last executing test programs: 3m5.723522579s ago: executing program 4 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2000000000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3m3.244998356s ago: executing program 4 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') socket$kcm(0x2, 0x200000000000001, 0x106) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 2m58.037464398s ago: executing program 4 (id=755): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\/o\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 2m33.741928952s ago: executing program 32 (id=777): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101082, 0x0) readv(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 12.732904486s ago: executing program 1 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2000000000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 11.759920208s ago: executing program 1 (id=1159): r0 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ustat(0x5, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) readv(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0xffffffff}, {0x0, 0x8}, {0xb, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400007, 0x6, 0x0, 0x313ed62b1f540976, 0x0, 0x1, 0x6}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd2b, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r10 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x10) 11.453680428s ago: executing program 5 (id=1160): syz_open_dev$cec(0x0, 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x0, 0x8}, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 9.427220919s ago: executing program 1 (id=1167): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setuid(0xee01) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x44e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1}, 0x5}], 0x2, 0x2, 0x0) migrate_pages(r2, 0x4, 0x0, 0x0) 8.278847747s ago: executing program 2 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2000000000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 8.093467829s ago: executing program 5 (id=1170): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x2000008, {{0xa, 0x4e23, 0xac0, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 7.401095589s ago: executing program 1 (id=1171): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.312172635s ago: executing program 2 (id=1172): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe91}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x40000000, 0x8000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x3, 0x7fff0020}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01002cbd7000fcdbdf2501000000140002007767300000000000000000000000000058000880540000800400098024000100f44da367a88ee6564f020211456727081f0aeb"], 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) 6.561480005s ago: executing program 3 (id=1173): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000016c0)) setpgid(0x0, 0x0) setpgid(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.780748003s ago: executing program 2 (id=1175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1b, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000100000000000000b500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830019a897a2000000000000550901000000000095000000000000001844000003000000000000000000000085000000b200000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ed4b00008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) timerfd_create(0x7, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009965, r2, 0x0) close(r3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x16, 0x2, @thr={&(0x7f00000000c0)="0f7fd5457f323e492474e1084bda051223df03cf61e064dd76636c83ac9a324b3cd86efffda961ee2bfaea8e4af8b2eba85e37316fca8bd38293df7181129e868d", &(0x7f0000000140)}}, &(0x7f00000002c0)) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x0) 5.586700444s ago: executing program 3 (id=1177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') socket$kcm(0x2, 0x200000000000001, 0x106) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 5.468800417s ago: executing program 0 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x1, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000002340)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x40890}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b80)="7b3cd544132700170f62d03a5b466eee0ccbc4eabd6f9a1f1987c607437d415710a5f591b1ac7bd906a86e0552839b861b1128563cdce77234b3e4be4895d00d6d8bbf0fb2992c504b76c1f60a9aa269b60fe48609e3e8f59e4539b837dfde2a2b2019a92ae2c3cfe78ec5f635ec2a959e2f20ccfafd8983229db9dfa7e3cf59245a460db33327d93933347d470165914c1c498764fef6990aaf8ad1f97dacdc38706f44366ddc0d985588039133789fe88dec7f44425bd4caa886b557fe406cd25bf33e8af4afeacdc3d83357bd5128fb6ccbfa8cb49202e3acc6cdd89d7e94fecb3cc82f21d557455402ef09c3301e58b687f0", 0xf4}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000000006bd50a8214d1aa5589", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4000810}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)="beead91dca0000450424f1cfac52eafed74417675da986d5ea0bdb2de09d560ee3c498178d8d0c380e9f3c70863a70caf9e17011be309dfceef2d006cce08787cf5c914c654a8e6121f7353cfdd48d59350cc4c570130d30567270323b35a2", 0x5f}, {&(0x7f00000010c0)="30a0df5f8ca3a0e2f8344b6608eede32805212fab2ef8256fe32e2b1d67cb90d84c1ae0175d6e2ca683f07f98464b49d100c5861083d00439f76ffa09f8567ae698a2056bf5f5f84a01446b2847b807c780cff10518a918336cd82c098e5e21120b5afbbe502098080ca4b64b64d9c1be65c921797cb1477332f86bd5b1909c525ae509e62ebd8fa57166fdf264bc03fdb2e77fbbf1277137e39313d99fd3d7e2d55ce7dde0f475e5867b521894a1ece9c734a1b4c7707fb2f8b711609f9e35e", 0xc0}, {&(0x7f0000001180)="5248cb0fa242bb0c0bc977278cef7ada5d749afe04d4289a1cd89feac5dc6e9b42533ab5cd9ab4d62604e2cedc0fc4743e84c2959f3f36a18f20aaa3bd71c3bb0a1ebdbb276ceede176e124655f79d7c", 0x50}, {&(0x7f0000001200)}, {&(0x7f0000001240)}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x8000}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000014c0)="881133446582c5b49a8ba78631009063ade718f6a5f24b88b2aed09485c3cca8fadac5748488e6876eec898b8df8eeba24cf6d41df08c996554d8b342651d7de6c842b882505816814fa651db449774b6f35f34ae3b24d473e7addf9d6538d0144fdc300faf030e4521ffa1e8a29fef47399d8ac8b9b2774ff5673976baf2af3d0bee9ec1b3cf55a83d8ca4e53e86c83c3be6de4eab887921254443a437b97a6005fd024f3de9866b8be", 0xaa}], 0x1, &(0x7f0000001600)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}], 0x38, 0x4040010}}, {{&(0x7f0000001640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000016c0)="7cd9000df357dc9643eeccc940836e7fbdb97b64f705ec51a4ef68d059dea492691b44f511ec8b841613df02928570563cb57522b60deeaa0c52615854ac4ddec65846e19f22240a5591af163ebd9e0f53b90b7746859880e7fb15a1e2dba52f9dc5b83c48c2908f701bf3af1bc92de66fb72fa4f76a46c39462de6ee1aab20422904cabe1ce47e1698630c319e32e45e34571a5323f60f1358f84a3c86cb2732f1f71f89e5da2f4ba8c49efc56ca72deb71df28f2", 0xb5}, {&(0x7f0000001780)="bf65b3bde72e384db2914b513b0750937bb1ec1759d758241f084c9c8178c9131c1ae31ca71bf5530998690c94c3f620c74b5670f87faeb8f14d2bf5cff306ba2b2b448a705c75c661d105f34f104ccfa1d4d719deee1aa358b7cfabaf1aa88e6968e7bafc882c72bf9aca700387f982626d922eb9bafbf8f10617f6549b3b7b9714ee9d5e76e6936b08f92986f1ec967ad723132dcb4cf867d88c8b4721e7d9a5e13835483e4d01bc3ad2011d39d0203396ccaa26a6a84d29778b2dc0d0a917fe5da57f3d14b7e70b3f257083ff33dd18e1ee129533829171a7bcd4d1e74fb0f663ec4e77635a79b5", 0xe9}, {&(0x7f0000001880)="89e48da72faf6d7d791bf9b3b82de372f38f8e8646d9876879ef6a9ca1854a8cb38d5fb9e816d84b2997592b1d707b386c78fdaa16547b3a6a4244dce8de7630863aff5b25705e1e5f22b39c5368688eff725b5dd9861cd1e776415af9bef9af36ea972e78547409008d317cb13b71f8e194fe9a775324756e9162b0bdfa0316e0e2c42f0dbe4d788d11e1f52cae31c068ab986de2bf9cec413e36fea8e3b9aa73c79dbf9b31cf2575c41f6d64d073a0c8c3282454ba821a11c381c9", 0xbc}, {&(0x7f0000001940)="7fe323b82bc771aa79b9b7be0bbb379ec9070a8a74109c662588cb3812696d6d9d194c55bf2bdd603704ae6bf49c8061db7d71aa3f2f7a3943bee31149eab7885bf6f5f1a441a5792a0b1672ae32c0907f41216474a245514f591e4b9779716a2b34841fffa23a89a331a6d5da53d02941f6f951f41cc685b9f6db9c7bbc691c5d06b45966304617951e998827225984a870e72b34eba913278a1295e3bcc56007eca16615e92275e23d8fa42dccd8e7ebe77bd357932b125b3738dae40efc8cadff32277a4b636a7d4dc7b682b80a97848ea9f6e14af0dbf5948265ea8d96bac5845ecb60", 0xe5}], 0x4, &(0x7f0000001a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x58}}, {{&(0x7f0000001b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000020c0), 0x0, 0x0, 0x0, 0x20048880}}, {{&(0x7f0000002140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f00000021c0)="421bfe96d23ae5a9e34985842d7315f256272bada5c0e7b6816a908d50615cb8fb850944c94cb3495b4971d14f23e739f8e1450b4b9c690880e00549d5410ea2153fda3557cfd14e8653e116ddb98b0a8807e0217c6cea10bf36557d085abdbd82a905f8", 0x64}, {&(0x7f0000002240)="2be6c1235d59581c470ec00968e65d12f6776d40ce946dcb8c970899e58a89aa6a58bde6f12d0ad8947423b6da5d6e10444b91d195e29965778a8ff2b4a26698175e0e6d", 0x44}], 0x2, &(0x7f0000002300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0x20, 0x4000080}}], 0x7, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffb) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="62202a3a2a206d81602b00"], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20700, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x28000000) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) 4.693366103s ago: executing program 3 (id=1179): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x17}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 4.56896558s ago: executing program 0 (id=1180): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = getpid() tgkill(r0, r0, 0x29) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x40680) r2 = timerfd_create(0x6, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) r3 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x101e00, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x100, 0xffffffff, 0x2d6, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_procfs(0x0, 0x0) io_uring_enter(r4, 0x75fa, 0xe475, 0xd, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r7 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000025c0)=0xfffffffffffffffd, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_io_uring_setup(0x20004, &(0x7f0000000000)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x25, &(0x7f0000000440), 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000004840)=[{0x4, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000540)=""/4096, 0x1000}], &(0x7f0000000480)=[0x9, 0x3, 0x7, 0x0, 0x8]}, {0x8, 0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001540)=""/240, 0xf0}, {&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/129, 0x81}, {&(0x7f0000001780)=""/118, 0x76}, {&(0x7f0000001800)=""/128, 0x80}, {&(0x7f00000018c0)=""/213, 0xd5}, {&(0x7f00000019c0)=""/179, 0xb3}, {&(0x7f0000001a80)=""/97, 0x61}], &(0x7f0000001b80)=[0x0, 0x8001, 0xb, 0x0, 0xf9]}, {0x8, 0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/216, 0xd8}, {&(0x7f0000001cc0)=""/235, 0xeb}, {&(0x7f0000001dc0)=""/12, 0xc}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/148, 0x94}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/165, 0xa5}, {&(0x7f0000001f80)=""/47, 0x2f}], &(0x7f0000002040)=[0x8, 0xff, 0x7, 0xfce7, 0x8000000000000001, 0x2, 0x2, 0x9, 0x3]}, {0x6, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/104, 0x68}, {&(0x7f00000021c0)=""/165, 0xa5}, {&(0x7f0000002280)=""/233, 0xe9}, {&(0x7f0000002380)=""/221, 0xdd}, {&(0x7f0000002480)=""/160, 0xa0}], &(0x7f0000004600)=[0x28f, 0x7]}, {0x2, 0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004640)=""/112, 0x70}, {&(0x7f00000046c0)=""/245, 0xf5}], &(0x7f0000004800)=[0x7]}], 0x5) 3.949025871s ago: executing program 5 (id=1181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20001c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x2) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000000c0)=0x2) close(r5) r7 = socket(0x2b, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchdir(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000dc0)="6daeab77f71c35878b3c03a5e39939fe1b0f5e4410181b2a3b44c1d317fccc859fa7d1bb9e49bcb5a1dd995166e9ae921e0128042478a8c0d69aa9b8b0a63aa4800eb7e9858d1677f5b0006156b48f227de000cb6322b2213dde3fd591251013181120411c7f5719151ae4b5615ec7b2e164a188ad641474b2e7fc2b8b0f5f9c519cdd93ea6d48255216fb2a92d4930f397c258a9b26f9391a41f1e5990c07fef1ec6227776ab5aed74b075c43ad5111178ab3cd1e1834364ba118acf962b9aed677160983c2b61fcbe9ab3cfb655b47dc717689fc0ecaac48d8ad3997f55f0463c55ae949030a7c42639ebd1506a242bec2b8d88efbed175ed02113cbbc8b45ce98db98dcf20c7c50721cb4084f61c148980461988956c7242c72f70730f3e123c00f7412f4cd63ce9e64cffe2c70c53bd01f735a7da11e30f3bbd5d67e28018a2b6d1efa0756d1e140e30daa8a0daadea05e77d895c6603f3ff32d8484ae26141982aa0fd42d98c89e1ba7e8d3ee78a752e614ac927c2d5bf044d5fe852eb3eb32ce602333141d585e536ef6196f358c3c1ea6bf2633012a731182ea3c6a69843292ee07166a7ecb1f161c5d269a55d38d4f272a2b501f0901fa967880108261504858e58b3cc60151f6e6f3320675f817c4d9cc5f98f01d4f352ea7bcb6823c6f1c936f0edcae6b0f2ce154496bc14f60160d0a9a07631bf91c1e25ec8943c4acd360565ea313576162e20d1b5bbb897279aeae40655e87e4de1ba594a1f1eb916a723164b006567c64c829d5b606503b3cc6c1eb1dd1284e4ec453c312a09cc694d236c47cdff10b1dd1995249b58bede64603ac426be8eb7205cd079c7a588a1855940d1c519d42e5d7c7be83c936725e92c22aff69dd897133a4b4598e1f780e845e69481d0bf441aabfad184db41437f3d9cbf3ebb70116031430bdef434425a333d59e28b22bd467367a5fe74a85fef510ba37a75d0af4a7416d39b366f4cf6ca78144653aedb75bf54033f1e703d8f5bcf900eeaefe7d82f652cf5811d5aaae461485eb071879c7033accf0ff62fab8b96948f7f05cf4c6ed5c485dadb2878d77bf49dfaf22555fcb76fea0cd777af1798a94efb56f0d5b44c7c932339f7cfd70646030473321da8001dc7e63621b6681fb10f9df04b5fcbe88d919cbaa2486c9cc685f34c70c64cbf606d162549e23cd24dbdbaf131fe88d2598184e6685c3380f2992dd05a07a542ec8e5125decb0dfead5417e1039ed07baa0a68945e77187908ecd074159705f147a945e3eec680100877811c6ca1828e7aea279223231fa2f9dd42b9b0fc08d21da9c90a1bbfd39f936dd68a65958ebe5a17301cc2f0dca3e53004579b2dd7a30e5e1064c097bff23aea0567ec3b6e124f31f24b564fb29d017594d016d739b66875b952f7c69d47a16b05e199a64046da45022915102ce23e81316067952ec88b11bebfddab1b8c8df52e1a9b9cde0dbf95ff016cf5f7db5519640ac56008e4b3cc149f779485c09547d807d61c997378419ed7ff58b755eaa7b080ce50a452a4a2979e2b82f21d12f845851e532505439ca7e36b5f4817137323c12f52c03e9e1218bc81433049d6db077bb21450ff620b4777dcf1d1590f12cbde3d862c2bdc0f0e1c50ca85da461b61c5506ad3371b4165af211232d7ee079842e97646b729c3a8f5f6836de3c9a86bf9ea0dcc72a9c3327a8f7500b564bd31f4d7d20176eafd7e6605ff238c9a7308ab6ac5692d3be045914d167e54741ba9497288263f971a7335ca83dc71cbccf5a630581a35856cba0bad3b03f73a2c9db3280d1df6355eed5218661bd05cb451e0aaebbbf263b180fba698132fd2e1a409804af0d13cde063c80c8b587da40095be2e4c535da44e97f3a5c05de1f55c95fa4464036327837be837aff4bd559ad8fdd2d3668d87f8dc017030ef6ab0dea6adb0b1a84ef50741f8272f7f1660eca24a6e3af3cd1b14c107c5859764cdb5e39896a246eb74831692e451192589d13072df97eb9cd68b9b064bd574c504957d29b9d1a33943176bf915df4708598f8da316258a048aeba01523a04507cf788b5f19f50b900faf901359d73ae097cae3583a85dab714381dcdd1e782c697ae72e4260b6a0c681d43467dd3686cc052815fb05169129cebca668da26d65f1e86a6a2393a37ef5e66d5bb80ca975500b70358b6cb780d757bb042e519f100610bed0e828eba5074265183668a5e19d8498044fe5d30133f295c7c4355c6fd6f1020231cab2dbb9397d135c7a3a74925475305e49d2a8b34a14cceb06d3ddd16ba1524fbf5b18a973f5b6b329f9cfbd9188607b908da1aee51d1157a5e4d0ada199f84bfc86308f640c3a4f228fece24e3245622dd9cb0462030c1e59afc3a192dd167c25c136c6506d54356ca7a4495ce6635b0a26dd03c14d21ee97507f3b96a283cf1a0e6b2515b3b548273eb3b84734aca528eb2b44872c60316e672c0c54adbcbbfd429ba8f6fe29762e8be37db40479915a7d1f23c20f5469ab5148e6448019c31cc3064c2c4b329c6cdf08ebb0870b47ebbd3fb11c8e64acc362f5486f58ed56a3db6658bdb71bf6671a474190c76a267afca9aa605736801bb0e69c321cc187b3df45a9664e3e058b51193f31540784d52308a759f351c39beddc3e6d87f6023ead2897886b9b2ea80c9e22ef764f0d0fe59730b82e5f37e52628e9fd2a8c0f89a45a8111ae299db02289d0425fc7459e592a7e2657b1faad048449784877aa6590004e804b3abc1317045e798fb0e9e3b3492ea252dd8525d75883f00a971404591be545ba75516dadb16cdee010bdc3e82980e71d793ae08c0b699bdfca4eec1460ae5a1910b14a93f0fd3dc68d54a69a192644fc4affebf39079fbdebd4b3593c0368fbc2533b1b4aad873e7973e4d204ef1ed416ed3e173af807610a000527bcdee4230e73be6a3f9bf2bc79373315bf09f768a8802792eb2f5b474ee76918664c6eda7d509e88870391d91cd12f1c57b3073ccdbe172f04302a99c789a275318ef14b5ac5e6d103de8aea31363b9bf847f538d9aecceb912afe0bf5e78f8b5ecd995d164c8ddc7c4ad82027a72e38ad74c17d9735ffa20f97ad2459191f77a1363fb3ab42c352196d9bfa9a7c17d0e434b634c36418ff0e870ffcbdf6f45fb5cbc245805067ef594ea0b518628a1a607010257111a363e5b5205d62b0c43f3778e8c226d9ccacc6e5a9ce141f727b718c2b267386a610e3483db5343b216dc606a949932b7a68f3ded5f5e39c87113968284b0aabd8430ef407af6b7b24cb94664a5a28a9511952bf6b523b5c8ec7ebf541ba36156a213b04e6de88290b6cc03e69d9f01b68e5cab66f92d0548f3b0a927d64210805a306fb5ba3655ead5f712a87ba66847c17adcf389b5e363586605347e78616fc06359ad409cfab63e201741366e84010715fba2774be6d875a25f4d31cc518079c464f7ca43892d5228343e9a56deffb0135f2bcfdac966b400216c574dfe4f1a12600460b5abe56ea5a6cbb6fe7bde4d2e12d8e64ed9ef55dd2c15ea8490eb2da7de9114986010cdfc2719b02cf4c23dbf0f9db2cc1bca666d719ee63e1d1aa04f16e7a2138ca7872806990ded234b81656cae128c3d26665f0b02bc721e578efe132df7f7733e218df8dc3cf902186b359cce208ab47b9a763a2d811edd6a221dffc7d67f71a2dc4c2d196e2b55ace99311ed15fa3c292acff348e3e89fecaa1ed5a644b7783bdcb4e738e4fc76c2340508e29d5274a30a24e9ffe9e9794abb70fb520429b536de2555486566b44812ba228575d30f2b112fbf8dccbf70fd2fb90baf1666c1785fd9684df406d53a09eafd818997557af3cd59a70a763751f0f31609c74774f0bacdf0352103ab6c6058fa0ea8731965a4f224f95951eb49985fdef39845c6d1a441b7c2e74f4c6db2f25460938f0a449ba5483ff2238beee23639e1e3435e134579d16dd99a6b523c3728d59049d509b6ca7469e5432eb23b6ad66c7af2fc8322c21c2f5bc1799c4d22e81e7e7e1f14e4288efb334e143856c688a1a54c97f76e1205c74feebaa73790779ba818779959f50edf80a695b6ba1e17ec4058ad52068a3a87e1159f467ce70b35057e7fea4e73366be98eb9faf2244582d95504c15d50888ea2737f8ae0e666b175baf2a2b59d7a70ecc6bc575bc209906df864c5f815165d2dcd76ff5adb1f04dd1cafb52808013f8f0586306a789fb7b8de812b720576d44d73bef8cbcce79fbeabaacc57bf016eae83726ccfb9053aaaa22a5886bc335b67dd53f25e9301553f7e1e3b73048fe88e39d0c63217ea1ea31cbc5c6ccfe3e395d1223c02426108bcaca9131466e629bbd7ea85649c3c898b3c2e43ae5c962b6860227be14e42bcba53e151604ed807b3ebaca7432bb4fdb6df8eed100b423f28281051f765643a6ec017fe65e0b0eb056d095bf74d7819af35c0fec25f8e1ccca4f1171c27cd2a787e7f13b2118df6faff6d2d458f15032d78bca077474f7365eba625308ef2660d8dd09f38977e09ad80dea1a8dfad3c30e75ccfeee2b7e99c4173a5eb6cb01e8baa218e95ec5ef945cdba211e308263bc56578b691041e53b06c7ba36735b3c092d828c4f5b055fbec6be7969c71fecc974e189f2ad0866d462cb8527f23e7a0ebace3c87454a001bd8da82ab694317bb00f67d15dc5284ee6473d9b02f9873b6f997af2ac576ee5acd221330194b2950309d63e0049c082c66444ade5eabe4fda4a2d335d355f07c53aabbdabf41da02812586931810bf5700595f9a988c478cc0232992594b3462b317f3873147477dcdd45c78374e8a8571bf45921f220863843e76c936c97460fa562d81f293481c7501a2d6cf40e8b8739cba502ead93824d8ca0c9064283c17924fdebb83097b3a5853fb13e5ecef8672815321f7a5654a781b5c4fdc2389032f82ec40259f17738fc2719d0743f0ee4133608296687e23b40a6fea07c2a74f500badf7cf634920eefdfddd7eaa8d33e519e60cf7895a6bb1696266d1df42d90b927483082ac73727fc7529da278ce91d7355eca6e20336bb61f86171be1897595de514fe75152382409b4a09ac46118c6eedf18b90ad4fafdf523e1724a8b9fd31304e499558727fd2890692fbdcdcf45084edc15815920bd988b22019ff827c68b7684b63064491d90f9753de10585f01a35e93a03f326e0e8c35e6009626ff723e2cea8ad4591c7edd3606231d58376387bc3af4e9cfec662f1aed7f4d4651be0e6042b6473103a9dac0b456aabd1cb1c624ff29f58cba3eb1f6229643b01c21f62aa39298c14a6441553198edc81491455922cd26ff64caf38a6c66e3f7b1258c61e2d93ff9edcb8ed4e13e2161b1a3049d1e304c262ad27765ce19728b1e0f97d0e0ca97c028a0479de56b936a036a494f84f0e56940015b3b097e74588b2f665e02e2a768bf61f30c7fc57e7512fcb52ac8cf17ed4c47464ba00598a1f922fb5fe04827eb583f0a22c4847ad5725fb06425fa70f5663846eda694b95a852f17291f3d182509dd374dda7f0036c0077bb0ff86c29fbf847566f6497af2898213381138b34918ac0ed5f668d70a6bad5828db3a552e765fcc12950de847f3e51f7bd9eb1d0c1855a7a016e2ef52dc4b578724cb825963accf7f740a81ec2c5534ea9966f6c2c271b226eecafd5fb47553f85b39caeca8b707bdec77a8933afca06e9da48477098227e798f7fe2db36628674b2afe08c3ea6bf2fd1d4", 0xfff}, {&(0x7f0000000140)="e9796996a948", 0x6}, {&(0x7f0000000180)="d42ad9ff50c71219f8656151feb84f013b17e7eb2ecffba7ede9c64752bc1ae527efa5cc58bfbb1fcb681066b731f5c0acf2714de80c0f4748e11eff6db3a24b4f62d497dcbef2ff2e93aa3d944caa5ec02076d8667e6d2b89efd2198f1db522105237dc6d", 0x65}, {&(0x7f00000002c0)="e1b2273c387024ea90bf3165984a52c7a2604ba44e05ade8f033c5b075167839ec8be7853286aea15faaf22d43babeb91be33bcd4f10f566f0e61eadca888d2d0c3ef7d28e59107c7ba16756bcb93b392ea3b1024227334135d9462d0edcfa3d89ad8a964c15ea7a83774e1ecc1f2924e733f82e75b75fd0dd0f9dfd006b2a8eb63876470ed28ad1556e63e4fdbb1c67b2d825c01a2aeab104997da627577b55db19c1614d33c1c18f3966dbc26f29bd5222f176f742cda31bc9f369", 0xbc}], 0x4) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat(r10, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r11, &(0x7f0000000040)=ANY=[@ANYRES64=r10], 0x20000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bridge\x00') 3.657574021s ago: executing program 2 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2000000000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3.623898382s ago: executing program 0 (id=1183): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) unshare(0x400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', r3, 0x0, 0x177) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad177bafd6996d6a}) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000380)=ANY=[@ANYBLOB="460400", @ANYRES8=r4, @ANYBLOB="ff830500000700ffffff", @ANYBLOB="b2382811df76b70eada846e3a01f66dcbd91234cd8b6162c28770e846479868673529efa544f24dabeadde8cb4e699bc2faba5935695750ffb30fd03dd54d6680f8000540bad9daaee29fd31c948a5f6dba66020dfe09af53db77b392189c28121dc809e1ceb95f7ff426e0d92ee92f2c19c63a964072a6ca36c746105f55f23e58d2f1f2e702cff5c2c0398526af29014dd745aa99136f1fb14416e27e58d816cd3cf3ba80e05428fc7a04282f7ac2111fb24b5bf468c57861d71d999839980c7ce7f85eacb80ab462b50baa5e6478409ca636089b3281812a2d675ea23b8631a1dd4b651a76e0d44a852910716fb3bcc91"], 0x4}}, 0x40) sendfile(r7, r5, 0x0, 0x100000000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX, @ANYRES64=r9, @ANYBLOB="a5d25500668888010a6b5939986936851577b15088ec8df5d9b69345cb3234601d8083a7cea0310a442910fa63502c6017e01e05e97ce0b5f2c1bc110e0f61a4c10f5152b5db60625b5ed14711aa7ec5cb0e7b0c9e8ef7b95f000ddfb787", @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x20008004) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 3.277147104s ago: executing program 0 (id=1184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/11, @ANYRES32, @ANYBLOB="e719e7"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fbdbdf250500000008002c0003000000080032000700000008002c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x40004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) readv(r4, &(0x7f0000000680)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x200}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x884) 3.235750257s ago: executing program 5 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 3.09406184s ago: executing program 0 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x800, 0x8000, 0x8000028d}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2.721924632s ago: executing program 2 (id=1187): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fchdir(0xffffffffffffffff) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000016c0)) setpgid(0x0, 0x0) setpgid(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.631111804s ago: executing program 0 (id=1188): timer_create(0x1, &(0x7f0000000000)={0x0, 0x2, 0xc5694bfb432acf02, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x20, 0x73, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0xd2, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xff}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4d, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x4, 0x1f}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xd, 0x4, 0x0, 0x78, 0x4}, 0x88, &(0x7f0000000180)={0x5, 0xf, 0x88, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x7a, 0x0, 0x1, 0xfa}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x2, 0xb37}, @generic={0x71, 0x10, 0x2, "240fffd4303fbf5bd9b92a32904ea4aa33d3492579e3dabe3e8f8d6ef13870d18abcf1b476f1b8f1706389904bdd0756e8c4fa44c3a1aae900ef10dbdecef7429335197935bcfdb2c76f1de99654de7ba571b3e9ae9ccbfbb9524721e3c211a98b8f1d82c61a834db68845301380"}]}, 0x5, [{0xfb, &(0x7f0000000240)=@string={0xfb, 0x3, "ee86b87fb9ad691f92a13063ebf1c8c8411a2a4ea53925b9b121df4f83fd0ad7693074007efccd9aac71730710e2a7b59e52f5f24189cdfc249314ff9ec27fb67af62da3785bf494439b4d225b1f692b77846eaa72fbb6a3b84512ebc7ff1870e94b6b76681c3276491dac0a1b239eeaf4cf01544b004caad7f0ad733e15c7d39f0fd30f25ab8c832e21d2fbb5c942ad20b7efb1e314f10a4883ee4e26d46a6891815f21f8e45453b7490eb6d6e87bd2e641a64e65ace93f666a1d4072de61c953676759f40b938ba297695c84c401c6ace6cfb9f06506ef426cda39eb9ff99c2d6b9759c505cbafae8a2f3fbb0b0713fde9b5fb790909a5ea"}}, {0xfd, &(0x7f0000000340)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x37, &(0x7f0000000480)=@string={0x37, 0x3, "e0c3743a09977897226877449b2a219ec3ba71a36bda62f83d97fd84a0fd8e4a97769120f149dda1bc3864b8e1d96de914707bdafe"}}, {0x7c, &(0x7f00000004c0)=@string={0x7c, 0x3, "a323068247bd54d8839d188a0cc99cc7c24a4cc983faf2a844646e74896cd0776c2a6e343cc7aa11c736ad7e3c53b9f1eed6f574763e431ea97eca26a31f1728b5be65336e9a9f8720f1b148c6e7c7a16a23db56bb15b610d9bf95e16435887a77f0f83c6baeba37add30b2719d7b786086e19cbc0390553fa00"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x10, 0x3, {0x3, 0x6, "a8"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000640)={0x0, 0x22, 0x15, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0xa, 'wRx)'}, @global=@item_4={0x3, 0x1, 0xa, "23f69df2"}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x1, 0x2, 0x1, "e7"}, @main=@item_012={0x2, 0x0, 0xc, '3/'}, @local=@item_012={0x1, 0x2, 0x0, 'U'}, @local=@item_012={0x1, 0x2, 0x8, "b2"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x9f4}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x18, 0x6e, "83b9f055fc72dc4bb44021eafc7814482db8bc32945130c86fae412b94dc169997e928cfb00c3138484356d4e4bf88c65239d9aa5242e558b65801cb986862a488538149d6cdc7c603d19e5bd6df9403b8d160c4f63737c2f1cc40da61a38ab41d15f4b494dfe3fceae7f52cef67"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x1, 0xa0, "a1b3a08ae262b81c06a7a0fefb21a1860a056a3d1630a1a6a780b10b6eb10f2feb0ea4d254723b22a240dec5bf1d8f20f46a253f59beffcc701dbdbbefcde2c73e93629dbe5b795a21e93a726770d359a8ed2d4de188bc91d2e2a37731162e54a82afd8c629af02ef93899fcfbc321d50f531fa37f4a730374a1b4b0a4ee921cce38ee833a23256a7e0d063f9ac71828b9c53daedb8f18b6e380b68fa2192794"}, &(0x7f00000008c0)={0x20, 0x3, 0x1}}) syz_usb_connect$cdc_ncm(0x4, 0x218, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x206, 0x2, 0x1, 0xd, 0xc0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d6bd"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x2, 0x1}, {0x6, 0x24, 0x1a, 0x7fff, 0x1b}, [@mdlm_detail={0xab, 0x24, 0x13, 0x38, "770241d5ecd0684e7ab3a8cae22537189d04d9650b59c536231c40c24feb0fbab017090800378444b3d1decde77476e6625211aa6e5d550d920ff0f59c9c451b0eb14054e42c7f0abe49341ca14d07db64b8fd8b77f5bde7ccec11d54a53940588781b84d3ce7602274d288698ed3d452290264fbda85655949f304e3e7d7b7b030f6ba22d6595366560b8ad0c9c7bc1b0371f4ed5bb211b72da779a44d55fdef24681f8772f93"}, @mdlm_detail={0xe0, 0x24, 0x13, 0x51, "129cdfde9e3756d3871f12b9e2e014fc36695e6149e6ce66e5765c7739e7e78b37baf4262d5b0786dd938359b4d6e3e81168516304440576a6f17a62ebccdd6b78f9604041f06258f9840aa41b47439e43d08ba576663958df6c27610a642f1d2fd3a19ae208a0116c7fe8a543c9c2cdba1ace1a9f38a9330e0436ee3f52690fd86b18ffe188fd04c56cf60c760c179a03ddf40c267a5cb5330dec163d234f2079ef568585d3278a6f54a2cdb07df3ea098a51fdb3186027aab1d0f3d974896fadb77542d39be71fe50818547ab57cd8852ee4aa3703773ece1198bf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x42}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x3f, [0x6, 0xc5ed, 0xff, 0x81, 0x2c00]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x7, 0xa}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x8, 0xc0, 0xf, 0x8}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x81d}}, {0x7f, &(0x7f0000000c40)=@string={0x7f, 0x3, "94a45f7d8e7eb856f83e384170b1579a51624edb27edd44dda333a37c805c91af8c46f96abc2e93b7c676c00bc039425a079b6b8acc6174eb8feb3ef8dca6117ceea2f9c42004596872fc4ad34042ce5d6a9854179abf4b4b04d257938cb1655dce9393a77a6acb60665e220c6f26b33e74d96bdcfb8ed5a541c905145"}}, {0xb3, &(0x7f0000000cc0)=@string={0xb3, 0x3, "24537f59599d5594280536554e0eaa45dd12a983b0662a07ca81b4f1607e949fc139bd1c0cac19d0dadaf4c61f745e345cfaeef59a7ad4c4929c2aa9db59c20994f08fc519eb587f4e7688894c73305b6bb167e666f77de5f0e4e47e1cd8a6ec4a4a9a0777265319d5f453b9557c56ab47b2724af3543d48d0fef7102050f122f6ae9bb7df3ac4ad17430b1d300f0b643004f4f4b811356565994bd4e174ca2503e8bd2f8ee5b9591ce07b92c796d51292"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_emit_ethernet(0x132, &(0x7f0000000e40)={@random="0b92b59934c4", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, '^f;', 0xf8, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@srh={0x11, 0x8, 0x4, 0x4, 0x9, 0x58, 0x98, [@local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @hopopts={0x29, 0x11, '\x00', [@generic={0x9, 0x8d, "1c66f4d98a332d57e097f5987b7dc520382749932427ad15a05a2b68b0b614f2fd6682b2dc9c4b09ee453bd446d066e9383c35d5d208e0d96aaafa9616040113e067bb6ac08d0503148471b3883f768153bf7b8117231c5b82319d868b27a4a20ffcce984313c9ee92af595ea6143854f8fe520ed60a8d24809877137ac273e68be29e248896396b6558327bff"}]}], @mld={0x82, 0x0, 0x0, 0x7ff, 0x6, @loopback}}}}}}, &(0x7f0000000f80)={0x1, 0x2, [0x7e5, 0x75a, 0x7, 0x291]}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000fc0)="c7301462ec43f14f62c4490cb3f1549b16947b2958d2faf13665929750ab5e3dc69a100a2aabd31c9e1c060557d47c52ab14df617792aafbb152ab60f04e36d012ee256f7d98a2ce6d8a2849dddccedbbdde74b258e33070") r2 = syz_usb_connect$uac2(0x5, 0xce, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x4, 0x80, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x3, 0x20, 0x1d}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xff, 0x12, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0xb, "1f62738c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x40, 0x3, 0x1, 0x0, 0x4, 0x4, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x1, "ffba40"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x7, 0x8d, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x7, 0x5, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6b, 0xf, "af6b31576d305dc75c"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x2, 0x4, "daba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x1, 0x7, {0x8, 0x25, 0x1, 0x80, 0x1, 0x4, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xd, 0x6, {0x8, 0x25, 0x1, 0x81, 0x60, 0xe, 0x7}}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x200, 0xd5, 0x1, 0x40, 0x8, 0x96}, 0x60, &(0x7f0000001180)={0x5, 0xf, 0x60, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x4592, 0x0, 0x101, [0xffff30, 0x3f00, 0x0, 0xff00a0, 0x0, 0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0xfff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x79, 0x3, 0x1, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x8, 0x80}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x3, 0xf00, 0x8, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x10, 0x7, 0xad, 0x8}]}, 0x4, [{0x16, &(0x7f0000001200)=@string={0x16, 0x3, "f6a8c671bf17542c8d8395e48b19bf40f7c8c8f1"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1409}}, {0xed, &(0x7f00000012c0)=@string={0xed, 0x3, "af869203959be38c4f912467ec2b76b2b43c712be29c275111ef08bd3ea281e7d107fa6ab0f39213e04d2c4838f116960b40245496f17e8722f94b08dc96b5a6f18eca04e9c29a0574f902f6cef061ad0037029a68ab49d81b1ed1df0892de4b5c0212be5a14752f64cc87b704c35affb7dad8acb7d95fd91c5f6d70cd6a436a3349365410a6e216e72a71b29fb0a203a1763f90319064bcbbe41e15cc5b2864e25f2bf3135cbfac5288b95f8126dca115c21d348f208177ed5563bbae25a3ac61857b3c365f8194f5bd892f5d1df820db5703a1115c465aaec31eb67a06dd8038b52938a49e700c99e3da"}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000001480)={0x41424344}, 0x0, 0x5) write$tun(r3, &(0x7f00000014c0)={@val={0x0, 0x80f3}, @val={0x3, 0x4, 0x6, 0x0, 0x7, 0x7fff}, @ipv6=@tcp={0x0, 0x6, "eba376", 0xca, 0x6, 0xff, @remote, @remote, {[@hopopts={0x33, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {{0x4e21, 0x4e22, 0x41424344, r4, 0x1, 0x0, 0xd, 0x2, 0x4, 0x0, 0x2, {[@nop, @sack={0x5, 0x1a, [0x8, 0x19f9, 0x8001, 0x2, 0x87, 0x2]}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @eol]}}, {"32dbffa0a5682184f7e9148a649e2dd28f0e12465c01dac129b6d6b423ecae58d9b5636a576aed80e49734689221583a08a26d465b4af285652b073020ba875126637116673c379eb3b60caa150f77a25784c26144daced5622d1b8bd760b3e015461614bbad99b821f1d44d839260f242eba27321ea"}}}}}, 0x100) syz_usb_ep_write(r2, 0x5, 0xb4, &(0x7f00000015c0)="10fb996f4011d6b0afe38344e0ae7c8a29be1cb6867d66545fe67b0203577e00d1b10250ab967f361bec1370fca9ea21696aec6cb65c4edf7745b5d47e887499454d237f8908a0379ba6798f1abeba3e63529454ef7b1615bfb2224b1acddef4d43b29eb705807484fc2485481dfaa405561e166749496085fc6635aedf70e01f20f62cdd34a48f0398cdbb67a7d14d85e57c330e9d10efa3dd379468f9356eb670cccbede949f4d087bb905e096fa1f114954ef") r5 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x41) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfc, 0x0, 0x27, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x6, 0x10}}}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x310, 0x8b, 0x5, 0xd4, 0x8, 0x5}, 0x5, &(0x7f0000001740)={0x5, 0xf, 0x5}}) write$eventfd(r5, &(0x7f00000017c0)=0x7, 0x8) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001800)) syz_open_dev$char_usb(0xc, 0xb4, 0x8d) 2.515806996s ago: executing program 5 (id=1189): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0xfffffffffffffffa, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c010000000009"], 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a2030303030343000c4ffac3c115833b35e278ca3885fcb9d3d905c749355178eae5ace80be5fc794449b4ce6305113111b57b50d8799f2c504b339033506"], 0x2a, 0xfffffffffffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002c40)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.855700646s ago: executing program 1 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601080000e02497a50fe4e7b8000000000000000000040900020073797a31000000000500040000000000110003006861736800000014000780080008400000050001000600fb00"/87], 0x60}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r1, 0x88, 0x66, 0x0, &(0x7f0000000000)=0xfffffffffffffe09) setrlimit(0xc, &(0x7f0000000040)={0x2, 0x5}) close_range(r0, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200000000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3b39ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd4}], 0x1}, 0x4004000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sched_setscheduler(0x0, 0x2, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r6, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mknod$loop(&(0x7f0000019080)='./file0\x00', 0x2, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) socket$nl_route(0x10, 0x3, 0x0) 1.809430528s ago: executing program 3 (id=1191): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="d6d93dbcdd35fe40ff7cce970a321a57288e2c257f9cbce25825dd7be80edbebd7d7da1b35c105f04ce593110be8938108672f34cd1728d46c0921417838345df78cae4f9ffdb3ba4fd1b4e88a900b7e1433035b75183223ee2672a6abf23fbefd241ffc94d8ff25d49658ee2a3ac1a67659af21b66bf902a049b2430c2165e2ad2ba35e033db028289113c4a07f33b49d135c56499d35fa9236b72fc38d8ba5a1a9af48699f5bf678e852ca399d94ecb729929d5eb5dc34fb5a07e6a037f684eca38cceaac55f707847dbd4b31fda4cd984506549d7ffc687ded5", 0xdb}, {&(0x7f0000000240)="04a2350ed1199fdae7172f3752d32053f017e7a0dc883e2f6e804c50e65340fd7b8317802fdc9489ad1f50dcbc3edf9468316e9a02e842619e2b7cfe7ff1d47e8c6bed7135dcf1f00b93c69ed55a4cd3286b3a0cc493b770eaf47e3c0167abc0634c1405845bbe5984e8fb4fd6339d917cc05996", 0x74}, {&(0x7f00000001c0)="614350dfc0b9edde98dbabb472f623db57d70dd2b3a0b0a1f7260f8e8845e5e7e729edf2c3e308262b6d3d5e95cb11d0bc454d0745", 0x35}, {&(0x7f0000000580)="0c7c9f6c93c4525653d7b39fdcdf722d06f22cf9af7e3a625a2af8cd75777113c6b95e81f558d935b698a6e4c3d443aa6cf38f187e341fc1c3019201b231dc7e36b569b4fa7f17660aad3457d467dc9bd88737616dfb4d20f5692e7acd0e07a847cbb5f56b6af2393bbf250ffd0a16d0d22352", 0x73}, {&(0x7f0000000800)="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", 0xfe}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x20008808}}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000540)=ANY=[@ANYBLOB="050000"]) 1.680929268s ago: executing program 2 (id=1192): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 1.599177871s ago: executing program 3 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387d9a57034b6eb3d5a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000224000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, 0x0) (async) fstat(r3, &(0x7f0000002a40)) (async) statx(r5, &(0x7f0000002ac0)='.\x00', 0x2000, 0x8, &(0x7f0000002b00)) (async, rerun: 32) fstat(r6, &(0x7f0000002c00)) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002c80)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) (async) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 530.832923ms ago: executing program 1 (id=1194): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) getpid() r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008004) r3 = gettid() rt_tgsigqueueinfo(r3, 0x0, 0x19, &(0x7f0000000480)={0x0, 0x0, 0x3}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x40000000c]}, 0x8) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x404, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0x48000, 0x4, {r3}, {0xee01}, 0xf0, 0x4b}) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x24004, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@posixacl}, {@posixacl}, {@access_user}, {@fscache}, {@access_uid={'access', 0x3d, r6}}, {@loose}, {@msize={'msize', 0x3d, 0x7}}, {@cache_loose}, {@msize={'msize', 0x3d, 0x9}}], [{@smackfsdef={'smackfsdef', 0x3d, '#&'}}, {@uid_eq={'uid', 0x3d, r7}}, {@measure}, {@fowner_lt={'fowner<', r8}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_appraise}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x37, 0x34, 0x64, 0x63, 0x64, 0x61], 0x2d, [0x33, 0x39, 0x57, 0x35], 0x2d, [0x65, 0x64, 0x33, 0x65], 0x2d, [0x64, 0x65, 0xc4, 0x62], 0x2d, [0x62, 0x65, 0x33, 0x61, 0x38, 0x37, 0x34, 0x34]}}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRES16=r3, @ANYRESHEX=r1, @ANYBLOB=',\x00']) 41.090581ms ago: executing program 3 (id=1195): socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100100, 0x256}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 5 (id=1196): socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100100, 0x256}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (fail_nth: 1) kernel console output (not intermixed with test programs): 295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 442.747139][ T37] audit: type=1326 audit(1773682838.720:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 442.747636][ T37] audit: type=1326 audit(1773682838.720:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 442.854467][ T37] audit: type=1326 audit(1773682838.720:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 442.854787][ T37] audit: type=1326 audit(1773682838.820:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 442.855090][ T37] audit: type=1326 audit(1773682838.820:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9b8ebc799 code=0x7ffc0000 [ 443.162055][ T8881] usb 1-1: can't set config #8, error -71 [ 443.173096][ T8881] usb 1-1: USB disconnect, device number 17 [ 443.813579][ T8739] usbhid 4-1:1.0: can't add hid device: -71 [ 443.815860][ T8739] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 443.850969][ T8739] usb 4-1: USB disconnect, device number 19 [ 443.852656][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.852735][ T5926] usb 2-1: MIDIStreaming interface descriptor not found [ 444.009335][ T8910] FAULT_INJECTION: forcing a failure. [ 444.009335][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.009375][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.0.913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.009404][ T8910] Tainted: [L]=SOFTLOCKUP [ 444.009411][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.009424][ T8910] Call Trace: [ 444.009432][ T8910] [ 444.009441][ T8910] dump_stack_lvl+0xe8/0x150 [ 444.009479][ T8910] should_fail_ex+0x46b/0x600 [ 444.009511][ T8910] _copy_from_user+0x2d/0xb0 [ 444.009537][ T8910] ___sys_sendmsg+0x1c6/0x360 [ 444.009673][ T8910] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.009723][ T8910] ? __fget_files+0x2a/0x420 [ 444.009747][ T8910] ? __fget_files+0x3a6/0x420 [ 444.009781][ T8910] __x64_sys_sendmsg+0x1c3/0x2a0 [ 444.009801][ T8910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.009825][ T8910] ? __pfx_ksys_write+0x10/0x10 [ 444.009859][ T8910] do_syscall_64+0x14d/0xf80 [ 444.009897][ T8910] ? trace_irq_disable+0x3b/0x150 [ 444.009918][ T8910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.009936][ T8910] ? clear_bhb_loop+0x40/0x90 [ 444.009957][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.009977][ T8910] RIP: 0033:0x7fc0c117c799 [ 444.009994][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.010009][ T8910] RSP: 002b:00007fc0bf3d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.010028][ T8910] RAX: ffffffffffffffda RBX: 00007fc0c13f5fa0 RCX: 00007fc0c117c799 [ 444.010040][ T8910] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 444.010051][ T8910] RBP: 00007fc0bf3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 444.010061][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.010071][ T8910] R13: 00007fc0c13f6038 R14: 00007fc0c13f5fa0 R15: 00007ffe4728bb08 [ 444.010098][ T8910] [ 444.296898][ T5926] usb 2-1: USB disconnect, device number 28 [ 444.463790][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.541918][ T8917] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 444.541938][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 444.556530][ T8739] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 444.645897][ T8919] veth0_to_hsr: entered promiscuous mode [ 444.652302][ T8919] netlink: 'syz.5.917': attribute type 10 has an invalid length. [ 444.707723][ T8739] usb 3-1: Using ep0 maxpacket: 16 [ 444.709769][ T8739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 444.709821][ T8739] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 444.709851][ T8739] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 444.709876][ T8739] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 444.709897][ T8739] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 444.709920][ T8739] usb 3-1: config 1 interface 0 has no altsetting 0 [ 444.709952][ T8739] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 444.709975][ T8739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.796813][ T8739] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 444.846274][ T5926] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 444.996251][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 445.000009][ T5926] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 445.000037][ T5926] usb 2-1: config 0 has no interface number 0 [ 445.000144][ T5926] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.000180][ T5926] usb 2-1: config 0 interface 85 has no altsetting 0 [ 445.044806][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 445.044836][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.044858][ T5926] usb 2-1: Product: syz [ 445.044873][ T5926] usb 2-1: Manufacturer: syz [ 445.044889][ T5926] usb 2-1: SerialNumber: syz [ 445.080910][ T8739] scsi host1: usb-storage 3-1:1.0 [ 445.092731][ T5926] usb 2-1: config 0 descriptor?? [ 445.102725][ T8919] team0 (unregistering): Port device team_slave_0 removed [ 445.247751][ T8739] usb 3-1: USB disconnect, device number 13 [ 445.274394][ T8919] team0 (unregistering): Port device team_slave_1 removed [ 445.493524][ T8918] veth0_to_hsr: left promiscuous mode [ 445.808641][ T5926] appletouch 2-1:0.85: Geyser mode initialized. [ 445.829959][ T5926] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input50 [ 446.013825][ T31] usb 2-1: USB disconnect, device number 29 [ 446.213518][ T31] appletouch 2-1:0.85: input: appletouch disconnected [ 446.276202][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 446.436168][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 446.439195][ T5878] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 446.439219][ T5878] usb 3-1: config 8 has no interface number 0 [ 446.439250][ T5878] usb 3-1: config 8 interface 37 has no altsetting 0 [ 446.444509][ T5878] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 446.444535][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.444554][ T5878] usb 3-1: Product: syz [ 446.444569][ T5878] usb 3-1: Manufacturer: syz [ 446.444583][ T5878] usb 3-1: SerialNumber: syz [ 446.564888][ T8925] syz.0.918 (8925): drop_caches: 2 [ 447.106247][ T5851] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 447.266226][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 447.268749][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.270150][ T5851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.270202][ T5851] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 447.270229][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 447.270255][ T5851] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 447.273181][ T5851] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 447.273207][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.273228][ T5851] usb 2-1: Product: syz [ 447.273241][ T5851] usb 2-1: Manufacturer: syz [ 447.273256][ T5851] usb 2-1: SerialNumber: syz [ 447.375069][ T8935] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 447.499040][ T5878] cypress_m8 3-1:8.37: DeLorme Earthmate USB converter detected [ 447.512288][ T5878] earthmate ttyUSB0: required endpoint is missing [ 447.540711][ T5878] usb 3-1: USB disconnect, device number 14 [ 447.554795][ T5878] cypress_m8 3-1:8.37: device disconnected [ 447.902865][ T5995] udevd[5995]: setting mode of /dev/bus/usb/003/014 to 020664 failed: No such file or directory [ 447.904036][ T5995] udevd[5995]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory [ 451.104339][ T5851] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.104390][ T5851] usb 2-1: MIDIStreaming interface descriptor not found [ 451.210243][ T8951] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 451.426241][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 451.426259][ T37] audit: type=1326 audit(1773682847.380:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.426304][ T37] audit: type=1326 audit(1773682847.390:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.426365][ T37] audit: type=1326 audit(1773682847.390:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.426411][ T37] audit: type=1326 audit(1773682847.390:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.426459][ T37] audit: type=1326 audit(1773682847.390:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.426583][ T37] audit: type=1326 audit(1773682847.390:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 451.573461][ T37] audit: type=1326 audit(1773682847.520:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096abfc799 code=0x7ffc0000 [ 451.577424][ T37] audit: type=1326 audit(1773682847.550:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f096abfc799 code=0x7ffc0000 [ 451.577585][ T37] audit: type=1326 audit(1773682847.550:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096abfc799 code=0x7ffc0000 [ 451.597073][ T37] audit: type=1326 audit(1773682847.550:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096abbcfce code=0x7ffc0000 [ 451.702926][ T8951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.913707][ T5851] usb 2-1: USB disconnect, device number 30 [ 451.962018][ T1108] veth0_to_bond: left promiscuous mode [ 452.280513][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.516262][ T5851] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.926187][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 452.932772][ T5851] usb 2-1: config 0 has an invalid interface number: 77 but max is 0 [ 452.932799][ T5851] usb 2-1: config 0 has no interface number 0 [ 452.932832][ T5851] usb 2-1: too many endpoints for config 0 interface 77 altsetting 127: 77, using maximum allowed: 30 [ 452.932885][ T5851] usb 2-1: config 0 interface 77 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 452.932912][ T5851] usb 2-1: config 0 interface 77 has no altsetting 0 [ 453.002773][ T5851] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 453.002802][ T5851] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 453.002822][ T5851] usb 2-1: Product: syz [ 453.002836][ T5851] usb 2-1: Manufacturer: syz [ 453.002851][ T5851] usb 2-1: SerialNumber: syz [ 453.045446][ T5851] usb 2-1: config 0 descriptor?? [ 456.630863][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 456.630934][ T37] audit: type=1326 audit(1773682852.600:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8954 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096abfc799 code=0x7ffc0000 [ 456.891601][ T5851] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 456.913807][ T5851] gspca_zc3xx: reg_w_i err -71 [ 456.913893][ T5851] gspca_zc3xx 2-1:0.77: probe with driver gspca_zc3xx failed with error -71 [ 456.953789][ T5851] usb 2-1: USB disconnect, device number 31 [ 457.776348][ T36] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 457.927230][ T8993] veth0_to_hsr: entered promiscuous mode [ 457.927665][ T8993] netlink: 'syz.5.941': attribute type 10 has an invalid length. [ 457.946221][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 457.949717][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.955368][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.955507][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 457.955565][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 457.955632][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 457.962114][ T36] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 457.962170][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.962221][ T36] usb 1-1: Product: syz [ 457.962256][ T36] usb 1-1: Manufacturer: syz [ 457.962285][ T36] usb 1-1: SerialNumber: syz [ 458.507640][ T8987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 459.064742][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.064804][ T36] usb 1-1: MIDIStreaming interface descriptor not found [ 459.095160][ T8992] veth0_to_hsr: left promiscuous mode [ 459.307387][ T9008] FAULT_INJECTION: forcing a failure. [ 459.307387][ T9008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.307427][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.307457][ T9008] Tainted: [L]=SOFTLOCKUP [ 459.307466][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.307490][ T9008] Call Trace: [ 459.307499][ T9008] [ 459.307508][ T9008] dump_stack_lvl+0xe8/0x150 [ 459.307547][ T9008] should_fail_ex+0x46b/0x600 [ 459.307581][ T9008] _copy_from_user+0x2d/0xb0 [ 459.307612][ T9008] ___sys_sendmsg+0x1c6/0x360 [ 459.307641][ T9008] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.307700][ T9008] ? __fget_files+0x2a/0x420 [ 459.307728][ T9008] ? __fget_files+0x3a6/0x420 [ 459.307767][ T9008] __x64_sys_sendmsg+0x1c3/0x2a0 [ 459.307792][ T9008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.307823][ T9008] ? __pfx_ksys_write+0x10/0x10 [ 459.307868][ T9008] do_syscall_64+0x14d/0xf80 [ 459.307900][ T9008] ? trace_irq_disable+0x3b/0x150 [ 459.307926][ T9008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.307949][ T9008] ? clear_bhb_loop+0x40/0x90 [ 459.307976][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.307999][ T9008] RIP: 0033:0x7f269cbbc799 [ 459.308019][ T9008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.308039][ T9008] RSP: 002b:00007f269ae0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.308062][ T9008] RAX: ffffffffffffffda RBX: 00007f269ce35fa0 RCX: 00007f269cbbc799 [ 459.308077][ T9008] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 459.308090][ T9008] RBP: 00007f269ae0e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.308112][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.308125][ T9008] R13: 00007f269ce36038 R14: 00007f269ce35fa0 R15: 00007ffe79c898e8 [ 459.308160][ T9008] [ 459.582823][ T36] usb 1-1: USB disconnect, device number 18 [ 459.917596][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.757687][ T9019] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 461.986309][ T36] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 462.096256][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 462.183463][ T36] usb 1-1: device descriptor read/all, error -71 [ 462.252181][ T37] audit: type=1326 audit(1773682858.220:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252231][ T37] audit: type=1326 audit(1773682858.220:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252274][ T37] audit: type=1326 audit(1773682858.220:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252314][ T37] audit: type=1326 audit(1773682858.220:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252364][ T37] audit: type=1326 audit(1773682858.220:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252410][ T37] audit: type=1326 audit(1773682858.220:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252453][ T37] audit: type=1326 audit(1773682858.220:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.252495][ T37] audit: type=1326 audit(1773682858.220:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.253586][ T37] audit: type=1326 audit(1773682858.220:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.253643][ T37] audit: type=1326 audit(1773682858.220:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cbbc799 code=0x7ffc0000 [ 462.385485][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 462.436905][ T5878] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 462.436934][ T5878] usb 3-1: config 8 has no interface number 0 [ 462.436970][ T5878] usb 3-1: config 8 interface 37 has no altsetting 0 [ 462.460439][ T5878] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 462.460469][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.460490][ T5878] usb 3-1: Product: syz [ 462.460504][ T5878] usb 3-1: Manufacturer: syz [ 462.460520][ T5878] usb 3-1: SerialNumber: syz [ 463.245383][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.950'. [ 463.730379][ T5878] cypress_m8 3-1:8.37: DeLorme Earthmate USB converter detected [ 463.731513][ T5878] earthmate ttyUSB0: required endpoint is missing [ 463.756202][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 463.786686][ T5878] usb 3-1: USB disconnect, device number 15 [ 463.792114][ T5878] cypress_m8 3-1:8.37: device disconnected [ 463.906188][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 463.907814][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 463.907833][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.907846][ T10] usb 2-1: config 0 has no interface number 0 [ 463.907877][ T10] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.907896][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 463.909768][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 463.909787][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.909802][ T10] usb 2-1: Product: syz [ 463.909812][ T10] usb 2-1: Manufacturer: syz [ 463.909822][ T10] usb 2-1: SerialNumber: syz [ 463.913427][ T10] usb 2-1: config 0 descriptor?? [ 463.958780][ T10] f81534 2-1:0.12: required endpoints missing [ 464.037814][ T9048] veth0_to_hsr: entered promiscuous mode [ 464.052721][ T9048] netlink: 'syz.5.954': attribute type 10 has an invalid length. [ 464.346211][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 464.438264][ T9046] veth0_to_hsr: left promiscuous mode [ 464.497053][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 464.500922][ T10] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.500945][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 464.503382][ T10] usb 1-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 464.503401][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.503414][ T10] usb 1-1: Product: ᰊ [ 464.503424][ T10] usb 1-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 464.503450][ T10] usb 1-1: SerialNumber: 쏠㩴霉靸栢䑷⪛鸡뫃ꍱ霽蓽ﶠ䪎皗ₑ䧱ꇝ㢼롤瀔 [ 465.162205][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.168784][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.259357][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.260734][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.263338][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.263842][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.533989][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 465.534109][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 465.580547][ T10] usb 1-1: USB disconnect, device number 21 [ 465.742879][ T9064] netlink: 'syz.5.960': attribute type 10 has an invalid length. [ 465.925295][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 465.925945][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 465.953616][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 465.953754][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 466.059743][ T9064] ceph: No mds server is up or the cluster is laggy [ 466.220553][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 466.220737][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 466.303455][ T9064] binder: 9062:9064 ioctl c0306201 200000000080 returned -14 [ 466.466216][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 466.556929][ T8903] usb 2-1: USB disconnect, device number 32 [ 466.618949][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 466.618988][ T10] usb 1-1: config 0 has no interface number 0 [ 466.619034][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.619061][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 466.678197][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 466.678219][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.678233][ T10] usb 1-1: Product: syz [ 466.678243][ T10] usb 1-1: Manufacturer: syz [ 466.678253][ T10] usb 1-1: SerialNumber: syz [ 466.843201][ T10] usb 1-1: config 0 descriptor?? [ 466.875636][ T10] em28xx 1-1:0.89: New device syz syz @ 12 Mbps (0ccd:10af, interface 89, class 89) [ 466.875661][ T10] em28xx 1-1:0.89: Device initialization failed. [ 466.875670][ T10] em28xx 1-1:0.89: Device must be connected to a high-speed USB 2.0 port. [ 467.597468][ T861] usb 1-1: USB disconnect, device number 22 [ 467.737239][ T37] kauditd_printk_skb: 65 callbacks suppressed [ 467.737259][ T37] audit: type=1326 audit(1773682863.700:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.739687][ T37] audit: type=1326 audit(1773682863.710:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.739741][ T37] audit: type=1326 audit(1773682863.710:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.744281][ T37] audit: type=1326 audit(1773682863.710:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.744330][ T37] audit: type=1326 audit(1773682863.710:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.744373][ T37] audit: type=1326 audit(1773682863.710:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.760644][ T37] audit: type=1326 audit(1773682863.710:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.760698][ T37] audit: type=1326 audit(1773682863.710:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.760753][ T37] audit: type=1326 audit(1773682863.720:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 467.760795][ T37] audit: type=1326 audit(1773682863.720:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 468.943195][ T9092] veth0_to_hsr: entered promiscuous mode [ 468.943634][ T9092] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 469.396188][ T808] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 469.556149][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 469.559381][ T808] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 469.559408][ T808] usb 3-1: config 8 has no interface number 0 [ 469.559442][ T808] usb 3-1: config 8 interface 37 has no altsetting 0 [ 469.561862][ T808] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 469.561892][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.561913][ T808] usb 3-1: Product: syz [ 469.561927][ T808] usb 3-1: Manufacturer: syz [ 469.561946][ T808] usb 3-1: SerialNumber: syz [ 469.911784][ T808] cypress_m8 3-1:8.37: DeLorme Earthmate USB converter detected [ 469.913532][ T808] earthmate ttyUSB0: required endpoint is missing [ 469.952546][ T808] usb 3-1: USB disconnect, device number 16 [ 469.966362][ T808] cypress_m8 3-1:8.37: device disconnected [ 470.085757][ T9092] veth0_to_hsr: left promiscuous mode [ 470.275471][ T9081] syz.1.964 (9081): drop_caches: 2 [ 471.248893][ T9111] FAULT_INJECTION: forcing a failure. [ 471.248893][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.248924][ T9111] CPU: 0 UID: 0 PID: 9111 Comm: syz.0.974 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.248946][ T9111] Tainted: [L]=SOFTLOCKUP [ 471.248952][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.248961][ T9111] Call Trace: [ 471.248967][ T9111] [ 471.248974][ T9111] dump_stack_lvl+0xe8/0x150 [ 471.249006][ T9111] should_fail_ex+0x46b/0x600 [ 471.249030][ T9111] _copy_from_user+0x2d/0xb0 [ 471.249054][ T9111] uhid_char_write+0x122/0xd10 [ 471.249162][ T9111] ? rw_verify_area+0x25b/0x4e0 [ 471.249188][ T9111] ? __pfx_uhid_char_write+0x10/0x10 [ 471.249208][ T9111] vfs_write+0x2a3/0xba0 [ 471.249238][ T9111] ? __pfx_vfs_write+0x10/0x10 [ 471.249263][ T9111] ? __fget_files+0x2a/0x420 [ 471.249287][ T9111] ? __fget_files+0x2a/0x420 [ 471.249306][ T9111] ? __fget_files+0x3a6/0x420 [ 471.249325][ T9111] ? __fget_files+0x2a/0x420 [ 471.249352][ T9111] ksys_write+0x156/0x270 [ 471.249378][ T9111] ? __pfx_ksys_write+0x10/0x10 [ 471.249410][ T9111] do_syscall_64+0x14d/0xf80 [ 471.249434][ T9111] ? trace_irq_disable+0x3b/0x150 [ 471.249455][ T9111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.249473][ T9111] ? clear_bhb_loop+0x40/0x90 [ 471.249492][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.249508][ T9111] RIP: 0033:0x7fc0c117c799 [ 471.249524][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.249537][ T9111] RSP: 002b:00007fc0bf3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.249566][ T9111] RAX: ffffffffffffffda RBX: 00007fc0c13f5fa0 RCX: 00007fc0c117c799 [ 471.249577][ T9111] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000003 [ 471.249587][ T9111] RBP: 00007fc0bf3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.249597][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.249606][ T9111] R13: 00007fc0c13f6038 R14: 00007fc0c13f5fa0 R15: 00007ffe4728bb08 [ 471.249630][ T9111] [ 471.821277][ T9124] FAULT_INJECTION: forcing a failure. [ 471.821277][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 471.821362][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.1.977 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.821393][ T9124] Tainted: [L]=SOFTLOCKUP [ 471.821401][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.821415][ T9124] Call Trace: [ 471.821423][ T9124] [ 471.821432][ T9124] dump_stack_lvl+0xe8/0x150 [ 471.821471][ T9124] should_fail_ex+0x46b/0x600 [ 471.821504][ T9124] should_failslab+0xa8/0x100 [ 471.821535][ T9124] __kmalloc_cache_noprof+0x84/0x690 [ 471.821572][ T9124] ? io_uring_alloc_task_context+0xa0/0x5a0 [ 471.821600][ T9124] io_uring_alloc_task_context+0xa0/0x5a0 [ 471.821621][ T9124] ? __lock_acquire+0x6b5/0x2cf0 [ 471.821647][ T9124] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 471.821681][ T9124] __io_uring_add_tctx_node+0x38d/0x530 [ 471.821824][ T9124] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 471.821857][ T9124] ? __fget_files+0x2a/0x420 [ 471.821888][ T9124] ? __fget_files+0x2a/0x420 [ 471.821919][ T9124] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 471.821958][ T9124] __se_sys_io_uring_enter+0x15d8/0x18c0 [ 471.821980][ T9124] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.822049][ T9124] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 471.822085][ T9124] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 471.822108][ T9124] ? fput+0xa0/0xd0 [ 471.822136][ T9124] ? ksys_write+0x248/0x270 [ 471.822170][ T9124] ? __pfx_ksys_write+0x10/0x10 [ 471.822208][ T9124] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 471.822235][ T9124] do_syscall_64+0x14d/0xf80 [ 471.822268][ T9124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.822291][ T9124] ? clear_bhb_loop+0x40/0x90 [ 471.822318][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.822341][ T9124] RIP: 0033:0x7f096abfc799 [ 471.822363][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.822382][ T9124] RSP: 002b:00007f0968dd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 471.822405][ T9124] RAX: ffffffffffffffda RBX: 00007f096ae76090 RCX: 00007f096abfc799 [ 471.822421][ T9124] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 471.822434][ T9124] RBP: 00007f0968dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 471.822447][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.822460][ T9124] R13: 00007f096ae76128 R14: 00007f096ae76090 R15: 00007fffc29b35d8 [ 471.822493][ T9124] [ 473.524352][ T9137] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 473.524372][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'. [ 474.593823][ T861] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 474.846687][ T861] usb 4-1: Using ep0 maxpacket: 16 [ 474.881208][ T861] usb 4-1: config 8 has an invalid interface number: 37 but max is 0 [ 474.881337][ T861] usb 4-1: config 8 has no interface number 0 [ 474.881606][ T861] usb 4-1: config 8 interface 37 has no altsetting 0 [ 475.043300][ T861] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 475.043330][ T861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.043349][ T861] usb 4-1: Product: syz [ 475.043362][ T861] usb 4-1: Manufacturer: syz [ 475.043376][ T861] usb 4-1: SerialNumber: syz [ 475.242451][ T37] kauditd_printk_skb: 69 callbacks suppressed [ 475.242470][ T37] audit: type=1326 audit(1773682871.210:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.256230][ T37] audit: type=1326 audit(1773682871.210:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.256354][ T37] audit: type=1326 audit(1773682871.220:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.322699][ T37] audit: type=1326 audit(1773682871.290:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.322753][ T37] audit: type=1326 audit(1773682871.290:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.322783][ T37] audit: type=1326 audit(1773682871.290:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.322953][ T37] audit: type=1326 audit(1773682871.290:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.325548][ T37] audit: type=1326 audit(1773682871.290:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.325598][ T37] audit: type=1326 audit(1773682871.290:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.325642][ T37] audit: type=1326 audit(1773682871.290:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9152 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 475.573272][ T861] cypress_m8 4-1:8.37: DeLorme Earthmate USB converter detected [ 475.585108][ T861] earthmate ttyUSB0: required endpoint is missing [ 475.597469][ T861] usb 4-1: USB disconnect, device number 20 [ 475.624351][ T861] cypress_m8 4-1:8.37: device disconnected [ 479.915808][ T9180] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 479.915831][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'. [ 480.046936][ T9185] nbd: must specify an index to disconnect [ 481.094860][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 481.095057][ T861] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 481.295832][ T9036] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 481.312199][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 481.313300][ T861] usb 2-1: Using ep0 maxpacket: 16 [ 481.350896][ T36] usb 6-1: config 8 has an invalid interface number: 37 but max is 0 [ 481.350967][ T36] usb 6-1: config 8 has no interface number 0 [ 481.351195][ T36] usb 6-1: config 8 interface 37 has no altsetting 0 [ 481.363876][ T36] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 481.363902][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.363922][ T36] usb 6-1: Product: syz [ 481.363937][ T36] usb 6-1: Manufacturer: syz [ 481.363951][ T36] usb 6-1: SerialNumber: syz [ 481.366216][ T8903] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 481.480104][ T861] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.480189][ T861] usb 2-1: config 1 interface 0 has no altsetting 0 [ 481.518765][ T861] usb 2-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 481.519156][ T861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.519202][ T861] usb 2-1: Product: ᰊ [ 481.519245][ T861] usb 2-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 481.519342][ T861] usb 2-1: SerialNumber: 쏠㩴霉靸栢䑷⪛鸡뫃ꍱ霽蓽ﶠ䪎皗ₑ䧱ꇝ㢼롤瀔 [ 481.540853][ T8903] usb 1-1: Using ep0 maxpacket: 8 [ 481.564232][ T8903] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 481.564258][ T8903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.643216][ T8903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 481.643232][ T8903] pvrusb2: ********** [ 481.643238][ T8903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 481.643256][ T8903] pvrusb2: Important functionality might not be entirely working. [ 481.643262][ T8903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 481.643274][ T8903] pvrusb2: ********** [ 481.816502][ T2372] pvrusb2: Invalid write control endpoint [ 481.876221][ T9036] usb 3-1: Using ep0 maxpacket: 32 [ 481.878316][ T9036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.878413][ T9036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.878456][ T9036] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 481.878482][ T9036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.950433][ T36] cypress_m8 6-1:8.37: DeLorme Earthmate USB converter detected [ 481.950643][ T9036] usb 3-1: config 0 descriptor?? [ 481.976632][ T36] earthmate ttyUSB0: required endpoint is missing [ 482.015979][ T36] usb 6-1: USB disconnect, device number 5 [ 482.031497][ T36] cypress_m8 6-1:8.37: device disconnected [ 482.056964][ T8903] usb 1-1: USB disconnect, device number 23 [ 482.119092][ T2372] pvrusb2: Invalid write control endpoint [ 482.119107][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 482.119117][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 482.119126][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 482.119135][ T2372] pvrusb2: Device being rendered inoperable [ 482.119354][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.122068][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.122453][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 482.122507][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 482.125993][ T2372] pvrusb2: Attached sub-driver cx25840 [ 482.126005][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 482.126015][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 482.215402][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.226982][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.245750][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.252922][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.489001][ T861] usbhid 2-1:1.0: can't add hid device: -71 [ 482.489124][ T861] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 482.506817][ T9036] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 482.533622][ T861] usb 2-1: USB disconnect, device number 33 [ 482.573375][ T9216] FAULT_INJECTION: forcing a failure. [ 482.573375][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 482.573412][ T9216] CPU: 1 UID: 0 PID: 9216 Comm: syz.5.1005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.573442][ T9216] Tainted: [L]=SOFTLOCKUP [ 482.573449][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.573462][ T9216] Call Trace: [ 482.573471][ T9216] [ 482.573480][ T9216] dump_stack_lvl+0xe8/0x150 [ 482.573519][ T9216] should_fail_ex+0x46b/0x600 [ 482.573554][ T9216] should_failslab+0xa8/0x100 [ 482.573579][ T9216] __kmalloc_noprof+0xdf/0x7b0 [ 482.573611][ T9216] ? kfree+0x4d/0x6c0 [ 482.573640][ T9216] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 482.573691][ T9216] tomoyo_realpath_from_path+0xe3/0x5d0 [ 482.573730][ T9216] ? tomoyo_path_number_perm+0x219/0x630 [ 482.573766][ T9216] tomoyo_path_number_perm+0x246/0x630 [ 482.573805][ T9216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 482.573844][ T9216] ? __lock_acquire+0x6b5/0x2cf0 [ 482.573905][ T9216] ? __fget_files+0x2a/0x420 [ 482.573951][ T9216] ? __fget_files+0x2a/0x420 [ 482.573978][ T9216] ? __fget_files+0x3a6/0x420 [ 482.574005][ T9216] ? __fget_files+0x2a/0x420 [ 482.574038][ T9216] security_file_ioctl+0xc3/0x2a0 [ 482.574078][ T9216] __se_sys_ioctl+0x47/0x170 [ 482.574116][ T9216] do_syscall_64+0x14d/0xf80 [ 482.574148][ T9216] ? trace_irq_disable+0x3b/0x150 [ 482.574191][ T9216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.574225][ T9216] ? clear_bhb_loop+0x40/0x90 [ 482.574260][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.574284][ T9216] RIP: 0033:0x7fc9b8ebc799 [ 482.574305][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.574325][ T9216] RSP: 002b:00007fc9b7116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.574349][ T9216] RAX: ffffffffffffffda RBX: 00007fc9b9135fa0 RCX: 00007fc9b8ebc799 [ 482.574367][ T9216] RDX: 0000000000000000 RSI: 0000000000004141 RDI: 0000000000000003 [ 482.574380][ T9216] RBP: 00007fc9b7116090 R08: 0000000000000000 R09: 0000000000000000 [ 482.574394][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.574408][ T9216] R13: 00007fc9b9136038 R14: 00007fc9b9135fa0 R15: 00007ffd8e970ce8 [ 482.574444][ T9216] [ 482.574453][ T9216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 482.897418][ T37] kauditd_printk_skb: 183 callbacks suppressed [ 482.897439][ T37] audit: type=1326 audit(1773682878.830:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897489][ T37] audit: type=1326 audit(1773682878.830:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897548][ T37] audit: type=1326 audit(1773682878.830:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897595][ T37] audit: type=1326 audit(1773682878.830:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897651][ T37] audit: type=1326 audit(1773682878.830:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77e61fcfce code=0x7ffc0000 [ 482.897697][ T37] audit: type=1326 audit(1773682878.830:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897746][ T37] audit: type=1326 audit(1773682878.830:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897793][ T37] audit: type=1326 audit(1773682878.830:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897838][ T37] audit: type=1326 audit(1773682878.830:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 482.897884][ T37] audit: type=1326 audit(1773682878.830:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9206 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77e623c799 code=0x7ffc0000 [ 484.243044][ T8903] usb 3-1: USB disconnect, device number 17 [ 484.788358][ T9238] netlink: 'syz.5.1012': attribute type 1 has an invalid length. [ 484.788381][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1012'. [ 485.827953][ T9250] FAULT_INJECTION: forcing a failure. [ 485.827953][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.827999][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.0.1017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.828025][ T9250] Tainted: [L]=SOFTLOCKUP [ 485.828032][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.828044][ T9250] Call Trace: [ 485.828052][ T9250] [ 485.828059][ T9250] dump_stack_lvl+0xe8/0x150 [ 485.828092][ T9250] should_fail_ex+0x46b/0x600 [ 485.828122][ T9250] _copy_to_user+0x31/0xb0 [ 485.828151][ T9250] simple_read_from_buffer+0xe1/0x170 [ 485.828273][ T9250] proc_fail_nth_read+0x1be/0x230 [ 485.828340][ T9250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.828367][ T9250] ? rw_verify_area+0x2ac/0x4e0 [ 485.828396][ T9250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.828420][ T9250] vfs_read+0x212/0xa80 [ 485.828454][ T9250] ? __pfx_vfs_read+0x10/0x10 [ 485.828484][ T9250] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 485.828539][ T9250] ? lockdep_hardirqs_on+0x7a/0x110 [ 485.828567][ T9250] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 485.828595][ T9250] ? mutex_lock_nested+0x152/0x1d0 [ 485.828616][ T9250] ? fdget_pos+0x252/0x320 [ 485.828672][ T9250] ksys_read+0x156/0x270 [ 485.828701][ T9250] ? __pfx_ksys_read+0x10/0x10 [ 485.828740][ T9250] do_syscall_64+0x14d/0xf80 [ 485.828768][ T9250] ? trace_irq_disable+0x3b/0x150 [ 485.828790][ T9250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.828811][ T9250] ? clear_bhb_loop+0x40/0x90 [ 485.828833][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.828852][ T9250] RIP: 0033:0x7fc0c113cfce [ 485.828870][ T9250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.828884][ T9250] RSP: 002b:00007fc0bf3b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.828900][ T9250] RAX: ffffffffffffffda RBX: 00007fc0bf3b56c0 RCX: 00007fc0c113cfce [ 485.828911][ T9250] RDX: 000000000000000f RSI: 00007fc0bf3b50a0 RDI: 0000000000000005 [ 485.828927][ T9250] RBP: 00007fc0bf3b5090 R08: 0000000000000000 R09: 0000000000000000 [ 485.828936][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.828946][ T9250] R13: 00007fc0c13f6128 R14: 00007fc0c13f6090 R15: 00007ffe4728bb08 [ 485.828969][ T9250] [ 487.237701][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 487.392289][ T8903] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 487.396128][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 487.398596][ T5893] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 487.398624][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.461317][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 487.461335][ T5893] pvrusb2: ********** [ 487.461342][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 487.461354][ T5893] pvrusb2: Important functionality might not be entirely working. [ 487.461363][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 487.461375][ T5893] pvrusb2: ********** [ 487.536263][ T8903] usb 2-1: Using ep0 maxpacket: 8 [ 487.538569][ T8903] usb 2-1: config 0 has an invalid interface number: 77 but max is 0 [ 487.538595][ T8903] usb 2-1: config 0 has no interface number 0 [ 487.538628][ T8903] usb 2-1: too many endpoints for config 0 interface 77 altsetting 127: 77, using maximum allowed: 30 [ 487.538670][ T8903] usb 2-1: config 0 interface 77 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 487.538701][ T8903] usb 2-1: config 0 interface 77 has no altsetting 0 [ 487.541875][ T8903] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 487.541902][ T8903] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 487.541923][ T8903] usb 2-1: Product: syz [ 487.541937][ T8903] usb 2-1: Manufacturer: syz [ 487.541951][ T8903] usb 2-1: SerialNumber: syz [ 487.769551][ T8903] usb 2-1: config 0 descriptor?? [ 487.997180][ T2372] pvrusb2: Invalid write control endpoint [ 488.173423][ T8903] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 488.183641][ T8903] gspca_zc3xx: reg_w_i err -71 [ 488.183846][ T8903] gspca_zc3xx 2-1:0.77: probe with driver gspca_zc3xx failed with error -71 [ 488.217311][ T8903] usb 2-1: USB disconnect, device number 34 [ 488.244605][ T2372] pvrusb2: Invalid write control endpoint [ 488.244620][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 488.244631][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 488.244640][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 488.244651][ T2372] pvrusb2: Device being rendered inoperable [ 488.244685][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 488.244746][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 488.258513][ T2372] pvrusb2: Attached sub-driver cx25840 [ 488.258552][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 488.258580][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 488.278505][ T5893] usb 6-1: USB disconnect, device number 6 [ 488.286187][ T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 488.466236][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 488.469036][ T808] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 488.469062][ T808] usb 3-1: config 8 has no interface number 0 [ 488.469095][ T808] usb 3-1: config 8 interface 37 has no altsetting 0 [ 488.474778][ T808] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 488.474805][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.474826][ T808] usb 3-1: Product: syz [ 488.474841][ T808] usb 3-1: Manufacturer: syz [ 488.474856][ T808] usb 3-1: SerialNumber: syz [ 488.499126][ T9274] mmap: syz.3.1021 (9274) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 489.066897][ T9285] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 489.066919][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1028'. [ 489.285084][ T808] cypress_m8 3-1:8.37: DeLorme Earthmate USB converter detected [ 489.288880][ T808] earthmate ttyUSB0: required endpoint is missing [ 489.328437][ T808] usb 3-1: USB disconnect, device number 18 [ 489.334668][ T808] cypress_m8 3-1:8.37: device disconnected [ 489.487710][ T9293] vivid-004: disconnect [ 489.620594][ T9296] FAULT_INJECTION: forcing a failure. [ 489.620594][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.620634][ T9296] CPU: 0 UID: 0 PID: 9296 Comm: syz.0.1032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.620665][ T9296] Tainted: [L]=SOFTLOCKUP [ 489.620673][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.620688][ T9296] Call Trace: [ 489.620696][ T9296] [ 489.620706][ T9296] dump_stack_lvl+0xe8/0x150 [ 489.620756][ T9296] should_fail_ex+0x46b/0x600 [ 489.620804][ T9296] _copy_to_user+0x31/0xb0 [ 489.620836][ T9296] simple_read_from_buffer+0xe1/0x170 [ 489.620867][ T9296] proc_fail_nth_read+0x1be/0x230 [ 489.620895][ T9296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.620923][ T9296] ? rw_verify_area+0x2ac/0x4e0 [ 489.620951][ T9296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.620977][ T9296] vfs_read+0x212/0xa80 [ 489.621015][ T9296] ? __pfx_vfs_read+0x10/0x10 [ 489.621054][ T9296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.621086][ T9296] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.621116][ T9296] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 489.621147][ T9296] ? mutex_lock_nested+0x152/0x1d0 [ 489.621170][ T9296] ? fdget_pos+0x252/0x320 [ 489.621204][ T9296] ksys_read+0x156/0x270 [ 489.621235][ T9296] ? __pfx_ksys_read+0x10/0x10 [ 489.621276][ T9296] do_syscall_64+0x14d/0xf80 [ 489.621304][ T9296] ? trace_irq_disable+0x3b/0x150 [ 489.621327][ T9296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.621348][ T9296] ? clear_bhb_loop+0x40/0x90 [ 489.621373][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.621394][ T9296] RIP: 0033:0x7fc0c113cfce [ 489.621413][ T9296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.621432][ T9296] RSP: 002b:00007fc0bf3d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.621454][ T9296] RAX: ffffffffffffffda RBX: 00007fc0bf3d66c0 RCX: 00007fc0c113cfce [ 489.621470][ T9296] RDX: 000000000000000f RSI: 00007fc0bf3d60a0 RDI: 0000000000000003 [ 489.621482][ T9296] RBP: 00007fc0bf3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.621494][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.621506][ T9296] R13: 00007fc0c13f6038 R14: 00007fc0c13f5fa0 R15: 00007ffe4728bb08 [ 489.621537][ T9296] [ 489.976329][ T808] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 490.186203][ T5893] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 490.206219][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 490.213733][ T808] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 490.213762][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.213784][ T808] usb 3-1: Product: syz [ 490.213799][ T808] usb 3-1: Manufacturer: syz [ 490.213815][ T808] usb 3-1: SerialNumber: syz [ 490.259572][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1036'. [ 490.261718][ T9305] netlink: 'syz.5.1036': attribute type 10 has an invalid length. [ 490.261878][ T9305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.263722][ T808] usb 3-1: config 0 descriptor?? [ 490.307502][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.308566][ T808] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 490.347251][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 490.357446][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.382145][ T5893] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.382174][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.382195][ T5893] usb 2-1: Product: syz [ 490.382209][ T5893] usb 2-1: Manufacturer: syz [ 490.382223][ T5893] usb 2-1: SerialNumber: syz [ 490.405309][ T5893] usb 2-1: config 0 descriptor?? [ 490.415380][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 490.415476][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 490.442336][ T9305] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 490.650599][ T9310] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 490.737439][ T5851] usb 2-1: USB disconnect, device number 35 [ 490.750249][ T9312] FAULT_INJECTION: forcing a failure. [ 490.750249][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 490.750332][ T9312] CPU: 1 UID: 0 PID: 9312 Comm: syz.5.1038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.750367][ T9312] Tainted: [L]=SOFTLOCKUP [ 490.750374][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.750386][ T9312] Call Trace: [ 490.750407][ T9312] [ 490.750438][ T9312] dump_stack_lvl+0xe8/0x150 [ 490.750521][ T9312] should_fail_ex+0x46b/0x600 [ 490.750558][ T9312] should_failslab+0xa8/0x100 [ 490.750615][ T9312] __kmalloc_noprof+0xdf/0x7b0 [ 490.750673][ T9312] ? kfree+0x4d/0x6c0 [ 490.750699][ T9312] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.750765][ T9312] tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.750833][ T9312] ? tomoyo_path_number_perm+0x219/0x630 [ 490.750865][ T9312] tomoyo_path_number_perm+0x246/0x630 [ 490.750947][ T9312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.750993][ T9312] ? __lock_acquire+0x6b5/0x2cf0 [ 490.751103][ T9312] ? __fget_files+0x2a/0x420 [ 490.751155][ T9312] ? __fget_files+0x2a/0x420 [ 490.751198][ T9312] ? __fget_files+0x3a6/0x420 [ 490.751255][ T9312] ? __fget_files+0x2a/0x420 [ 490.751307][ T9312] security_file_ioctl+0xc3/0x2a0 [ 490.751355][ T9312] __se_sys_ioctl+0x47/0x170 [ 490.751448][ T9312] do_syscall_64+0x14d/0xf80 [ 490.751479][ T9312] ? trace_irq_disable+0x3b/0x150 [ 490.751515][ T9312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.751571][ T9312] ? clear_bhb_loop+0x40/0x90 [ 490.751613][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.751635][ T9312] RIP: 0033:0x7fc9b8ebc799 [ 490.751672][ T9312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.751728][ T9312] RSP: 002b:00007fc9b7116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.751773][ T9312] RAX: ffffffffffffffda RBX: 00007fc9b9135fa0 RCX: 00007fc9b8ebc799 [ 490.751788][ T9312] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 490.751802][ T9312] RBP: 00007fc9b7116090 R08: 0000000000000000 R09: 0000000000000000 [ 490.751833][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.751868][ T9312] R13: 00007fc9b9136038 R14: 00007fc9b9135fa0 R15: 00007ffd8e970ce8 [ 490.751928][ T9312] [ 490.751937][ T9312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.752080][ T9312] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 490.876200][ T808] gspca_ov534_9: reg_w failed -110 [ 491.083231][ T9293] vivid-004: reconnect [ 491.316139][ T808] gspca_ov534_9: Unknown sensor 0000 [ 491.316229][ T808] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 491.319757][ T808] usb 3-1: USB disconnect, device number 19 [ 491.326197][ T5851] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 491.398962][ T861] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 491.499604][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 491.505403][ T5851] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 491.525662][ T5851] usb 2-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 491.525687][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.525706][ T5851] usb 2-1: Product: syz [ 491.525719][ T5851] usb 2-1: Manufacturer: syz [ 491.525732][ T5851] usb 2-1: SerialNumber: syz [ 491.548422][ T861] usb 6-1: Using ep0 maxpacket: 8 [ 491.552691][ T861] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 491.552744][ T861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.620792][ T861] pvrusb2: Hardware description: Terratec Grabster AV400 [ 491.620809][ T861] pvrusb2: ********** [ 491.620815][ T861] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 491.620826][ T861] pvrusb2: Important functionality might not be entirely working. [ 491.620834][ T861] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 491.620845][ T861] pvrusb2: ********** [ 491.726154][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 491.801596][ T2372] pvrusb2: Invalid write control endpoint [ 491.875801][ T5851] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.893116][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 491.901333][ T808] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 491.901356][ T808] usb 3-1: config 8 has no interface number 0 [ 491.901385][ T808] usb 3-1: config 8 interface 37 has no altsetting 0 [ 491.933344][ T5851] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 491.936656][ T808] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 491.936684][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.936706][ T808] usb 3-1: Product: syz [ 491.936721][ T808] usb 3-1: Manufacturer: syz [ 491.936737][ T808] usb 3-1: SerialNumber: syz [ 491.977424][ T2372] pvrusb2: Invalid write control endpoint [ 491.977438][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 491.977449][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 491.977459][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 491.977470][ T2372] pvrusb2: Device being rendered inoperable [ 491.980496][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 491.980544][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 492.058632][ T2372] pvrusb2: Attached sub-driver cx25840 [ 492.058645][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 492.058784][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 492.134207][ T8881] usb 6-1: USB disconnect, device number 7 [ 492.410348][ T5851] usb 2-1: USB disconnect, device number 36 [ 492.772931][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.825000][ T808] cypress_m8 3-1:8.37: DeLorme Earthmate USB converter detected [ 492.842107][ T808] earthmate ttyUSB0: required endpoint is missing [ 492.853630][ T808] usb 3-1: USB disconnect, device number 20 [ 492.856002][ T808] cypress_m8 3-1:8.37: device disconnected [ 492.929370][ T9344] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 492.993740][ T9349] FAULT_INJECTION: forcing a failure. [ 492.993740][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 492.993777][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.5.1053 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.993807][ T9349] Tainted: [L]=SOFTLOCKUP [ 492.993815][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.993827][ T9349] Call Trace: [ 492.993835][ T9349] [ 492.993843][ T9349] dump_stack_lvl+0xe8/0x150 [ 492.993882][ T9349] should_fail_ex+0x46b/0x600 [ 492.993917][ T9349] should_failslab+0xa8/0x100 [ 492.993944][ T9349] __kmalloc_noprof+0xdf/0x7b0 [ 492.993977][ T9349] ? kfree+0x4d/0x6c0 [ 492.994006][ T9349] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 492.994047][ T9349] tomoyo_realpath_from_path+0xe3/0x5d0 [ 492.994086][ T9349] ? tomoyo_path_number_perm+0x219/0x630 [ 492.994122][ T9349] tomoyo_path_number_perm+0x246/0x630 [ 492.994159][ T9349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.994215][ T9349] ? __lock_acquire+0x6b5/0x2cf0 [ 492.994279][ T9349] ? __fget_files+0x2a/0x420 [ 492.994310][ T9349] ? __fget_files+0x2a/0x420 [ 492.994335][ T9349] ? __fget_files+0x3a6/0x420 [ 492.994361][ T9349] ? __fget_files+0x2a/0x420 [ 492.994393][ T9349] security_file_ioctl+0xc3/0x2a0 [ 492.994431][ T9349] __se_sys_ioctl+0x47/0x170 [ 492.994467][ T9349] do_syscall_64+0x14d/0xf80 [ 492.994498][ T9349] ? trace_irq_disable+0x3b/0x150 [ 492.994525][ T9349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.994547][ T9349] ? clear_bhb_loop+0x40/0x90 [ 492.994576][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.994599][ T9349] RIP: 0033:0x7fc9b8ebc799 [ 492.994620][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.994639][ T9349] RSP: 002b:00007fc9b7116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.994662][ T9349] RAX: ffffffffffffffda RBX: 00007fc9b9135fa0 RCX: 00007fc9b8ebc799 [ 492.994678][ T9349] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 492.994692][ T9349] RBP: 00007fc9b7116090 R08: 0000000000000000 R09: 0000000000000000 [ 492.994706][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.994719][ T9349] R13: 00007fc9b9136038 R14: 00007fc9b9135fa0 R15: 00007ffd8e970ce8 [ 492.994764][ T9349] [ 492.994772][ T9349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.556744][ T9362] netlink: 'syz.2.1057': attribute type 1 has an invalid length. [ 493.556761][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 493.739960][ T9366] veth0_to_hsr: entered promiscuous mode [ 493.740368][ T9366] netlink: 'syz.0.1061': attribute type 10 has an invalid length. [ 493.746877][ T808] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 493.943827][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 493.945046][ T808] usb 2-1: config 1 has an invalid interface number: 94 but max is 1 [ 493.945072][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.945092][ T808] usb 2-1: config 1 has no interface number 1 [ 493.945735][ T808] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.945761][ T808] usb 2-1: config 1 interface 94 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.945779][ T808] usb 2-1: config 1 interface 94 has no altsetting 0 [ 493.946578][ T5851] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 493.989899][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.989926][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.990022][ T808] usb 2-1: Product: syz [ 493.990038][ T808] usb 2-1: Manufacturer: syz [ 493.990053][ T808] usb 2-1: SerialNumber: syz [ 494.106157][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 494.108855][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 494.108906][ T5851] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 494.108983][ T5851] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 494.109008][ T5851] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 494.109030][ T5851] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 494.109053][ T5851] usb 4-1: config 1 interface 0 has no altsetting 0 [ 494.109085][ T5851] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 494.109156][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.222736][ T5851] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 494.254524][ T808] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 494.254574][ T808] cdc_ncm 2-1:1.0: bind() failure [ 494.295899][ T808] usb 2-1: USB disconnect, device number 37 [ 494.481538][ T5851] scsi host1: usb-storage 4-1:1.0 [ 494.679831][ T9036] usb 4-1: USB disconnect, device number 21 [ 494.732014][ T808] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 494.897487][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 494.899220][ T808] usb 6-1: config 8 has an invalid interface number: 37 but max is 0 [ 494.899243][ T808] usb 6-1: config 8 has no interface number 0 [ 494.899270][ T808] usb 6-1: config 8 interface 37 has no altsetting 0 [ 494.901696][ T808] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 494.901724][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.901745][ T808] usb 6-1: Product: syz [ 494.901760][ T808] usb 6-1: Manufacturer: syz [ 494.901774][ T808] usb 6-1: SerialNumber: syz [ 495.248761][ T9036] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 495.406237][ T9036] usb 2-1: Using ep0 maxpacket: 16 [ 495.410400][ T9036] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.411529][ T9036] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.411579][ T9036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 495.411605][ T9036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 495.411639][ T9036] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 495.415764][ T9036] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 495.415793][ T9036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.415814][ T9036] usb 2-1: Product: syz [ 495.415830][ T9036] usb 2-1: Manufacturer: syz [ 495.415845][ T9036] usb 2-1: SerialNumber: syz [ 495.517803][ T9378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.625648][ T9390] FAULT_INJECTION: forcing a failure. [ 495.625648][ T9390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.625907][ T9390] CPU: 1 UID: 0 PID: 9390 Comm: syz.2.1069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.625939][ T9390] Tainted: [L]=SOFTLOCKUP [ 495.625947][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.625959][ T9390] Call Trace: [ 495.625968][ T9390] [ 495.625978][ T9390] dump_stack_lvl+0xe8/0x150 [ 495.626019][ T9390] should_fail_ex+0x46b/0x600 [ 495.626062][ T9390] _copy_from_user+0x2d/0xb0 [ 495.626094][ T9390] ___sys_sendmsg+0x1c6/0x360 [ 495.626121][ T9390] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.626178][ T9390] ? __fget_files+0x2a/0x420 [ 495.626205][ T9390] ? __fget_files+0x3a6/0x420 [ 495.626243][ T9390] __x64_sys_sendmsg+0x1c3/0x2a0 [ 495.626268][ T9390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.626301][ T9390] ? __pfx_ksys_write+0x10/0x10 [ 495.626362][ T9390] do_syscall_64+0x14d/0xf80 [ 495.626396][ T9390] ? trace_irq_disable+0x3b/0x150 [ 495.626423][ T9390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.626446][ T9390] ? clear_bhb_loop+0x40/0x90 [ 495.626473][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.626496][ T9390] RIP: 0033:0x7f77e623c799 [ 495.626517][ T9390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.626536][ T9390] RSP: 002b:00007f77e448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.626559][ T9390] RAX: ffffffffffffffda RBX: 00007f77e64b5fa0 RCX: 00007f77e623c799 [ 495.626575][ T9390] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 495.626589][ T9390] RBP: 00007f77e448e090 R08: 0000000000000000 R09: 0000000000000000 [ 495.626603][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.626617][ T9390] R13: 00007f77e64b6038 R14: 00007f77e64b5fa0 R15: 00007ffff4fe90f8 [ 495.626651][ T9390] [ 495.846950][ T808] cypress_m8 6-1:8.37: DeLorme Earthmate USB converter detected [ 495.848589][ T808] earthmate ttyUSB0: required endpoint is missing [ 495.893472][ T808] usb 6-1: USB disconnect, device number 8 [ 495.913392][ T808] cypress_m8 6-1:8.37: device disconnected [ 496.047015][ T9392] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 496.614432][ T9392] bond1: entered promiscuous mode [ 496.622852][ T9392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.523922][ T9036] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.523986][ T9036] usb 2-1: MIDIStreaming interface descriptor not found [ 499.706228][ T9036] usb 2-1: USB disconnect, device number 38 [ 500.058156][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.095698][ T9404] netlink: 'syz.5.1073': attribute type 1 has an invalid length. [ 500.095719][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1073'. [ 500.596734][ T9036] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 500.685256][ T9366] veth0_to_hsr: left promiscuous mode [ 500.761585][ T9036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 500.761645][ T9036] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 500.763150][ T9036] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.763179][ T9036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.763201][ T9036] usb 2-1: SerialNumber: syz [ 501.206591][ T861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 501.362336][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.363177][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.416155][ T861] usb 3-1: Using ep0 maxpacket: 32 [ 501.434782][ T861] usb 3-1: config 2 has an invalid interface number: 33 but max is 0 [ 501.434810][ T861] usb 3-1: config 2 has no interface number 0 [ 501.434846][ T861] usb 3-1: config 2 interface 33 has no altsetting 0 [ 501.467203][ T861] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=f3.94 [ 501.467234][ T861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.467248][ T861] usb 3-1: Product: syz [ 501.467259][ T861] usb 3-1: Manufacturer: syz [ 501.467507][ T861] usb 3-1: SerialNumber: syz [ 501.671562][ T9036] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 501.816682][ T8903] usb 2-1: USB disconnect, device number 39 [ 501.821012][ T8903] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 501.932923][ T9422] FAULT_INJECTION: forcing a failure. [ 501.932923][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 501.933198][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.5.1079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 501.933229][ T9422] Tainted: [L]=SOFTLOCKUP [ 501.933237][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.933250][ T9422] Call Trace: [ 501.933258][ T9422] [ 501.933268][ T9422] dump_stack_lvl+0xe8/0x150 [ 501.933309][ T9422] should_fail_ex+0x46b/0x600 [ 501.933342][ T9422] should_failslab+0xa8/0x100 [ 501.933368][ T9422] __kmalloc_noprof+0xdf/0x7b0 [ 501.933400][ T9422] ? kfree+0x4d/0x6c0 [ 501.933427][ T9422] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 501.933456][ T9422] tomoyo_realpath_from_path+0xe3/0x5d0 [ 501.933489][ T9422] ? tomoyo_path_number_perm+0x219/0x630 [ 501.933543][ T9422] tomoyo_path_number_perm+0x246/0x630 [ 501.933578][ T9422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 501.933613][ T9422] ? __lock_acquire+0x6b5/0x2cf0 [ 501.933667][ T9422] ? __fget_files+0x2a/0x420 [ 501.933696][ T9422] ? __fget_files+0x2a/0x420 [ 501.933719][ T9422] ? __fget_files+0x3a6/0x420 [ 501.933743][ T9422] ? __fget_files+0x2a/0x420 [ 501.933772][ T9422] security_file_ioctl+0xc3/0x2a0 [ 501.933809][ T9422] __se_sys_ioctl+0x47/0x170 [ 501.933842][ T9422] do_syscall_64+0x14d/0xf80 [ 501.933871][ T9422] ? trace_irq_disable+0x3b/0x150 [ 501.933895][ T9422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.933916][ T9422] ? clear_bhb_loop+0x40/0x90 [ 501.933940][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.933960][ T9422] RIP: 0033:0x7fc9b8ebc799 [ 501.933980][ T9422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.933997][ T9422] RSP: 002b:00007fc9b7116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.934019][ T9422] RAX: ffffffffffffffda RBX: 00007fc9b9135fa0 RCX: 00007fc9b8ebc799 [ 501.934034][ T9422] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 501.934047][ T9422] RBP: 00007fc9b7116090 R08: 0000000000000000 R09: 0000000000000000 [ 501.934060][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.934071][ T9422] R13: 00007fc9b9136038 R14: 00007fc9b9135fa0 R15: 00007ffd8e970ce8 [ 501.934102][ T9422] [ 501.935509][ T9422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.245272][ T861] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 502.245760][ T861] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 502.245857][ T861] pac7311 3-1:2.33: probe with driver pac7311 failed with error -71 [ 502.282413][ T861] usb 3-1: USB disconnect, device number 21 [ 502.676180][ T808] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 502.826194][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 502.827997][ T808] usb 4-1: config 8 has an invalid interface number: 37 but max is 0 [ 502.828022][ T808] usb 4-1: config 8 has no interface number 0 [ 502.828054][ T808] usb 4-1: config 8 interface 37 has no altsetting 0 [ 502.830596][ T808] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=22.16 [ 502.830627][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.830643][ T808] usb 4-1: Product: syz [ 502.830654][ T808] usb 4-1: Manufacturer: syz [ 502.830664][ T808] usb 4-1: SerialNumber: syz [ 502.906349][ T8903] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 503.015851][ T9436] veth0_to_hsr: entered promiscuous mode [ 503.024278][ T9436] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 503.075795][ T808] cypress_m8 4-1:8.37: DeLorme Earthmate USB converter detected [ 503.080276][ T808] earthmate ttyUSB0: required endpoint is missing [ 503.086155][ T8903] usb 1-1: Using ep0 maxpacket: 16 [ 503.091482][ T8903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.093564][ T8903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.093672][ T8903] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 503.093742][ T8903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 503.093821][ T8903] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 503.099587][ T8903] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 503.099658][ T8903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.099715][ T8903] usb 1-1: Product: syz [ 503.099752][ T8903] usb 1-1: Manufacturer: syz [ 503.099784][ T8903] usb 1-1: SerialNumber: syz [ 503.180296][ T808] usb 4-1: USB disconnect, device number 22 [ 503.223687][ T808] cypress_m8 4-1:8.37: device disconnected [ 503.238045][ T9432] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 503.466179][ T9436] team0 (unregistering): Port device team_slave_0 removed [ 503.751018][ T9436] team0 (unregistering): Port device team_slave_1 removed [ 503.790621][ T8903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.790676][ T8903] usb 1-1: MIDIStreaming interface descriptor not found [ 503.977080][ T9435] veth0_to_hsr: left promiscuous mode [ 504.099485][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1088'. [ 504.129068][ T8903] usb 1-1: USB disconnect, device number 24 [ 504.165661][ T9447] FAULT_INJECTION: forcing a failure. [ 504.165661][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 504.165698][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.3.1090 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.165727][ T9447] Tainted: [L]=SOFTLOCKUP [ 504.165734][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.165746][ T9447] Call Trace: [ 504.165754][ T9447] [ 504.165763][ T9447] dump_stack_lvl+0xe8/0x150 [ 504.165800][ T9447] should_fail_ex+0x46b/0x600 [ 504.165832][ T9447] should_failslab+0xa8/0x100 [ 504.165865][ T9447] __kmalloc_noprof+0xdf/0x7b0 [ 504.165897][ T9447] ? kfree+0x4d/0x6c0 [ 504.165924][ T9447] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 504.165956][ T9447] tomoyo_realpath_from_path+0xe3/0x5d0 [ 504.165994][ T9447] ? tomoyo_path_number_perm+0x219/0x630 [ 504.166030][ T9447] tomoyo_path_number_perm+0x246/0x630 [ 504.166067][ T9447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.166102][ T9447] ? __lock_acquire+0x6b5/0x2cf0 [ 504.166159][ T9447] ? __fget_files+0x2a/0x420 [ 504.166190][ T9447] ? __fget_files+0x2a/0x420 [ 504.166216][ T9447] ? __fget_files+0x3a6/0x420 [ 504.166241][ T9447] ? __fget_files+0x2a/0x420 [ 504.166272][ T9447] security_file_ioctl+0xc3/0x2a0 [ 504.166309][ T9447] __se_sys_ioctl+0x47/0x170 [ 504.166370][ T9447] do_syscall_64+0x14d/0xf80 [ 504.166403][ T9447] ? trace_irq_disable+0x3b/0x150 [ 504.166429][ T9447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.166452][ T9447] ? clear_bhb_loop+0x40/0x90 [ 504.166479][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.166501][ T9447] RIP: 0033:0x7f269cbbc799 [ 504.166522][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.166543][ T9447] RSP: 002b:00007f269ae0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.166562][ T9447] RAX: ffffffffffffffda RBX: 00007f269ce35fa0 RCX: 00007f269cbbc799 [ 504.166577][ T9447] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000003 [ 504.166588][ T9447] RBP: 00007f269ae0e090 R08: 0000000000000000 R09: 0000000000000000 [ 504.166599][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.166609][ T9447] R13: 00007f269ce36038 R14: 00007f269ce35fa0 R15: 00007ffe79c898e8 [ 504.166635][ T9447] [ 504.187563][ T9447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.202177][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1088'. [ 504.665719][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.720704][ T5893] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 505.056099][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 505.067210][ T5893] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.067244][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 505.075500][ T5893] usb 2-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 505.075584][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.075634][ T5893] usb 2-1: Product: ᰊ [ 505.075673][ T5893] usb 2-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 505.075763][ T5893] usb 2-1: SerialNumber: 쏠㩴霉靸栢䑷⪛鸡뫃ꍱ霽蓽ﶠ䪎皗ₑ䧱ꇝ㢼롤瀔 [ 505.596680][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.597282][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.599827][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.601219][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.603650][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.604122][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.826000][ T5893] usbhid 2-1:1.0: can't add hid device: -71 [ 505.826258][ T5893] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 505.859988][ T5893] usb 2-1: USB disconnect, device number 40 [ 506.636490][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 506.822377][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 506.824606][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 506.825901][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.825966][ T5893] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 506.825991][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 506.826016][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 506.836786][ T5893] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 506.836859][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.836918][ T5893] usb 4-1: Product: syz [ 506.836965][ T5893] usb 4-1: Manufacturer: syz [ 506.837018][ T5893] usb 4-1: SerialNumber: syz [ 506.896436][ T9467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.056147][ T5851] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 507.217071][ T5851] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 507.217129][ T5851] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.217161][ T5851] usb 2-1: config 2 interface 0 has no altsetting 0 [ 507.223416][ T5851] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 507.223442][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.223461][ T5851] usb 2-1: Product: syz [ 507.223475][ T5851] usb 2-1: Manufacturer: syz [ 507.223488][ T5851] usb 2-1: SerialNumber: syz [ 509.499552][ T5851] ims_pcu 2-1:2.0: Missing CDC union descriptor [ 509.499641][ T5851] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 510.246248][ T5851] usb 2-1: USB disconnect, device number 41 [ 510.506421][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.506480][ T5893] usb 4-1: MIDIStreaming interface descriptor not found [ 510.646163][ T5893] usb 4-1: USB disconnect, device number 23 [ 511.586133][ T808] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 511.700993][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.781280][ T808] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 511.781312][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.781333][ T808] usb 6-1: Product: syz [ 511.781348][ T808] usb 6-1: Manufacturer: syz [ 511.781362][ T808] usb 6-1: SerialNumber: syz [ 511.865017][ T9504] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 511.865032][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 511.946187][ T5893] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 512.066219][ T5851] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 512.106153][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 512.108756][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.110035][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.110090][ T5893] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 512.110119][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 512.110145][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 512.112887][ T5893] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 512.112915][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.112937][ T5893] usb 4-1: Product: syz [ 512.112953][ T5893] usb 4-1: Manufacturer: syz [ 512.112967][ T5893] usb 4-1: SerialNumber: syz [ 512.149725][ T9497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 512.249011][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 512.251494][ T5851] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.251522][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.323422][ T5851] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.323440][ T5851] pvrusb2: ********** [ 512.323452][ T5851] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.323465][ T5851] pvrusb2: Important functionality might not be entirely working. [ 512.323474][ T5851] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.323505][ T5851] pvrusb2: ********** [ 512.348887][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 512.349866][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 512.362335][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 512.370846][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 512.461228][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 512.500065][ T808] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 512.500655][ T2372] pvrusb2: Invalid write control endpoint [ 512.609496][ T808] usb 6-1: USB disconnect, device number 9 [ 513.843650][ T31] usb 2-1: USB disconnect, device number 42 [ 514.929216][ T2372] pvrusb2: Invalid write control endpoint [ 514.929231][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 514.929241][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 514.929249][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 514.929259][ T2372] pvrusb2: Device being rendered inoperable [ 514.929285][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 514.929391][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 514.933905][ T2372] pvrusb2: Attached sub-driver cx25840 [ 514.933918][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 514.933930][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 515.501654][ T5114] Bluetooth: hci5: command 0x0406 tx timeout [ 515.850046][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.850100][ T5893] usb 4-1: MIDIStreaming interface descriptor not found [ 516.117737][ T9532] veth0_to_hsr: entered promiscuous mode [ 516.119747][ T9532] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 516.151237][ T5893] usb 4-1: USB disconnect, device number 24 [ 516.451638][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.456208][ T5851] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 516.486264][ T808] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 516.606136][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 516.608491][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.609750][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.609804][ T5851] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 516.609833][ T5851] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 516.609861][ T5851] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 516.612573][ T5851] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 516.612601][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.612622][ T5851] usb 3-1: Product: syz [ 516.612636][ T5851] usb 3-1: Manufacturer: syz [ 516.612652][ T5851] usb 3-1: SerialNumber: syz [ 516.636141][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 516.639142][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.640748][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.640800][ T808] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 516.640827][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 516.640854][ T808] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 516.643828][ T808] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 516.643912][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.643934][ T808] usb 1-1: Product: syz [ 516.643950][ T808] usb 1-1: Manufacturer: syz [ 516.643964][ T808] usb 1-1: SerialNumber: syz [ 516.810513][ T9536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.825776][ T9535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.970273][ T9531] veth0_to_hsr: left promiscuous mode [ 517.469714][ T808] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.469986][ T808] usb 1-1: MIDIStreaming interface descriptor not found [ 517.602799][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.649517][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.846195][ T808] usb 1-1: USB disconnect, device number 25 [ 517.907195][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 519.078855][ T9559] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 519.166547][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.285030][ T9563] FAULT_INJECTION: forcing a failure. [ 519.285030][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.285078][ T9563] CPU: 1 UID: 0 PID: 9563 Comm: syz.3.1127 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.285109][ T9563] Tainted: [L]=SOFTLOCKUP [ 519.285118][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.285131][ T9563] Call Trace: [ 519.285140][ T9563] [ 519.285150][ T9563] dump_stack_lvl+0xe8/0x150 [ 519.285190][ T9563] should_fail_ex+0x46b/0x600 [ 519.285223][ T9563] _copy_to_user+0x31/0xb0 [ 519.285258][ T9563] simple_read_from_buffer+0xe1/0x170 [ 519.285289][ T9563] proc_fail_nth_read+0x1be/0x230 [ 519.285322][ T9563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.285371][ T9563] ? rw_verify_area+0x2ac/0x4e0 [ 519.285403][ T9563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.285432][ T9563] vfs_read+0x212/0xa80 [ 519.285464][ T9563] ? preempt_schedule_thunk+0x16/0x30 [ 519.285496][ T9563] ? __pfx_vfs_read+0x10/0x10 [ 519.285518][ T9563] ? preempt_schedule_thunk+0x16/0x30 [ 519.285565][ T9563] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 519.285602][ T9563] ? mutex_lock_nested+0x152/0x1d0 [ 519.285626][ T9563] ? fdget_pos+0x252/0x320 [ 519.285662][ T9563] ksys_read+0x156/0x270 [ 519.285725][ T9563] ? __pfx_ksys_read+0x10/0x10 [ 519.285772][ T9563] do_syscall_64+0x14d/0xf80 [ 519.285805][ T9563] ? trace_irq_disable+0x3b/0x150 [ 519.285831][ T9563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.285858][ T9563] ? clear_bhb_loop+0x40/0x90 [ 519.285878][ T9563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.285912][ T9563] RIP: 0033:0x7f269cb7cfce [ 519.285932][ T9563] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.285952][ T9563] RSP: 002b:00007f269ae0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.285975][ T9563] RAX: ffffffffffffffda RBX: 00007f269ae0e6c0 RCX: 00007f269cb7cfce [ 519.285990][ T9563] RDX: 000000000000000f RSI: 00007f269ae0e0a0 RDI: 0000000000000005 [ 519.286003][ T9563] RBP: 00007f269ae0e090 R08: 0000000000000000 R09: 0000000000000000 [ 519.286015][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.286038][ T9563] R13: 00007f269ce36038 R14: 00007f269ce35fa0 R15: 00007ffe79c898e8 [ 519.286076][ T9563] [ 519.582793][ T9559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.376239][ T8739] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 520.546362][ T8739] usb 1-1: Using ep0 maxpacket: 8 [ 520.572482][ T8739] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 520.572508][ T8739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.632442][ T8739] pvrusb2: Hardware description: Terratec Grabster AV400 [ 520.632455][ T8739] pvrusb2: ********** [ 520.632459][ T8739] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 520.632467][ T8739] pvrusb2: Important functionality might not be entirely working. [ 520.632473][ T8739] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 520.632481][ T8739] pvrusb2: ********** [ 520.835705][ T2372] pvrusb2: Invalid write control endpoint [ 521.111260][ T8739] usb 1-1: USB disconnect, device number 26 [ 521.214961][ T2372] pvrusb2: Invalid write control endpoint [ 521.214991][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 521.215002][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 521.215011][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 521.215023][ T2372] pvrusb2: Device being rendered inoperable [ 521.215408][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 521.239882][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 521.261918][ T2372] pvrusb2: Attached sub-driver cx25840 [ 521.261933][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 521.261945][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 521.878882][ T5851] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.878946][ T5851] usb 3-1: MIDIStreaming interface descriptor not found [ 523.897417][ T5878] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 524.116224][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 524.127334][ T5878] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.127370][ T5878] usb 2-1: config 1 interface 0 has no altsetting 0 [ 524.161367][ T5878] usb 2-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 524.161395][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.161415][ T5878] usb 2-1: Product: ᰊ [ 524.161429][ T5878] usb 2-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 524.161463][ T5878] usb 2-1: SerialNumber: 쏠㩴霉靸栢䑷⪛鸡뫃ꍱ霽蓽ﶠ䪎皗ₑ䧱ꇝ㢼롤瀔 [ 524.662665][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.663178][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.686251][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.693894][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.716492][ T5851] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 524.725664][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.743520][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.798799][ T5878] usbhid 2-1:1.0: can't add hid device: -71 [ 524.798911][ T5878] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 524.820651][ T5878] usb 2-1: USB disconnect, device number 43 [ 524.878849][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.879356][ T5851] usb 6-1: not running at top speed; connect to a high speed hub [ 524.879406][ T5851] usb 6-1: too many configurations: 54, using maximum allowed: 8 [ 524.882236][ T5851] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 524.882268][ T5851] usb 6-1: can't read configurations, error -61 [ 525.006173][ T5851] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 525.168993][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.169574][ T5851] usb 6-1: not running at top speed; connect to a high speed hub [ 525.169636][ T5851] usb 6-1: too many configurations: 54, using maximum allowed: 8 [ 525.171228][ T5851] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 525.171260][ T5851] usb 6-1: can't read configurations, error -61 [ 525.171646][ T5851] usb usb6-port1: attempt power cycle [ 525.560302][ T5851] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 525.600195][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.600954][ T5851] usb 6-1: not running at top speed; connect to a high speed hub [ 525.601027][ T5851] usb 6-1: too many configurations: 54, using maximum allowed: 8 [ 525.604537][ T5851] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 525.604568][ T5851] usb 6-1: can't read configurations, error -61 [ 525.806190][ T5851] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 525.829640][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.830295][ T5851] usb 6-1: not running at top speed; connect to a high speed hub [ 525.830361][ T5851] usb 6-1: too many configurations: 54, using maximum allowed: 8 [ 525.832262][ T5851] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 525.832295][ T5851] usb 6-1: can't read configurations, error -61 [ 525.832660][ T5851] usb usb6-port1: unable to enumerate USB device [ 525.893802][ T9626] veth0_to_hsr: entered promiscuous mode [ 525.894072][ T9626] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 526.016164][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 526.179768][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 526.182402][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.182464][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 526.182515][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.182537][ T5893] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.182564][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 526.246763][ T5893] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 526.246799][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.246815][ T5893] usb 2-1: Product: syz [ 526.246825][ T5893] usb 2-1: Manufacturer: syz [ 526.246836][ T5893] usb 2-1: SerialNumber: syz [ 526.255197][ T5893] usb 2-1: config 0 descriptor?? [ 526.338791][ T5893] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 526.514869][ T5893] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 526.515134][ T5893] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 526.557243][ T5893] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 526.831838][ T9624] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 527.505016][ T10] usb 3-1: USB disconnect, device number 22 [ 527.921054][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 528.386401][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 528.536081][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 528.538795][ T10] usb 6-1: config 0 has an invalid interface number: 77 but max is 0 [ 528.538821][ T10] usb 6-1: config 0 has no interface number 0 [ 528.538853][ T10] usb 6-1: too many endpoints for config 0 interface 77 altsetting 127: 77, using maximum allowed: 30 [ 528.538906][ T10] usb 6-1: config 0 interface 77 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 528.538936][ T10] usb 6-1: config 0 interface 77 has no altsetting 0 [ 528.541812][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 528.541839][ T10] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 528.541860][ T10] usb 6-1: Product: syz [ 528.541875][ T10] usb 6-1: Manufacturer: syz [ 528.541889][ T10] usb 6-1: SerialNumber: syz [ 528.645456][ T10] usb 6-1: config 0 descriptor?? [ 528.871105][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 528.890941][ T10] gspca_zc3xx: reg_w_i err -71 [ 528.891036][ T10] gspca_zc3xx 6-1:0.77: probe with driver gspca_zc3xx failed with error -71 [ 528.925519][ T10] usb 6-1: USB disconnect, device number 15 [ 529.031177][ T8903] usb 2-1: USB disconnect, device number 44 [ 529.149920][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 529.426258][ T8903] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 530.069894][ T8903] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 530.069923][ T8903] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 530.069941][ T8903] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 530.069960][ T8903] usb 3-1: config 220 has no interface number 2 [ 530.070027][ T8903] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 530.070114][ T8903] usb 3-1: config 220 interface 0 has no altsetting 0 [ 530.070133][ T8903] usb 3-1: config 220 interface 76 has no altsetting 0 [ 530.070159][ T8903] usb 3-1: config 220 interface 1 has no altsetting 0 [ 530.116214][ T8903] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 530.116243][ T8903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.116262][ T8903] usb 3-1: Product: syz [ 530.116276][ T8903] usb 3-1: Manufacturer: syz [ 530.116290][ T8903] usb 3-1: SerialNumber: syz [ 530.302445][ T861] kernel write not supported for file /input/event2 (pid: 861 comm: kworker/1:2) [ 530.468839][ T9626] veth0_to_hsr: left promiscuous mode [ 530.490102][ T8903] usb 3-1: selecting invalid altsetting 0 [ 530.511946][ T8903] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 530.513351][ T8903] uvcvideo 3-1:220.0: No valid video chain found. [ 530.551996][ T8903] usb 3-1: selecting invalid altsetting 0 [ 530.552030][ T8903] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 530.570285][ T8903] usb 3-1: USB disconnect, device number 23 [ 531.077015][ T9662] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 531.078002][ T9662] overlayfs: overlapping lowerdir path [ 532.256173][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 532.346129][ T8903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 532.406345][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 532.411449][ T10] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 532.411474][ T10] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 532.411494][ T10] usb 1-1: config 6 has no interface number 0 [ 532.411535][ T10] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 532.411561][ T10] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 532.411583][ T10] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.414807][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 532.414833][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.414852][ T10] usb 1-1: Product: syz [ 532.414870][ T10] usb 1-1: Manufacturer: syz [ 532.414880][ T10] usb 1-1: SerialNumber: syz [ 532.482797][ T10] hso 1-1:6.2: Failed to find INT IN ep [ 532.497540][ T8903] usb 4-1: Using ep0 maxpacket: 16 [ 532.501118][ T8903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 532.502798][ T8903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.502892][ T8903] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 532.502920][ T8903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 532.502968][ T8903] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 532.512077][ T8903] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 532.512149][ T8903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.512200][ T8903] usb 4-1: Product: syz [ 532.512246][ T8903] usb 4-1: Manufacturer: syz [ 532.512288][ T8903] usb 4-1: SerialNumber: syz [ 532.639685][ T9688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 532.715793][ T10] usb 1-1: USB disconnect, device number 27 [ 534.038772][ T861] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 534.186229][ T861] usb 1-1: Using ep0 maxpacket: 16 [ 534.190440][ T861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 534.190515][ T861] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 534.190540][ T861] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 534.190566][ T861] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 534.190590][ T861] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 534.190615][ T861] usb 1-1: config 1 interface 0 has no altsetting 0 [ 534.190652][ T861] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 534.190677][ T861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.322215][ T861] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 534.449583][ T9705] veth0_to_hsr: entered promiscuous mode [ 534.614462][ T861] scsi host1: usb-storage 1-1:1.0 [ 534.811060][ T861] usb 1-1: USB disconnect, device number 28 [ 535.224119][ T8903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.224178][ T8903] usb 4-1: MIDIStreaming interface descriptor not found [ 535.323195][ T9704] veth0_to_hsr: left promiscuous mode [ 535.528037][ T8903] usb 4-1: USB disconnect, device number 25 [ 535.826920][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.425304][ T9735] usb usb9: usbfs: process 9735 (syz.0.1178) did not claim interface 3 before use [ 536.446180][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 536.616094][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 536.618386][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 536.618434][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 536.618454][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 536.618478][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 536.618498][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 536.618520][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 536.618550][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 536.618571][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.898619][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 537.223303][ T10] scsi host1: usb-storage 3-1:1.0 [ 537.364576][ T37] kauditd_printk_skb: 400 callbacks suppressed [ 537.364595][ T37] audit: type=1326 audit(1773682933.330:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.364639][ T37] audit: type=1326 audit(1773682933.330:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.446221][ T5893] usb 3-1: USB disconnect, device number 24 [ 537.455817][ T37] audit: type=1326 audit(1773682933.420:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.455871][ T37] audit: type=1326 audit(1773682933.420:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.455918][ T37] audit: type=1326 audit(1773682933.420:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.455984][ T37] audit: type=1326 audit(1773682933.420:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.459396][ T37] audit: type=1326 audit(1773682933.420:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.459546][ T37] audit: type=1326 audit(1773682933.420:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.466428][ T37] audit: type=1326 audit(1773682933.430:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 537.466582][ T37] audit: type=1326 audit(1773682933.430:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9746 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c117c799 code=0x7ffc0000 [ 539.616154][ T5893] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 539.627715][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 539.766225][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 539.774420][ T5893] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.774471][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0 [ 539.784895][ T31] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 539.784963][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.785116][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.797327][ T31] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 539.797531][ T31] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 539.797610][ T31] usb 6-1: Manufacturer: syz [ 539.829215][ T5893] usb 1-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 539.829280][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.829342][ T5893] usb 1-1: Product: ᰊ [ 539.829371][ T5893] usb 1-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 539.829455][ T5893] usb 1-1: SerialNumber: 쏠㩴霉靸栢䑷⪛鸡뫃ꍱ霽蓽ﶠ䪎皗ₑ䧱ꇝ㢼롤瀔 [ 539.909505][ T31] usb 6-1: config 0 descriptor?? [ 540.345772][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 540.345801][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 540.345829][ T60] Tainted: [L]=SOFTLOCKUP [ 540.345836][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.345850][ T60] Workqueue: hci5 hci_rx_work [ 540.345999][ T60] Call Trace: [ 540.346008][ T60] [ 540.346017][ T60] dump_stack_lvl+0xe8/0x150 [ 540.346052][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 540.346116][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 540.346145][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 540.346174][ T60] ? rt_spin_unlock+0x160/0x200 [ 540.346203][ T60] kobject_add_internal+0x631/0xd10 [ 540.346265][ T60] kobject_add+0x163/0x240 [ 540.346318][ T60] ? __pfx_kobject_add+0x10/0x10 [ 540.346350][ T60] ? get_device_parent+0x370/0x3a0 [ 540.346454][ T60] device_add+0x408/0xb80 [ 540.346484][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 540.346550][ T60] le_conn_complete_evt+0xf1d/0x1430 [ 540.346609][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 540.346636][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.346672][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.346708][ T60] ? skb_pull_data+0xfb/0x200 [ 540.346794][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 540.346827][ T60] hci_event_packet+0x7af/0x12c0 [ 540.346888][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 540.346926][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 540.346957][ T60] ? rt_spin_unlock+0x14f/0x200 [ 540.346995][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 540.347026][ T60] hci_rx_work+0x3ee/0x1030 [ 540.347067][ T60] ? process_scheduled_works+0xa8d/0x18c0 [ 540.347116][ T60] process_scheduled_works+0xb6e/0x18c0 [ 540.347184][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 540.347225][ T60] ? assign_work+0x3d5/0x5e0 [ 540.347263][ T60] worker_thread+0xa53/0xfc0 [ 540.347335][ T60] kthread+0x388/0x470 [ 540.347362][ T60] ? __pfx_worker_thread+0x10/0x10 [ 540.347393][ T60] ? __pfx_kthread+0x10/0x10 [ 540.347420][ T60] ret_from_fork+0x51e/0xb90 [ 540.347472][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 540.347505][ T60] ? __switch_to+0xc7d/0x1450 [ 540.347549][ T60] ? __pfx_kthread+0x10/0x10 [ 540.347586][ T60] ret_from_fork_asm+0x1a/0x30 [ 540.347627][ T60] [ 540.349983][ T60] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 540.350265][ T60] Bluetooth: hci5: failed to register connection device [ 540.530678][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 540.564420][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.638410][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.692578][ T9775] trusted_key: encrypted_key: insufficient parameters specified [ 540.696882][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.721108][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.747975][ T8903] usb 6-1: USB disconnect, device number 16 [ 540.773600][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.773630][ T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 540.773651][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.774078][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.774107][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 540.774135][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.814863][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.815555][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.815575][ T31] usb 3-1: Product: syz [ 540.815588][ T31] usb 3-1: Manufacturer: syz [ 540.925504][ T9785] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 540.930842][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 540.930854][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 540.969959][ T9792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1190'. [ 541.045801][ T9792] overlayfs: failed lookup in lower (newroot/231, name='file0', err=-40): overlapping layers [ 541.057695][ T5893] usbhid 1-1:1.0: can't add hid device: -71 [ 541.057807][ T5893] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 541.096134][ T5893] usb 1-1: USB disconnect, device number 29 [ 541.102057][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 541.102137][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 541.551294][ T8903] usb 3-1: USB disconnect, device number 25 [ 541.739062][ T9775] syz.5.1189 (9775) used greatest stack depth: 17248 bytes left [ 541.880718][ T1424] ------------[ cut here ]------------ [ 541.880730][ T1424] in_task() && kcov_mode_enabled(mode) [ 541.880746][ T1424] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:9/1424 [ 541.880789][ T1424] Modules linked in: [ 541.880809][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.880837][ T1424] Tainted: [L]=SOFTLOCKUP [ 541.880844][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.880856][ T1424] Workqueue: events_unbound cfg80211_wiphy_work [ 541.880950][ T1424] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 541.880975][ T1424] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 7a d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 541.880993][ T1424] RSP: 0018:ffffc900065e79d8 EFLAGS: 00010202 [ 541.881009][ T1424] RAX: 0000000000000002 RBX: ffff888029189e80 RCX: 0000000000000000 [ 541.881022][ T1424] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 541.881036][ T1424] RBP: ffff8880293a5a00 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 541.881051][ T1424] R10: dffffc0000000000 R11: fffffbfff1ed4777 R12: ffff8880283cdd08 [ 541.881067][ T1424] R13: ffff88803ae507c0 R14: 0000000000000000 R15: ffff8880283cdd20 [ 541.881081][ T1424] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 541.881097][ T1424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.881131][ T1424] CR2: 0000001b2fcece40 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 541.881149][ T1424] Call Trace: [ 541.881156][ T1424] [ 541.881169][ T1424] ieee80211_iface_work+0x211/0x1340 [ 541.881251][ T1424] cfg80211_wiphy_work+0x2ab/0x4a0 [ 541.881275][ T1424] ? process_scheduled_works+0xa8d/0x18c0 [ 541.881325][ T1424] process_scheduled_works+0xb6e/0x18c0 [ 541.881385][ T1424] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.881422][ T1424] ? assign_work+0x3d5/0x5e0 [ 541.881456][ T1424] worker_thread+0xa53/0xfc0 [ 541.881512][ T1424] kthread+0x388/0x470 [ 541.881540][ T1424] ? __pfx_worker_thread+0x10/0x10 [ 541.881568][ T1424] ? __pfx_kthread+0x10/0x10 [ 541.881592][ T1424] ret_from_fork+0x51e/0xb90 [ 541.881625][ T1424] ? __pfx_ret_from_fork+0x10/0x10 [ 541.881654][ T1424] ? __switch_to+0xc7d/0x1450 [ 541.881685][ T1424] ? __pfx_kthread+0x10/0x10 [ 541.881709][ T1424] ret_from_fork_asm+0x1a/0x30 [ 541.881747][ T1424] [ 541.881768][ T1424] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 541.881788][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.881816][ T1424] Tainted: [L]=SOFTLOCKUP [ 541.881824][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.881838][ T1424] Workqueue: events_unbound cfg80211_wiphy_work [ 541.881862][ T1424] Call Trace: [ 541.881871][ T1424] [ 541.881879][ T1424] vpanic+0x56c/0xa60 [ 541.881926][ T1424] ? __pfx__printk+0x10/0x10 [ 541.881950][ T1424] ? __pfx_vpanic+0x10/0x10 [ 541.881977][ T1424] ? is_bpf_text_address+0x292/0x2b0 [ 541.882006][ T1424] ? is_bpf_text_address+0x26/0x2b0 [ 541.882045][ T1424] panic+0xc5/0xd0 [ 541.882074][ T1424] ? __pfx_panic+0x10/0x10 [ 541.882114][ T1424] ? ret_from_fork_asm+0x1a/0x30 [ 541.882141][ T1424] __warn+0x315/0x4f0 [ 541.882169][ T1424] ? kcov_remote_start+0x5d8/0x710 [ 541.882203][ T1424] ? kcov_remote_start+0x5d8/0x710 [ 541.882230][ T1424] __report_bug+0x29a/0x540 [ 541.882364][ T1424] ? kcov_remote_start+0x5d8/0x710 [ 541.882390][ T1424] ? __pfx___report_bug+0x10/0x10 [ 541.882454][ T1424] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.882483][ T1424] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 541.882513][ T1424] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.882548][ T1424] ? kcov_remote_start+0x5d8/0x710 [ 541.882573][ T1424] report_bug+0x16a/0x220 [ 541.882602][ T1424] ? kcov_remote_start+0x5d8/0x710 [ 541.882624][ T1424] ? kcov_remote_start+0x5da/0x710 [ 541.882648][ T1424] handle_bug+0x9c/0x200 [ 541.882671][ T1424] exc_invalid_op+0x1a/0x50 [ 541.882692][ T1424] asm_exc_invalid_op+0x1a/0x20 [ 541.882713][ T1424] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 541.882738][ T1424] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 7a d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 541.882757][ T1424] RSP: 0018:ffffc900065e79d8 EFLAGS: 00010202 [ 541.882775][ T1424] RAX: 0000000000000002 RBX: ffff888029189e80 RCX: 0000000000000000 [ 541.882789][ T1424] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 541.882803][ T1424] RBP: ffff8880293a5a00 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 541.882819][ T1424] R10: dffffc0000000000 R11: fffffbfff1ed4777 R12: ffff8880283cdd08 [ 541.882835][ T1424] R13: ffff88803ae507c0 R14: 0000000000000000 R15: ffff8880283cdd20 [ 541.882858][ T1424] ? rt_spin_lock+0x1e0/0x400 [ 541.882890][ T1424] ? kcov_remote_start+0xe0/0x710 [ 541.882917][ T1424] ieee80211_iface_work+0x211/0x1340 [ 541.882952][ T1424] cfg80211_wiphy_work+0x2ab/0x4a0 [ 541.882977][ T1424] ? process_scheduled_works+0xa8d/0x18c0 [ 541.883008][ T1424] process_scheduled_works+0xb6e/0x18c0 [ 541.883077][ T1424] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.883110][ T1424] ? assign_work+0x3d5/0x5e0 [ 541.883141][ T1424] worker_thread+0xa53/0xfc0 [ 541.883222][ T1424] kthread+0x388/0x470 [ 541.883245][ T1424] ? __pfx_worker_thread+0x10/0x10 [ 541.883284][ T1424] ? __pfx_kthread+0x10/0x10 [ 541.883305][ T1424] ret_from_fork+0x51e/0xb90 [ 541.883333][ T1424] ? __pfx_ret_from_fork+0x10/0x10 [ 541.883359][ T1424] ? __switch_to+0xc7d/0x1450 [ 541.883386][ T1424] ? __pfx_kthread+0x10/0x10 [ 541.883408][ T1424] ret_from_fork_asm+0x1a/0x30 [ 541.883443][ T1424] [ 541.884040][ T1424] Kernel Offset: disabled