][ T5920] usb 4-1: USB disconnect, device number 54 [ 251.234346][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.234368][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.278803][ T5937] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.278823][ T5937] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.280340][ T5937] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.280371][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.280394][ T5937] usb 6-1: SerialNumber: syz [ 251.564676][ T5937] usb 6-1: 0:2 : does not exist [ 251.828187][ T32] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 251.903519][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.904671][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.905366][ T5937] usb 6-1: USB disconnect, device number 7 [ 252.000395][ T7885] tc_dump_action: action bad kind [ 252.038258][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 252.040621][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.040885][ T32] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 252.040913][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.040933][ T32] usb 5-1: config 0 has no interface number 0 [ 252.040967][ T32] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 252.041017][ T32] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 252.041046][ T32] usb 5-1: config 0 interface 255 has no altsetting 0 [ 252.044360][ T32] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 252.044390][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.044507][ T32] usb 5-1: Product: syz [ 252.044522][ T32] usb 5-1: Manufacturer: syz [ 252.044536][ T32] usb 5-1: SerialNumber: syz [ 252.117126][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.117148][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.184760][ T32] usb 5-1: config 0 descriptor?? [ 252.242696][ T5920] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 252.829800][ T32] IPVS: starting estimator thread 0... [ 252.937657][ T7900] IPVS: using max 8 ests per chain, 19200 per kthread [ 253.420986][ T5894] usb 5-1: USB disconnect, device number 27 [ 253.469407][ T32] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 253.618390][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 253.622124][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.622181][ T32] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 253.622206][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.632336][ T32] usb 6-1: config 0 descriptor?? [ 253.638510][ T32] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 253.842685][ T32] gspca_sonixj: reg_r err -32 [ 253.842779][ T32] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 254.458184][ T5894] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 254.499795][ T37] audit: type=1326 audit(1776584816.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10740c819 code=0x0 [ 254.505325][ T37] audit: type=1326 audit(1776584816.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10740c819 code=0x0 [ 254.631344][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.631384][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 254.631399][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.636554][ T5894] usb 5-1: config 0 descriptor?? [ 254.655278][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 254.771820][ T32] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 254.839148][ T5920] usb 6-1: USB disconnect, device number 8 [ 254.979487][ T32] usb 7-1: unable to get BOS descriptor or descriptor too short [ 254.985471][ T32] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.985500][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.985521][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.985595][ T32] usb 7-1: config 1 has no interface number 0 [ 254.992622][ T5177] bcm5974 5-1:0.0: could not read from device [ 254.993477][ T32] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 254.993504][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.993522][ T32] usb 7-1: Product: syz [ 254.993536][ T32] usb 7-1: Manufacturer: syz [ 254.993550][ T32] usb 7-1: SerialNumber: syz [ 255.161097][ T5177] bcm5974 5-1:0.0: could not read from device [ 255.303821][ T5894] usb 5-1: USB disconnect, device number 28 [ 255.389596][ T5930] bcm5974 5-1:0.0: could not read from device [ 255.438913][ T32] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.566444][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 255.582442][ T5930] udevd[5930]: Error opening device "/dev/input/event4": No such device [ 255.582602][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.582724][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.582848][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.582961][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.856179][ T32] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 255.863448][ T32] usb 7-1: USB disconnect, device number 2 [ 255.970322][ T7947] can0: slcan on ttyS3. [ 256.000098][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000199][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.165892][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.205380][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.711734][ T7946] can0 (unregistered): slcan off ttyS3. [ 304.138265][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 304.764657][ T37] audit: type=1326 audit(1776584866.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10740c819 code=0x0 [ 304.803058][ T7993] FAULT_INJECTION: forcing a failure. [ 304.803058][ T7993] name failslab, interval 1, probability 0, space 0, times 1 [ 304.803099][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.3.569 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.803130][ T7993] Tainted: [L]=SOFTLOCKUP [ 304.803138][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.803151][ T7993] Call Trace: [ 304.803159][ T7993] [ 304.803168][ T7993] dump_stack_lvl+0xe8/0x150 [ 304.803198][ T7993] should_fail_ex+0x46b/0x600 [ 304.803231][ T7993] should_failslab+0xa8/0x100 [ 304.803266][ T7993] kmem_cache_alloc_noprof+0x87/0x680 [ 304.803295][ T7993] ? prepare_creds+0x30/0x820 [ 304.803329][ T7993] prepare_creds+0x30/0x820 [ 304.803359][ T7993] ? get_ruleset_from_fd+0x1ae/0x230 [ 304.803396][ T7993] __se_sys_landlock_restrict_self+0x19f/0x810 [ 304.803439][ T7993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.803463][ T7993] do_syscall_64+0x15f/0xf80 [ 304.803484][ T7993] ? trace_irq_disable+0x3b/0x140 [ 304.803509][ T7993] ? clear_bhb_loop+0x40/0x90 [ 304.803536][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.803557][ T7993] RIP: 0033:0x7fa10740c819 [ 304.803577][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.803595][ T7993] RSP: 002b:00007fa105645028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 304.803618][ T7993] RAX: ffffffffffffffda RBX: 00007fa107686090 RCX: 00007fa10740c819 [ 304.803634][ T7993] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 304.803646][ T7993] RBP: 00007fa105645090 R08: 0000000000000000 R09: 0000000000000000 [ 304.803659][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.803671][ T7993] R13: 00007fa107686128 R14: 00007fa107686090 R15: 00007ffd9f506268 [ 304.803703][ T7993] [ 304.883118][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.566'. [ 305.009687][ T32] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 305.168055][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 305.171707][ T32] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 305.171740][ T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.171762][ T32] usb 7-1: config 0 has no interface number 0 [ 305.171794][ T32] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 305.171856][ T32] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 305.171887][ T32] usb 7-1: config 0 interface 255 has no altsetting 0 [ 305.181100][ T32] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 305.181141][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.181161][ T32] usb 7-1: Product: syz [ 305.181175][ T32] usb 7-1: Manufacturer: syz [ 305.181189][ T32] usb 7-1: SerialNumber: syz [ 305.194874][ T32] usb 7-1: config 0 descriptor?? [ 305.198356][ T820] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 305.340135][ T37] audit: type=1326 audit(1776584867.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.4.570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b04c819 code=0x0 [ 305.403132][ T820] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 305.403155][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.403177][ T820] usb 6-1: Product: syz [ 305.403186][ T820] usb 6-1: Manufacturer: syz [ 305.403195][ T820] usb 6-1: SerialNumber: syz [ 305.437721][ T820] usb 6-1: config 0 descriptor?? [ 305.462256][ T820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 306.512178][ T32] usb 7-1: USB disconnect, device number 3 [ 306.588163][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 306.671222][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 306.738066][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 306.741129][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.747038][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 306.747070][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.747093][ T10] usb 5-1: Product: syz [ 306.747109][ T10] usb 5-1: Manufacturer: syz [ 306.747124][ T10] usb 5-1: SerialNumber: syz [ 306.959597][ T8012] overlayfs: missing 'lowerdir' [ 307.235616][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.236159][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.271052][ T820] gspca_sunplus: reg_w_riv err -71 [ 307.271162][ T820] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 307.298967][ T10] usb 5-1: USB disconnect, device number 29 [ 307.304270][ T820] usb 6-1: USB disconnect, device number 9 [ 307.398059][ T5896] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 307.561926][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.561968][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.562010][ T5896] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 307.562037][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.612795][ T5896] usb 4-1: config 0 descriptor?? [ 307.871688][ T8023] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.578'. [ 308.063887][ T5896] kye 0003:0458:5016.0008: control desc unexpectedly large [ 308.077442][ T37] audit: type=1326 audit(1776584870.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.6.579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08550dc819 code=0x0 [ 308.109820][ T37] audit: type=1326 audit(1776584870.140:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.4.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b04c819 code=0x0 [ 308.116870][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input23 [ 308.122913][ T8029] FAULT_INJECTION: forcing a failure. [ 308.122913][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 308.122948][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.6.579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.122976][ T8029] Tainted: [L]=SOFTLOCKUP [ 308.122983][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.122995][ T8029] Call Trace: [ 308.123003][ T8029] [ 308.123010][ T8029] dump_stack_lvl+0xe8/0x150 [ 308.123038][ T8029] should_fail_ex+0x46b/0x600 [ 308.123080][ T8029] should_failslab+0xa8/0x100 [ 308.123110][ T8029] __kmalloc_noprof+0xdf/0x7b0 [ 308.123135][ T8029] ? trace_kmem_cache_alloc+0x29/0xe0 [ 308.123160][ T8029] ? security_prepare_creds+0x52/0x360 [ 308.123188][ T8029] security_prepare_creds+0x52/0x360 [ 308.123213][ T8029] prepare_creds+0x57d/0x820 [ 308.123244][ T8029] __se_sys_landlock_restrict_self+0x19f/0x810 [ 308.123281][ T8029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.123302][ T8029] do_syscall_64+0x15f/0xf80 [ 308.123322][ T8029] ? trace_irq_disable+0x3b/0x140 [ 308.123344][ T8029] ? clear_bhb_loop+0x40/0x90 [ 308.123368][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.123388][ T8029] RIP: 0033:0x7f08550dc819 [ 308.123406][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.123423][ T8029] RSP: 002b:00007f0853315028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 308.123445][ T8029] RAX: ffffffffffffffda RBX: 00007f0855356090 RCX: 00007f08550dc819 [ 308.123459][ T8029] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 308.123471][ T8029] RBP: 00007f0853315090 R08: 0000000000000000 R09: 0000000000000000 [ 308.123483][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.123495][ T8029] R13: 00007f0855356128 R14: 00007f0855356090 R15: 00007ffe5008c9a8 [ 308.123525][ T8029] [ 308.524070][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input24 [ 308.539837][ T820] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.700907][ T5896] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 308.727897][ T820] usb 6-1: Using ep0 maxpacket: 16 [ 308.730583][ T820] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 308.732659][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.732686][ T820] usb 6-1: config 4 has no interface number 0 [ 308.732734][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.732765][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.732791][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.732813][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.742203][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.742234][ T820] usb 6-1: config 4 has no interface number 0 [ 308.742281][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.742312][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.742341][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.742362][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.745192][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.745220][ T820] usb 6-1: config 4 has no interface number 0 [ 308.745263][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.745292][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.745322][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.745346][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.750404][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.750515][ T820] usb 6-1: config 4 has no interface number 0 [ 308.750573][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.750600][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.750627][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.750648][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.763088][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.763120][ T820] usb 6-1: config 4 has no interface number 0 [ 308.763165][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.763193][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.763220][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.763242][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.789756][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.789786][ T820] usb 6-1: config 4 has no interface number 0 [ 308.789831][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.789859][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.789887][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.789909][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.799972][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.800001][ T820] usb 6-1: config 4 has no interface number 0 [ 308.800048][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.800084][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.800169][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.800419][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.801995][ T820] usb 6-1: config 4 has an invalid interface number: 38 but max is 0 [ 308.802018][ T820] usb 6-1: config 4 has no interface number 0 [ 308.802060][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.802097][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 308.802123][ T820] usb 6-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.802145][ T820] usb 6-1: config 4 interface 38 has no altsetting 0 [ 308.814985][ T820] usb 6-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a2.ed [ 308.815015][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.815035][ T820] usb 6-1: Product: syz [ 308.815050][ T820] usb 6-1: Manufacturer: syz [ 308.815063][ T820] usb 6-1: SerialNumber: syz [ 309.247348][ T5896] usb 4-1: USB disconnect, device number 56 [ 309.414446][ T8034] fido_id[8034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 309.529961][ T8038] overlayfs: missing 'lowerdir' [ 309.828797][ T820] rndis_host 6-1:4.38: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 309.969676][ T820] usb 6-1: USB disconnect, device number 10 [ 309.990721][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 310.144873][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 310.147250][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.147278][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.184607][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=821a, bcdDevice= 0.40 [ 310.184642][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.184665][ T10] usb 7-1: Product: syz [ 310.184681][ T10] usb 7-1: Manufacturer: syz [ 310.184696][ T10] usb 7-1: SerialNumber: syz [ 310.488607][ T10] usb 7-1: 0:1 : does not exist [ 310.488717][ T10] usb 7-1: Focusrite Scarlett Gen 4 Mixer Driver enabled (pid=0x821a); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 310.488907][ T10] usb 7-1: Error initialising Scarlett Gen 4 Mixer Driver: -22 [ 310.634674][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 310.648534][ T10] usb 7-1: USB disconnect, device number 4 [ 310.721994][ T8009] udevd[8009]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.895782][ T37] audit: type=1326 audit(1776584872.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b04c819 code=0x0 [ 310.941719][ T8066] FAULT_INJECTION: forcing a failure. [ 310.941719][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 310.941761][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.4.591 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.941793][ T8066] Tainted: [L]=SOFTLOCKUP [ 310.941800][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.941813][ T8066] Call Trace: [ 310.941823][ T8066] [ 310.941832][ T8066] dump_stack_lvl+0xe8/0x150 [ 310.941864][ T8066] should_fail_ex+0x46b/0x600 [ 310.941898][ T8066] should_failslab+0xa8/0x100 [ 310.941930][ T8066] __kmalloc_noprof+0xdf/0x7b0 [ 310.941965][ T8066] ? landlock_merge_ruleset+0xbb/0x900 [ 310.941994][ T8066] landlock_merge_ruleset+0xbb/0x900 [ 310.942020][ T8066] ? prepare_creds+0x591/0x820 [ 310.942065][ T8066] __se_sys_landlock_restrict_self+0x2b1/0x810 [ 310.942109][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.942133][ T8066] do_syscall_64+0x15f/0xf80 [ 310.942156][ T8066] ? trace_irq_disable+0x3b/0x140 [ 310.942182][ T8066] ? clear_bhb_loop+0x40/0x90 [ 310.942210][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.942232][ T8066] RIP: 0033:0x7f9b5b04c819 [ 310.942253][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.942272][ T8066] RSP: 002b:00007f9b5927d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 310.942298][ T8066] RAX: ffffffffffffffda RBX: 00007f9b5b2c6090 RCX: 00007f9b5b04c819 [ 310.942313][ T8066] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 310.942326][ T8066] RBP: 00007f9b5927d090 R08: 0000000000000000 R09: 0000000000000000 [ 310.942340][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.942353][ T8066] R13: 00007f9b5b2c6128 R14: 00007f9b5b2c6090 R15: 00007ffcd36f00d8 [ 310.942386][ T8066] [ 311.188201][ T820] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 311.189402][ T8068] overlayfs: missing 'workdir' [ 311.210633][ T37] audit: type=1326 audit(1776584873.240:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10740c819 code=0x0 [ 311.365019][ T820] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 311.365046][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.365059][ T820] usb 6-1: Product: syz [ 311.365067][ T820] usb 6-1: Manufacturer: syz [ 311.365076][ T820] usb 6-1: SerialNumber: syz [ 311.372599][ T820] usb 6-1: config 0 descriptor?? [ 311.394326][ T820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 311.581734][ T32] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.770831][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 311.774508][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.774540][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.806094][ T32] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 311.806200][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.806224][ T32] usb 7-1: Product: syz [ 311.806240][ T32] usb 7-1: Manufacturer: syz [ 311.806253][ T32] usb 7-1: SerialNumber: syz [ 312.069459][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.072646][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.232481][ T5920] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 312.388751][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 312.391341][ T5920] usb 5-1: config 9 has an invalid interface number: 33 but max is 0 [ 312.391372][ T5920] usb 5-1: config 9 has no interface number 0 [ 312.391473][ T5920] usb 5-1: config 9 interface 33 has no altsetting 0 [ 312.399249][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=8f.d3 [ 312.399282][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.399362][ T5920] usb 5-1: Product: syz [ 312.399377][ T5920] usb 5-1: Manufacturer: syz [ 312.399391][ T5920] usb 5-1: SerialNumber: syz [ 312.614474][ T32] usb 7-1: USB disconnect, device number 5 [ 312.854787][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.864731][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.904151][ T820] gspca_sunplus: reg_w_riv err -71 [ 312.904244][ T820] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 312.942204][ T820] usb 6-1: USB disconnect, device number 11 [ 312.999946][ T5920] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 313.002274][ T5920] gspca_sn9c20x: Write register 1000 failed -71 [ 313.002294][ T5920] gspca_sn9c20x: Device initialization failed [ 313.002381][ T5920] gspca_sn9c20x 5-1:9.33: probe with driver gspca_sn9c20x failed with error -71 [ 313.187111][ T5920] usb 5-1: USB disconnect, device number 30 [ 313.503722][ T8102] overlayfs: missing 'workdir' [ 313.606940][ T37] audit: type=1326 audit(1776584875.640:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b04c819 code=0x0 [ 313.673757][ T8105] FAULT_INJECTION: forcing a failure. [ 313.673757][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 313.673785][ T8105] CPU: 1 UID: 0 PID: 8105 Comm: syz.4.603 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.673803][ T8105] Tainted: [L]=SOFTLOCKUP [ 313.673808][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.673816][ T8105] Call Trace: [ 313.673821][ T8105] [ 313.673827][ T8105] dump_stack_lvl+0xe8/0x150 [ 313.673847][ T8105] should_fail_ex+0x46b/0x600 [ 313.673867][ T8105] should_failslab+0xa8/0x100 [ 313.673887][ T8105] __kmalloc_cache_noprof+0x84/0x690 [ 313.673904][ T8105] ? landlock_merge_ruleset+0x1c1/0x900 [ 313.673928][ T8105] landlock_merge_ruleset+0x1c1/0x900 [ 313.673959][ T8105] __se_sys_landlock_restrict_self+0x2b1/0x810 [ 313.673993][ T8105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.674008][ T8105] do_syscall_64+0x15f/0xf80 [ 313.674020][ T8105] ? trace_irq_disable+0x3b/0x140 [ 313.674035][ T8105] ? clear_bhb_loop+0x40/0x90 [ 313.674051][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.674063][ T8105] RIP: 0033:0x7f9b5b04c819 [ 313.674076][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.674087][ T8105] RSP: 002b:00007f9b5927d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 313.674102][ T8105] RAX: ffffffffffffffda RBX: 00007f9b5b2c6090 RCX: 00007f9b5b04c819 [ 313.674111][ T8105] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 313.674119][ T8105] RBP: 00007f9b5927d090 R08: 0000000000000000 R09: 0000000000000000 [ 313.674127][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.674134][ T8105] R13: 00007f9b5b2c6128 R14: 00007f9b5b2c6090 R15: 00007ffcd36f00d8 [ 313.674152][ T8105] [ 314.158258][ T5920] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 314.337315][ T5920] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 314.337344][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.337367][ T5920] usb 4-1: Product: syz [ 314.337383][ T5920] usb 4-1: Manufacturer: syz [ 314.337398][ T5920] usb 4-1: SerialNumber: syz [ 314.360880][ T5920] usb 4-1: config 0 descriptor?? [ 314.589400][ T5920] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 314.589421][ T5920] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 314.589446][ T5920] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 314.738091][ T820] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 314.884516][ T820] usb 7-1: device descriptor read/64, error -71 [ 315.017010][ T5920] usb 4-1: USB disconnect, device number 57 [ 315.118117][ T820] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 315.288541][ T820] usb 7-1: device descriptor read/64, error -71 [ 315.399302][ T820] usb usb7-port1: attempt power cycle [ 315.578219][ T5920] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 315.704724][ T8143] overlayfs: missing 'workdir' [ 315.739160][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 315.765138][ T820] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 315.780872][ T820] usb 7-1: device descriptor read/8, error -71 [ 315.783662][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.785280][ T5920] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 315.785308][ T5920] usb 6-1: config 1 has no interface number 0 [ 315.785383][ T5920] usb 6-1: config 1 interface 232 has no altsetting 0 [ 315.792151][ T5920] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 315.792180][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.792200][ T5920] usb 6-1: Product: syz [ 315.792213][ T5920] usb 6-1: Manufacturer: syz [ 315.792227][ T5920] usb 6-1: SerialNumber: syz [ 316.042443][ T820] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 316.069753][ T820] usb 7-1: device descriptor read/8, error -71 [ 316.074598][ T5920] hub 6-1:1.232: bad descriptor, ignoring hub [ 316.074639][ T5920] hub 6-1:1.232: probe with driver hub failed with error -5 [ 316.077353][ T5920] option 6-1:1.232: GSM modem (1-port) converter detected [ 316.119537][ T5920] usb 6-1: USB disconnect, device number 12 [ 316.124598][ T5920] option 6-1:1.232: device disconnected [ 316.146653][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 316.178877][ T820] usb usb7-port1: unable to enumerate USB device [ 316.308114][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 316.313136][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 316.313211][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.313230][ T10] usb 5-1: Product: syz [ 316.313251][ T10] usb 5-1: Manufacturer: syz [ 316.313261][ T10] usb 5-1: SerialNumber: syz [ 316.317720][ T10] usb 5-1: config 0 descriptor?? [ 316.318237][ T5813] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 316.375538][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 316.497657][ T5813] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 316.497693][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.497714][ T5813] usb 4-1: Product: syz [ 316.497730][ T5813] usb 4-1: Manufacturer: syz [ 316.497745][ T5813] usb 4-1: SerialNumber: syz [ 316.505663][ T5813] usb 4-1: config 0 descriptor?? [ 316.548510][ T5813] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 316.751673][ T37] audit: type=1326 audit(1776584878.790:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.5.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83f3bc819 code=0x0 [ 316.805895][ T8150] FAULT_INJECTION: forcing a failure. [ 316.805895][ T8150] name failslab, interval 1, probability 0, space 0, times 0 [ 316.806024][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.5.615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.806057][ T8150] Tainted: [L]=SOFTLOCKUP [ 316.806065][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.806076][ T8150] Call Trace: [ 316.806084][ T8150] [ 316.806099][ T8150] dump_stack_lvl+0xe8/0x150 [ 316.806130][ T8150] should_fail_ex+0x46b/0x600 [ 316.806164][ T8150] should_failslab+0xa8/0x100 [ 316.806197][ T8150] __kmalloc_cache_noprof+0x84/0x690 [ 316.806266][ T8150] ? get_mm_exe_file+0x1c/0x170 [ 316.806297][ T8150] ? landlock_init_hierarchy_log+0x9e/0x5f0 [ 316.806331][ T8150] landlock_init_hierarchy_log+0x9e/0x5f0 [ 316.806363][ T8150] landlock_merge_ruleset+0x666/0x900 [ 316.806396][ T8150] __se_sys_landlock_restrict_self+0x2b1/0x810 [ 316.806436][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.806460][ T8150] do_syscall_64+0x15f/0xf80 [ 316.806485][ T8150] ? clear_bhb_loop+0x40/0x90 [ 316.806508][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.806526][ T8150] RIP: 0033:0x7ff83f3bc819 [ 316.806543][ T8150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.806557][ T8150] RSP: 002b:00007ff83d5ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 316.806578][ T8150] RAX: ffffffffffffffda RBX: 00007ff83f636090 RCX: 00007ff83f3bc819 [ 316.806592][ T8150] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 316.806604][ T8150] RBP: 00007ff83d5ed090 R08: 0000000000000000 R09: 0000000000000000 [ 316.806615][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.806625][ T8150] R13: 00007ff83f636128 R14: 00007ff83f636090 R15: 00007fffbbe7c9e8 [ 316.806651][ T8150] [ 316.806974][ T10] gspca_se401: ExtraFeatures: 48 [ 316.806990][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807004][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807017][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807030][ T10] gspca_se401: Frame size: 1x0 bayer [ 316.807041][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807055][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807067][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807080][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807092][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 316.807123][ T10] gspca_se401: Frame size: 68x8196 bayer [ 317.126426][ T10] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 317.176194][ T10] usb 5-1: USB disconnect, device number 31 [ 317.465290][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465529][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.484875][ T8009] udevd[8009]: setting mode of /dev/bus/usb/005/031 to 020664 failed: No such file or directory [ 317.487438][ T8009] udevd[8009]: setting owner of /dev/bus/usb/005/031 to uid=0, gid=0 failed: No such file or directory [ 318.160462][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.163357][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.184507][ T5813] gspca_sunplus: reg_w_riv err -71 [ 318.184610][ T5813] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 318.208023][ T5813] usb 4-1: USB disconnect, device number 58 [ 318.268211][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 318.418052][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 318.516503][ T8162] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 318.529624][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 318.529661][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.529683][ T10] usb 7-1: Product: syz [ 318.529698][ T10] usb 7-1: Manufacturer: syz [ 318.529715][ T10] usb 7-1: SerialNumber: syz [ 318.573994][ T10] usb 7-1: config 0 descriptor?? [ 318.607713][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 319.055385][ T10] gspca_spca508: reg_read err -71 [ 319.055807][ T10] gspca_spca508: reg_read err -71 [ 319.056269][ T10] gspca_spca508: reg_read err -71 [ 319.056777][ T10] gspca_spca508: reg_read err -71 [ 319.057337][ T10] gspca_spca508: reg write: error -71 [ 319.057438][ T10] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 319.095898][ T10] usb 7-1: USB disconnect, device number 10 [ 319.283620][ T8177] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 319.444636][ T8179] 9p: Bad value for 'rfdno' [ 319.458073][ T5896] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 319.572691][ T37] audit: type=1326 audit(1776584881.610:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.5.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83f3bc819 code=0x0 [ 319.624821][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.624852][ T5896] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.624909][ T5896] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 319.624935][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.632796][ T8184] FAULT_INJECTION: forcing a failure. [ 319.632796][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 319.632832][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.5.626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.632859][ T8184] Tainted: [L]=SOFTLOCKUP [ 319.632866][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 319.632878][ T8184] Call Trace: [ 319.632885][ T8184] [ 319.632894][ T8184] dump_stack_lvl+0xe8/0x150 [ 319.632921][ T8184] should_fail_ex+0x46b/0x600 [ 319.632953][ T8184] should_failslab+0xa8/0x100 [ 319.632992][ T8184] __kmalloc_noprof+0xdf/0x7b0 [ 319.633019][ T8184] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 319.633050][ T8184] landlock_init_hierarchy_log+0x16c/0x5f0 [ 319.633079][ T8184] landlock_merge_ruleset+0x666/0x900 [ 319.633108][ T8184] __se_sys_landlock_restrict_self+0x2b1/0x810 [ 319.633148][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.633169][ T8184] do_syscall_64+0x15f/0xf80 [ 319.633190][ T8184] ? trace_irq_disable+0x3b/0x140 [ 319.633212][ T8184] ? clear_bhb_loop+0x40/0x90 [ 319.633236][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.633256][ T8184] RIP: 0033:0x7ff83f3bc819 [ 319.633274][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.633291][ T8184] RSP: 002b:00007ff83d5ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 319.633313][ T8184] RAX: ffffffffffffffda RBX: 00007ff83f636090 RCX: 00007ff83f3bc819 [ 319.633328][ T8184] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 319.633340][ T8184] RBP: 00007ff83d5ed090 R08: 0000000000000000 R09: 0000000000000000 [ 319.633352][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.633363][ T8184] R13: 00007ff83f636128 R14: 00007ff83f636090 R15: 00007fffbbe7c9e8 [ 319.633393][ T8184] [ 319.875225][ T5896] usb 4-1: config 0 descriptor?? [ 319.889424][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 319.889478][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 319.944482][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 319.945691][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 319.945757][ T5896] usb 4-1: media controller created [ 319.970804][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.080957][ T8175] dvb-usb: bulk message failed: -22 (2/0) [ 320.107146][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 320.107325][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.111540][ T8190] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 320.111565][ T8190] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 320.111824][ T8190] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 320.111841][ T8190] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 320.132797][ T8175] overlayfs: invalid origin (0000006f7665726c617900d8050a81b89200000001090290090200000000090400000000000000000000000000000000000000000000) [ 320.192368][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 320.208102][ T5813] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 320.219073][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 320.219100][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.323225][ T5896] usb 4-1: USB disconnect, device number 59 [ 320.654469][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 320.972260][ T37] audit: type=1326 audit(1776584883.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b04c819 code=0x7ffc0000 [ 320.972550][ T37] audit: type=1326 audit(1776584883.010:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b04c819 code=0x7ffc0000 [ 320.974092][ T37] audit: type=1326 audit(1776584883.010:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b5b04c819 code=0x7ffc0000 [ 320.974385][ T37] audit: type=1326 audit(1776584883.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b04c819 code=0x7ffc0000 [ 320.974673][ T37] audit: type=1326 audit(1776584883.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b04c819 code=0x7ffc0000 [ 321.101558][ T5937] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 321.222625][ T8207] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 321.296978][ T5937] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 321.297015][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.297038][ T5937] usb 6-1: Product: syz [ 321.297053][ T5937] usb 6-1: Manufacturer: syz [ 321.297069][ T5937] usb 6-1: SerialNumber: syz [ 321.343535][ T5937] usb 6-1: config 0 descriptor?? [ 321.366972][ T5937] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 321.523084][ T8212] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.635'. [ 321.523198][ T8212] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 321.576596][ T8214] FAULT_INJECTION: forcing a failure. [ 321.576596][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 321.576634][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.4.634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.576665][ T8214] Tainted: [L]=SOFTLOCKUP [ 321.576673][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.576686][ T8214] Call Trace: [ 321.576694][ T8214] [ 321.576703][ T8214] dump_stack_lvl+0xe8/0x150 [ 321.576731][ T8214] should_fail_ex+0x46b/0x600 [ 321.576755][ T8214] _copy_from_user+0x2d/0xb0 [ 321.576774][ T8214] memdup_user+0x5e/0xd0 [ 321.576792][ T8214] strndup_user+0x68/0xd0 [ 321.576816][ T8214] __se_sys_mount+0x9d/0x420 [ 321.576844][ T8214] ? ksys_write+0x248/0x270 [ 321.576877][ T8214] ? __pfx___se_sys_mount+0x10/0x10 [ 321.576907][ T8214] ? __x64_sys_mount+0x20/0xc0 [ 321.576926][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.576948][ T8214] do_syscall_64+0x15f/0xf80 [ 321.576962][ T8214] ? trace_irq_disable+0x3b/0x140 [ 321.576985][ T8214] ? clear_bhb_loop+0x40/0x90 [ 321.577012][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.577035][ T8214] RIP: 0033:0x7f9b5b04c819 [ 321.577054][ T8214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.577071][ T8214] RSP: 002b:00007f9b5929e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.577095][ T8214] RAX: ffffffffffffffda RBX: 00007f9b5b2c5fa0 RCX: 00007f9b5b04c819 [ 321.577111][ T8214] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 321.577125][ T8214] RBP: 00007f9b5929e090 R08: 0000200000000200 R09: 0000000000000000 [ 321.577138][ T8214] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 321.577151][ T8214] R13: 00007f9b5b2c6038 R14: 00007f9b5b2c5fa0 R15: 00007ffcd36f00d8 [ 321.577183][ T8214] [ 321.629439][ T1228] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 321.958056][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 322.013970][ T1228] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 322.014071][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.100811][ T1228] pvrusb2: Hardware description: Terratec Grabster AV400 [ 322.100832][ T1228] pvrusb2: ********** [ 322.100838][ T1228] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 322.100850][ T1228] pvrusb2: Important functionality might not be entirely working. [ 322.100860][ T1228] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 322.101080][ T1228] pvrusb2: ********** [ 322.301885][ T2366] pvrusb2: Invalid write control endpoint [ 322.518772][ T37] audit: type=1326 audit(1776584884.550:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b04c819 code=0x0 [ 322.575688][ T8227] FAULT_INJECTION: forcing a failure. [ 322.575688][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 322.575726][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.4.638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.575757][ T8227] Tainted: [L]=SOFTLOCKUP [ 322.575763][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 322.575774][ T8227] Call Trace: [ 322.575782][ T8227] [ 322.575789][ T8227] dump_stack_lvl+0xe8/0x150 [ 322.575817][ T8227] should_fail_ex+0x46b/0x600 [ 322.575845][ T8227] should_failslab+0xa8/0x100 [ 322.575873][ T8227] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 322.575913][ T8227] ? landlock_restrict_sibling_threads+0x61e/0x1210 [ 322.575939][ T8227] ? landlock_restrict_sibling_threads+0x61e/0x1210 [ 322.575962][ T8227] krealloc_node_align_noprof+0x19a/0x390 [ 322.575997][ T8227] ? landlock_restrict_sibling_threads+0x295/0x1210 [ 322.576025][ T8227] landlock_restrict_sibling_threads+0x61e/0x1210 [ 322.576052][ T8227] ? preempt_count_add+0x91/0x190 [ 322.576070][ T8227] ? landlock_restrict_sibling_threads+0x295/0x1210 [ 322.576095][ T8227] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 322.576166][ T8227] ? landlock_put_ruleset+0x10/0xb0 [ 322.576193][ T8227] __se_sys_landlock_restrict_self+0x545/0x810 [ 322.576233][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.576257][ T8227] do_syscall_64+0x15f/0xf80 [ 322.576279][ T8227] ? trace_irq_disable+0x3b/0x140 [ 322.576303][ T8227] ? clear_bhb_loop+0x40/0x90 [ 322.576329][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.576350][ T8227] RIP: 0033:0x7f9b5b04c819 [ 322.576372][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.576390][ T8227] RSP: 002b:00007f9b5927d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 322.576415][ T8227] RAX: ffffffffffffffda RBX: 00007f9b5b2c6090 RCX: 00007f9b5b04c819 [ 322.576431][ T8227] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 322.576443][ T8227] RBP: 00007f9b5927d090 R08: 0000000000000000 R09: 0000000000000000 [ 322.576456][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.576469][ T8227] R13: 00007f9b5b2c6128 R14: 00007f9b5b2c6090 R15: 00007ffcd36f00d8 [ 322.576501][ T8227] [ 322.726156][ T2366] pvrusb2: Invalid write control endpoint [ 322.726171][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 322.726180][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 322.726189][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 322.726199][ T2366] pvrusb2: Device being rendered inoperable [ 322.730275][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 322.730352][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 322.748198][ T2366] pvrusb2: Attached sub-driver cx25840 [ 322.748214][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 322.748224][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 322.914890][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.916157][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.970918][ T5937] gspca_sunplus: reg_w_riv err -71 [ 322.971030][ T5937] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 322.984975][ T8234] overlayfs: failed to resolve './file1': -2 [ 323.048178][ T5937] usb 6-1: USB disconnect, device number 13 [ 323.357059][ T5937] usb 4-1: USB disconnect, device number 60 [ 323.512773][ T8237] netlink: 'syz.4.641': attribute type 2 has an invalid length. [ 323.512798][ T8237] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.641'. [ 323.646241][ T8236] block nbd0: server does not support multiple connections per device. [ 323.785299][ T8244] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 323.874996][ T8236] block nbd0: shutting down sockets [ 323.982061][ T8248] FAULT_INJECTION: forcing a failure. [ 323.982061][ T8248] name failslab, interval 1, probability 0, space 0, times 0 [ 323.982088][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.5.644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.982107][ T8248] Tainted: [L]=SOFTLOCKUP [ 323.982112][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.982120][ T8248] Call Trace: [ 323.982125][ T8248] [ 323.982130][ T8248] dump_stack_lvl+0xe8/0x150 [ 323.982149][ T8248] should_fail_ex+0x46b/0x600 [ 323.982169][ T8248] should_failslab+0xa8/0x100 [ 323.982189][ T8248] __kmalloc_cache_noprof+0x84/0x690 [ 323.982208][ T8248] ? __se_sys_mount+0x166/0x420 [ 323.982224][ T8248] ? memdup_user+0x99/0xd0 [ 323.982240][ T8248] __se_sys_mount+0x166/0x420 [ 323.982258][ T8248] ? __pfx___se_sys_mount+0x10/0x10 [ 323.982276][ T8248] ? __x64_sys_mount+0x20/0xc0 [ 323.982289][ T8248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.982303][ T8248] do_syscall_64+0x15f/0xf80 [ 323.982316][ T8248] ? trace_irq_disable+0x3b/0x140 [ 323.982331][ T8248] ? clear_bhb_loop+0x40/0x90 [ 323.982346][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.982358][ T8248] RIP: 0033:0x7ff83f3bc819 [ 323.982371][ T8248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.982382][ T8248] RSP: 002b:00007ff83d60e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 323.982397][ T8248] RAX: ffffffffffffffda RBX: 00007ff83f635fa0 RCX: 00007ff83f3bc819 [ 323.982409][ T8248] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 323.982418][ T8248] RBP: 00007ff83d60e090 R08: 0000200000000200 R09: 0000000000000000 [ 323.982426][ T8248] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 323.982433][ T8248] R13: 00007ff83f636038 R14: 00007ff83f635fa0 R15: 00007fffbbe7c9e8 [ 323.982451][ T8248] [ 324.319697][ T5937] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 324.475342][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.475382][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.475426][ T5937] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 324.475453][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.498178][ T5920] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 324.556725][ T5937] usb 7-1: config 0 descriptor?? [ 324.618090][ T5829] Bluetooth: hci1: command 0x206a tx timeout [ 324.671069][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 324.671109][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 324.671251][ T5920] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 324.671279][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.764351][ T5920] usb 5-1: config 0 descriptor?? [ 324.779245][ T8251] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.779717][ T37] audit: type=1326 audit(1776584886.810:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.3.650" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10740c819 code=0x0 [ 324.873700][ T8262] FAULT_INJECTION: forcing a failure. [ 324.873700][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 324.873747][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.3.650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.873776][ T8262] Tainted: [L]=SOFTLOCKUP [ 324.873783][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.873794][ T8262] Call Trace: [ 324.873801][ T8262] [ 324.873808][ T8262] dump_stack_lvl+0xe8/0x150 [ 324.873835][ T8262] should_fail_ex+0x46b/0x600 [ 324.873863][ T8262] should_failslab+0xa8/0x100 [ 324.873891][ T8262] __kmalloc_cache_noprof+0x84/0x690 [ 324.873915][ T8262] ? krealloc_node_align_noprof+0x235/0x390 [ 324.873941][ T8262] ? landlock_restrict_sibling_threads+0x66a/0x1210 [ 324.873969][ T8262] landlock_restrict_sibling_threads+0x66a/0x1210 [ 324.873996][ T8262] ? preempt_count_add+0x91/0x190 [ 324.874013][ T8262] ? landlock_restrict_sibling_threads+0x295/0x1210 [ 324.874039][ T8262] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 324.874098][ T8262] ? landlock_put_ruleset+0x10/0xb0 [ 324.874130][ T8262] __se_sys_landlock_restrict_self+0x545/0x810 [ 324.874165][ T8262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.874186][ T8262] do_syscall_64+0x15f/0xf80 [ 324.874203][ T8262] ? trace_irq_disable+0x3b/0x140 [ 324.874225][ T8262] ? clear_bhb_loop+0x40/0x90 [ 324.874249][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.874266][ T8262] RIP: 0033:0x7fa10740c819 [ 324.874283][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.874298][ T8262] RSP: 002b:00007fa105645028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 324.874320][ T8262] RAX: ffffffffffffffda RBX: 00007fa107686090 RCX: 00007fa10740c819 [ 324.874333][ T8262] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000003 [ 324.874344][ T8262] RBP: 00007fa105645090 R08: 0000000000000000 R09: 0000000000000000 [ 324.874354][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.874365][ T8262] R13: 00007fa107686128 R14: 00007fa107686090 R15: 00007ffd9f506268 [ 324.874393][ T8262] [ 325.193048][ T5937] hid_parser_main: 302 callbacks suppressed [ 325.193077][ T5937] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 325.228310][ T5937] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 325.356613][ T5937] cp2112 0003:10C4:EA90.0009: Part Number: 0x47 Device Version: 0xD0 [ 325.614166][ T5920] usb 5-1: string descriptor 0 read error: -71 [ 325.614701][ T5920] uclogic 0003:5543:0081.000A: failed retrieving string descriptor #200: -71 [ 325.614757][ T5920] uclogic 0003:5543:0081.000A: failed retrieving pen parameters: -71 [ 325.614772][ T5920] uclogic 0003:5543:0081.000A: failed probing pen v2 parameters: -71 [ 325.614822][ T5920] uclogic 0003:5543:0081.000A: failed probing parameters: -71 [ 325.614933][ T5920] uclogic 0003:5543:0081.000A: probe with driver uclogic failed with error -71 [ 325.701506][ T5920] usb 5-1: USB disconnect, device number 33 [ 325.752265][ T5937] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 325.836753][ T5937] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 325.858120][ T5937] usb 7-1: USB disconnect, device number 11 [ 325.975227][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 326.058274][ T820] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 326.204492][ T8278] FAULT_INJECTION: forcing a failure. [ 326.204492][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.204534][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.4.655 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.204564][ T8278] Tainted: [L]=SOFTLOCKUP [ 326.204573][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.204586][ T8278] Call Trace: [ 326.204595][ T8278] [ 326.204604][ T8278] dump_stack_lvl+0xe8/0x150 [ 326.204633][ T8278] should_fail_ex+0x46b/0x600 [ 326.204668][ T8278] _copy_from_user+0x2d/0xb0 [ 326.204701][ T8278] __se_sys_mount+0x18b/0x420 [ 326.204733][ T8278] ? __pfx___se_sys_mount+0x10/0x10 [ 326.204765][ T8278] ? __x64_sys_mount+0x20/0xc0 [ 326.204790][ T8278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.204815][ T8278] do_syscall_64+0x15f/0xf80 [ 326.204837][ T8278] ? trace_irq_disable+0x3b/0x140 [ 326.204861][ T8278] ? clear_bhb_loop+0x40/0x90 [ 326.204898][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.204921][ T8278] RIP: 0033:0x7f9b5b04c819 [ 326.204949][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.204967][ T8278] RSP: 002b:00007f9b5929e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.204991][ T8278] RAX: ffffffffffffffda RBX: 00007f9b5b2c5fa0 RCX: 00007f9b5b04c819 [ 326.205008][ T8278] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 326.205023][ T8278] RBP: 00007f9b5929e090 R08: 0000200000000200 R09: 0000000000000000 [ 326.205037][ T8278] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 326.205050][ T8278] R13: 00007f9b5b2c6038 R14: 00007f9b5b2c5fa0 R15: 00007ffcd36f00d8 [ 326.205084][ T8278] [ 326.297389][ T820] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 326.297422][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.297446][ T820] usb 6-1: Product: syz [ 326.297463][ T820] usb 6-1: Manufacturer: syz [ 326.297479][ T820] usb 6-1: SerialNumber: syz [ 326.311119][ T8278] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 326.449636][ T820] usb 6-1: config 0 descriptor?? [ 326.455828][ T820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 326.678205][ T5896] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 326.809621][ T5896] usb 7-1: device descriptor read/64, error -71 [ 327.048144][ T5896] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 327.118072][ T5937] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 327.158183][ T5920] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 327.178749][ T5896] usb 7-1: device descriptor read/64, error -71 [ 327.288581][ T5920] usb 4-1: device descriptor read/64, error -71 [ 327.289327][ T5896] usb usb7-port1: attempt power cycle [ 327.374124][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.375186][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 327.375225][ T5937] usb 5-1: can't read configurations, error -71 [ 327.538260][ T5920] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 327.648194][ T5896] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 327.682177][ T5896] usb 7-1: device descriptor read/8, error -71 [ 327.682619][ T5920] usb 4-1: device descriptor read/64, error -71 [ 327.798694][ T5920] usb usb4-port1: attempt power cycle [ 327.877378][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.878507][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.894670][ T820] gspca_sunplus: reg_w_riv err -71 [ 327.894770][ T820] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 327.926385][ T5896] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 327.939929][ T820] usb 6-1: USB disconnect, device number 14 [ 327.955931][ T5896] usb 7-1: device descriptor read/8, error -71 [ 328.058717][ T5896] usb usb7-port1: unable to enumerate USB device [ 328.189017][ T5920] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 328.209027][ T5920] usb 4-1: device descriptor read/8, error -71 [ 328.418126][ T5937] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 328.458316][ T5920] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 328.490588][ T5920] usb 4-1: device descriptor read/8, error -71 [ 328.573500][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.575960][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.575988][ T5937] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 328.585956][ T5937] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 328.585990][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.586009][ T5937] usb 5-1: Product: syz [ 328.586024][ T5937] usb 5-1: Manufacturer: syz [ 328.586037][ T5937] usb 5-1: SerialNumber: syz [ 328.645032][ T5920] usb usb4-port1: unable to enumerate USB device [ 328.660557][ T37] audit: type=1326 audit(1776584890.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.5.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83f3bc819 code=0x0 [ 328.710424][ T8292] FAULT_INJECTION: forcing a failure. [ 328.710424][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.710452][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.5.661 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.710471][ T8292] Tainted: [L]=SOFTLOCKUP [ 328.710476][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.710484][ T8292] Call Trace: [ 328.710493][ T8292] [ 328.710498][ T8292] dump_stack_lvl+0xe8/0x150 [ 328.710527][ T8292] should_fail_ex+0x46b/0x600 [ 328.710548][ T8292] _copy_to_user+0x31/0xb0 [ 328.710569][ T8292] simple_read_from_buffer+0xe1/0x170 [ 328.710588][ T8292] proc_fail_nth_read+0x1be/0x230 [ 328.710606][ T8292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.710623][ T8292] ? rw_verify_area+0x2ac/0x4e0 [ 328.710640][ T8292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.710656][ T8292] vfs_read+0x212/0xa80 [ 328.710678][ T8292] ? __pfx_vfs_read+0x10/0x10 [ 328.710708][ T8292] ksys_read+0x156/0x270 [ 328.710727][ T8292] ? __pfx_ksys_read+0x10/0x10 [ 328.710748][ T8292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.710762][ T8292] do_syscall_64+0x15f/0xf80 [ 328.710777][ T8292] ? clear_bhb_loop+0x40/0x90 [ 328.710800][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.710813][ T8292] RIP: 0033:0x7ff83f37d04e [ 328.710825][ T8292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.710837][ T8292] RSP: 002b:00007ff83d60dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.710851][ T8292] RAX: ffffffffffffffda RBX: 00007ff83d60e6c0 RCX: 00007ff83f37d04e [ 328.710860][ T8292] RDX: 000000000000000f RSI: 00007ff83d60e0a0 RDI: 0000000000000005 [ 328.710868][ T8292] RBP: 00007ff83d60e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.710876][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.710884][ T8292] R13: 00007ff83f636038 R14: 00007ff83f635fa0 R15: 00007fffbbe7c9e8 [ 328.710908][ T8292] [ 328.979668][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 329.014004][ T8296] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 329.109942][ T8290] tipc: Started in network mode [ 329.109964][ T8290] tipc: Node identity 010130000a24010e002e000000005f3a, cluster identity 4711 [ 329.352037][ T5937] usb 5-1: us122l: couldn't allocate write buffer [ 329.352797][ T5937] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 329.368828][ T5937] usb 5-1: USB disconnect, device number 35 [ 329.415552][ T8009] udevd[8009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.488824][ T820] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 329.592811][ T8303] FAULT_INJECTION: forcing a failure. [ 329.592811][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 329.592839][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.6.665 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 329.592858][ T8303] Tainted: [L]=SOFTLOCKUP [ 329.592863][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.592871][ T8303] Call Trace: [ 329.592876][ T8303] [ 329.592882][ T8303] dump_stack_lvl+0xe8/0x150 [ 329.592900][ T8303] should_fail_ex+0x46b/0x600 [ 329.592920][ T8303] should_failslab+0xa8/0x100 [ 329.592949][ T8303] kmem_cache_alloc_noprof+0x87/0x680 [ 329.592967][ T8303] ? do_getname+0x2e/0x250 [ 329.592982][ T8303] do_getname+0x2e/0x250 [ 329.592994][ T8303] ? user_path_at+0x1e/0x160 [ 329.593012][ T8303] user_path_at+0x2a/0x160 [ 329.593041][ T8303] __se_sys_mount+0x2dc/0x420 [ 329.593072][ T8303] ? __pfx___se_sys_mount+0x10/0x10 [ 329.593104][ T8303] ? __x64_sys_mount+0x20/0xc0 [ 329.593126][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.593149][ T8303] do_syscall_64+0x15f/0xf80 [ 329.593170][ T8303] ? trace_irq_disable+0x3b/0x140 [ 329.593185][ T8303] ? clear_bhb_loop+0x40/0x90 [ 329.593201][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.593214][ T8303] RIP: 0033:0x7f08550dc819 [ 329.593227][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.593239][ T8303] RSP: 002b:00007f0853336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.593253][ T8303] RAX: ffffffffffffffda RBX: 00007f0855355fa0 RCX: 00007f08550dc819 [ 329.593263][ T8303] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 329.593271][ T8303] RBP: 00007f0853336090 R08: 0000200000000200 R09: 0000000000000000 [ 329.593279][ T8303] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 329.593286][ T8303] R13: 00007f0855356038 R14: 00007f0855355fa0 R15: 00007ffe5008c9a8 [ 329.593304][ T8303] [ 329.681696][ T820] usb 6-1: Using ep0 maxpacket: 16 [ 329.735453][ T820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.735496][ T820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.827390][ T820] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.827427][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.827449][ T820] usb 6-1: Product: syz [ 329.827465][ T820] usb 6-1: Manufacturer: syz [ 329.827480][ T820] usb 6-1: SerialNumber: syz [ 329.904823][ T820] usb 6-1: 0:2 : does not exist [ 330.243661][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.244722][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.259657][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.670'. [ 330.379509][ T820] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 330.462159][ T820] usb 6-1: USB disconnect, device number 15 [ 330.551172][ T8009] udevd[8009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.628919][ T1228] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 330.794497][ T1228] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 330.794535][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.794555][ T1228] usb 4-1: Product: syz [ 330.794569][ T1228] usb 4-1: Manufacturer: syz [ 330.794585][ T1228] usb 4-1: SerialNumber: syz [ 330.829933][ T1228] usb 4-1: config 0 descriptor?? [ 330.853641][ T1228] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 331.443780][ T8339] FAULT_INJECTION: forcing a failure. [ 331.443780][ T8339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.443822][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.6.676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.443859][ T8339] Tainted: [L]=SOFTLOCKUP [ 331.443867][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.443880][ T8339] Call Trace: [ 331.443888][ T8339] [ 331.443898][ T8339] dump_stack_lvl+0xe8/0x150 [ 331.443927][ T8339] should_fail_ex+0x46b/0x600 [ 331.443961][ T8339] strncpy_from_user+0x36/0x2b0 [ 331.443992][ T8339] do_getname+0x77/0x250 [ 331.444019][ T8339] user_path_at+0x2a/0x160 [ 331.444050][ T8339] __se_sys_mount+0x2dc/0x420 [ 331.444152][ T8339] ? __pfx___se_sys_mount+0x10/0x10 [ 331.444181][ T8339] ? __x64_sys_mount+0x20/0xc0 [ 331.444203][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.444226][ T8339] do_syscall_64+0x15f/0xf80 [ 331.444245][ T8339] ? trace_irq_disable+0x3b/0x140 [ 331.444270][ T8339] ? clear_bhb_loop+0x40/0x90 [ 331.444295][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.444315][ T8339] RIP: 0033:0x7f08550dc819 [ 331.444336][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.444355][ T8339] RSP: 002b:00007f0853336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.444378][ T8339] RAX: ffffffffffffffda RBX: 00007f0855355fa0 RCX: 00007f08550dc819 [ 331.444393][ T8339] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 331.444408][ T8339] RBP: 00007f0853336090 R08: 0000200000000200 R09: 0000000000000000 [ 331.444423][ T8339] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 331.444437][ T8339] R13: 00007f0855356038 R14: 00007f0855355fa0 R15: 00007ffe5008c9a8 [ 331.444471][ T8339] [ 331.766746][ T8345] netlink: 132 bytes leftover after parsing attributes in process `syz.6.678'. [ 332.284755][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.287386][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.291717][ T1228] gspca_sunplus: reg_w_riv err -71 [ 332.291827][ T1228] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 332.299448][ T1228] usb 4-1: USB disconnect, device number 65 [ 332.408059][ T5920] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 332.538132][ T5920] usb 6-1: device descriptor read/64, error -71 [ 332.708047][ T5896] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 332.816720][ T5920] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 332.867998][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 332.870709][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.875217][ T5896] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 332.875247][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.875270][ T5896] usb 7-1: Product: syz [ 332.875286][ T5896] usb 7-1: Manufacturer: syz [ 332.875301][ T5896] usb 7-1: SerialNumber: syz [ 332.886846][ T5896] usb 7-1: config 0 descriptor?? [ 332.901925][ T5896] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 332.902023][ T5896] usb 7-1: selecting invalid altsetting 1 [ 332.998044][ T5920] usb 6-1: device descriptor read/64, error -71 [ 333.108541][ T5920] usb usb6-port1: attempt power cycle [ 333.170555][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.203166][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.275958][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.282811][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.330835][ T5896] gspca_stk014: reg_r err -71 [ 333.330944][ T5896] stk014 7-1:0.0: probe with driver stk014 failed with error -71 [ 333.354469][ T5896] usb 7-1: USB disconnect, device number 16 [ 333.458093][ T5920] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 333.478959][ T8368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.686'. [ 333.483383][ T5920] usb 6-1: device descriptor read/8, error -71 [ 333.718497][ T5920] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 333.743795][ T5920] usb 6-1: device descriptor read/8, error -71 [ 333.852488][ T5920] usb usb6-port1: unable to enumerate USB device [ 333.983832][ T8374] FAULT_INJECTION: forcing a failure. [ 333.983832][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 333.983875][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.6.689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.983907][ T8374] Tainted: [L]=SOFTLOCKUP [ 333.983915][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 333.983928][ T8374] Call Trace: [ 333.983937][ T8374] [ 333.983947][ T8374] dump_stack_lvl+0xe8/0x150 [ 333.983978][ T8374] should_fail_ex+0x46b/0x600 [ 333.984014][ T8374] should_failslab+0xa8/0x100 [ 333.984060][ T8374] __kmalloc_noprof+0xdf/0x7b0 [ 333.984093][ T8374] ? tomoyo_encode+0x28b/0x550 [ 333.984130][ T8374] tomoyo_encode+0x28b/0x550 [ 333.984164][ T8374] tomoyo_mount_permission+0x3a2/0x9d0 [ 333.984194][ T8374] ? stack_depot_save_flags+0x33/0x810 [ 333.984222][ T8374] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 333.984250][ T8374] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 333.984340][ T8374] security_sb_mount+0xe4/0x320 [ 333.984374][ T8374] path_mount+0xbc/0x10e0 [ 333.984401][ T8374] ? user_path_at+0xd4/0x160 [ 333.984435][ T8374] ? user_path_at+0xd4/0x160 [ 333.984467][ T8374] __se_sys_mount+0x31d/0x420 [ 333.984500][ T8374] ? __pfx___se_sys_mount+0x10/0x10 [ 333.984534][ T8374] ? __x64_sys_mount+0x20/0xc0 [ 333.984560][ T8374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.984585][ T8374] do_syscall_64+0x15f/0xf80 [ 333.984608][ T8374] ? trace_irq_disable+0x3b/0x140 [ 333.984634][ T8374] ? clear_bhb_loop+0x40/0x90 [ 333.984662][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.984685][ T8374] RIP: 0033:0x7f08550dc819 [ 333.984706][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.984726][ T8374] RSP: 002b:00007f0853336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.984752][ T8374] RAX: ffffffffffffffda RBX: 00007f0855355fa0 RCX: 00007f08550dc819 [ 333.984768][ T8374] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 333.984783][ T8374] RBP: 00007f0853336090 R08: 0000200000000200 R09: 0000000000000000 [ 333.984797][ T8374] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 333.984809][ T8374] R13: 00007f0855356038 R14: 00007f0855355fa0 R15: 00007ffe5008c9a8 [ 333.984840][ T8374] [ 334.288672][ T5920] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 334.448118][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 334.459875][ T5920] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 334.459903][ T5920] usb 4-1: config 0 has no interface number 0 [ 334.459949][ T5920] usb 4-1: config 0 interface 12 has no altsetting 0 [ 334.506928][ T5920] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 334.506963][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.506987][ T5920] usb 4-1: Product: syz [ 334.507003][ T5920] usb 4-1: Manufacturer: syz [ 334.507020][ T5920] usb 4-1: SerialNumber: syz [ 334.558018][ T5920] usb 4-1: config 0 descriptor?? [ 334.867080][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 334.908932][ T8383] netlink: 256 bytes leftover after parsing attributes in process `syz.6.691'. [ 334.909029][ T8383] netlink: 72 bytes leftover after parsing attributes in process `syz.6.691'. [ 334.967297][ T8372] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 334.967324][ T8372] netlink: 'syz.3.688': attribute type 2 has an invalid length. [ 335.526782][ T8390] tmpfs: Bad value for 'nr_inodes' [ 335.984298][ T8400] netlink: 'syz.4.695': attribute type 29 has an invalid length. [ 335.987236][ T8400] netlink: 'syz.4.695': attribute type 29 has an invalid length. [ 336.022898][ T8400] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 336.022926][ T8400] netlink: 276 bytes leftover after parsing attributes in process `syz.4.695'. [ 336.198196][ T5937] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 336.281222][ T5920] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 336.281289][ T5920] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 336.281309][ T5920] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 336.281411][ T5920] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 336.303904][ T5920] usb 4-1: USB disconnect, device number 66 [ 336.356724][ T5937] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 336.356757][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.356778][ T5937] usb 6-1: Product: syz [ 336.356793][ T5937] usb 6-1: Manufacturer: syz [ 336.356808][ T5937] usb 6-1: SerialNumber: syz [ 336.407123][ T5937] usb 6-1: config 0 descriptor?? [ 336.430037][ T5937] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 336.481670][ T8410] FAULT_INJECTION: forcing a failure. [ 336.481670][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 336.481712][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.6.698 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.481743][ T8410] Tainted: [L]=SOFTLOCKUP [ 336.481751][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 336.481774][ T8410] Call Trace: [ 336.481783][ T8410] [ 336.481793][ T8410] dump_stack_lvl+0xe8/0x150 [ 336.481825][ T8410] should_fail_ex+0x46b/0x600 [ 336.481865][ T8410] should_failslab+0xa8/0x100 [ 336.481899][ T8410] __kmalloc_noprof+0xdf/0x7b0 [ 336.481928][ T8410] ? kfree+0x4d/0x6c0 [ 336.481953][ T8410] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 336.481991][ T8410] tomoyo_realpath_from_path+0xe3/0x5d0 [ 336.482034][ T8410] tomoyo_mount_permission+0x3e8/0x9d0 [ 336.482067][ T8410] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 336.482093][ T8410] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 336.482176][ T8410] security_sb_mount+0xe4/0x320 [ 336.482208][ T8410] path_mount+0xbc/0x10e0 [ 336.482232][ T8410] ? user_path_at+0xd4/0x160 [ 336.482264][ T8410] ? user_path_at+0xd4/0x160 [ 336.482295][ T8410] __se_sys_mount+0x31d/0x420 [ 336.482328][ T8410] ? __pfx___se_sys_mount+0x10/0x10 [ 336.482360][ T8410] ? __x64_sys_mount+0x20/0xc0 [ 336.482383][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.482406][ T8410] do_syscall_64+0x15f/0xf80 [ 336.482428][ T8410] ? trace_irq_disable+0x3b/0x140 [ 336.482453][ T8410] ? clear_bhb_loop+0x40/0x90 [ 336.482479][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.482500][ T8410] RIP: 0033:0x7f08550dc819 [ 336.482521][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.482540][ T8410] RSP: 002b:00007f0853336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.482563][ T8410] RAX: ffffffffffffffda RBX: 00007f0855355fa0 RCX: 00007f08550dc819 [ 336.482580][ T8410] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 336.482595][ T8410] RBP: 00007f0853336090 R08: 0000200000000200 R09: 0000000000000000 [ 336.482609][ T8410] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 336.482621][ T8410] R13: 00007f0855356038 R14: 00007f0855355fa0 R15: 00007ffe5008c9a8 [ 336.482653][ T8410] [ 336.483547][ T8410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 336.751934][ T8412] netlink: 60 bytes leftover after parsing attributes in process `syz.6.699'. [ 336.975607][ T8419] netlink: 'syz.3.701': attribute type 9 has an invalid length. [ 337.777013][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777084][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777101][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777116][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777131][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777146][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777161][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777175][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777227][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777242][ T5896] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 337.777292][ T5896] hid-generic 0006:0004:0009.000B: item fetching failed at offset 16/17 [ 337.784211][ T5896] hid-generic 0006:0004:0009.000B: probe with driver hid-generic failed with error -22 [ 337.916099][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.916843][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.922271][ T5937] gspca_sunplus: reg_w_riv err -71 [ 337.922367][ T5937] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 337.975306][ T5937] usb 6-1: USB disconnect, device number 20 [ 338.519243][ T8442] FAULT_INJECTION: forcing a failure. [ 338.519243][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 338.519270][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.4.707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.519289][ T8442] Tainted: [L]=SOFTLOCKUP [ 338.519294][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.519301][ T8442] Call Trace: [ 338.519306][ T8442] [ 338.519312][ T8442] dump_stack_lvl+0xe8/0x150 [ 338.519332][ T8442] should_fail_ex+0x46b/0x600 [ 338.519352][ T8442] should_failslab+0xa8/0x100 [ 338.519371][ T8442] __kmalloc_noprof+0xdf/0x7b0 [ 338.519389][ T8442] ? tomoyo_encode+0x28b/0x550 [ 338.519425][ T8442] tomoyo_encode+0x28b/0x550 [ 338.519460][ T8442] tomoyo_realpath_from_path+0x58d/0x5d0 [ 338.519503][ T8442] tomoyo_mount_permission+0x3e8/0x9d0 [ 338.519532][ T8442] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 338.519548][ T8442] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 338.519596][ T8442] security_sb_mount+0xe4/0x320 [ 338.519615][ T8442] path_mount+0xbc/0x10e0 [ 338.519628][ T8442] ? user_path_at+0xd4/0x160 [ 338.519647][ T8442] ? user_path_at+0xd4/0x160 [ 338.519664][ T8442] __se_sys_mount+0x31d/0x420 [ 338.519683][ T8442] ? __pfx___se_sys_mount+0x10/0x10 [ 338.519701][ T8442] ? __x64_sys_mount+0x20/0xc0 [ 338.519715][ T8442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.519728][ T8442] do_syscall_64+0x15f/0xf80 [ 338.519741][ T8442] ? trace_irq_disable+0x3b/0x140 [ 338.519755][ T8442] ? clear_bhb_loop+0x40/0x90 [ 338.519771][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.519783][ T8442] RIP: 0033:0x7f9b5b04c819 [ 338.519796][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.519808][ T8442] RSP: 002b:00007f9b5929e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 338.519825][ T8442] RAX: ffffffffffffffda RBX: 00007f9b5b2c5fa0 RCX: 00007f9b5b04c819 [ 338.519834][ T8442] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 338.519842][ T8442] RBP: 00007f9b5929e090 R08: 0000200000000200 R09: 0000000000000000 [ 338.519849][ T8442] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 338.519857][ T8442] R13: 00007f9b5b2c6038 R14: 00007f9b5b2c5fa0 R15: 00007ffcd36f00d8 [ 338.519876][ T8442] [ 338.519899][ T8442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.802196][ T8445] overlay: Unknown parameter 'hash' [ 339.643010][ T8475] FAULT_INJECTION: forcing a failure. [ 339.643010][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 339.643046][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.5.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.643071][ T8475] Tainted: [L]=SOFTLOCKUP [ 339.643077][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.643087][ T8475] Call Trace: [ 339.643094][ T8475] [ 339.643102][ T8475] dump_stack_lvl+0xe8/0x150 [ 339.643131][ T8475] should_fail_ex+0x46b/0x600 [ 339.643164][ T8475] should_failslab+0xa8/0x100 [ 339.643196][ T8475] __kmalloc_noprof+0xdf/0x7b0 [ 339.643224][ T8475] ? tomoyo_encode+0x28b/0x550 [ 339.643259][ T8475] tomoyo_encode+0x28b/0x550 [ 339.643294][ T8475] tomoyo_realpath_from_path+0x58d/0x5d0 [ 339.643345][ T8475] tomoyo_mount_permission+0x3e8/0x9d0 [ 339.643377][ T8475] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 339.643403][ T8475] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 339.643486][ T8475] security_sb_mount+0xe4/0x320 [ 339.643521][ T8475] path_mount+0xbc/0x10e0 [ 339.643546][ T8475] ? user_path_at+0xd4/0x160 [ 339.643580][ T8475] ? user_path_at+0xd4/0x160 [ 339.643611][ T8475] __se_sys_mount+0x31d/0x420 [ 339.643643][ T8475] ? __pfx___se_sys_mount+0x10/0x10 [ 339.643676][ T8475] ? __x64_sys_mount+0x20/0xc0 [ 339.643701][ T8475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.643726][ T8475] do_syscall_64+0x15f/0xf80 [ 339.643747][ T8475] ? trace_irq_disable+0x3b/0x140 [ 339.643771][ T8475] ? clear_bhb_loop+0x40/0x90 [ 339.643797][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.643819][ T8475] RIP: 0033:0x7ff83f3bc819 [ 339.643840][ T8475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.643861][ T8475] RSP: 002b:00007ff83d60e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.643885][ T8475] RAX: ffffffffffffffda RBX: 00007ff83f635fa0 RCX: 00007ff83f3bc819 [ 339.643901][ T8475] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 339.643915][ T8475] RBP: 00007ff83d60e090 R08: 0000200000000200 R09: 0000000000000000 [ 339.643929][ T8475] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 339.643943][ T8475] R13: 00007ff83f636038 R14: 00007ff83f635fa0 R15: 00007fffbbe7c9e8 [ 339.643978][ T8475] [ 339.644153][ T8475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.012156][ T5937] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 340.146585][ T8483] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 340.187589][ T5937] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 340.187619][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.187632][ T5937] usb 7-1: Product: syz [ 340.187640][ T5937] usb 7-1: Manufacturer: syz [ 340.187650][ T5937] usb 7-1: SerialNumber: syz [ 340.218190][ T5937] usb 7-1: config 0 descriptor?? [ 340.264521][ T5937] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 340.443105][ T8494] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.724'. [ 340.443236][ T8494] netlink: ct family unspecified [ 340.478326][ T5920] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 340.639902][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 340.640001][ T5920] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 340.645017][ T5920] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 340.645061][ T5920] usb 6-1: can't read configurations, error -22 [ 340.778274][ T5920] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 340.931213][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 340.931312][ T5920] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 340.932721][ T5920] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 340.932760][ T5920] usb 6-1: can't read configurations, error -22 [ 340.937080][ T5920] usb usb6-port1: attempt power cycle [ 341.287995][ T5920] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 341.313489][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.313583][ T5920] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 341.316711][ T5920] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 341.316850][ T5920] usb 6-1: can't read configurations, error -22 [ 341.349736][ T1228] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 341.382204][ T8503] FAULT_INJECTION: forcing a failure. [ 341.382204][ T8503] name failslab, interval 1, probability 0, space 0, times 0 [ 341.382243][ T8503] CPU: 1 UID: 0 PID: 8503 Comm: syz.4.728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.382275][ T8503] Tainted: [L]=SOFTLOCKUP [ 341.382282][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 341.382295][ T8503] Call Trace: [ 341.382303][ T8503] [ 341.382312][ T8503] dump_stack_lvl+0xe8/0x150 [ 341.382342][ T8503] should_fail_ex+0x46b/0x600 [ 341.382366][ T8503] should_failslab+0xa8/0x100 [ 341.382385][ T8503] __kmalloc_cache_noprof+0x84/0x690 [ 341.382412][ T8503] ? alloc_fs_context+0x64/0xd50 [ 341.382447][ T8503] alloc_fs_context+0x64/0xd50 [ 341.382480][ T8503] ? get_fs_type+0x407/0x480 [ 341.382512][ T8503] do_new_mount+0x187/0xd30 [ 341.382534][ T8503] ? apparmor_capable+0x126/0x170 [ 341.382555][ T8503] ? security_capable+0x7e/0x2c0 [ 341.382569][ T8503] ? __pfx_do_new_mount+0x10/0x10 [ 341.382589][ T8503] ? ns_capable+0x89/0xe0 [ 341.382612][ T8503] ? path_mount+0x690/0x10e0 [ 341.382635][ T8503] ? user_path_at+0xd4/0x160 [ 341.382667][ T8503] ? user_path_at+0xd4/0x160 [ 341.382696][ T8503] __se_sys_mount+0x31d/0x420 [ 341.382720][ T8503] ? __pfx___se_sys_mount+0x10/0x10 [ 341.382738][ T8503] ? __x64_sys_mount+0x20/0xc0 [ 341.382752][ T8503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.382783][ T8503] do_syscall_64+0x15f/0xf80 [ 341.382805][ T8503] ? trace_irq_disable+0x3b/0x140 [ 341.382830][ T8503] ? clear_bhb_loop+0x40/0x90 [ 341.382856][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.382877][ T8503] RIP: 0033:0x7f9b5b04c819 [ 341.382895][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.382906][ T8503] RSP: 002b:00007f9b5929e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.382921][ T8503] RAX: ffffffffffffffda RBX: 00007f9b5b2c5fa0 RCX: 00007f9b5b04c819 [ 341.382930][ T8503] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 341.382943][ T8503] RBP: 00007f9b5929e090 R08: 0000200000000200 R09: 0000000000000000 [ 341.382957][ T8503] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 341.382970][ T8503] R13: 00007f9b5b2c6038 R14: 00007f9b5b2c5fa0 R15: 00007ffcd36f00d8 [ 341.383002][ T8503] [ 341.458147][ T5920] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 341.635558][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.635651][ T5920] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 341.636903][ T5920] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 341.636939][ T5920] usb 6-1: can't read configurations, error -22 [ 341.637599][ T5920] usb usb6-port1: unable to enumerate USB device [ 341.690406][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.691074][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.720206][ T5937] gspca_sunplus: reg_w_riv err -71 [ 341.720271][ T5937] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 341.738785][ T5937] usb 7-1: USB disconnect, device number 17 [ 341.848278][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 341.858770][ T1228] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 341.858848][ T1228] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.858873][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.858900][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.858925][ T1228] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.858973][ T1228] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.858999][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.066630][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.067309][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.084599][ T5920] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 342.086737][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.087437][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.114572][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.115219][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.116579][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.117740][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.130589][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.136733][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.175595][ T1228] usb 4-1: usb_control_msg returned -32 [ 342.175651][ T1228] usbtmc 4-1:16.0: can't read capabilities [ 342.178225][ T8507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.727'. [ 342.250489][ T5920] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 342.250522][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.250544][ T5920] usb 5-1: config 0 has no interface number 0 [ 342.256689][ T5920] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 342.256726][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.256747][ T5920] usb 5-1: Product: syz [ 342.256762][ T5920] usb 5-1: Manufacturer: syz [ 342.256777][ T5920] usb 5-1: SerialNumber: syz [ 342.333662][ T5920] usb 5-1: config 0 descriptor?? [ 342.581472][ T1228] usb 4-1: USB disconnect, device number 67 [ 343.566520][ T8532] FAULT_INJECTION: forcing a failure. [ 343.566520][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 343.566557][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.3.737 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 343.566583][ T8532] Tainted: [L]=SOFTLOCKUP [ 343.566589][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 343.566600][ T8532] Call Trace: [ 343.566607][ T8532] [ 343.566614][ T8532] dump_stack_lvl+0xe8/0x150 [ 343.566640][ T8532] should_fail_ex+0x46b/0x600 [ 343.566668][ T8532] should_failslab+0xa8/0x100 [ 343.566730][ T8532] __kmalloc_cache_noprof+0x84/0x690 [ 343.566810][ T8532] ? ovl_init_fs_context+0x57/0x570 [ 343.566845][ T8532] ovl_init_fs_context+0x57/0x570 [ 343.566880][ T8532] alloc_fs_context+0x9d5/0xd50 [ 343.566918][ T8532] do_new_mount+0x187/0xd30 [ 343.566943][ T8532] ? apparmor_capable+0x126/0x170 [ 343.566979][ T8532] ? security_capable+0x7e/0x2c0 [ 343.567073][ T8532] ? __pfx_do_new_mount+0x10/0x10 [ 343.567112][ T8532] ? ns_capable+0x89/0xe0 [ 343.567139][ T8532] ? path_mount+0x690/0x10e0 [ 343.567161][ T8532] ? user_path_at+0xd4/0x160 [ 343.567191][ T8532] ? user_path_at+0xd4/0x160 [ 343.567221][ T8532] __se_sys_mount+0x31d/0x420 [ 343.567252][ T8532] ? __pfx___se_sys_mount+0x10/0x10 [ 343.567283][ T8532] ? __x64_sys_mount+0x20/0xc0 [ 343.567306][ T8532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.567330][ T8532] do_syscall_64+0x15f/0xf80 [ 343.567352][ T8532] ? trace_irq_disable+0x3b/0x140 [ 343.567376][ T8532] ? clear_bhb_loop+0x40/0x90 [ 343.567403][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.567425][ T8532] RIP: 0033:0x7fa10740c819 [ 343.567446][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.567462][ T8532] RSP: 002b:00007fa105666028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.567485][ T8532] RAX: ffffffffffffffda RBX: 00007fa107685fa0 RCX: 00007fa10740c819 [ 343.567500][ T8532] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 343.567513][ T8532] RBP: 00007fa105666090 R08: 0000200000000200 R09: 0000000000000000 [ 343.567527][ T8532] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 343.567539][ T8532] R13: 00007fa107686038 R14: 00007fa107685fa0 R15: 00007ffd9f506268 [ 343.567571][ T8532] [ 343.728232][ T8529] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 343.756062][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 343.760476][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 343.773851][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 343.774155][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 343.784283][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 343.784772][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 343.785607][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 343.785985][ T8527] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 343.786008][ T8527] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 344.218170][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 344.402135][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 344.402174][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.402198][ T10] usb 4-1: Product: syz [ 344.402214][ T10] usb 4-1: Manufacturer: syz [ 344.402230][ T10] usb 4-1: SerialNumber: syz [ 344.454092][ T10] usb 4-1: config 0 descriptor?? [ 344.481929][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 344.976091][ T5920] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 344.976372][ T5920] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 345.007772][ T5920] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 345.021502][ T5920] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 345.021622][ T5920] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 345.045689][ T5920] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 345.058814][ T5920] usb 5-1: USB disconnect, device number 36 [ 345.067394][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 345.085911][ T5920] keyspan 5-1:0.133: device disconnected [ 345.308164][ T5937] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 345.444259][ T8560] FAULT_INJECTION: forcing a failure. [ 345.444259][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 345.444299][ T8560] CPU: 0 UID: 0 PID: 8560 Comm: syz.4.746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.444318][ T8560] Tainted: [L]=SOFTLOCKUP [ 345.444323][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.444331][ T8560] Call Trace: [ 345.444336][ T8560] [ 345.444342][ T8560] dump_stack_lvl+0xe8/0x150 [ 345.444361][ T8560] should_fail_ex+0x46b/0x600 [ 345.444381][ T8560] should_failslab+0xa8/0x100 [ 345.444401][ T8560] __kmalloc_cache_noprof+0x84/0x690 [ 345.444419][ T8560] ? ovl_init_fs_context+0xa0/0x570 [ 345.444441][ T8560] ovl_init_fs_context+0xa0/0x570 [ 345.444462][ T8560] alloc_fs_context+0x9d5/0xd50 [ 345.444485][ T8560] do_new_mount+0x187/0xd30 [ 345.444498][ T8560] ? apparmor_capable+0x126/0x170 [ 345.444519][ T8560] ? security_capable+0x7e/0x2c0 [ 345.444534][ T8560] ? __pfx_do_new_mount+0x10/0x10 [ 345.444548][ T8560] ? ns_capable+0x89/0xe0 [ 345.444563][ T8560] ? path_mount+0x690/0x10e0 [ 345.444576][ T8560] ? user_path_at+0xd4/0x160 [ 345.444594][ T8560] ? user_path_at+0xd4/0x160 [ 345.444611][ T8560] __se_sys_mount+0x31d/0x420 [ 345.444629][ T8560] ? __pfx___se_sys_mount+0x10/0x10 [ 345.444653][ T8560] ? __x64_sys_mount+0x20/0xc0 [ 345.444668][ T8560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.444682][ T8560] do_syscall_64+0x15f/0xf80 [ 345.444697][ T8560] ? trace_irq_disable+0x3b/0x140 [ 345.444713][ T8560] ? clear_bhb_loop+0x40/0x90 [ 345.444729][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.444741][ T8560] RIP: 0033:0x7f9b5b04c819 [ 345.444754][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.444765][ T8560] RSP: 002b:00007f9b5929e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.444780][ T8560] RAX: ffffffffffffffda RBX: 00007f9b5b2c5fa0 RCX: 00007f9b5b04c819 [ 345.444789][ T8560] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 345.444798][ T8560] RBP: 00007f9b5929e090 R08: 0000200000000200 R09: 0000000000000000 [ 345.444806][ T8560] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 345.444813][ T8560] R13: 00007f9b5b2c6038 R14: 00007f9b5b2c5fa0 R15: 00007ffcd36f00d8 [ 345.444832][ T8560] [ 345.462010][ T5937] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.462039][ T5937] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.467710][ T5937] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 345.468176][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.468199][ T5937] usb 6-1: Product: syz [ 345.468213][ T5937] usb 6-1: Manufacturer: syz [ 345.468226][ T5937] usb 6-1: SerialNumber: syz [ 345.787059][ T8556] netlink: 'syz.5.744': attribute type 11 has an invalid length. [ 345.955944][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.957004][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.966479][ T10] gspca_sunplus: reg_w_riv err -71 [ 345.966639][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 346.001676][ T10] usb 4-1: USB disconnect, device number 68 [ 346.270500][ T5937] usb 6-1: 0:1 : does not exist [ 346.270615][ T5937] usb 6-1: unit 6 not found! [ 346.470221][ T5937] usb 6-1: USB disconnect, device number 25 [ 346.496839][ T8567] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 346.539194][ T8009] udevd[8009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.075629][ T8584] FAULT_INJECTION: forcing a failure. [ 347.075629][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 347.075671][ T8584] CPU: 0 UID: 0 PID: 8584 Comm: syz.6.755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.075711][ T8584] Tainted: [L]=SOFTLOCKUP [ 347.075719][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.075732][ T8584] Call Trace: [ 347.075740][ T8584] [ 347.075749][ T8584] dump_stack_lvl+0xe8/0x150 [ 347.075780][ T8584] should_fail_ex+0x46b/0x600 [ 347.075814][ T8584] should_failslab+0xa8/0x100 [ 347.075849][ T8584] __kmalloc_cache_noprof+0x84/0x690 [ 347.075881][ T8584] ? ovl_init_fs_context+0xa0/0x570 [ 347.075918][ T8584] ovl_init_fs_context+0xa0/0x570 [ 347.075955][ T8584] alloc_fs_context+0x9d5/0xd50 [ 347.075997][ T8584] do_new_mount+0x187/0xd30 [ 347.076020][ T8584] ? apparmor_capable+0x126/0x170 [ 347.076056][ T8584] ? security_capable+0x7e/0x2c0 [ 347.076083][ T8584] ? __pfx_do_new_mount+0x10/0x10 [ 347.076108][ T8584] ? ns_capable+0x89/0xe0 [ 347.076133][ T8584] ? path_mount+0x690/0x10e0 [ 347.076156][ T8584] ? user_path_at+0xd4/0x160 [ 347.076188][ T8584] ? user_path_at+0xd4/0x160 [ 347.076218][ T8584] __se_sys_mount+0x31d/0x420 [ 347.076250][ T8584] ? __pfx___se_sys_mount+0x10/0x10 [ 347.076282][ T8584] ? __x64_sys_mount+0x20/0xc0 [ 347.076308][ T8584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.076332][ T8584] do_syscall_64+0x15f/0xf80 [ 347.076354][ T8584] ? trace_irq_disable+0x3b/0x140 [ 347.076379][ T8584] ? clear_bhb_loop+0x40/0x90 [ 347.076406][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.076428][ T8584] RIP: 0033:0x7f08550dc819 [ 347.076449][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.076468][ T8584] RSP: 002b:00007f0853336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.076492][ T8584] RAX: ffffffffffffffda RBX: 00007f0855355fa0 RCX: 00007f08550dc819 [ 347.076508][ T8584] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 347.076523][ T8584] RBP: 00007f0853336090 R08: 0000200000000200 R09: 0000000000000000 [ 347.076538][ T8584] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 347.076552][ T8584] R13: 00007f0855356038 R14: 00007f0855355fa0 R15: 00007ffe5008c9a8 [ 347.076585][ T8584] [ 347.423915][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 347.481515][ T8595] netlink: 168 bytes leftover after parsing attributes in process `syz.4.759'. [ 347.496081][ T8595] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 347.609828][ T820] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 347.668126][ T5937] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 347.768040][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 347.771212][ T820] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 347.771244][ T820] usb 4-1: config 2 has no interface number 0 [ 347.771294][ T820] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 347.771321][ T820] usb 4-1: config 2 interface 88 has no altsetting 0 [ 347.780403][ T820] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 347.780436][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.780458][ T820] usb 4-1: Product: syz [ 347.780474][ T820] usb 4-1: Manufacturer: syz [ 347.780489][ T820] usb 4-1: SerialNumber: syz [ 347.819725][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 347.826627][ T5937] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.826684][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.826718][ T5937] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 347.826747][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.846406][ T5937] usb 6-1: config 0 descriptor?? [ 347.907373][ T8591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.119095][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 348.152908][ T38] INFO: task syz-executor:5827 blocked for more than 143 seconds. [ 348.153001][ T38] Tainted: G L syzkaller #0 [ 348.153016][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.153026][ T38] task:syz-executor state:D stack:21384 pid:5827 tgid:5827 ppid:1 task_flags:0x400140 flags:0x00080002 [ 348.153089][ T38] Call Trace: [ 348.153103][ T38] [ 348.153169][ T38] __schedule+0x169e/0x54f0 [ 348.153223][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.153248][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 348.153327][ T38] ? rt_spin_lock+0x1e0/0x400 [ 348.153362][ T38] ? __pfx___schedule+0x10/0x10 [ 348.153407][ T38] ? schedule+0x90/0x360 [ 348.153500][ T38] schedule+0x164/0x360 [ 348.153538][ T38] fuse_chan_wait_aborted+0x15b/0x250 [ 348.153568][ T38] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 348.153593][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 348.153677][ T38] ? __pfx_fuse_chan_abort+0x10/0x10 [ 348.153711][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.153739][ T38] fuse_conn_destroy+0x1e7/0x3e0 [ 348.153767][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 348.153847][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.153868][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 348.153892][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 348.153925][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 348.154013][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.154038][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.154060][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 348.154086][ T38] fuse_kil[ 348.154086][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 348.154180][ T38] deactivate_locked_super+0xbc/0x130 [ 348.154213][ T38] cleanup_mnt+0x437/0x4d0 [ 348.154245][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.154272][ T38] task_work_run+0x1d9/0x270 [ 348.154355][ T38] ? __pfx_task_work_run+0x10/0x10 [ 348.154393][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.154418][ T38] exit_to_user_mode_loop+0xed/0x480 [ 348.154443][ T38] ? rcu_is_watching+0x15/0xb0 [ 348.154530][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.154556][ T38] do_syscall_64+0x33e/0xf80 [ 348.154578][ T38] ? trace_irq_disable+0x3b/0x140 [ 348.154605][ T38] ? clear_bhb_loop+0x40/0x90 [ 348.154702][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.154726][ T38] RIP: 0033:0x7fa80f09da57 [ 348.154748][ T38] RSP: 002b:00007ffda76233b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 348.154774][ T38] RAX: 0000000000000000 RBX: 00007fa80f132048 RCX: 00007fa80f09da57 [ 348.154790][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7623470 [ 348.154864][ T38] RBP: 00007ffda7623470 R08: 00007ffda7624470 R09: 00000000ffffffff [ 348.154880][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda7624500 [ 348.154894][ T38] R13: 00007fa80f132048 R14: 000000000002f92d R15: 00007ffda7624540 [ 348.154931][ T38] [ 348.155041][ T38] [ 348.155041][ T38] Showing all locks held in the system: [ 348.155050][ T38] 6 locks held by kworker/0:1/10: [ 348.155063][ T38] #0: ffff888020af9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 348.155114][ T38] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 348.155208][ T38] #2: ffff88802b35e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 348.155255][ T38] #3: ffff88802b344658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 348.155348][ T38] #4: ffff888029653758 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 348.155395][ T38] #5: ffffffff8f039ca0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 348.155443][ T38] 7 locks held by kworker/u8:0/12: [ 348.155454][ T38] #0: ffff888033011938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 348.155542][ T38] #1: ffffc90000117c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 348.155583][ T38] #2: ffffffff8f7a2b38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 348.155676][ T38] #3: ffffffff8e25f280 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 348.155726][ T38] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 348.155768][ T38] #5: ffffffff8e3c8160 (rcu_read_lock_bh){....}-{1:3}, at: addrconf_verify_rtnl+0x3d/0x13c0 [ 348.155859][ T38] #6: ffff88801dac8af0 (&p->pi_lock){-...}-{2:2}, at: _task_rq_lock+0x5b/0x470 [ 348.155902][ T38] 1 lock held by khungtaskd/38: [ 348.155913][ T38] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 348.156010][ T38] 6 locks held by kworker/1:2/820: [ 348.156021][ T38] #0: ffff888020af9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 348.156063][ T38] #1: ffffc900055c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 348.156104][ T38] #2: ffff88802b336210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 348.156205][ T38] #3: ffff888033dc2210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 348.156254][ T38] #4: ffff88806020e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 348.156347][ T38] #5: ffff888029653858 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x353/0x1450 [ 348.156415][ T38] 2 locks held by getty/5581: [ 348.156471][ T38] #0: ffff888037a140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 348.156522][ T38] #1: ffffc90003ccb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 348.156567][ T38] 1 lock held by syz-executor/5827: [ 348.156577][ T38] #0: ffff88803cb860d0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 348.156679][ T38] 5 locks held by kworker/0:6/5937: [ 348.156688][ T38] #0: ffff888020af9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 348.156779][ T38] #1: ffffc90005edfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 348.156819][ T38] #2: ffff88802b396210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 348.156864][ T38] #3: ffff888077d1c210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 348.156956][ T38] #4: ffff8880383871d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 348.157007][ T38] 1 lock held by syz.1.409/7442: [ 348.157017][ T38] #0: ffff88803cb860d0 (&type->s_umount_key#58){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 348.157126][ T38] 4 locks held by udevd/7995: [ 348.157137][ T38] #0: ffff8880323dc950 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 348.157190][ T38] #1: ffff888033862478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 348.157281][ T38] #2: ffff88805aa9fc38 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 348.157323][ T38] #3: ffff888033dc2210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 348.157416][ T38] 5 locks held by syz.3.758/8591: [ 348.157426][ T38] #0: ffff888041771658 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_setsockopt+0x731/0x990 [ 348.157475][ T38] #1: ffffffff8e25f280 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 348.157515][ T38] #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 348.157602][ T38] #3: ffff88803ae053a0 (&tn->nametbl_lock){+...}-{3:3}, at: tipc_nametbl_subscribe+0x151/0x1080 [ 348.157648][ T38] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 348.157747][ T38] [ 348.157752][ T38] ============================================= [ 348.157752][ T38] [ 348.157759][ T38] NMI backtrace for cpu 1 [ 348.157775][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.157801][ T38] Tainted: [L]=SOFTLOCKUP [ 348.157807][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.157818][ T38] Call Trace: [ 348.157830][ T38] [ 348.157838][ T38] dump_stack_lvl+0xe8/0x150 [ 348.157859][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 348.157882][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 348.157904][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 348.157929][ T38] sys_info+0x135/0x170 [ 348.157956][ T38] watchdog+0xfd3/0x1030 [ 348.157982][ T38] ? watchdog+0x1c9/0x1030 [ 348.158005][ T38] kthread+0x388/0x470 [ 348.158028][ T38] ? __pfx_watchdog+0x10/0x10 [ 348.158044][ T38] ? __pfx_kthread+0x10/0x10 [ 348.158067][ T38] ret_from_fork+0x514/0xb70 [ 348.158088][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 348.158107][ T38] ? __switch_to+0xc79/0x1410 [ 348.158135][ T38] ? __pfx_kthread+0x10/0x10 [ 348.158160][ T38] ret_from_fork_asm+0x1a/0x30 [ 348.158195][ T38] [ 348.158264][ T38] Sending NMI from CPU 1 to CPUs 0: [ 348.158292][ C0] NMI backtrace for cpu 0 [ 348.158314][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.158339][ C0] Tainted: [L]=SOFTLOCKUP [ 348.158345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.158356][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 348.158383][ C0] RIP: 0010:__lock_acquire+0x1821/0x2cf0 [ 348.158407][ C0] Code: 00 0f 83 8a 01 00 00 4e 8b 24 fd 00 38 c4 95 ff c0 25 ff 0f 00 00 89 05 8d db 23 14 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 <48> 85 c0 0f 84 1c 0d 00 00 8b 0d 78 db 23 14 39 48 5c 0f 84 67 ff [ 348.158423][ C0] RSP: 0018:ffffc90000117478 EFLAGS: 00000082 [ 348.158437][ C0] RAX: ffffffff93697528 RBX: 00000000000003cd RCX: ffffffff96525d08 [ 348.158450][ C0] RDX: ffffffff966fcf28 RSI: ffff88801dac8d10 RDI: 00000000000003cd [ 348.158462][ C0] RBP: 073d4b46091f61cd R08: ffffc90000117440 R09: 0000000000000020 [ 348.158474][ C0] R10: dffffc0000000000 R11: ffffffff81a12ed0 R12: ffffffff96525d08 [ 348.158486][ C0] R13: ffff88801dac8d10 R14: ffff88801dac8000 R15: 00000000000007ab [ 348.158498][ C0] FS: 0000000000000000(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000 [ 348.158512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.158525][ C0] CR2: 00007fa107459f00 CR3: 0000000078bce000 CR4: 00000000003526f0 [ 348.158542][ C0] Call Trace: [ 348.158548][ C0] [ 348.158557][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 348.158585][ C0] ? psi_task_switch+0x53/0x880 [ 348.158600][ C0] lock_acquire+0x106/0x350 [ 348.158620][ C0] ? psi_task_switch+0x53/0x880 [ 348.158640][ C0] psi_write_begin+0xab/0x160 [ 348.158655][ C0] ? psi_task_switch+0x53/0x880 [ 348.158670][ C0] psi_task_switch+0x53/0x880 [ 348.158686][ C0] ? psi_account_irqtime+0x137/0x6f0 [ 348.158704][ C0] __schedule+0x2829/0x54f0 [ 348.158729][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 348.158756][ C0] ? __pfx___schedule+0x10/0x10 [ 348.158780][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 348.158802][ C0] preempt_schedule_irq+0x4d/0xa0 [ 348.158827][ C0] irqentry_exit+0x14f/0x730 [ 348.158843][ C0] ? trace_irq_disable+0x3b/0x140 [ 348.158863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.158882][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x44/0xa0 [ 348.158901][ C0] Code: e0 00 00 ff 00 ba 00 01 00 00 23 91 e4 0b 00 00 41 89 d1 45 09 c1 74 12 45 85 c0 75 5f 85 d2 74 5b 83 b9 b4 16 00 00 00 74 52 <8b> 91 90 16 00 00 83 fa 03 75 47 48 8b 91 98 16 00 00 44 8b 89 94 [ 348.158914][ C0] RSP: 0018:ffffc90000117a50 EFLAGS: 00000246 [ 348.158929][ C0] RAX: ffffffff89e616e7 RBX: 0000000000000001 RCX: ffff88801dac8000 [ 348.158951][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 348.158961][ C0] RBP: 1ffff110059c1d95 R08: 0000000000000000 R09: 0000000000000000 [ 348.158972][ C0] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: 0000000100004140 [ 348.158984][ C0] R13: ffff88803c417588 R14: ffff88805f89bd50 R15: dffffc0000000000 [ 348.159000][ C0] ? addrconf_verify_rtnl+0x1e7/0x13c0 [ 348.159031][ C0] addrconf_verify_rtnl+0x1e7/0x13c0 [ 348.159053][ C0] ? addrconf_verify_rtnl+0x3d/0x13c0 [ 348.159078][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.159097][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 348.159113][ C0] ? addrconf_verify_work+0x19/0x30 [ 348.159135][ C0] ? process_one_work+0x8b7/0x1710 [ 348.159151][ C0] addrconf_verify_work+0x21/0x30 [ 348.159171][ C0] process_one_work+0x9a3/0x1710 [ 348.159195][ C0] ? __pfx_process_one_work+0x10/0x10 [ 348.159209][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.159232][ C0] worker_thread+0xba8/0x11e0 [ 348.159258][ C0] kthread+0x388/0x470 [ 348.159278][ C0] ? __pfx_worker_thread+0x10/0x10 [ 348.159294][ C0] ? __pfx_kthread+0x10/0x10 [ 348.159314][ C0] ret_from_fork+0x514/0xb70 [ 348.159332][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.159349][ C0] ? __switch_to+0xc79/0x1410 [ 348.159373][ C0] ? __pfx_kthread+0x10/0x10 [ 348.159393][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.159418][ C0] [ 348.325695][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.325761][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.325888][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.334171][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 348.334203][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.334232][ T38] Tainted: [L]=SOFTLOCKUP [ 348.334239][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.334251][ T38] Call Trace: [ 348.334262][ T38] [ 348.334273][ T38] vpanic+0x56c/0xa60 [ 348.334306][ T38] ? __pfx___schedule+0x10/0x10 [ 348.334337][ T38] ? __pfx_vpanic+0x10/0x10 [ 348.334370][ T38] panic+0xc5/0xd0 [ 348.334392][ T38] ? __pfx_panic+0x10/0x10 [ 348.334417][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 348.334452][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 348.334487][ T38] watchdog+0x102c/0x1030 [ 348.334516][ T38] ? watchdog+0x1c9/0x1030 [ 348.334542][ T38] kthread+0x388/0x470 [ 348.334569][ T38] ? __pfx_watchdog+0x10/0x10 [ 348.334588][ T38] ? __pfx_kthread+0x10/0x10 [ 348.334615][ T38] ret_from_fork+0x514/0xb70 [ 348.334654][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 348.334683][ T38] ? __switch_to+0xc79/0x1410 [ 348.334733][ T38] ? __pfx_kthread+0x10/0x10 [ 348.334775][ T38] ret_from_fork_asm+0x1a/0x30 [ 348.334817][ T38] [ 348.334985][ T38] Kernel Offset: disabled