last executing test programs: 34.270869251s ago: executing program 1 (id=1975): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 34.203090003s ago: executing program 1 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x29, 0x10, 0x61022070, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.291950396s ago: executing program 1 (id=1982): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1010090, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @remote, @null, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) setxattr$security_evm(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000cc0)=ANY=[@ANYBLOB="5801b5ab9e30d295c6a1d38c263b2a8a32d8bf9f9952f914a4c0f8b35e26c6e6af5b3f25b09e2c216cdab40d4e486caae25f5f2750f3178d5f18632cbfcb11561141799a453662eb65474c9c7fd5d37a68f92250ab5a7acd6c78aa09cb19094ac98bb1caebe0262306f1745487db0a25beef16b37959a9f8f72cf07f71a8577264aa6d7d3889cd4e1073801b8ea641419783145412d723206f5ffcef7974384dd16de9bee118ed525acba1f44bf257b26964"], 0x12, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 33.03121965s ago: executing program 1 (id=1986): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000200)=""/4089, 0xff9}, {&(0x7f0000001200)=""/216, 0xd8}], 0x4, 0x0, 0x20800, 0x10) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000001300)={0xed, 0x0, 0x8000000000000000}) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) 32.857498338s ago: executing program 1 (id=1988): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000001300)={0x6, 0xe}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 32.569448139s ago: executing program 1 (id=1989): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20046900000069229b81db081c3ba8f514456124ddd0a5c0f8e6d5eb0fe9e95853f68bcc15475e53a83f34e20b87f3ac07bd146e1ac7a9db786c391c935c18746ac8000000009c3c4175e0e66adc80353c12813c61bd3d37ce06f03abccaa460b744d9ce2f46871c7b6189c508e45e", @ANYRES32=r0], &(0x7f0000000e80)=ANY=[@ANYRES8=r1], &(0x7f0000000dc0)={0x0, 0xf, 0x80, {0x5, 0xf, 0x80, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x3, 0xf0f, 0x6f, [0xc0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xf000, 0xd094, [0x3f00, 0xff3f00, 0xc000, 0x0, 0x7fe0cf, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5d204bc5824f4d3ec1aca109b197c6d9"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xff00, 0x10, [0xc0c0, 0xffff3f, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0x3, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "687181ea8410f3833366083d248dd14c"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x16, 0x4, 0x0, 0x7, '\x00', "dad99439"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x8, 0x0, 0x3, 0x9, 0xa, 0x85}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)=ANY=[@ANYBLOB="a71fba2000000100200000000000"], &(0x7f0000000840)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "e375"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="a14c81b55bc6"}, &(0x7f0000000380)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "8e58"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000140)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$hid(r1, 0x0, 0x0) 32.365653424s ago: executing program 32 (id=1989): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20046900000069229b81db081c3ba8f514456124ddd0a5c0f8e6d5eb0fe9e95853f68bcc15475e53a83f34e20b87f3ac07bd146e1ac7a9db786c391c935c18746ac8000000009c3c4175e0e66adc80353c12813c61bd3d37ce06f03abccaa460b744d9ce2f46871c7b6189c508e45e", @ANYRES32=r0], &(0x7f0000000e80)=ANY=[@ANYRES8=r1], &(0x7f0000000dc0)={0x0, 0xf, 0x80, {0x5, 0xf, 0x80, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x3, 0xf0f, 0x6f, [0xc0]}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xf000, 0xd094, [0x3f00, 0xff3f00, 0xc000, 0x0, 0x7fe0cf, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5d204bc5824f4d3ec1aca109b197c6d9"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xff00, 0x10, [0xc0c0, 0xffff3f, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0x3, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "687181ea8410f3833366083d248dd14c"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x16, 0x4, 0x0, 0x7, '\x00', "dad99439"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x8, 0x0, 0x3, 0x9, 0xa, 0x85}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)=ANY=[@ANYBLOB="a71fba2000000100200000000000"], &(0x7f0000000840)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "e375"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="a14c81b55bc6"}, &(0x7f0000000380)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "8e58"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000140)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.587015655s ago: executing program 2 (id=2174): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000640)={0x20, 0xb, 0x5e, "a20306845f62b93730428b33452227c6f7cf4ecba6a64db1738a503900e6d1f7c885fe9373d9e9101a6d188eedd73fd55eeafa85e9542aebcbac63e33abed23f20262750c43b07993c95a0a353473da393a5266c954b61cb7217668f8d54"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x81, 0x1, "cb"}, &(0x7f0000000740)={0x20, 0x82, 0x1, "7f"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "dff0"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "6b65b2f1"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "70ca29"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000280)={0x20, 0x23, 0xb5, {0xb5, 0xe, "efdb15f6738aa2df705fcc866f212d2d338e3573b123d8ccd2b947ed5c39dfed0116f71bf7bdf65cf8d8997339abfdaea0d7abd3ce3ddb69d0e12294d04b1df3ee0e1b0b9d6b021b6a1ef659af4fc00a000000800000004ff632dcbdccc25b342db6b9ad78e3a26be7af78d7a5345a3930afcbc63a5a0eb4bd528fb80d739536b3a32731bab766f3df3b0f40736f0bd14daf0ae740aeb0ccb0efcb82404039d59af1a56495a93500"/179}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000ccc00000087fdeb934aa12b9fa9a5bf98ade94f3ce64e4a010f5ecab8840976b7035a997bb2f9ed41d44d6e0aae39eb16a8cf668fbef2970b45f5fe67f85aea8d812db3a23b021cc696e6d5bccc50ac14f012dab78a64ce22b7baba19e86a95e08fb5a54a2fe7cfa47c62545ce2974499a06ef6ada6eb00591b094484adba6551606ffa8df0b01e8e58f8961d528ce4336c09d012e8bb05cd01711f121322425bf261d26dadc48d3900fdc925b883be39f1fc2fe1c1b902d0ae25bdc5766d7e99590e1be3e5166e211e00"/213], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x29}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}}) 3.76170225s ago: executing program 0 (id=2183): recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4072, 0xfe8}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f00000007c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x8}, 0x40032160) 3.649316343s ago: executing program 0 (id=2186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x20, 0x4e22, @local}, 0x10) 3.548896806s ago: executing program 0 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4072, 0xfe8}, {&(0x7f0000000680)=""/77, 0x4d}, {0x0}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x9}, 0x40032160) 3.298601679s ago: executing program 0 (id=2190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)={0x20, 0xd, 0x8b, {0x8b, 0x3, "225148b2551f07134464de84f4e2847a3aa1a143a4ad534b83ef4068a75f1964ff67841eb739ad1109787fc92b0ea1b229f7a2d7aae0750b7b9bf90eecb8bf972b8e4efa767344d531bef603bafbc135c6e2d9f1ad5f7c45c4db3307c44b2f3aec07924e3e3b5d3e0aff9be05dc26bd7f9c0128ae0b1c327998229d5adb41cc9921b59592e39208d75"}}, &(0x7f0000000180)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "f90942fa5eaca2d41f70700cf44ce3fa0f8b6d987f3a66b25dadcc919af98903fae35f5c3011d8a958dd5a27a300843c654045d2fa08df79cac1624de80e690affb2be1960dd1e0bd72b345fd1be6651a1ff5e6777813eaf901dcd180da139c265fae985b8daaa86516d91016d0c023fe95b5ee6a29d2f807b051176f9914c8c184672ebac3533e7a61e37742e342e684784418d84f40c1a8e6b9ff7124bfddab1c0e70938f4f1bdcf7b57058b4a940eed886944e683834a20c12368bc752d8dea9705651fb2aad68d06053723f79489eebc708be274"}}, &(0x7f00000002c0)={0x0, 0xf, 0x1e8, {0x5, 0xf, 0x1e8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x40, 0x0, 0x27}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "002d150d4e164757907e639c1c5baad8"}, @generic={0xe5, 0x10, 0x2, "7771d825a37af3b09feffe84e810a4515fd3249287e52978260e284225a7426144a7ab5c8e6e3095c9d4b5e2e61137e9587bd61586358aee6fd2df515760ff17432bd0cec7c8011b22781c6efa17b84770d200bdefd05e59d88d372d50cf8e17f8ffcbd03477af048a521ef79a175e87a7e37c2e48b0607ae068b1a0e6e488c41b25fd585d43fc891ed1731400aeff6c6e7bdce2ee4890947d6186945455283e77f99a8609e4727abc72377843f5b58de5276729775e342f4c91e241882d5ab3160b0de94d1774d2b2ead26ae4bc18d91904285d11ce862154f7f0a99a437d93e154"}, @generic={0xcc, 0x10, 0x4, "e05caba2146e380431afb1c17242ff0ca8b1075c03ff1628a9f2eb16d11e1c516e9fefb1dd4d2cad37baff9428532de4b4d9b8f0d5f0819ac02b25d62364d5651928dd050504cd1ba16c6e184fe259f06d370bbcbfeb06220df16ee063c40efc480fb490d4bc114d6dcb2c746ad53a93e9286247fab357fb40993d293711b68659c8c849589211dc5f2801464f585d68ac469a9b9b9aece7294e29508fd944a1cbfe88f44d93c4cde416b93a6208604905d3e5be15500e6dda4459708640259a2f9ea2f68eeba371e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "39e54ff7f57741854dcc148db4aa52a3"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x6, 0x80, "9d45b5e2", "b0c097e8"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0x9, 0x6, 0xab, 0x6b1, 0xf50}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x40, 0x17, 0xc1, "45663be91dc39d7496d4bfe73e8fafecb8c50fbf81dfde3c211c3bb991f2113e9c560c852a8b34d0a24f0f6ffebc4e52134f6a69be294c19b9df00eff5f53306fc4b2ee9721145202509c53818d23906995a867c8dc87e66a15d1fdec97f700bab9d3abd38ed9631dc182d134a9357d184f415c2fdaf84b43efeac24f3225f880c91bf949babdfbb5685817cb800ea9d0685230f2bca14b7ca5fcd5cc87f6e300e86eb6f421797efe8194bea219e5044d69ed9f370cdfe2c8e6d1d5cf2893ec4df"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x60, 0x0, [0xf0f0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x41b}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0xb, 0x2, "c930"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "b090"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xb}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a40)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xb0, 0x80000, 0x7ffd}) 2.536143596s ago: executing program 3 (id=2200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./cgroup\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000002900)='./cgroup\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000029c0)='./cgroup\x00', 0x2000, 0x8, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002540)='./cgroup\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)) fstat(r0, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) fstat(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)=ANY=[@ANYBLOB='uUd=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003200)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000003300)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000005480)='./cgroup\x00', &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r15 = getgid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, &(0x7f0000005680)={&(0x7f0000000140)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x0, 0x944004, 0x0, 0x8c72, 0x200, 0x7f, 0x0, 0x0, 0x20, 0x4}}, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x5}}, &(0x7f00000000c0)={0x18, 0x0, 0x100, {0x6a}}, &(0x7f00000001c0)={0x18, 0x0, 0xe, {0x10000}}, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, 0x7, {0x2}}, &(0x7f00000002c0)={0x28, 0xffffffffffffffda, 0x5, {{0x3078, 0xb5c}}}, &(0x7f0000000300)={0x60, 0x0, 0x444, {{0x1, 0xb0e, 0x5, 0x8000000000000000, 0x3, 0x45, 0x8001, 0xa}}}, &(0x7f0000002400)={0x18, 0x0, 0x4, {0x555}}, &(0x7f0000002440)={0x11, 0x0, 0x5, {'\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0xffffffff, {0x0, 0xf}}, &(0x7f0000002580)={0x78, 0x0, 0x800, {0x81, 0x4, 0x0, {0x1, 0x9, 0x4, 0x100, 0x1, 0x3, 0x4ef, 0x9, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x6}}}, &(0x7f0000002680)={0x90, 0x7fffffffffffffff, 0xffff, {0x6, 0x0, 0x8, 0x80000001, 0x0, 0x9, {0x1, 0x9, 0x0, 0x7ffb, 0xfff, 0xfffffffffffffffd, 0x4, 0xffffffff, 0x6, 0xa000, 0x2, 0x0, 0x0, 0x7f, 0x5}}}, &(0x7f0000005740)=ANY=[@ANYBLOB="68000000000000000a0000000000000006000000000000000000000000000000000000000800000000000000000000000500000000000000010000000200000000000000000000000200000000002100e90b0000000000000200000086e800005c260000000000001f13a0d86ac20f8f3ddf8ae831f69f2ab738f0c29fc0ad439c40e3d4642b0796dec7ee55ffdcc1faf5d09aebccff6a4761468b329fb8f6ee2ad107b8bdde1710f3b36c6c880797478e4ade43563df027839a88d2a04b3e1228e62be15e144eaf81356880872559ce94def92ef048e8f25c1e14f2b8dbb8d6e0a6137a0d7b1841f6a6b2d297c8e38644"], &(0x7f0000002d80)={0x478, 0x0, 0x5, [{{0x6, 0x1, 0x1, 0x100, 0x3, 0x46, {0x1, 0x3, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0x781b, 0x80000000, 0x2, 0x2000, 0x4, 0x0, r1, 0xffffffff, 0x7fff}}, {0x4, 0x1, 0x9, 0x1, 'loginuid\x00'}}, {{0x1, 0x0, 0x6, 0xfffffffffffffffe, 0x6, 0x221, {0x2, 0x9, 0x24e, 0xfffffffffffffffa, 0x4, 0x100000001, 0xff, 0x8f, 0x3880, 0xa000, 0x0, r2, r3, 0x100, 0x7}}, {0x3, 0x5, 0x1, 0x0, '\x00'}}, {{0x2, 0x0, 0x7, 0x200, 0x38, 0x6, {0x4, 0x10, 0x4, 0x81, 0x29, 0x2, 0x6, 0x1, 0x7, 0xc000, 0x80000000, 0xee01, 0x0, 0xfff, 0x9}}, {0x1, 0x101, 0x4, 0x1, '\xf1() '}}, {{0x6, 0x2, 0x0, 0x9, 0x2, 0x4, {0x6, 0xfdc, 0xfffffffffffffba1, 0x3ff, 0x1, 0x5, 0x4, 0x9, 0xb1, 0xa000, 0x400, r4, r5, 0xffffff81, 0xb}}, {0x0, 0x6, 0x1, 0x8001, '\x00'}}, {{0x0, 0x2, 0x8, 0x0, 0x1, 0x10000, {0x3, 0x6, 0x400, 0xc, 0xfffffffffffff801, 0x7, 0x7, 0x1, 0x10, 0x8c83f5767529021c, 0x101, 0xee01, r6, 0x72, 0x4}}, {0x3, 0x0, 0x2, 0x10, '*]'}}, {{0x1, 0x1, 0xa, 0x1, 0x7, 0x7, {0x2, 0x101, 0x4, 0x7, 0xd5d, 0xde, 0x2, 0x2, 0x7, 0x8000, 0x1, r8, r9, 0x2, 0xffff}}, {0x3, 0x0, 0x1, 0x8, '\x00'}}, {{0x5, 0x1, 0x0, 0x4, 0x6, 0x9, {0x3, 0x3f, 0x2, 0x6, 0x5, 0xffffffffffffb368, 0x7, 0x39f, 0x5, 0x8000, 0x3, r11, 0xee00, 0x6, 0x6}}, {0x2, 0x2, 0x4, 0x0, '$[*['}}]}, &(0x7f0000005380)={0xa0, 0x0, 0x5, {{0x3, 0x1, 0x5, 0x88, 0x9, 0x3ff, {0x3, 0x9, 0x89, 0x7ff, 0x6, 0x84b, 0x687, 0xe, 0x2, 0x2000, 0x80000000, r12, r13, 0x9, 0x1}}, {0x0, 0xa}}}, &(0x7f0000005440)={0x20, 0x0, 0x6, {0xffffffff, 0x0, 0x2, 0x100}}, &(0x7f0000005540)={0x130, 0xfffffffffffffffe, 0x7, {0x4, 0x1000, 0x0, '\x00', {0x20, 0x200, 0x9, 0x2, r14, r15, 0x2000, '\x00', 0x1, 0x4, 0xd8a6, 0x9, {0x4, 0x3}, {0x5, 0xfffffffa}, {0x100, 0x2}, {0x5, 0x7f}, 0x2, 0x401, 0x5, 0x101}}}}) close(r0) r16 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r16, 0x5) r17 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r17, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r17, &(0x7f00000003c0), 0x100000000000022d) exit(0x11b) r18 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r18, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.028835317s ago: executing program 2 (id=2208): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 1.967183134s ago: executing program 4 (id=2209): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1010090, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @remote, @null, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) setxattr$security_evm(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000cc0)=ANY=[@ANYBLOB="5801b5ab9e30d295c6a1d38c263b2a8a32d8bf9f9952f914a4c0f8b35e26c6e6af5b3f25b09e2c216cdab40d4e486caae25f5f2750f3178d5f18632cbfcb11561141799a453662eb65474c9c7fd5d37a68f92250ab5a7acd6c78aa09cb19094ac98bb1caebe0262306f1745487db0a25beef16b37959a9f8f72cf07f71a8577264aa6d7d3889cd4e1073801b8ea641419783145412d723206f5ffcef7974384dd16de9bee118ed525acba1f44bf257b26964"], 0x12, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.84407171s ago: executing program 4 (id=2210): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1010090, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @remote, @null, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) setxattr$security_evm(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000cc0)=ANY=[@ANYBLOB="5801b5ab9e30d295c6a1d38c263b2a8a32d8bf9f9952f914a4c0f8b35e26c6e6af5b3f25b09e2c216cdab40d4e486caae25f5f2750f3178d5f18632cbfcb11561141799a453662eb65474c9c7fd5d37a68f92250ab5a7acd6c78aa09cb19094ac98bb1caebe0262306f1745487db0a25beef16b37959a9f8f72cf07f71a8577264aa6d7d3889cd4e1073801b8ea641419783145412d723206f5ffcef7974384dd16de9bee118ed525acba1f44bf257b26964"], 0x12, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.723055962s ago: executing program 4 (id=2211): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x9, 0x0, {0x6, 0x1}, {0x47, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x10, 0x1, 0x7, 0x5, 0x101}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.160178547s ago: executing program 2 (id=2212): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b) 1.159898647s ago: executing program 3 (id=2213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 1.157828903s ago: executing program 4 (id=2220): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 1.041742606s ago: executing program 3 (id=2214): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4048aec9, &(0x7f0000000040)={0x49, 0x6, 0x7ffffffe, 0x0, 0x5cc}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r5 = socket(0x21, 0x800, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0x2000000c, @mcast2, 0x5}}}, 0x90) syz_usb_connect(0x6, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2900000004"], 0x29) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x100, {{0xa, 0x4e24, 0x0, @local, 0x7}}, {{0xa, 0x4e21, 0x7, @empty, 0x80}}}, 0x108) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1.019445848s ago: executing program 2 (id=2215): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 912.755129ms ago: executing program 2 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x2022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4072, 0xfe8}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f00000007c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x8}, 0x40032160) 863.631952ms ago: executing program 2 (id=2217): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000280)={0x20, 0x23, 0xb5, {0xb5, 0xe, "efdb15f6738aa2df705fcc866f212d2d338e3573b123d8ccd2b947ed5c39dfed0116f71bf7bdf65cf8d8997339abfdaea0d7abd3ce3ddb69d0e12294d04b1df3ee0e1b0b9d6b021b6a1ef659af4fc00a000000800000004ff632dcbdccc25b342db6b9ad78e3a26be7af78d7a5345a3930afcbc63a5a0eb4bd528fb80d739536b3a32731bab766f3df3b0f40736f0bd14daf0ae740aeb0ccb0efcb82404039d59af1a56495a93500"/179}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000ccc00000087fdeb934aa12b9fa9a5bf98ade94f3ce64e4a010f5ecab8840976b7035a997bb2f9ed41d44d6e0aae39eb16a8cf668fbef2970b45f5fe67f85aea8d812db3a23b021cc696e6d5bccc50ac14f012dab78a64ce22b7baba19e86a95e08fb5a54a2fe7cfa47c62545ce2974499a06ef6ada6eb00591b094484adba6551606ffa8df0b01e8e58f8961d528ce4336c09d012e8bb05cd01711f121322425bf261d26dadc48d3900fdc925b883be39f1fc2fe1c1b902d0ae25bdc5766d7e99590e1be3e5166e211e00"/213], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x29}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}}) 353.191802ms ago: executing program 3 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4072, 0xfe8}, {&(0x7f00000007c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x8}, 0x40032160) 277.966892ms ago: executing program 3 (id=2219): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1010090, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @remote, @null, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) setxattr$security_evm(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000cc0)=ANY=[@ANYBLOB="5801b5ab9e30d295c6a1d38c263b2a8a32d8bf9f9952f914a4c0f8b35e26c6e6af5b3f25b09e2c216cdab40d4e486caae25f5f2750f3178d5f18632cbfcb11561141799a453662eb65474c9c7fd5d37a68f92250ab5a7acd6c78aa09cb19094ac98bb1caebe0262306f1745487db0a25beef16b37959a9f8f72cf07f71a8577264aa6d7d3889cd4e1073801b8ea641419783145412d723206f5ffcef7974384dd16de9bee118ed525acba1f44bf257b26964"], 0x12, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 216.425239ms ago: executing program 4 (id=2221): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000010) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x1010090, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @remote, @null, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) setxattr$security_evm(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000cc0)=ANY=[@ANYBLOB="5801b5ab9e30d295c6a1d38c263b2a8a32d8bf9f9952f914a4c0f8b35e26c6e6af5b3f25b09e2c216cdab40d4e486caae25f5f2750f3178d5f18632cbfcb11561141799a453662eb65474c9c7fd5d37a68f92250ab5a7acd6c78aa09cb19094ac98bb1caebe0262306f1745487db0a25beef16b37959a9f8f72cf07f71a8577264aa6d7d3889cd4e1073801b8ea641419783145412d723206f5ffcef7974384dd16de9bee118ed525acba1f44bf257b26964"], 0x12, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 157.323328ms ago: executing program 0 (id=2222): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x9, 0x0, {0x6, 0x1}, {0x47, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x10, 0x1, 0x7, 0x5, 0x101}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 77.901114ms ago: executing program 0 (id=2223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 5) 60.879873ms ago: executing program 3 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@empty, 0x0, 0x33}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x4, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=2225): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) kernel console output (not intermixed with test programs): opcode 0x0c23 [ 350.438325][ T5872] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 350.629405][T15136] fuse: Unknown parameter '' [ 351.140136][ T5912] usb 4-1: USB disconnect, device number 11 [ 351.504957][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 351.654928][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 351.665933][ T5912] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 351.674051][ T5912] usb 4-1: config 0 has no interface number 0 [ 351.680477][ T5912] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.691105][ T5912] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 351.703982][ T5912] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.713580][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.721993][ T5912] usb 4-1: Product: syz [ 351.726542][ T5912] usb 4-1: Manufacturer: syz [ 351.731181][ T5912] usb 4-1: SerialNumber: syz [ 351.749795][ T5912] usb 4-1: config 0 descriptor?? [ 351.771906][ T5912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 351.794251][ T5912] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 352.003587][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.012720][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.199061][ T5912] usb 1-1: USB disconnect, device number 117 [ 352.279521][T15186] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1747'. [ 352.598085][T15216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.608090][T15216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.744964][ T5912] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 352.746483][ T5843] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 352.894877][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 352.901538][ T5912] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 352.910051][ T5912] usb 3-1: config 0 has no interface number 0 [ 352.916278][ T5912] usb 3-1: config 0 interface 184 has no altsetting 0 [ 352.918250][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 352.925338][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 352.931881][ T5843] usb 1-1: not running at top speed; connect to a high speed hub [ 352.945205][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.945243][ T5912] usb 3-1: Product: syz [ 352.945255][ T5912] usb 3-1: Manufacturer: syz [ 352.945267][ T5912] usb 3-1: SerialNumber: syz [ 352.949161][ T5912] usb 3-1: config 0 descriptor?? [ 352.959859][ T5843] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.990815][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.999396][ T5843] usb 1-1: Product: syz [ 353.003746][ T5843] usb 1-1: Manufacturer: syz [ 353.009141][ T5843] usb 1-1: SerialNumber: syz [ 353.164415][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.173591][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.225872][ T5843] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 353.232954][ T5843] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 353.271866][ T5843] usb 1-1: USB disconnect, device number 118 [ 353.313000][T11394] udevd[11394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.598880][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 353.609791][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.820405][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 353.831376][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 353.841725][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 353.852495][ T5912] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 353.934268][T15270] syzkaller1: entered promiscuous mode [ 353.939845][T15270] syzkaller1: entered allmulticast mode [ 353.949045][T15270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.957924][T15270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.967784][T15270] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 353.976573][T15270] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1760'. [ 353.985863][T15270] netlink: 'syz.1.1760': attribute type 6 has an invalid length. [ 353.993705][T15270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1760'. [ 354.215603][ T5912] usb 4-1: USB disconnect, device number 12 [ 354.564890][ T5912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 354.650152][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.660601][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.715070][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 354.722668][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.732950][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.743764][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.752922][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.761065][ T5912] usb 4-1: Product: syz [ 354.766135][ T5912] usb 4-1: Manufacturer: syz [ 354.770772][ T5912] usb 4-1: SerialNumber: syz [ 354.784424][ T5912] usb 4-1: 0:2 : does not exist [ 354.789428][ T5912] usb 4-1: unit 6 not found! [ 354.986527][ T5912] usb 4-1: USB disconnect, device number 13 [ 355.308040][T15323] capability: warning: `syz.1.1766' uses 32-bit capabilities (legacy support in use) [ 355.552706][ T5912] usb 3-1: USB disconnect, device number 113 [ 355.688747][T15353] syzkaller1: entered promiscuous mode [ 355.694357][T15353] syzkaller1: entered allmulticast mode [ 355.719309][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.728468][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.954942][ T5902] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 355.962550][ T5912] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 356.095103][ T5902] usb 4-1: device descriptor read/64, error -71 [ 356.114963][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 356.121688][ T5912] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.130066][ T5912] usb 3-1: config 0 has no interface number 0 [ 356.136828][ T5912] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.146711][ T5912] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.159403][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.168554][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.176717][ T5912] usb 3-1: Product: syz [ 356.180863][ T5912] usb 3-1: Manufacturer: syz [ 356.186376][ T5912] usb 3-1: SerialNumber: syz [ 356.192863][ T5912] usb 3-1: config 0 descriptor?? [ 356.202394][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 356.212958][ T5912] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 356.327674][T15372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.337082][T15372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.347260][ T5902] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 356.484907][ T5902] usb 4-1: device descriptor read/64, error -71 [ 356.595630][ T5902] usb usb4-port1: attempt power cycle [ 356.935269][ T5902] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 356.955765][T15381] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 356.967579][ T5902] usb 4-1: device descriptor read/8, error -71 [ 356.967712][T15381] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 357.002227][T15383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.011364][T15383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.224907][ T5902] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 357.234947][ T5912] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 357.245629][ T5902] usb 4-1: device descriptor read/8, error -71 [ 357.355207][ T5902] usb usb4-port1: unable to enumerate USB device [ 357.386235][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.396438][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.406296][ T5912] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 357.416747][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.424775][ T5912] usb 1-1: Product: syz [ 357.430200][ T5912] usb 1-1: Manufacturer: syz [ 357.434956][ T5912] usb 1-1: SerialNumber: syz [ 357.441447][ T5912] usb 1-1: config 0 descriptor?? [ 357.449539][ T5912] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 357.461995][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.472098][ T5912] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 357.481730][ T5912] usb 1-1: media controller created [ 357.496272][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.538881][ T5912] DVB: Unable to find symbol tda10046_attach() [ 357.545170][ T5912] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 357.553773][ T5912] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 357.682095][T15406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.692958][T15406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.108498][ T5912] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 358.121900][ T5912] usb 1-1: USB disconnect, device number 119 [ 358.253660][T15421] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1782'. [ 358.701449][ T5912] usb 3-1: USB disconnect, device number 114 [ 359.115201][ T5912] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 359.155041][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 359.284982][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 359.296632][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.309666][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.326086][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.329971][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.342483][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.354439][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.358201][ T5912] usb 3-1: Product: syz [ 359.372835][ T24] usb 4-1: Product: syz [ 359.373901][ T5912] usb 3-1: Manufacturer: syz [ 359.382993][ T24] usb 4-1: Manufacturer: syz [ 359.387056][ T5912] usb 3-1: SerialNumber: syz [ 359.393134][ T24] usb 4-1: SerialNumber: syz [ 359.409487][ T24] usb 4-1: config 0 descriptor?? [ 359.423829][ T5912] usb 3-1: 0:2 : does not exist [ 359.432672][ T5912] usb 3-1: unit 6 not found! [ 359.613124][ T5912] usb 3-1: USB disconnect, device number 115 [ 359.638753][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 360.554065][T15532] overlayfs: missing 'lowerdir' [ 360.594919][ T5912] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 360.645311][T15537] syzkaller1: entered promiscuous mode [ 360.650959][T15537] syzkaller1: entered allmulticast mode [ 360.658607][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 360.764879][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 360.776642][ T5912] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 360.785273][ T5912] usb 3-1: config 0 has no interface number 0 [ 360.793582][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 360.802755][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.811147][ T5912] usb 3-1: Product: syz [ 360.815996][ T5912] usb 3-1: Manufacturer: syz [ 360.820601][ T5912] usb 3-1: SerialNumber: syz [ 360.827881][ T5912] usb 3-1: config 0 descriptor?? [ 360.914939][ T5902] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 361.044922][ T5902] usb 1-1: device descriptor read/64, error -71 [ 361.238108][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 361.248969][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.284986][ T5902] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 361.415874][ T5902] usb 1-1: device descriptor read/64, error -71 [ 361.442646][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.453252][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.463180][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 361.476561][ T5912] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 361.525465][ T5902] usb usb1-port1: attempt power cycle [ 361.864924][ T5902] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 361.885376][ T5902] usb 1-1: device descriptor read/8, error -71 [ 361.915270][ T5912] usb 4-1: USB disconnect, device number 18 [ 362.124969][ T5902] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 362.145311][ T5902] usb 1-1: device descriptor read/8, error -71 [ 362.189652][T15590] overlayfs: missing 'lowerdir' [ 362.255553][ T5902] usb usb1-port1: unable to enumerate USB device [ 362.394936][ T5912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 362.524965][ T5912] usb 4-1: device descriptor read/64, error -71 [ 362.764920][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 362.894894][ T5912] usb 4-1: device descriptor read/64, error -71 [ 363.005497][ T5912] usb usb4-port1: attempt power cycle [ 363.345235][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 363.383507][ T5909] usb 3-1: USB disconnect, device number 116 [ 363.395300][ T5912] usb 4-1: device descriptor read/8, error -71 [ 363.645916][ T5912] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 363.686708][ T5912] usb 4-1: device descriptor read/8, error -71 [ 363.707301][T15630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1819'. [ 363.754955][ T5909] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 363.764775][T15632] overlayfs: missing 'lowerdir' [ 363.805477][ T5912] usb usb4-port1: unable to enumerate USB device [ 363.918848][ T5909] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.928036][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.937213][ T5909] usb 3-1: Product: syz [ 363.941430][ T5909] usb 3-1: Manufacturer: syz [ 363.946147][ T5909] usb 3-1: SerialNumber: syz [ 363.953338][ T5909] usb 3-1: config 0 descriptor?? [ 364.104947][ T5912] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 364.161462][ T5909] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.254906][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 364.261777][ T5912] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.270259][ T5912] usb 1-1: config 0 has no interface number 0 [ 364.278355][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 364.288182][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.297084][ T5912] usb 1-1: Product: syz [ 364.301275][ T5912] usb 1-1: Manufacturer: syz [ 364.305933][ T5912] usb 1-1: SerialNumber: syz [ 364.313777][ T5912] usb 1-1: config 0 descriptor?? [ 364.725042][ T5912] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 364.735952][ T5912] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 364.946702][ T5912] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 364.958292][ T5912] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 365.177193][ T5909] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 365.902007][T15687] syzkaller1: entered promiscuous mode [ 365.907884][T15687] syzkaller1: entered allmulticast mode [ 366.006368][ T5843] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 366.011710][T15693] overlayfs: missing 'lowerdir' [ 366.157644][ T5843] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 366.168863][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.179800][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 366.193266][ T5843] usb 4-1: New USB device found, idVendor=001c, idProduct=1b3e, bcdDevice= 0.00 [ 366.202415][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.213116][ T5843] usb 4-1: config 0 descriptor?? [ 366.447606][ T5930] usb 3-1: USB disconnect, device number 117 [ 366.644364][T15719] netlink: 'syz.2.1835': attribute type 6 has an invalid length. [ 366.686973][ T5843] hid_parser_main: 52 callbacks suppressed [ 366.687032][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.724889][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.735060][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.754893][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.764889][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.779198][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.780101][T15724] netlink: 'syz.2.1835': attribute type 6 has an invalid length. [ 366.786729][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.786759][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.786784][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.786809][ T5843] hid-generic 0003:001C:1B3E.0012: unknown main item tag 0x0 [ 366.792332][ T5843] hid-generic 0003:001C:1B3E.0012: hidraw0: USB HID v6f.fd Device [HID 001c:1b3e] on usb-dummy_hcd.3-1/input0 [ 366.889327][T15712] netlink: 'syz.3.1828': attribute type 10 has an invalid length. [ 366.901107][ T5843] usb 1-1: USB disconnect, device number 124 [ 368.135161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 368.377984][ T5902] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 368.431795][T15767] overlayfs: missing 'lowerdir' [ 368.554953][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 368.561995][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.572975][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.588367][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.597711][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.606670][ T5902] usb 3-1: Product: syz [ 368.611068][ T5902] usb 3-1: Manufacturer: syz [ 368.615823][ T5902] usb 3-1: SerialNumber: syz [ 368.637050][ T5902] usb 3-1: 0:2 : does not exist [ 368.655587][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.664694][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.754934][ T5909] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 368.801023][ T5872] usb 4-1: USB disconnect, device number 23 [ 368.830932][ T5902] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 368.912693][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.922329][ T5902] usb 3-1: USB disconnect, device number 118 [ 368.929085][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.937413][ T5909] usb 1-1: Product: syz [ 368.941908][ T5909] usb 1-1: Manufacturer: syz [ 368.955386][ T5909] usb 1-1: SerialNumber: syz [ 368.966521][T11394] udevd[11394]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 368.984092][ T5909] usb 1-1: config 0 descriptor?? [ 368.986942][T11394] udevd[11394]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 369.203472][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.217267][ T5159] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 369.431887][T15825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.442818][T15825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.630423][T15840] overlayfs: missing 'lowerdir' [ 370.007136][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 370.035090][ T5902] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 370.101264][ T5159] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 370.164917][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 370.181971][ T5843] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.194971][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 370.197219][ T5902] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.201762][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.215657][ T5843] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 370.218370][ T5902] usb 3-1: config 0 has no interface number 0 [ 370.229725][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.232350][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 370.251285][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.253125][ T5843] usb 4-1: config 0 descriptor?? [ 370.263403][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.288915][ T5902] usb 3-1: Product: syz [ 370.296553][ T5902] usb 3-1: Manufacturer: syz [ 370.301395][ T5902] usb 3-1: SerialNumber: syz [ 370.313593][ T5902] usb 3-1: config 0 descriptor?? [ 370.424960][T15881] overlayfs: statfs failed on './file0' [ 370.690661][ T5843] corsair-psu 0003:1B1C:1C09.0013: item fetching failed at offset 3/5 [ 370.700611][ T5843] corsair-psu 0003:1B1C:1C09.0013: probe with driver corsair-psu failed with error -22 [ 370.728653][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 370.739571][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 370.893701][ T5843] usb 4-1: USB disconnect, device number 24 [ 370.950542][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 370.962635][ T5902] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 371.536388][ T24] usb 1-1: USB disconnect, device number 125 [ 371.566238][T15915] nbd: must specify a size in bytes for the device [ 372.603026][ T5902] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 372.820295][ T5872] usb 3-1: USB disconnect, device number 119 [ 372.866859][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 372.882374][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 372.901746][ T5902] usb 4-1: config 6 has an invalid interface number: 188 but max is 0 [ 372.913652][T15951] overlayfs: missing 'workdir' [ 372.920054][ T5902] usb 4-1: config 6 has no interface number 0 [ 372.926513][ T5902] usb 4-1: config 6 interface 188 altsetting 4 bulk endpoint 0xD has invalid maxpacket 8 [ 372.955131][ T5902] usb 4-1: config 6 interface 188 altsetting 4 bulk endpoint 0xC has invalid maxpacket 1023 [ 372.968921][ T5902] usb 4-1: config 6 interface 188 has no altsetting 0 [ 372.979732][ T5902] usb 4-1: New USB device found, idVendor=05ac, idProduct=8213, bcdDevice=5a.92 [ 372.990416][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.998784][ T5902] usb 4-1: Product: syz [ 373.003467][ T5902] usb 4-1: Manufacturer: syz [ 373.011085][ T5902] usb 4-1: SerialNumber: syz [ 373.021323][T15915] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 373.028978][T15915] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 373.358452][ T5902] usb 4-1: USB disconnect, device number 25 [ 373.375134][ T5872] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 373.538467][ T5872] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.547705][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.556021][ T5872] usb 3-1: Product: syz [ 373.560555][ T5872] usb 3-1: Manufacturer: syz [ 373.566346][ T5872] usb 3-1: SerialNumber: syz [ 373.572911][ T5872] usb 3-1: config 0 descriptor?? [ 373.782648][ T5872] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 373.828652][T15985] FAULT_INJECTION: forcing a failure. [ 373.828652][T15985] name failslab, interval 1, probability 0, space 0, times 0 [ 373.842686][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.0.1874 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.842706][T15985] Tainted: [L]=SOFTLOCKUP [ 373.842709][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.842720][T15985] Call Trace: [ 373.842748][T15985] [ 373.842863][T15985] dump_stack_lvl+0xe8/0x150 [ 373.842934][T15985] should_fail_ex+0x412/0x560 [ 373.842996][T15985] should_failslab+0xa8/0x100 [ 373.843010][T15985] __kmalloc_noprof+0xe8/0x760 [ 373.843025][T15985] ? drm_atomic_state_init+0x113/0x3b0 [ 373.843114][T15985] ? __kmalloc_noprof+0x1b8/0x760 [ 373.843130][T15985] drm_atomic_state_init+0x113/0x3b0 [ 373.843146][T15985] drm_atomic_state_alloc+0xbc/0x100 [ 373.843161][T15985] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 373.843174][T15985] ? __lock_acquire+0x6b5/0x2cf0 [ 373.843193][T15985] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 373.843214][T15985] ? do_raw_spin_unlock+0xf5/0x210 [ 373.843228][T15985] ? _raw_spin_unlock+0x28/0x50 [ 373.843244][T15985] ? drm_is_current_master+0x19f/0x200 [ 373.843260][T15985] drm_ioctl_kernel+0x2df/0x3b0 [ 373.843316][T15985] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 373.843327][T15985] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 373.843345][T15985] drm_ioctl+0x6ba/0xb80 [ 373.843369][T15985] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 373.843386][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 373.843414][T15985] ? __fget_files+0x2a/0x420 [ 373.843435][T15985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.843451][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 373.843469][T15985] __se_sys_ioctl+0xfc/0x170 [ 373.843480][T15985] do_syscall_64+0x14d/0xf80 [ 373.843489][T15985] ? trace_irq_disable+0x3b/0x150 [ 373.843501][T15985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.843511][T15985] ? clear_bhb_loop+0x40/0x90 [ 373.843522][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.843537][T15985] RIP: 0033:0x7fcd45f9c799 [ 373.843581][T15985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.843589][T15985] RSP: 002b:00007fcd46e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.843654][T15985] RAX: ffffffffffffffda RBX: 00007fcd46215fa0 RCX: 00007fcd45f9c799 [ 373.843666][T15985] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 373.843674][T15985] RBP: 00007fcd46e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 373.843684][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.843693][T15985] R13: 00007fcd46216038 R14: 00007fcd46215fa0 R15: 00007fff4387fb18 [ 373.843717][T15985] [ 374.419304][T16009] overlayfs: missing 'workdir' [ 374.525134][ T5930] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 374.560789][T16020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.570320][T16020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.590509][T16020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.599593][T16020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.684921][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 374.693145][ T5930] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.701740][ T5930] usb 4-1: config 0 has no interface number 0 [ 374.711993][ T5930] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.723344][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.731431][ T5930] usb 4-1: Product: syz [ 374.736107][ T5930] usb 4-1: Manufacturer: syz [ 374.741157][ T5930] usb 4-1: SerialNumber: syz [ 374.748891][ T5930] usb 4-1: config 0 descriptor?? [ 374.943064][ T5872] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 375.162266][ T5930] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 375.174170][ T5930] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 375.193588][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.204020][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.345328][T16038] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 375.353268][T16038] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1885'. [ 375.385267][ T5930] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 375.405069][ T5930] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 375.480225][T16042] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 375.488378][T16042] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1885'. [ 375.939777][T16065] overlayfs: missing 'workdir' [ 376.134992][T16079] FAULT_INJECTION: forcing a failure. [ 376.134992][T16079] name failslab, interval 1, probability 0, space 0, times 0 [ 376.151074][T16079] CPU: 1 UID: 0 PID: 16079 Comm: syz.1.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.151101][T16079] Tainted: [L]=SOFTLOCKUP [ 376.151105][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.151113][T16079] Call Trace: [ 376.151119][T16079] [ 376.151125][T16079] dump_stack_lvl+0xe8/0x150 [ 376.151148][T16079] should_fail_ex+0x412/0x560 [ 376.151167][T16079] should_failslab+0xa8/0x100 [ 376.151181][T16079] __kmalloc_noprof+0xe8/0x760 [ 376.151200][T16079] ? drm_atomic_state_init+0x113/0x3b0 [ 376.151221][T16079] ? __kmalloc_noprof+0x1b8/0x760 [ 376.151241][T16079] drm_atomic_state_init+0x113/0x3b0 [ 376.151260][T16079] drm_atomic_state_alloc+0xbc/0x100 [ 376.151279][T16079] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 376.151296][T16079] ? __lock_acquire+0x6b5/0x2cf0 [ 376.151320][T16079] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 376.151349][T16079] ? do_raw_spin_unlock+0xf5/0x210 [ 376.151365][T16079] ? _raw_spin_unlock+0x28/0x50 [ 376.151382][T16079] ? drm_is_current_master+0x19f/0x200 [ 376.151398][T16079] drm_ioctl_kernel+0x2df/0x3b0 [ 376.151419][T16079] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 376.151432][T16079] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 376.151456][T16079] drm_ioctl+0x6ba/0xb80 [ 376.151477][T16079] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 376.151494][T16079] ? __pfx_drm_ioctl+0x10/0x10 [ 376.151526][T16079] ? __fget_files+0x2a/0x420 [ 376.151545][T16079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 376.151558][T16079] ? __pfx_drm_ioctl+0x10/0x10 [ 376.151575][T16079] __se_sys_ioctl+0xfc/0x170 [ 376.151590][T16079] do_syscall_64+0x14d/0xf80 [ 376.151602][T16079] ? trace_irq_disable+0x3b/0x150 [ 376.151616][T16079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.151630][T16079] ? clear_bhb_loop+0x40/0x90 [ 376.151645][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.151657][T16079] RIP: 0033:0x7f1a4999c799 [ 376.151671][T16079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.151682][T16079] RSP: 002b:00007f1a4a7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.151696][T16079] RAX: ffffffffffffffda RBX: 00007f1a49c15fa0 RCX: 00007f1a4999c799 [ 376.151706][T16079] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 376.151714][T16079] RBP: 00007f1a4a7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 376.151722][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.151730][T16079] R13: 00007f1a49c16038 R14: 00007f1a49c15fa0 R15: 00007ffcb1b5c978 [ 376.151752][T16079] [ 376.169274][ T5902] usb 3-1: USB disconnect, device number 120 [ 376.337129][T16086] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1895'. [ 376.740660][T16108] overlayfs: missing 'lowerdir' [ 376.942300][T16115] overlayfs: missing 'lowerdir' [ 377.078531][T16126] FAULT_INJECTION: forcing a failure. [ 377.078531][T16126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.095296][T16126] CPU: 0 UID: 0 PID: 16126 Comm: syz.1.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.095325][T16126] Tainted: [L]=SOFTLOCKUP [ 377.095331][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.095341][T16126] Call Trace: [ 377.095348][T16126] [ 377.095356][T16126] dump_stack_lvl+0xe8/0x150 [ 377.095383][T16126] should_fail_ex+0x412/0x560 [ 377.095407][T16126] prepare_alloc_pages+0x22a/0x650 [ 377.095432][T16126] __alloc_frozen_pages_noprof+0x119/0x3d0 [ 377.095450][T16126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.095471][T16126] ? __pfx_policy_nodemask+0x10/0x10 [ 377.095487][T16126] ? kasan_save_track+0x4f/0x80 [ 377.095508][T16126] ? kasan_save_track+0x3e/0x80 [ 377.095527][T16126] ? __kasan_kmalloc+0x93/0xb0 [ 377.095540][T16126] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 377.095561][T16126] ? __get_vm_area_node+0x13f/0x300 [ 377.095582][T16126] ? __vmalloc_node_noprof+0xc2/0x100 [ 377.095603][T16126] ? dup_task_struct+0x298/0x840 [ 377.095623][T16126] ? copy_process+0x89b/0x4430 [ 377.095642][T16126] ? vhost_task_create+0x1f9/0x380 [ 377.095660][T16126] ? kvm_mmu_post_init_vm+0x14c/0x300 [ 377.095678][T16126] ? kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 377.095702][T16126] alloc_pages_mpol+0x235/0x490 [ 377.095725][T16126] alloc_pages_noprof+0xac/0x2a0 [ 377.095745][T16126] get_free_pages_noprof+0xf/0x80 [ 377.095763][T16126] __kasan_populate_vmalloc+0x38/0x1d0 [ 377.095785][T16126] ? do_raw_spin_unlock+0xf5/0x210 [ 377.095808][T16126] alloc_vmap_area+0xd73/0x14b0 [ 377.095844][T16126] ? __pfx_alloc_vmap_area+0x10/0x10 [ 377.095862][T16126] ? __kasan_kmalloc+0x93/0xb0 [ 377.095879][T16126] ? __get_vm_area_node+0x13f/0x300 [ 377.095897][T16126] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 377.095916][T16126] ? copy_process+0x89b/0x4430 [ 377.095947][T16126] __get_vm_area_node+0x1f8/0x300 [ 377.095970][T16126] __vmalloc_node_range_noprof+0x36a/0x1750 [ 377.095990][T16126] ? copy_process+0x89b/0x4430 [ 377.096030][T16126] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 377.096058][T16126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.096083][T16126] ? rcu_is_watching+0x15/0xb0 [ 377.096101][T16126] ? memcpy_and_pad+0x48/0x80 [ 377.096232][T16126] __vmalloc_node_noprof+0xc2/0x100 [ 377.096255][T16126] ? copy_process+0x89b/0x4430 [ 377.096274][T16126] ? copy_process+0x89b/0x4430 [ 377.096300][T16126] dup_task_struct+0x298/0x840 [ 377.096327][T16126] copy_process+0x89b/0x4430 [ 377.096377][T16126] ? __pfx_copy_process+0x10/0x10 [ 377.096407][T16126] ? mutex_init_lockdep+0xdf/0x110 [ 377.096428][T16126] vhost_task_create+0x1f9/0x380 [ 377.096446][T16126] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 377.096464][T16126] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 377.096481][T16126] ? __pfx_vhost_task_create+0x10/0x10 [ 377.096505][T16126] ? __pfx_vhost_task_fn+0x10/0x10 [ 377.096533][T16126] ? __lock_acquire+0x6b5/0x2cf0 [ 377.096562][T16126] kvm_mmu_post_init_vm+0x14c/0x300 [ 377.096584][T16126] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 377.096612][T16126] ? __mutex_trylock_common+0x158/0x260 [ 377.096632][T16126] ? __pfx___mutex_trylock_common+0x10/0x10 [ 377.096649][T16126] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 377.096666][T16126] ? register_lock_class+0x31/0x2e0 [ 377.096689][T16126] ? __lock_acquire+0x6b5/0x2cf0 [ 377.096714][T16126] ? kasan_quarantine_put+0xbb/0x1f0 [ 377.096737][T16126] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 377.096761][T16126] ? do_raw_write_lock+0x11d/0x260 [ 377.096796][T16126] kvm_vcpu_ioctl+0xa62/0xfd0 [ 377.096819][T16126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.096835][T16126] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 377.096873][T16126] ? __fget_files+0x2a/0x420 [ 377.096897][T16126] ? __fget_files+0x2a/0x420 [ 377.096916][T16126] ? __fget_files+0x3a0/0x420 [ 377.096944][T16126] ? __fget_files+0x2a/0x420 [ 377.096967][T16126] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.096983][T16126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.097002][T16126] __se_sys_ioctl+0xfc/0x170 [ 377.097022][T16126] do_syscall_64+0x14d/0xf80 [ 377.097038][T16126] ? trace_irq_disable+0x3b/0x150 [ 377.097057][T16126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.097074][T16126] ? clear_bhb_loop+0x40/0x90 [ 377.097094][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.097111][T16126] RIP: 0033:0x7f1a4999c799 [ 377.097128][T16126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.097142][T16126] RSP: 002b:00007f1a4a7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.097161][T16126] RAX: ffffffffffffffda RBX: 00007f1a49c15fa0 RCX: 00007f1a4999c799 [ 377.097173][T16126] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 377.097183][T16126] RBP: 00007f1a4a7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 377.097194][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.097204][T16126] R13: 00007f1a49c16038 R14: 00007f1a49c15fa0 R15: 00007ffcb1b5c978 [ 377.097232][T16126] [ 377.097576][T16126] syz.1.1904: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 377.361253][ T5930] usb 4-1: USB disconnect, device number 26 [ 377.366688][T16126] ,cpuset= [ 377.561625][T16148] FAULT_INJECTION: forcing a failure. [ 377.561625][T16148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.568576][T16126] / [ 377.643972][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.3.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.643992][T16148] Tainted: [L]=SOFTLOCKUP [ 377.643996][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.644002][T16148] Call Trace: [ 377.644007][T16148] [ 377.644012][T16148] dump_stack_lvl+0xe8/0x150 [ 377.644033][T16148] should_fail_ex+0x412/0x560 [ 377.644047][T16148] _copy_to_user+0x31/0xb0 [ 377.644062][T16148] simple_read_from_buffer+0xe1/0x170 [ 377.644078][T16148] proc_fail_nth_read+0x1bb/0x230 [ 377.644093][T16148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.644107][T16148] ? rw_verify_area+0x2a6/0x4d0 [ 377.644122][T16148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.644135][T16148] vfs_read+0x20c/0xa70 [ 377.644148][T16148] ? fdget_pos+0x246/0x320 [ 377.644164][T16148] ? __pfx___mutex_lock+0x10/0x10 [ 377.644175][T16148] ? __pfx_vfs_read+0x10/0x10 [ 377.644190][T16148] ? __fget_files+0x2a/0x420 [ 377.644204][T16148] ? __fget_files+0x3a0/0x420 [ 377.644216][T16148] ? __fget_files+0x2a/0x420 [ 377.644232][T16148] ksys_read+0x150/0x270 [ 377.644242][T16148] ? __pfx_ksys_read+0x10/0x10 [ 377.644251][T16148] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 377.644270][T16148] do_syscall_64+0x14d/0xf80 [ 377.644280][T16148] ? trace_irq_disable+0x3b/0x150 [ 377.644291][T16148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.644301][T16148] ? clear_bhb_loop+0x40/0x90 [ 377.644313][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.644323][T16148] RIP: 0033:0x7f8fe035cfce [ 377.644333][T16148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.644341][T16148] RSP: 002b:00007f8fe12d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.644353][T16148] RAX: ffffffffffffffda RBX: 00007f8fe12d96c0 RCX: 00007f8fe035cfce [ 377.644359][T16148] RDX: 000000000000000f RSI: 00007f8fe12d90a0 RDI: 0000000000000005 [ 377.644365][T16148] RBP: 00007f8fe12d9090 R08: 0000000000000000 R09: 0000000000000000 [ 377.644371][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.644376][T16148] R13: 00007f8fe0616128 R14: 00007f8fe0616090 R15: 00007ffe4c11fef8 [ 377.644394][T16148] [ 377.874966][T16126] ,mems_allowed=0-1 [ 377.880952][T16126] CPU: 1 UID: 0 PID: 16126 Comm: syz.1.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.880979][T16126] Tainted: [L]=SOFTLOCKUP [ 377.880985][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.880995][T16126] Call Trace: [ 377.881002][T16126] [ 377.881010][T16126] dump_stack_lvl+0xe8/0x150 [ 377.881039][T16126] warn_alloc+0x249/0x340 [ 377.881056][T16126] ? kasan_quarantine_put+0xbb/0x1f0 [ 377.881083][T16126] ? __pfx_warn_alloc+0x10/0x10 [ 377.881101][T16126] ? __get_vm_area_node+0x211/0x300 [ 377.881122][T16126] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 377.881148][T16126] ? copy_process+0x89b/0x4430 [ 377.881171][T16126] ? __get_vm_area_node+0x211/0x300 [ 377.881199][T16126] __vmalloc_node_range_noprof+0x38f/0x1750 [ 377.881243][T16126] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 377.881273][T16126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.881298][T16126] ? rcu_is_watching+0x15/0xb0 [ 377.881317][T16126] ? memcpy_and_pad+0x48/0x80 [ 377.881344][T16126] __vmalloc_node_noprof+0xc2/0x100 [ 377.881374][T16126] ? copy_process+0x89b/0x4430 [ 377.881394][T16126] ? copy_process+0x89b/0x4430 [ 377.881418][T16126] dup_task_struct+0x298/0x840 [ 377.881446][T16126] copy_process+0x89b/0x4430 [ 377.881498][T16126] ? __pfx_copy_process+0x10/0x10 [ 377.881527][T16126] ? mutex_init_lockdep+0xdf/0x110 [ 377.881548][T16126] vhost_task_create+0x1f9/0x380 [ 377.881569][T16126] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 377.881587][T16126] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 377.881606][T16126] ? __pfx_vhost_task_create+0x10/0x10 [ 377.881633][T16126] ? __pfx_vhost_task_fn+0x10/0x10 [ 377.881660][T16126] ? __lock_acquire+0x6b5/0x2cf0 [ 377.881690][T16126] kvm_mmu_post_init_vm+0x14c/0x300 [ 377.881712][T16126] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 377.881741][T16126] ? __mutex_trylock_common+0x158/0x260 [ 377.881762][T16126] ? __pfx___mutex_trylock_common+0x10/0x10 [ 377.881781][T16126] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 377.881801][T16126] ? register_lock_class+0x31/0x2e0 [ 377.881826][T16126] ? __lock_acquire+0x6b5/0x2cf0 [ 377.881856][T16126] ? kasan_quarantine_put+0xbb/0x1f0 [ 377.881879][T16126] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 377.881905][T16126] ? do_raw_write_lock+0x11d/0x260 [ 377.881940][T16126] kvm_vcpu_ioctl+0xa62/0xfd0 [ 377.881964][T16126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.881981][T16126] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 377.882018][T16126] ? __fget_files+0x2a/0x420 [ 377.882041][T16126] ? __fget_files+0x2a/0x420 [ 377.882060][T16126] ? __fget_files+0x3a0/0x420 [ 377.882079][T16126] ? __fget_files+0x2a/0x420 [ 377.882102][T16126] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.882120][T16126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.882138][T16126] __se_sys_ioctl+0xfc/0x170 [ 377.882158][T16126] do_syscall_64+0x14d/0xf80 [ 377.882174][T16126] ? trace_irq_disable+0x3b/0x150 [ 377.882193][T16126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.882210][T16126] ? clear_bhb_loop+0x40/0x90 [ 377.882230][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.882247][T16126] RIP: 0033:0x7f1a4999c799 [ 377.882263][T16126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.882277][T16126] RSP: 002b:00007f1a4a7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.882299][T16126] RAX: ffffffffffffffda RBX: 00007f1a49c15fa0 RCX: 00007f1a4999c799 [ 377.882311][T16126] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 377.882321][T16126] RBP: 00007f1a4a7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 377.882332][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.882342][T16126] R13: 00007f1a49c16038 R14: 00007f1a49c15fa0 R15: 00007ffcb1b5c978 [ 377.882377][T16126] [ 377.882423][T16126] Mem-Info: [ 378.034892][ T5902] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 378.051270][T16126] active_anon:5969 inactive_anon:0 isolated_anon:0 [ 378.051270][T16126] active_file:14897 inactive_file:40431 isolated_file:0 [ 378.051270][T16126] unevictable:768 dirty:37 writeback:0 [ 378.051270][T16126] slab_reclaimable:11120 slab_unreclaimable:92360 [ 378.051270][T16126] mapped:25509 shmem:1356 pagetables:1319 [ 378.051270][T16126] sec_pagetables:0 bounce:0 [ 378.051270][T16126] kernel_misc_reclaimable:0 [ 378.051270][T16126] free:1321658 free_pcp:15315 free_cma:0 [ 378.208458][ T5902] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.216784][T16126] Node 0 active_anon:23776kB inactive_anon:0kB active_file:59588kB inactive_file:161520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102036kB dirty:148kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11864kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.216834][T16126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.216887][T16126] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.216978][T16126] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 378.217013][T16126] Node 0 DMA32 free:1322044kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23776kB inactive_anon:0kB active_file:59588kB inactive_file:161520kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2540108kB mlocked:0kB bounce:0kB free_pcp:61552kB local_pcp:36464kB free_cma:0kB [ 378.230063][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.235654][T16126] lowmem_reserve[]: [ 378.354232][ T5902] usb 1-1: Product: syz [ 378.397419][T16126] 0 0 1 1 1 [ 378.397465][T16126] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1436kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 378.397514][T16126] lowmem_reserve[]: 0 0 0 0 0 [ 378.397552][T16126] Node 1 Normal free:3948712kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.397601][T16126] lowmem_reserve[]: 0 0 0 0 0 [ 378.397634][T16126] Node 0 [ 378.429497][ T5902] usb 1-1: Manufacturer: syz [ 378.521231][T16126] DMA: [ 378.554962][ T5902] usb 1-1: SerialNumber: syz [ 378.581733][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.590386][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.607124][T16126] 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 378.621212][T16167] overlayfs: missing 'lowerdir' [ 378.623059][T16126] Node 0 DMA32: 4815*4kB (UME) 2940*8kB (UM) 1625*16kB (UME) 237*32kB (UME) 36*64kB (UME) 64*128kB (UME) 111*256kB (UME) 79*512kB (UM) 55*1024kB (UM) 24*2048kB (UM) 259*4096kB (UM) = 1322060kB [ 378.646887][T16126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 378.654660][ T5902] usb 1-1: config 0 descriptor?? [ 378.660183][T16126] Node 1 Normal: 2*4kB (U) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948712kB [ 378.680972][T16126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.700011][T16126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.710151][T16126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.719980][T16126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.729392][T16126] 56680 total pagecache pages [ 378.734210][T16126] 0 pages in swap cache [ 378.738581][T16126] Free swap = 124996kB [ 378.743508][T16126] Total swap = 124996kB [ 378.748720][T16126] 2097051 pages RAM [ 378.752838][T16126] 0 pages HighMem/MovableOnly [ 378.757728][T16126] 430050 pages reserved [ 378.762075][T16126] 0 pages cma reserved [ 378.869199][T16176] overlayfs: missing 'lowerdir' [ 378.891749][ T5902] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.005392][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.014650][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.572690][T16224] overlayfs: missing 'lowerdir' [ 379.597295][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.607340][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.620269][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.631496][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.694891][ T5872] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 379.856659][ T5872] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 379.865056][ T5872] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 379.875481][ T5872] usb 4-1: config 220 has no interface number 2 [ 379.881826][ T5872] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 379.895416][ T5872] usb 4-1: config 220 interface 0 has no altsetting 0 [ 379.902223][ T5872] usb 4-1: config 220 interface 76 has no altsetting 0 [ 379.909201][ T5872] usb 4-1: config 220 interface 1 has no altsetting 0 [ 379.918419][ T5902] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 379.933085][ T5872] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.942261][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.950338][ T5872] usb 4-1: Product: syz [ 379.954543][ T5872] usb 4-1: Manufacturer: syz [ 379.959269][ T5872] usb 4-1: SerialNumber: syz [ 380.942981][ T5843] usb 1-1: USB disconnect, device number 126 [ 380.999728][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.011640][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.031577][T16255] overlayfs: missing 'lowerdir' [ 381.034192][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.049151][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.554920][ T5902] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 381.608128][T16284] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 381.617076][T16284] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 381.704917][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 381.711908][ T5902] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.720601][ T5902] usb 1-1: config 0 has no interface number 0 [ 381.728603][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.737817][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.745915][ T5902] usb 1-1: Product: syz [ 381.750101][ T5902] usb 1-1: Manufacturer: syz [ 381.756065][ T5902] usb 1-1: SerialNumber: syz [ 381.764331][ T5902] usb 1-1: config 0 descriptor?? [ 382.178135][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 382.189621][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 382.407630][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 382.439263][ T5902] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 382.479476][T16314] overlayfs: missing 'lowerdir' [ 382.516919][ T5872] usb 4-1: selecting invalid altsetting 0 [ 382.546071][ T5872] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 382.564389][ T5872] uvcvideo 4-1:220.0: No valid video chain found. [ 382.574625][T16325] overlayfs: missing 'lowerdir' [ 382.632944][ T5872] usb 4-1: selecting invalid altsetting 0 [ 382.646417][ T5872] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 382.663512][ T5872] usb 4-1: USB disconnect, device number 27 [ 382.688835][T16333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.722205][T16333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 382.776595][T16347] FAULT_INJECTION: forcing a failure. [ 382.776595][T16347] name failslab, interval 1, probability 0, space 0, times 0 [ 382.791440][T16347] CPU: 1 UID: 0 PID: 16347 Comm: syz.3.1943 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.791464][T16347] Tainted: [L]=SOFTLOCKUP [ 382.791470][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.791479][T16347] Call Trace: [ 382.791485][T16347] [ 382.791492][T16347] dump_stack_lvl+0xe8/0x150 [ 382.791515][T16347] should_fail_ex+0x412/0x560 [ 382.791534][T16347] should_failslab+0xa8/0x100 [ 382.791549][T16347] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 382.791568][T16347] ? __alloc_skb+0x186/0x7d0 [ 382.791580][T16347] ? __alloc_skb+0x1d0/0x7d0 [ 382.791590][T16347] ? __local_bh_enable_ip+0xd0/0x130 [ 382.791612][T16347] __alloc_skb+0x1d0/0x7d0 [ 382.791629][T16347] alloc_skb_with_frags+0xc8/0x760 [ 382.791645][T16347] ? __lock_acquire+0x6b5/0x2cf0 [ 382.791668][T16347] sock_alloc_send_pskb+0x878/0x990 [ 382.791697][T16347] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 382.791726][T16347] hci_sock_sendmsg+0x208/0xf40 [ 382.791752][T16347] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 382.791773][T16347] ? __pfx_aa_file_perm+0x10/0x10 [ 382.791870][T16347] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 382.791886][T16347] sock_sendmsg_nosec+0x112/0x150 [ 382.791907][T16347] sock_write_iter+0x302/0x410 [ 382.791926][T16347] ? __pfx_sock_write_iter+0x10/0x10 [ 382.791949][T16347] ? bpf_lsm_file_permission+0x9/0x20 [ 382.791962][T16347] ? security_file_permission+0x75/0x260 [ 382.792021][T16347] vfs_write+0x61d/0xb90 [ 382.792041][T16347] ? __pfx_vfs_write+0x10/0x10 [ 382.792062][T16347] ? __fget_files+0x2a/0x420 [ 382.792085][T16347] ksys_write+0x150/0x270 [ 382.792100][T16347] ? __pfx_ksys_write+0x10/0x10 [ 382.792120][T16347] do_syscall_64+0x14d/0xf80 [ 382.792134][T16347] ? trace_irq_disable+0x3b/0x150 [ 382.792149][T16347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.792164][T16347] ? clear_bhb_loop+0x40/0x90 [ 382.792181][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.792196][T16347] RIP: 0033:0x7f8fe039c799 [ 382.792212][T16347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.792225][T16347] RSP: 002b:00007f8fe12fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.792241][T16347] RAX: ffffffffffffffda RBX: 00007f8fe0615fa0 RCX: 00007f8fe039c799 [ 382.792252][T16347] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 382.792261][T16347] RBP: 00007f8fe12fa090 R08: 0000000000000000 R09: 0000000000000000 [ 382.792270][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.792279][T16347] R13: 00007f8fe0616038 R14: 00007f8fe0615fa0 R15: 00007ffe4c11fef8 [ 382.792301][T16347] [ 383.671595][T16394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 383.681478][T16394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 384.004903][ T5843] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 384.055065][ T5930] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 384.166770][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.177372][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.190517][ T5843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.200326][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.208449][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 384.213959][ T5843] usb 4-1: Product: syz [ 384.218546][ T5843] usb 4-1: Manufacturer: syz [ 384.223372][ T5843] usb 4-1: SerialNumber: syz [ 384.229247][ T5930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 384.244639][ T5930] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 384.255572][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 384.280023][ T5843] usb 4-1: 0:2 : does not exist [ 384.285098][ T5930] usb 3-1: Product: syz [ 384.289419][ T5930] usb 3-1: Manufacturer: syz [ 384.294318][ T5930] usb 3-1: SerialNumber: syz [ 384.305509][ T5930] usb 3-1: config 0 descriptor?? [ 384.312615][T16408] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 384.347818][ T5909] usb 1-1: USB disconnect, device number 127 [ 384.484544][ T5843] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 384.579325][ T5843] usb 4-1: USB disconnect, device number 28 [ 385.144953][ T5909] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 385.294961][ T5902] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 385.309104][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.318366][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.326531][ T5909] usb 1-1: Product: syz [ 385.330826][ T5909] usb 1-1: Manufacturer: syz [ 385.335592][ T5909] usb 1-1: SerialNumber: syz [ 385.345993][ T5909] usb 1-1: config 0 descriptor?? [ 385.407154][T16449] overlayfs: statfs failed on './file0' [ 385.457071][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.468732][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.475768][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.483414][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.489868][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.496030][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.511657][ T5902] usb 4-1: Product: syz [ 385.517110][ T5902] usb 4-1: Manufacturer: syz [ 385.522120][ T5902] usb 4-1: SerialNumber: syz [ 385.554529][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.564722][ T5902] usb 4-1: 0:2 : does not exist [ 385.570424][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.582915][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.743582][T16481] FAULT_INJECTION: forcing a failure. [ 385.743582][T16481] name failslab, interval 1, probability 0, space 0, times 0 [ 385.758370][T16481] CPU: 1 UID: 0 PID: 16481 Comm: syz.3.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.758397][T16481] Tainted: [L]=SOFTLOCKUP [ 385.758404][T16481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.758414][T16481] Call Trace: [ 385.758421][T16481] [ 385.758429][T16481] dump_stack_lvl+0xe8/0x150 [ 385.758458][T16481] should_fail_ex+0x412/0x560 [ 385.758480][T16481] should_failslab+0xa8/0x100 [ 385.758497][T16481] ? skb_clone+0x212/0x3a0 [ 385.758516][T16481] kmem_cache_alloc_noprof+0x87/0x650 [ 385.758544][T16481] skb_clone+0x212/0x3a0 [ 385.758576][T16481] __netlink_deliver_tap+0x424/0x8b0 [ 385.758611][T16481] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.758635][T16481] netlink_deliver_tap+0x19c/0x1b0 [ 385.758656][T16481] netlink_unicast+0x7e3/0x9b0 [ 385.758684][T16481] ? __pfx_netlink_unicast+0x10/0x10 [ 385.758707][T16481] ? netlink_sendmsg+0x650/0xb40 [ 385.758720][T16481] ? skb_put+0x11b/0x210 [ 385.758739][T16481] netlink_sendmsg+0x813/0xb40 [ 385.758763][T16481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.758779][T16481] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 385.758878][T16481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.758893][T16481] sock_sendmsg_nosec+0x112/0x150 [ 385.758917][T16481] ____sys_sendmsg+0x589/0x8c0 [ 385.758942][T16481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.758969][T16481] ? import_iovec+0x73/0xa0 [ 385.759033][T16481] ___sys_sendmsg+0x2a5/0x360 [ 385.759056][T16481] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.759105][T16481] ? __fget_files+0x2a/0x420 [ 385.759124][T16481] ? __fget_files+0x3a0/0x420 [ 385.759152][T16481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 385.759172][T16481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.759200][T16481] ? __pfx_ksys_write+0x10/0x10 [ 385.759226][T16481] do_syscall_64+0x14d/0xf80 [ 385.759243][T16481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.759259][T16481] ? clear_bhb_loop+0x40/0x90 [ 385.759277][T16481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.759294][T16481] RIP: 0033:0x7f8fe039c799 [ 385.759312][T16481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.759325][T16481] RSP: 002b:00007f8fe12fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.759343][T16481] RAX: ffffffffffffffda RBX: 00007f8fe0615fa0 RCX: 00007f8fe039c799 [ 385.759354][T16481] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000006 [ 385.759364][T16481] RBP: 00007f8fe12fa090 R08: 0000000000000000 R09: 0000000000000000 [ 385.759375][T16481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.759384][T16481] R13: 00007f8fe0616038 R14: 00007f8fe0615fa0 R15: 00007ffe4c11fef8 [ 385.759412][T16481] [ 385.773736][ T5902] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 386.094512][ T5902] usb 4-1: USB disconnect, device number 29 [ 386.162973][T11394] udevd[11394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.820341][ T5843] usb 3-1: USB disconnect, device number 121 [ 386.889253][T16556] (syz.2.1977,16556,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 386.898179][T16556] (syz.2.1977,16556,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 386.982595][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 386.996171][ T5909] usb 1-1: USB disconnect, device number 2 [ 387.256649][ T5843] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 387.322681][T16572] FAULT_INJECTION: forcing a failure. [ 387.322681][T16572] name failslab, interval 1, probability 0, space 0, times 0 [ 387.336512][T16572] CPU: 0 UID: 0 PID: 16572 Comm: syz.3.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.336540][T16572] Tainted: [L]=SOFTLOCKUP [ 387.336546][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.336555][T16572] Call Trace: [ 387.336563][T16572] [ 387.336570][T16572] dump_stack_lvl+0xe8/0x150 [ 387.336606][T16572] should_fail_ex+0x412/0x560 [ 387.336630][T16572] should_failslab+0xa8/0x100 [ 387.336648][T16572] ? do_getname+0x2e/0x250 [ 387.336665][T16572] kmem_cache_alloc_noprof+0x87/0x650 [ 387.336694][T16572] do_getname+0x2e/0x250 [ 387.336711][T16572] ? user_path_at+0x1e/0x160 [ 387.336734][T16572] user_path_at+0x2a/0x160 [ 387.336757][T16572] __se_sys_mount+0x2dc/0x420 [ 387.336784][T16572] ? __pfx___se_sys_mount+0x10/0x10 [ 387.336809][T16572] ? __x64_sys_mount+0x20/0xc0 [ 387.336831][T16572] do_syscall_64+0x14d/0xf80 [ 387.336847][T16572] ? trace_irq_disable+0x3b/0x150 [ 387.336865][T16572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.336881][T16572] ? clear_bhb_loop+0x40/0x90 [ 387.336900][T16572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.336914][T16572] RIP: 0033:0x7f8fe039c799 [ 387.336930][T16572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.336945][T16572] RSP: 002b:00007f8fe12fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.336962][T16572] RAX: ffffffffffffffda RBX: 00007f8fe0615fa0 RCX: 00007f8fe039c799 [ 387.336975][T16572] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000300 [ 387.336986][T16572] RBP: 00007f8fe12fa090 R08: 0000000000000000 R09: 0000000000000000 [ 387.336997][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.337006][T16572] R13: 00007f8fe0616038 R14: 00007f8fe0615fa0 R15: 00007ffe4c11fef8 [ 387.337033][T16572] [ 387.530768][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 387.542837][ T5843] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 387.551207][ T5843] usb 3-1: config 0 has no interface number 0 [ 387.559431][ T5843] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 387.571280][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.580028][T16543] overlayfs: statfs failed on './file0' [ 387.587262][ T5843] usb 3-1: Product: syz [ 387.618002][ T5843] usb 3-1: Manufacturer: syz [ 387.631144][ T5843] usb 3-1: SerialNumber: syz [ 387.685714][ T5843] usb 3-1: config 0 descriptor?? [ 387.770626][T16587] overlayfs: missing 'lowerdir' [ 387.798428][T16592] overlayfs: missing 'lowerdir' [ 388.060854][ T5839] usb 2-1: USB disconnect, device number 88 [ 388.095563][ T5930] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 388.120973][ T5843] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 388.133982][ T5843] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 388.266450][ T5930] usb 4-1: config 2 has an invalid interface number: 18 but max is 0 [ 388.274725][ T5930] usb 4-1: config 2 has no interface number 0 [ 388.281041][ T5930] usb 4-1: config 2 interface 18 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 388.292180][ T5930] usb 4-1: config 2 interface 18 has no altsetting 0 [ 388.308290][ T5930] usb 4-1: New USB device found, idVendor=0458, idProduct=701f, bcdDevice= b.e4 [ 388.317853][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.326114][ T5930] usb 4-1: Product: syz [ 388.330318][ T5930] usb 4-1: Manufacturer: syz [ 388.335208][ T5930] usb 4-1: SerialNumber: syz [ 388.345729][T16598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 388.366311][ T5843] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 388.386131][ T5843] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 388.424416][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.604128][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.628491][T16598] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 388.639374][T16598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 388.670567][T16598] team0: Port device geneve0 added [ 388.699795][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.714182][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.735509][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.737917][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.754691][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.767630][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.771952][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.791515][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.833611][ T5930] dvb-usb: found a 'VideoWalker DVB-T USB' in warm state. [ 388.855694][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 388.883212][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.912400][ T5930] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 388.931564][ T5930] dvbdev: DVB: registering new adapter (VideoWalker DVB-T USB) [ 388.939453][ T5930] usb 4-1: media controller created [ 388.948566][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.967792][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 388.977347][ T5930] dvb-usb: no frontend was attached by 'VideoWalker DVB-T USB' [ 389.003652][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 389.063179][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 389.081950][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 389.115200][ T5930] dvb-usb: VideoWalker DVB-T USB successfully initialized and connected. [ 389.145038][ T5930] usb 4-1: USB disconnect, device number 30 [ 389.264712][ T5930] dvb-usb: VideoWalker DVB-T USB successfully deinitialized and disconnected. [ 389.436904][T16628] chnl_net:caif_netlink_parms(): no params data found [ 389.598018][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.608991][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.620242][ T12] bond0 (unregistering): Released all slaves [ 389.742102][T16641] overlayfs: statfs failed on './file0' [ 390.026349][ T5843] usb 3-1: USB disconnect, device number 122 [ 390.036794][T16628] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.044570][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.054699][T16628] bridge_slave_0: entered allmulticast mode [ 390.068307][T16792] overlayfs: missing 'lowerdir' [ 390.082248][T16628] bridge_slave_0: entered promiscuous mode [ 390.202728][T16820] overlayfs: missing 'lowerdir' [ 390.241721][T16628] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.276811][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.300684][T16628] bridge_slave_1: entered allmulticast mode [ 390.321828][T16628] bridge_slave_1: entered promiscuous mode [ 390.452854][T16856] FAULT_INJECTION: forcing a failure. [ 390.452854][T16856] name failslab, interval 1, probability 0, space 0, times 0 [ 390.487767][T16856] CPU: 1 UID: 0 PID: 16856 Comm: syz.0.1999 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.487795][T16856] Tainted: [L]=SOFTLOCKUP [ 390.487801][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.487811][T16856] Call Trace: [ 390.487819][T16856] [ 390.487826][T16856] dump_stack_lvl+0xe8/0x150 [ 390.487855][T16856] should_fail_ex+0x412/0x560 [ 390.487879][T16856] should_failslab+0xa8/0x100 [ 390.487899][T16856] __kmalloc_noprof+0xe8/0x760 [ 390.487922][T16856] ? drm_atomic_state_init+0xa1/0x3b0 [ 390.487949][T16856] drm_atomic_state_init+0xa1/0x3b0 [ 390.487974][T16856] drm_atomic_state_alloc+0xbc/0x100 [ 390.487997][T16856] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 390.488019][T16856] ? __lock_acquire+0x6b5/0x2cf0 [ 390.488050][T16856] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 390.488088][T16856] ? do_raw_spin_unlock+0xf5/0x210 [ 390.488110][T16856] ? _raw_spin_unlock+0x28/0x50 [ 390.488131][T16856] ? drm_is_current_master+0x19f/0x200 [ 390.488152][T16856] drm_ioctl_kernel+0x2df/0x3b0 [ 390.488179][T16856] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 390.488197][T16856] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 390.488235][T16856] drm_ioctl+0x6ba/0xb80 [ 390.488262][T16856] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 390.488283][T16856] ? __pfx_drm_ioctl+0x10/0x10 [ 390.488316][T16856] ? __fget_files+0x2a/0x420 [ 390.488338][T16856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 390.488354][T16856] ? __pfx_drm_ioctl+0x10/0x10 [ 390.488375][T16856] __se_sys_ioctl+0xfc/0x170 [ 390.488394][T16856] do_syscall_64+0x14d/0xf80 [ 390.488408][T16856] ? trace_irq_disable+0x3b/0x150 [ 390.488424][T16856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.488441][T16856] ? clear_bhb_loop+0x40/0x90 [ 390.488461][T16856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.488476][T16856] RIP: 0033:0x7fcd45f9c799 [ 390.488492][T16856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.488504][T16856] RSP: 002b:00007fcd46e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.488522][T16856] RAX: ffffffffffffffda RBX: 00007fcd46215fa0 RCX: 00007fcd45f9c799 [ 390.488533][T16856] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 390.488544][T16856] RBP: 00007fcd46e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.488553][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.488562][T16856] R13: 00007fcd46216038 R14: 00007fcd46215fa0 R15: 00007fff4387fb18 [ 390.488586][T16856] [ 390.505955][T16628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.769460][T16628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.858292][ T5840] Bluetooth: hci0: command tx timeout [ 390.869745][T16628] team0: Port device team_slave_0 added [ 390.932538][T16628] team0: Port device team_slave_1 added [ 391.000953][T16628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.016483][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.047731][T16628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.087500][T16628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.102730][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.130743][T16628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.415387][ T5902] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 391.449238][T16628] hsr_slave_0: entered promiscuous mode [ 391.452020][T16963] overlayfs: missing 'lowerdir' [ 391.461624][T16628] hsr_slave_1: entered promiscuous mode [ 391.479835][T16628] debugfs: 'hsr0' already exists in 'hsr' [ 391.494986][T16628] Cannot create hsr debugfs directory [ 391.562672][ T12] hsr_slave_0: left promiscuous mode [ 391.570416][ T12] hsr_slave_1: left promiscuous mode [ 391.575192][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 391.577583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.585125][ T5902] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 391.606404][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.609878][ T5902] usb 3-1: config 0 has no interface number 0 [ 391.628758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.639667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.654001][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.672121][T16886] overlayfs: statfs failed on './file0' [ 391.679251][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.697396][ T5902] usb 3-1: Product: syz [ 391.701629][ T5902] usb 3-1: Manufacturer: syz [ 391.708239][ T5902] usb 3-1: SerialNumber: syz [ 391.723794][ T5902] usb 3-1: config 0 descriptor?? [ 391.730420][ T12] veth1_macvtap: left promiscuous mode [ 391.754167][ T12] veth0_macvtap: left promiscuous mode [ 391.761718][T16979] overlayfs: missing 'lowerdir' [ 391.776584][ T12] veth1_vlan: left promiscuous mode [ 391.799375][ T12] veth0_vlan: left promiscuous mode [ 392.145108][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 392.159066][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 392.180346][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.196713][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.224916][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 392.371021][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 392.394116][ T5902] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 392.408631][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.436930][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.457695][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.471502][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.483414][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.502644][ T5872] usb 1-1: config 0 descriptor?? [ 392.849818][T17084] fuse: Bad value for 'fd' [ 392.936524][ T5840] Bluetooth: hci0: command tx timeout [ 392.976282][ T5872] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 393.127794][T17111] overlayfs: missing 'lowerdir' [ 393.189888][T16628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.223234][T16628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.251700][T16628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.270917][T16628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.512241][T16628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.561017][T16628] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.597700][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.605060][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.633995][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.641268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.260575][ T5902] usb 3-1: USB disconnect, device number 123 [ 394.274081][T16628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.414966][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 394.590160][ T5930] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 394.616872][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.633820][ T5930] usb 4-1: Product: syz [ 394.643926][ T5930] usb 4-1: Manufacturer: syz [ 394.652553][ T5930] usb 4-1: SerialNumber: syz [ 394.672092][ T5930] usb 4-1: config 0 descriptor?? [ 394.771853][T16628] veth0_vlan: entered promiscuous mode [ 394.800845][T16628] veth1_vlan: entered promiscuous mode [ 394.879908][T16628] veth0_macvtap: entered promiscuous mode [ 394.914703][T16628] veth1_macvtap: entered promiscuous mode [ 394.938745][T17183] FAULT_INJECTION: forcing a failure. [ 394.938745][T17183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.963979][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.0.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.964005][T17183] Tainted: [L]=SOFTLOCKUP [ 394.964012][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.964022][T17183] Call Trace: [ 394.964029][T17183] [ 394.964037][T17183] dump_stack_lvl+0xe8/0x150 [ 394.964066][T17183] should_fail_ex+0x412/0x560 [ 394.964090][T17183] _copy_from_user+0x2d/0xb0 [ 394.964110][T17183] vt_ioctl+0xab2/0x20c0 [ 394.964208][T17183] ? __pfx_vt_ioctl+0x10/0x10 [ 394.964237][T17183] ? __fget_files+0x2a/0x420 [ 394.964263][T17183] ? __fget_files+0x3a0/0x420 [ 394.964289][T17183] ? __fget_files+0x2a/0x420 [ 394.964309][T17183] tty_ioctl+0x928/0xde0 [ 394.964361][T17183] ? __pfx_tty_ioctl+0x10/0x10 [ 394.964379][T17183] __se_sys_ioctl+0xfc/0x170 [ 394.964397][T17183] do_syscall_64+0x14d/0xf80 [ 394.964412][T17183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.964428][T17183] ? clear_bhb_loop+0x40/0x90 [ 394.964447][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.964462][T17183] RIP: 0033:0x7fcd45f9c799 [ 394.964479][T17183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.964491][T17183] RSP: 002b:00007fcd46e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.964509][T17183] RAX: ffffffffffffffda RBX: 00007fcd46215fa0 RCX: 00007fcd45f9c799 [ 394.964520][T17183] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 394.964529][T17183] RBP: 00007fcd46e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 394.964538][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.964543][T17183] R13: 00007fcd46216038 R14: 00007fcd46215fa0 R15: 00007fff4387fb18 [ 394.964558][T17183] [ 395.150612][ T5840] Bluetooth: hci0: command tx timeout [ 395.173367][T16628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.197537][T17164] overlayfs: statfs failed on './file0' [ 395.198609][ T5929] usb 1-1: USB disconnect, device number 3 [ 395.212301][T16628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.252869][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.274529][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.310608][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.355699][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.384564][T17201] fuse: Bad value for 'fd' [ 395.517291][T17208] overlayfs: missing 'lowerdir' [ 395.581665][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.600403][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.629199][T17221] overlayfs: missing 'lowerdir' [ 395.652201][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.673460][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.774453][ T5930] usb 4-1: non-Atmel transceiver xxxxf61f [ 395.988302][ T5930] usb 4-1: Firmware version (0.0) predates our first public release. [ 396.002000][ T5930] usb 4-1: Please update to version 0.2 or newer [ 396.004922][ T5872] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 396.008590][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 396.043723][ T5930] usb 4-1: atusb_probe: initialization failed, error = -19 [ 396.070099][ T5930] usb 4-1: USB disconnect, device number 31 [ 396.176863][ T5872] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.204937][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.215066][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 396.216490][ T5872] usb 5-1: config 0 descriptor?? [ 396.225350][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 396.241596][ T24] usb 1-1: config 0 has no interface number 0 [ 396.244099][ T5872] cp210x 5-1:0.0: cp210x converter detected [ 396.254748][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 396.264477][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.276010][ T24] usb 1-1: Product: syz [ 396.280299][ T24] usb 1-1: Manufacturer: syz [ 396.290222][ T24] usb 1-1: SerialNumber: syz [ 396.305130][ T24] usb 1-1: config 0 descriptor?? [ 396.650955][ T5872] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 396.721342][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 396.750180][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 396.852035][ T5872] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 396.864127][ T5872] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 396.883966][ T5872] usb 5-1: cp210x converter now attached to ttyUSB0 [ 396.910707][ T5872] usb 5-1: USB disconnect, device number 2 [ 396.939255][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.942619][T17283] fuse: Bad value for 'fd' [ 396.967222][ T5872] cp210x 5-1:0.0: device disconnected [ 396.978226][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 396.992356][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 397.112696][T17300] overlayfs: missing 'lowerdir' [ 397.175518][ T5840] Bluetooth: hci0: command tx timeout [ 397.230154][T17306] overlayfs: missing 'lowerdir' [ 397.627599][T17267] overlayfs: statfs failed on './file0' [ 398.167712][T17356] overlayfs: missing 'lowerdir' [ 398.323827][T17362] veth1: entered allmulticast mode [ 398.771248][ T5902] usb 1-1: USB disconnect, device number 4 [ 398.963636][T17399] FAULT_INJECTION: forcing a failure. [ 398.963636][T17399] name failslab, interval 1, probability 0, space 0, times 0 [ 398.974967][ T5843] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 398.978156][T17399] CPU: 0 UID: 0 PID: 17399 Comm: syz.0.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.978184][T17399] Tainted: [L]=SOFTLOCKUP [ 398.978191][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.978201][T17399] Call Trace: [ 398.978209][T17399] [ 398.978217][T17399] dump_stack_lvl+0xe8/0x150 [ 398.978246][T17399] should_fail_ex+0x412/0x560 [ 398.978271][T17399] should_failslab+0xa8/0x100 [ 398.978291][T17399] __kmalloc_noprof+0xe8/0x760 [ 398.978315][T17399] ? drm_atomic_state_init+0xa1/0x3b0 [ 398.978344][T17399] drm_atomic_state_init+0xa1/0x3b0 [ 398.978370][T17399] drm_atomic_state_alloc+0xbc/0x100 [ 398.978393][T17399] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 398.978414][T17399] ? __lock_acquire+0x6b5/0x2cf0 [ 398.978445][T17399] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 398.978483][T17399] ? do_raw_spin_unlock+0xf5/0x210 [ 398.978504][T17399] ? _raw_spin_unlock+0x28/0x50 [ 398.978525][T17399] ? drm_is_current_master+0x19f/0x200 [ 398.978546][T17399] drm_ioctl_kernel+0x2df/0x3b0 [ 398.978573][T17399] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 398.978592][T17399] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 398.978623][T17399] drm_ioctl+0x6ba/0xb80 [ 398.978649][T17399] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 398.978671][T17399] ? __pfx_drm_ioctl+0x10/0x10 [ 398.978704][T17399] ? __fget_files+0x2a/0x420 [ 398.978728][T17399] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.978744][T17399] ? __pfx_drm_ioctl+0x10/0x10 [ 398.978766][T17399] __se_sys_ioctl+0xfc/0x170 [ 398.978789][T17399] do_syscall_64+0x14d/0xf80 [ 398.978805][T17399] ? trace_irq_disable+0x3b/0x150 [ 398.978823][T17399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.978841][T17399] ? clear_bhb_loop+0x40/0x90 [ 398.978860][T17399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.978877][T17399] RIP: 0033:0x7fcd45f9c799 [ 398.978893][T17399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.978908][T17399] RSP: 002b:00007fcd46e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.978934][T17399] RAX: ffffffffffffffda RBX: 00007fcd46215fa0 RCX: 00007fcd45f9c799 [ 398.978946][T17399] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 398.978958][T17399] RBP: 00007fcd46e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 398.978969][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.978980][T17399] R13: 00007fcd46216038 R14: 00007fcd46215fa0 R15: 00007fff4387fb18 [ 398.979005][T17399] [ 399.088018][T17401] syzkaller1: entered promiscuous mode [ 399.088038][T17401] syzkaller1: entered allmulticast mode [ 399.306502][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 399.314542][T17375] overlayfs: statfs failed on './file0' [ 399.376901][T17408] overlayfs: missing 'lowerdir' [ 399.400587][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 399.412372][ T5843] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 399.412723][T17412] overlayfs: missing 'lowerdir' [ 399.427498][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.430051][ T5843] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 399.450863][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.460313][ T5843] usb 3-1: Product: syz [ 399.464650][ T5843] usb 3-1: Manufacturer: syz [ 399.470093][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 399.476231][ T5843] usb 3-1: SerialNumber: syz [ 399.482562][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 399.499494][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 399.522430][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.531203][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 399.540980][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.558282][ T24] usb 5-1: config 0 descriptor?? [ 399.705560][ T5843] ljca 3-1:1.0: probe with driver ljca failed with error -71 [ 399.749136][ T5843] usb 3-1: USB disconnect, device number 124 [ 399.989253][ T24] hid_parser_main: 222 callbacks suppressed [ 399.989275][ T24] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 400.022494][ T24] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 400.038337][ T24] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 400.053900][ T24] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 400.069408][ T24] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 400.095306][ T24] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 400.177534][ T24] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -90 [ 400.230278][ T24] usb 5-1: USB disconnect, device number 3 [ 400.421183][T17456] program syz.2.2054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.674142][T17476] syzkaller1: entered promiscuous mode [ 400.681205][T17476] syzkaller1: entered allmulticast mode [ 400.687057][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 400.847027][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 400.860523][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 400.878535][ T24] usb 4-1: config 0 has no interface number 0 [ 400.892168][T17491] overlayfs: missing 'lowerdir' [ 400.893763][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 400.908217][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.920191][ T24] usb 4-1: Product: syz [ 400.924408][ T24] usb 4-1: Manufacturer: syz [ 400.929501][ T24] usb 4-1: SerialNumber: syz [ 400.937856][ T24] usb 4-1: config 0 descriptor?? [ 401.330228][T17500] overlayfs: missing 'lowerdir' [ 401.368793][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 401.392393][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 401.616915][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 401.645125][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 401.666139][T17487] overlayfs: statfs failed on './file0' [ 401.985118][T17513] veth1: entered allmulticast mode [ 402.634893][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 402.784955][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 402.792207][ T5912] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 402.801010][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.817361][ T5912] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 402.826554][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.834564][ T5912] usb 5-1: Product: syz [ 402.838794][ T5912] usb 5-1: Manufacturer: syz [ 402.843389][ T5912] usb 5-1: SerialNumber: syz [ 403.055633][ T5912] ljca 5-1:1.0: probe with driver ljca failed with error -110 [ 403.081042][ T5912] usb 5-1: USB disconnect, device number 4 [ 403.450878][ T5912] usb 4-1: USB disconnect, device number 32 [ 403.522202][T17553] overlayfs: missing 'lowerdir' [ 403.547354][T17555] syzkaller1: entered promiscuous mode [ 403.553077][T17555] syzkaller1: entered allmulticast mode [ 404.016510][T17583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2071'. [ 404.334921][ T5843] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 404.448080][T17590] overlayfs: missing 'lowerdir' [ 404.495567][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 404.503471][ T5843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.514380][ T5843] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 404.524053][ T5843] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 404.535194][ T5843] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 404.544440][ T5843] usb 5-1: config 128 has no interface number 0 [ 404.551442][ T5843] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 404.563382][ T5843] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.574394][ T5843] usb 5-1: config 128 interface 127 has no altsetting 0 [ 404.585380][ T5843] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 404.595329][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.604656][ T5843] usb 5-1: Product: syz [ 404.610768][ T5843] usb 5-1: Manufacturer: syz [ 404.621632][ T5843] usb 5-1: SerialNumber: syz [ 404.665776][T17575] overlayfs: statfs failed on './file0' [ 405.097412][ T5839] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 405.201651][T17623] syzkaller1: entered promiscuous mode [ 405.218858][T17623] syzkaller1: entered allmulticast mode [ 405.274937][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 405.289840][ T5839] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 405.304380][ T5839] usb 4-1: config 0 has no interface number 0 [ 405.321195][ T5839] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 405.332498][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.341502][ T5839] usb 4-1: Product: syz [ 405.346054][ T5839] usb 4-1: Manufacturer: syz [ 405.350935][ T5839] usb 4-1: SerialNumber: syz [ 405.360604][ T5839] usb 4-1: config 0 descriptor?? [ 405.598492][T17639] veth1: entered allmulticast mode [ 405.778929][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 405.790020][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 406.001296][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 406.014241][ T5839] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 406.285050][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 406.374405][T17680] overlayfs: missing 'lowerdir' [ 406.455063][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 406.469782][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 406.485323][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.510379][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 406.527476][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.544369][ T24] usb 1-1: Product: syz [ 406.554849][ T24] usb 1-1: Manufacturer: syz [ 406.565173][ T24] usb 1-1: SerialNumber: syz [ 406.777683][ T29] audit: type=1326 audit(1773865672.018:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.4.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6959c799 code=0x7fc00000 [ 406.783916][ T24] ljca 1-1:1.0: probe with driver ljca failed with error -71 [ 406.860479][ T24] usb 1-1: USB disconnect, device number 5 [ 406.992402][ T5843] usb 5-1: USB disconnect, device number 5 [ 407.021824][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.496420][T17741] FAULT_INJECTION: forcing a failure. [ 407.496420][T17741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.518130][T17741] CPU: 0 UID: 0 PID: 17741 Comm: syz.2.2085 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.518159][T17741] Tainted: [L]=SOFTLOCKUP [ 407.518166][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.518175][T17741] Call Trace: [ 407.518182][T17741] [ 407.518190][T17741] dump_stack_lvl+0xe8/0x150 [ 407.518218][T17741] should_fail_ex+0x412/0x560 [ 407.518243][T17741] _copy_from_user+0x2d/0xb0 [ 407.518265][T17741] binder_ioctl_write_read+0xb05/0xa660 [ 407.518288][T17741] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 407.518308][T17741] ? arch_stack_walk+0xfb/0x150 [ 407.518336][T17741] ? __pfx_stack_trace_save+0x10/0x10 [ 407.518368][T17741] ? kasan_save_track+0x4f/0x80 [ 407.518389][T17741] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 407.518404][T17741] ? binder_get_thread+0x1c7/0x6d0 [ 407.518418][T17741] ? binder_ioctl+0x2ad/0x1b70 [ 407.518433][T17741] ? __se_sys_ioctl+0xfc/0x170 [ 407.518447][T17741] ? do_syscall_64+0x14d/0xf80 [ 407.518463][T17741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.518493][T17741] ? __lock_acquire+0x6b5/0x2cf0 [ 407.518533][T17741] ? __pfx_binder_debug+0x10/0x10 [ 407.518547][T17741] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.518577][T17741] ? _raw_spin_unlock+0x28/0x50 [ 407.518598][T17741] ? binder_get_thread+0x595/0x6d0 [ 407.518618][T17741] binder_ioctl+0x423/0x1b70 [ 407.518634][T17741] ? tomoyo_path_number_perm+0x219/0x630 [ 407.518656][T17741] ? tomoyo_path_number_perm+0x219/0x630 [ 407.518686][T17741] ? do_vfs_ioctl+0x1166/0x1530 [ 407.518702][T17741] ? __pfx_binder_ioctl+0x10/0x10 [ 407.518718][T17741] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 407.518746][T17741] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 407.518781][T17741] ? __fget_files+0x2a/0x420 [ 407.518803][T17741] ? __fget_files+0x2a/0x420 [ 407.518821][T17741] ? __fget_files+0x3a0/0x420 [ 407.518840][T17741] ? __fget_files+0x2a/0x420 [ 407.518860][T17741] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.518876][T17741] ? __pfx_binder_ioctl+0x10/0x10 [ 407.518892][T17741] __se_sys_ioctl+0xfc/0x170 [ 407.518910][T17741] do_syscall_64+0x14d/0xf80 [ 407.518925][T17741] ? trace_irq_disable+0x3b/0x150 [ 407.518943][T17741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.518958][T17741] ? clear_bhb_loop+0x40/0x90 [ 407.518977][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.518993][T17741] RIP: 0033:0x7f5b0db9c799 [ 407.519010][T17741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.519023][T17741] RSP: 002b:00007f5b0eaa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.519041][T17741] RAX: ffffffffffffffda RBX: 00007f5b0de15fa0 RCX: 00007f5b0db9c799 [ 407.519052][T17741] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 407.519063][T17741] RBP: 00007f5b0eaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.519073][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.519083][T17741] R13: 00007f5b0de16038 R14: 00007f5b0de15fa0 R15: 00007ffcd401c1b8 [ 407.519109][T17741] [ 407.519186][T17741] binder: 17740:17741 ioctl c0306201 2000000001c0 returned -14 [ 407.866246][ T5872] usb 4-1: USB disconnect, device number 33 [ 407.872203][T17750] syzkaller1: entered promiscuous mode [ 407.894922][T17750] syzkaller1: entered allmulticast mode [ 407.972397][T17763] overlayfs: missing 'lowerdir' [ 408.071748][T17771] overlayfs: missing 'lowerdir' [ 408.532591][T17799] veth1: entered allmulticast mode [ 408.553253][T17812] syzkaller1: entered promiscuous mode [ 408.558941][T17812] syzkaller1: entered allmulticast mode [ 408.686489][T17818] overlayfs: missing 'lowerdir' [ 408.704955][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 408.797193][T17822] overlayfs: missing 'lowerdir' [ 408.884948][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 408.893984][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 408.903193][ T24] usb 5-1: config 0 has no interface number 0 [ 408.913509][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 408.925027][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.933088][ T24] usb 5-1: Product: syz [ 408.938466][ T24] usb 5-1: Manufacturer: syz [ 408.943586][ T24] usb 5-1: SerialNumber: syz [ 408.956468][ T24] usb 5-1: config 0 descriptor?? [ 409.095336][ T5872] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 409.184920][ T5902] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 409.234890][ T5872] usb 3-1: device descriptor read/64, error -71 [ 409.335652][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 409.342806][ T5902] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 409.351751][ T5902] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.367229][ T5902] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 409.376358][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.377111][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 409.384449][ T5902] usb 4-1: Product: syz [ 409.384469][ T5902] usb 4-1: Manufacturer: syz [ 409.384482][ T5902] usb 4-1: SerialNumber: syz [ 409.409980][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.475055][ T5872] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 409.605108][ T5902] ljca 4-1:1.0: probe with driver ljca failed with error -71 [ 409.613442][ T5872] usb 3-1: device descriptor read/64, error -71 [ 409.622777][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 409.626456][ T5902] usb 4-1: USB disconnect, device number 34 [ 409.643692][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 409.725219][ T5872] usb usb3-port1: attempt power cycle [ 410.064947][ T5872] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 410.074984][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 410.085356][ T5872] usb 3-1: device descriptor read/8, error -71 [ 410.227653][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 410.236185][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 410.251324][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.268768][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.277592][ T24] usb 1-1: Product: syz [ 410.281855][ T24] usb 1-1: Manufacturer: syz [ 410.286895][ T24] usb 1-1: SerialNumber: syz [ 410.325928][ T5872] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 410.356770][ T5872] usb 3-1: device descriptor read/8, error -71 [ 410.475264][ T5872] usb usb3-port1: unable to enumerate USB device [ 410.483821][T17874] syzkaller1: entered promiscuous mode [ 410.490715][T17874] syzkaller1: entered allmulticast mode [ 410.572798][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 410.579985][ T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 410.627927][ T24] usb 1-1: USB disconnect, device number 6 [ 410.659138][T17895] overlayfs: missing 'lowerdir' [ 410.698893][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.866367][T17918] overlayfs: missing 'lowerdir' [ 411.093829][T17924] fuse: Bad value for 'fd' [ 411.287039][T17933] syzkaller1: entered promiscuous mode [ 411.292639][T17933] syzkaller1: entered allmulticast mode [ 411.382474][T17939] overlayfs: missing 'lowerdir' [ 411.461840][T17943] overlayfs: missing 'lowerdir' [ 411.477781][ T5872] usb 5-1: USB disconnect, device number 6 [ 411.556568][T17954] netlink: 'syz.0.2124': attribute type 2 has an invalid length. [ 411.609164][T17957] fuse: Bad value for 'fd' [ 411.776352][T17966] syzkaller1: entered promiscuous mode [ 411.782039][T17966] syzkaller1: entered allmulticast mode [ 411.840322][T17973] overlayfs: missing 'lowerdir' [ 412.012098][T17991] overlayfs: missing 'lowerdir' [ 412.035337][T17992] fuse: Bad value for 'fd' [ 412.098599][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 412.107988][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 412.120247][T17995] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2135'. [ 412.130234][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 412.139336][T17995] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2135'. [ 412.197615][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 412.265474][T18011] syzkaller1: entered promiscuous mode [ 412.271345][T18011] syzkaller1: entered allmulticast mode [ 412.334443][T18018] overlayfs: missing 'lowerdir' [ 412.374874][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 412.387502][ T5902] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 412.402275][ T5902] usb 5-1: config 0 has no interface number 0 [ 412.414148][T18022] FAULT_INJECTION: forcing a failure. [ 412.414148][T18022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.427928][T18022] CPU: 0 UID: 0 PID: 18022 Comm: syz.3.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.427955][T18022] Tainted: [L]=SOFTLOCKUP [ 412.427961][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.427970][T18022] Call Trace: [ 412.427977][T18022] [ 412.427984][T18022] dump_stack_lvl+0xe8/0x150 [ 412.428016][T18022] should_fail_ex+0x412/0x560 [ 412.428041][T18022] _copy_from_user+0x2d/0xb0 [ 412.428062][T18022] binder_ioctl_write_read+0xb05/0xa660 [ 412.428085][T18022] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.428104][T18022] ? arch_stack_walk+0xfb/0x150 [ 412.428131][T18022] ? __pfx_stack_trace_save+0x10/0x10 [ 412.428156][T18022] ? kasan_save_track+0x4f/0x80 [ 412.428176][T18022] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 412.428188][T18022] ? binder_get_thread+0x1c7/0x6d0 [ 412.428200][T18022] ? binder_ioctl+0x2ad/0x1b70 [ 412.428214][T18022] ? __se_sys_ioctl+0xfc/0x170 [ 412.428226][T18022] ? do_syscall_64+0x14d/0xf80 [ 412.428239][T18022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.428264][T18022] ? __lock_acquire+0x6b5/0x2cf0 [ 412.428307][T18022] ? __pfx_binder_debug+0x10/0x10 [ 412.428320][T18022] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.428352][T18022] ? _raw_spin_unlock+0x28/0x50 [ 412.428373][T18022] ? binder_get_thread+0x595/0x6d0 [ 412.428393][T18022] binder_ioctl+0x423/0x1b70 [ 412.428409][T18022] ? tomoyo_path_number_perm+0x219/0x630 [ 412.428431][T18022] ? tomoyo_path_number_perm+0x219/0x630 [ 412.428449][T18022] ? do_vfs_ioctl+0x1166/0x1530 [ 412.428465][T18022] ? __pfx_binder_ioctl+0x10/0x10 [ 412.428480][T18022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 412.428505][T18022] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 412.428534][T18022] ? __fget_files+0x2a/0x420 [ 412.428554][T18022] ? __fget_files+0x2a/0x420 [ 412.428571][T18022] ? __fget_files+0x3a0/0x420 [ 412.428589][T18022] ? __fget_files+0x2a/0x420 [ 412.428607][T18022] ? bpf_lsm_file_ioctl+0x9/0x20 [ 412.428623][T18022] ? __pfx_binder_ioctl+0x10/0x10 [ 412.428639][T18022] __se_sys_ioctl+0xfc/0x170 [ 412.428655][T18022] do_syscall_64+0x14d/0xf80 [ 412.428669][T18022] ? trace_irq_disable+0x3b/0x150 [ 412.428686][T18022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.428702][T18022] ? clear_bhb_loop+0x40/0x90 [ 412.428719][T18022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.428740][T18022] RIP: 0033:0x7f8fe039c799 [ 412.428756][T18022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.428770][T18022] RSP: 002b:00007f8fe12fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.428788][T18022] RAX: ffffffffffffffda RBX: 00007f8fe0615fa0 RCX: 00007f8fe039c799 [ 412.428800][T18022] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 412.428810][T18022] RBP: 00007f8fe12fa090 R08: 0000000000000000 R09: 0000000000000000 [ 412.428818][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.428828][T18022] R13: 00007f8fe0616038 R14: 00007f8fe0615fa0 R15: 00007ffe4c11fef8 [ 412.428853][T18022] [ 412.429230][T18022] binder: 18020:18022 ioctl c0306201 2000000001c0 returned -14 [ 412.466772][ T5930] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 412.503547][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 412.764548][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.766923][ T5930] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 412.772673][ T5902] usb 5-1: Product: syz [ 412.788576][ T5902] usb 5-1: Manufacturer: syz [ 412.793301][ T5902] usb 5-1: SerialNumber: syz [ 412.801654][ T5902] usb 5-1: config 0 descriptor?? [ 412.804667][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.825010][ T5930] usb 3-1: Product: syz [ 412.829241][ T5930] usb 3-1: Manufacturer: syz [ 412.833943][ T5930] usb 3-1: SerialNumber: syz [ 412.847782][ T5930] usb 3-1: config 0 descriptor?? [ 412.897312][T18039] overlayfs: missing 'lowerdir' [ 413.060339][ T5930] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 413.211566][T18052] syzkaller1: entered promiscuous mode [ 413.220457][T18052] syzkaller1: entered allmulticast mode [ 413.227078][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 413.238946][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.389595][T18059] overlayfs: missing 'lowerdir' [ 413.451419][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 413.483595][ T5902] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 413.541600][T18067] FAULT_INJECTION: forcing a failure. [ 413.541600][T18067] name failslab, interval 1, probability 0, space 0, times 0 [ 413.556214][T18067] CPU: 1 UID: 0 PID: 18067 Comm: syz.0.2154 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.556243][T18067] Tainted: [L]=SOFTLOCKUP [ 413.556250][T18067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.556260][T18067] Call Trace: [ 413.556267][T18067] [ 413.556274][T18067] dump_stack_lvl+0xe8/0x150 [ 413.556305][T18067] should_fail_ex+0x412/0x560 [ 413.556329][T18067] should_failslab+0xa8/0x100 [ 413.556348][T18067] __kmalloc_cache_noprof+0x88/0x660 [ 413.556371][T18067] ? binder_transaction+0x6ed/0x70b0 [ 413.556388][T18067] ? do_raw_spin_unlock+0xf5/0x210 [ 413.556413][T18067] binder_transaction+0x6ed/0x70b0 [ 413.556428][T18067] ? arch_stack_walk+0xfb/0x150 [ 413.556468][T18067] ? ima_match_policy+0x2146/0x21e0 [ 413.556578][T18067] ? __pfx_binder_transaction+0x10/0x10 [ 413.556595][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.556623][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.556651][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.556683][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.556706][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.556725][T18067] ? binder_debug+0x155/0x1d0 [ 413.556764][T18067] binder_ioctl_write_read+0xb5c/0xa660 [ 413.556798][T18067] ? unwind_get_return_address+0x4d/0x90 [ 413.556816][T18067] ? arch_stack_walk+0xfb/0x150 [ 413.556843][T18067] ? stack_trace_save+0xa9/0x100 [ 413.556861][T18067] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 413.556876][T18067] ? kasan_save_free_info+0x46/0x50 [ 413.556898][T18067] ? stack_depot_save_flags+0x33/0x810 [ 413.556958][T18067] ? format_decode+0x90/0xe10 [ 413.556981][T18067] ? kasan_save_track+0x4f/0x80 [ 413.557001][T18067] ? kasan_save_track+0x3e/0x80 [ 413.557019][T18067] ? kasan_save_free_info+0x46/0x50 [ 413.557036][T18067] ? __kasan_slab_free+0x5c/0x80 [ 413.557054][T18067] ? __lock_acquire+0x6b5/0x2cf0 [ 413.557100][T18067] ? __pfx_binder_debug+0x10/0x10 [ 413.557113][T18067] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.557145][T18067] ? _raw_spin_unlock+0x28/0x50 [ 413.557166][T18067] ? binder_get_thread+0x177/0x6d0 [ 413.557186][T18067] binder_ioctl+0x423/0x1b70 [ 413.557202][T18067] ? tomoyo_path_number_perm+0x219/0x630 [ 413.557224][T18067] ? tomoyo_path_number_perm+0x219/0x630 [ 413.557246][T18067] ? do_vfs_ioctl+0x1166/0x1530 [ 413.557263][T18067] ? __pfx_binder_ioctl+0x10/0x10 [ 413.557279][T18067] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 413.557305][T18067] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 413.557340][T18067] ? __fget_files+0x2a/0x420 [ 413.557362][T18067] ? __fget_files+0x2a/0x420 [ 413.557380][T18067] ? __fget_files+0x3a0/0x420 [ 413.557398][T18067] ? __fget_files+0x2a/0x420 [ 413.557420][T18067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 413.557437][T18067] ? __pfx_binder_ioctl+0x10/0x10 [ 413.557452][T18067] __se_sys_ioctl+0xfc/0x170 [ 413.557470][T18067] do_syscall_64+0x14d/0xf80 [ 413.557485][T18067] ? trace_irq_disable+0x3b/0x150 [ 413.557503][T18067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.557519][T18067] ? clear_bhb_loop+0x40/0x90 [ 413.557539][T18067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.557554][T18067] RIP: 0033:0x7fcd45f9c799 [ 413.557571][T18067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.557585][T18067] RSP: 002b:00007fcd46e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.557601][T18067] RAX: ffffffffffffffda RBX: 00007fcd46215fa0 RCX: 00007fcd45f9c799 [ 413.557613][T18067] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 413.557623][T18067] RBP: 00007fcd46e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.557633][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.557643][T18067] R13: 00007fcd46216038 R14: 00007fcd46215fa0 R15: 00007fff4387fb18 [ 413.557669][T18067] [ 413.572614][T18070] overlayfs: missing 'lowerdir' [ 413.936858][T18080] syzkaller1: entered promiscuous mode [ 413.960501][T18080] syzkaller1: entered allmulticast mode [ 414.113971][T18091] overlayfs: missing 'lowerdir' [ 414.210019][T18095] futex_wake_op: syz.0.2162 tries to shift op by -1; fix this program [ 414.792057][ T5930] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 414.804572][ T5930] usb 3-1: USB disconnect, device number 3 [ 414.973670][ T5872] usb 5-1: USB disconnect, device number 7 [ 415.247903][T18124] FAULT_INJECTION: forcing a failure. [ 415.247903][T18124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.304943][T18124] CPU: 0 UID: 0 PID: 18124 Comm: syz.4.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.304973][T18124] Tainted: [L]=SOFTLOCKUP [ 415.304980][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.304991][T18124] Call Trace: [ 415.304999][T18124] [ 415.305007][T18124] dump_stack_lvl+0xe8/0x150 [ 415.305036][T18124] should_fail_ex+0x412/0x560 [ 415.305067][T18124] prepare_alloc_pages+0x22a/0x650 [ 415.305093][T18124] __alloc_frozen_pages_noprof+0x119/0x3d0 [ 415.305115][T18124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.305136][T18124] ? __pfx_policy_nodemask+0x10/0x10 [ 415.305164][T18124] alloc_pages_mpol+0x235/0x490 [ 415.305187][T18124] alloc_pages_noprof+0xac/0x2a0 [ 415.305207][T18124] pte_alloc_one+0x22/0x370 [ 415.305227][T18124] __do_fault+0xe2/0x590 [ 415.305248][T18124] do_pte_missing+0x601/0x33f0 [ 415.305267][T18124] ? __thp_vma_allowable_orders+0x8ee/0x960 [ 415.305293][T18124] ? count_memcg_event_mm+0x21/0x260 [ 415.305322][T18124] handle_mm_fault+0x1bd7/0x3170 [ 415.305357][T18124] ? handle_mm_fault+0xee/0x3170 [ 415.305381][T18124] ? mtree_load+0x6c0/0x780 [ 415.305397][T18124] ? __pfx_handle_mm_fault+0x10/0x10 [ 415.305416][T18124] ? mtree_load+0x12a/0x780 [ 415.305455][T18124] __get_user_pages+0x1683/0x2720 [ 415.305504][T18124] faultin_page_range+0x240/0x8c0 [ 415.305533][T18124] madvise_do_behavior+0x2e5/0x540 [ 415.305557][T18124] ? __pfx_madvise_do_behavior+0x10/0x10 [ 415.305582][T18124] ? down_read+0x270/0x2e0 [ 415.305605][T18124] ? madvise_lock+0x146/0x2e0 [ 415.305627][T18124] do_madvise+0x1fa/0x2e0 [ 415.305646][T18124] ? __pfx_do_madvise+0x10/0x10 [ 415.305685][T18124] ? __pfx_ksys_write+0x10/0x10 [ 415.305707][T18124] __x64_sys_madvise+0xa6/0xc0 [ 415.305726][T18124] do_syscall_64+0x14d/0xf80 [ 415.305742][T18124] ? trace_irq_disable+0x3b/0x150 [ 415.305761][T18124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.305777][T18124] ? clear_bhb_loop+0x40/0x90 [ 415.305797][T18124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.305814][T18124] RIP: 0033:0x7f8a6959c799 [ 415.305831][T18124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.305845][T18124] RSP: 002b:00007f8a6a51a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 415.305864][T18124] RAX: ffffffffffffffda RBX: 00007f8a69815fa0 RCX: 00007f8a6959c799 [ 415.305876][T18124] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 415.305886][T18124] RBP: 00007f8a6a51a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.305896][T18124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.305906][T18124] R13: 00007f8a69816038 R14: 00007f8a69815fa0 R15: 00007ffd4720e0e8 [ 415.305933][T18124] [ 415.847189][T18127] overlayfs: missing 'lowerdir' [ 416.051452][T18137] overlayfs: missing 'lowerdir' [ 416.055557][T18134] syzkaller1: entered promiscuous mode [ 416.074212][T18134] syzkaller1: entered allmulticast mode [ 416.634901][ T5930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 416.744910][ T5843] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 416.796425][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 416.803989][ T5930] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.813277][ T5930] usb 3-1: config 0 has no interface number 0 [ 416.822045][ T5930] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.831145][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.839202][ T5930] usb 3-1: Product: syz [ 416.843378][ T5930] usb 3-1: Manufacturer: syz [ 416.848040][ T5930] usb 3-1: SerialNumber: syz [ 416.855572][ T5930] usb 3-1: config 0 descriptor?? [ 416.893205][T18176] overlayfs: missing 'lowerdir' [ 416.910344][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.923028][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.938886][ T5843] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 416.948413][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.957602][ T5843] usb 4-1: SerialNumber: syz [ 417.038748][T18183] overlayfs: missing 'lowerdir' [ 417.232188][ T5843] usb 4-1: 0:2 : does not exist [ 417.264237][ T5843] usb 4-1: unit 52 not found! [ 417.278594][ T5930] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 417.318931][ T5930] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 417.352643][T18212] loop8: detected capacity change from 0 to 524287999 [ 417.366127][ T5843] usb 4-1: USB disconnect, device number 35 [ 417.459734][ T6782] buffer_io_error: 14 callbacks suppressed [ 417.459828][ T6782] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 417.521873][T18231] overlayfs: missing 'lowerdir' [ 417.752901][T18254] overlayfs: missing 'lowerdir' [ 417.885092][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 418.038487][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.049904][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.060511][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.073868][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.096719][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.114706][ T5912] usb 1-1: config 0 descriptor?? [ 418.128143][T18273] loop8: detected capacity change from 0 to 524287999 [ 418.163763][T11394] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 418.314733][T18284] overlayfs: missing 'lowerdir' [ 418.355412][ T5930] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 418.383201][ T5930] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 418.401684][ T5930] usb 3-1: USB disconnect, device number 4 [ 418.494393][T18297] tmpfs: Unknown parameter 'uUd' [ 418.508998][T18300] overlayfs: missing 'lowerdir' [ 418.538196][ T5912] plantronics 0003:047F:FFFF.0016: report_id 0 is invalid [ 418.545847][ T5912] plantronics 0003:047F:FFFF.0016: item 0 0 1 8 parsing failed [ 418.554197][ T5912] plantronics 0003:047F:FFFF.0016: parse failed [ 418.562930][ T5912] plantronics 0003:047F:FFFF.0016: probe with driver plantronics failed with error -22 [ 418.668898][T18313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'. [ 418.683446][T18313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'. [ 418.983767][T18333] overlayfs: missing 'lowerdir' [ 419.107852][T18342] overlayfs: missing 'lowerdir' [ 419.833441][T18361] loop8: detected capacity change from 0 to 524287999 [ 419.863801][ T5846] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 420.324919][ T5912] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 420.474925][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 420.482243][ T5912] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 420.490542][ T5912] usb 3-1: config 0 has no interface number 0 [ 420.500584][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 420.509824][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.518007][ T5912] usb 3-1: Product: syz [ 420.522278][ T5912] usb 3-1: Manufacturer: syz [ 420.527169][ T5912] usb 3-1: SerialNumber: syz [ 420.541085][ T5912] usb 3-1: config 0 descriptor?? [ 420.687673][ T5843] usb 1-1: USB disconnect, device number 7 [ 420.709559][T18396] overlayfs: missing 'lowerdir' [ 420.793345][T18409] overlayfs: missing 'lowerdir' [ 420.923233][T18417] [ 420.925598][T18417] ====================================================== [ 420.932698][T18417] WARNING: possible circular locking dependency detected [ 420.939874][T18417] syzkaller #0 Tainted: G L [ 420.945854][T18417] ------------------------------------------------------ [ 420.953016][T18417] syz.0.2223/18417 is trying to acquire lock: [ 420.959062][T18417] ffff8880541c2368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 420.970586][T18417] [ 420.970586][T18417] but task is already holding lock: [ 420.977945][T18417] ffff8880541c40e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 420.986909][T18417] [ 420.986909][T18417] which lock already depends on the new lock. [ 420.986909][T18417] [ 420.997292][T18417] [ 420.997292][T18417] the existing dependency chain (in reverse order) is: [ 421.006631][T18417] [ 421.006631][T18417] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 421.014465][T18417] lock_sock_nested+0x41/0x100 [ 421.019741][T18417] smc_listen_out+0x109/0x3e0 [ 421.024920][T18417] smc_listen_work+0x813/0x13f0 [ 421.030274][T18417] process_one_work+0x9ab/0x1780 [ 421.035717][T18417] worker_thread+0xba8/0x11e0 [ 421.040897][T18417] kthread+0x388/0x470 [ 421.045493][T18417] ret_from_fork+0x51e/0xb90 [ 421.050608][T18417] ret_from_fork_asm+0x1a/0x30 [ 421.055966][T18417] [ 421.055966][T18417] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 421.066479][T18417] __lock_acquire+0x15a5/0x2cf0 [ 421.071866][T18417] lock_acquire+0xf0/0x2e0 [ 421.076808][T18417] __flush_work+0x700/0xc50 [ 421.081833][T18417] __cancel_work_sync+0xbe/0x110 [ 421.087292][T18417] smc_clcsock_release+0x60/0xf0 [ 421.092744][T18417] __smc_release+0x66b/0x7e0 [ 421.097845][T18417] smc_close_non_accepted+0xd5/0x1f0 [ 421.103810][T18417] smc_close_active+0xb67/0xf10 [ 421.109164][T18417] __smc_release+0x8d/0x7e0 [ 421.114173][T18417] smc_release+0x2ce/0x560 [ 421.119100][T18417] __sock_release+0xb9/0x250 [ 421.124196][T18417] sock_close+0x1c/0x30 [ 421.128857][T18417] __fput+0x451/0x8c0 [ 421.133347][T18417] task_work_run+0x1d9/0x270 [ 421.138444][T18417] exit_to_user_mode_loop+0xed/0x480 [ 421.144240][T18417] do_syscall_64+0x32d/0xf80 [ 421.149338][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.155735][T18417] [ 421.155735][T18417] other info that might help us debug this: [ 421.155735][T18417] [ 421.165942][T18417] Possible unsafe locking scenario: [ 421.165942][T18417] [ 421.173403][T18417] CPU0 CPU1 [ 421.178757][T18417] ---- ---- [ 421.184126][T18417] lock(sk_lock-AF_SMC/1); [ 421.188627][T18417] lock((work_completion)(&new_smc->smc_listen_work)); [ 421.198077][T18417] lock(sk_lock-AF_SMC/1); [ 421.205106][T18417] lock((work_completion)(&new_smc->smc_listen_work)); [ 421.212051][T18417] [ 421.212051][T18417] *** DEADLOCK *** [ 421.212051][T18417] [ 421.220269][T18417] 3 locks held by syz.0.2223/18417: [ 421.225448][T18417] #0: ffff88805d879440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 421.236025][T18417] #1: ffff8880541c40e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 421.245412][T18417] #2: ffffffff8eb5d6e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 421.254618][T18417] [ 421.254618][T18417] stack backtrace: [ 421.260491][T18417] CPU: 0 UID: 0 PID: 18417 Comm: syz.0.2223 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.260509][T18417] Tainted: [L]=SOFTLOCKUP [ 421.260514][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.260522][T18417] Call Trace: [ 421.260530][T18417] [ 421.260537][T18417] dump_stack_lvl+0xe8/0x150 [ 421.260556][T18417] print_circular_bug+0x2e1/0x300 [ 421.260571][T18417] check_noncircular+0x12e/0x150 [ 421.260586][T18417] __lock_acquire+0x15a5/0x2cf0 [ 421.260605][T18417] ? __pfx___schedule+0x10/0x10 [ 421.260623][T18417] ? irqentry_exit+0x61a/0x700 [ 421.260635][T18417] ? trace_irq_disable+0x3b/0x150 [ 421.260651][T18417] lock_acquire+0xf0/0x2e0 [ 421.260667][T18417] ? __flush_work+0x100/0xc50 [ 421.260679][T18417] ? preempt_schedule_thunk+0x16/0x30 [ 421.260693][T18417] ? __flush_work+0x100/0xc50 [ 421.260705][T18417] __flush_work+0x700/0xc50 [ 421.260716][T18417] ? __flush_work+0x100/0xc50 [ 421.260727][T18417] ? __flush_work+0x100/0xc50 [ 421.260739][T18417] ? __pfx___flush_work+0x10/0x10 [ 421.260751][T18417] ? __pfx_wq_barrier_func+0x10/0x10 [ 421.260773][T18417] ? __cancel_work_sync+0x5c/0x110 [ 421.260786][T18417] __cancel_work_sync+0xbe/0x110 [ 421.260799][T18417] smc_clcsock_release+0x60/0xf0 [ 421.260812][T18417] __smc_release+0x66b/0x7e0 [ 421.260827][T18417] ? __local_bh_enable_ip+0xd0/0x130 [ 421.260845][T18417] smc_close_non_accepted+0xd5/0x1f0 [ 421.260862][T18417] smc_close_active+0xb67/0xf10 [ 421.260874][T18417] ? __pfx_sock_def_readable+0x10/0x10 [ 421.260891][T18417] __smc_release+0x8d/0x7e0 [ 421.260905][T18417] ? __local_bh_enable_ip+0xd0/0x130 [ 421.260922][T18417] smc_release+0x2ce/0x560 [ 421.260940][T18417] __sock_release+0xb9/0x250 [ 421.260956][T18417] ? __pfx_sock_close+0x10/0x10 [ 421.260971][T18417] sock_close+0x1c/0x30 [ 421.260985][T18417] __fput+0x451/0x8c0 [ 421.261003][T18417] task_work_run+0x1d9/0x270 [ 421.261018][T18417] ? __pfx_task_work_run+0x10/0x10 [ 421.261035][T18417] exit_to_user_mode_loop+0xed/0x480 [ 421.261050][T18417] ? rcu_is_watching+0x15/0xb0 [ 421.261063][T18417] do_syscall_64+0x32d/0xf80 [ 421.261075][T18417] ? trace_irq_disable+0x3b/0x150 [ 421.261088][T18417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.261100][T18417] ? clear_bhb_loop+0x40/0x90 [ 421.261113][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.261126][T18417] RIP: 0033:0x7fcd45f9c799 [ 421.261139][T18417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.261150][T18417] RSP: 002b:00007fff4387fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 421.261164][T18417] RAX: 0000000000000000 RBX: 00007fff4387fd60 RCX: 00007fcd45f9c799 [ 421.261172][T18417] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 421.261180][T18417] RBP: 0000000000066bfc R08: 0000000000000001 R09: 0000000000000000 [ 421.261188][T18417] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007fff4387fda0 [ 421.261196][T18417] R13: 00007fcd46215fac R14: 0000000000066c33 R15: 00007fcd46215fa0 [ 421.261209][T18417] [ 421.570541][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 421.581338][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.421700][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 422.433142][ T5912] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 422.447796][ T5912] usb 3-1: USB disconnect, device number 5