last executing test programs: 14m10.662650878s ago: executing program 4 (id=971): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x5, 0x401) semctl$GETALL(r4, 0x0, 0xd, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000000240)=""/28, 0xffd2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socket$nl_route(0x10, 0x3, 0x0) 14m8.791143055s ago: executing program 4 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000103120000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$int_in(r4, 0x5452, &(0x7f00000004c0)=0x1) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb50c01317b208feefaf234b4ff8b4cc4c38bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed", 0x80) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x24080) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) 14m5.853935106s ago: executing program 4 (id=981): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x400000000010, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0xffffffdd}) 14m5.83967606s ago: executing program 4 (id=983): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_open_dev$audion(0x0, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) 14m4.071363975s ago: executing program 4 (id=986): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0) socket(0x2c, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000762000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r3}) keyctl$setperm(0x5, 0x0, 0x30010001) 14m0.735159709s ago: executing program 4 (id=994): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000000240)=""/28, 0xffd2) socket$nl_route(0x10, 0x3, 0x0) 13m57.639738896s ago: executing program 32 (id=994): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000000240)=""/28, 0xffd2) socket$nl_route(0x10, 0x3, 0x0) 50.830940278s ago: executing program 0 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ptrace$setopts(0x4200, r2, 0x7fff, 0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) 47.226320755s ago: executing program 0 (id=3019): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000001a40)={0x7, 0xc000c, "7c58573dbe3614943d387a4a0ca4e9034926afc599545120", {0xfffffffb, 0x2}, 0x5}) openat$rtc(0xffffffffffffff9c, 0x0, 0x525200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) gettid() socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0xa, 0x3, 0x3a) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0xccccd, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(r5, 0x0, r5, 0x0, 0xa, 0x9) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0xfffffffc}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xffff, 0x101, 0x4, 0x1, 0xffffff26, 0xff, 0x1, 0x101]}}, 0x5c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000000201030000000000000000020000002400028014000180080001000000000008000200ac1e00010c000280050001100000000004000380"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 44.502451554s ago: executing program 0 (id=3030): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) lseek(r5, 0x4, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) 43.554177265s ago: executing program 0 (id=3032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {0x1, 0x3, 0x5, 0x2}, 0x5, [0x3, 0x688, 0x2, 0x200, 0x94e5, 0xc, 0x7f, 0xb5, 0x8, 0x7, 0x7, 0x21, 0x6, 0x7fff, 0xd5, 0x2, 0xd07, 0x9, 0x3, 0x896, 0xfffffff8, 0xffff0001, 0x1, 0x0, 0x7, 0x1, 0x101, 0x2, 0xc5, 0x8, 0x4, 0x3, 0xd, 0x20000000, 0x6, 0x5fc9, 0x6, 0x10000, 0x401, 0x1ff, 0x2, 0xa, 0x3, 0x4, 0x40, 0x4, 0x0, 0xff, 0xfffffff0, 0x80, 0x8, 0x9, 0x6, 0x8, 0x7fffffff, 0xffffffff, 0x7, 0x9, 0x8, 0x77c, 0x4, 0x2, 0x1ff, 0x7fff], [0x3, 0x9, 0x6, 0x3dd3f8d, 0xb44c, 0x7, 0x7, 0xffffffff, 0xbc2c, 0x7b31, 0x5, 0xe, 0x8, 0xfffffd2e, 0x1, 0x4, 0xfffffffb, 0x10000, 0x0, 0xde, 0x8, 0x4, 0x3, 0x8, 0x3, 0xfffffffa, 0x6, 0xfffffffa, 0x7f, 0x3b5, 0x0, 0x9, 0x7163, 0x3, 0x5, 0x9, 0x5, 0x5, 0x3, 0x8, 0xfffffffb, 0x5, 0x10, 0x8, 0xff, 0x3c0934c7, 0xc62, 0x9, 0x419, 0x27000362, 0x7, 0xfffffff7, 0xef, 0x8, 0xffff0001, 0x976, 0x1, 0xd951, 0x9, 0x8, 0xcdf, 0x8000, 0x6, 0x10], [0xa, 0x3, 0x9, 0x42e1, 0x400, 0xd66c, 0x509695f3, 0x7, 0x7, 0x278, 0x3, 0x9, 0x1, 0x5, 0x7, 0x5, 0x0, 0x5, 0x8, 0xb41a, 0x800, 0x80000001, 0x9, 0x4, 0x0, 0x1800, 0x2, 0x9, 0xe, 0x4, 0x100, 0x940, 0xcb1, 0x5, 0x10, 0x3, 0x2, 0x6, 0x66, 0xfffff400, 0x7, 0x2, 0x0, 0x7, 0x1, 0x5, 0x6, 0x80000000, 0x80, 0x0, 0xe3, 0x7f, 0x2, 0x8, 0x40, 0x5, 0x4, 0x7, 0x1, 0xff, 0x0, 0x7, 0x5, 0x6], [0x4, 0x0, 0x1, 0x7, 0xe, 0xa, 0xffffffff, 0x2, 0x1, 0x327e, 0x8, 0x9, 0xe2, 0x0, 0x401, 0x3, 0x3, 0x75c20bcf, 0x6c4d, 0x2, 0xfffffff8, 0x0, 0x430, 0x59b1, 0xa, 0x7ff, 0x7, 0x2, 0x4, 0x2, 0x3, 0x8, 0xffffff2e, 0xe, 0x7f, 0x400, 0xd, 0x3, 0x20002000, 0x2, 0x8, 0x7, 0x20bb4dcc, 0x4, 0xff, 0x2, 0x5, 0x5, 0x5, 0x10, 0xc20b, 0x7, 0x1, 0x10000, 0x100, 0xf2b9, 0x7fff, 0x1000, 0x2, 0x1, 0x7fe1, 0x0, 0x10000, 0x7]}, 0x45c) (rerun: 32) pwritev2(r0, &(0x7f0000001600)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="2f3284adcbba5a1a14dd1b1a6128fbebbda3139b19e2cb8739cccacfe6071727ee4d726e326870378752add752ad32ab4ad9c0", 0x33}, {&(0x7f00000015c0)="6a92cee2e15ba384ce17afe8e43f2a72affa5cefbb8f44f61b67ec923b2e05f0571d39d05e7d454a3b6ff0e8891e3c4097f05fd6", 0x34}], 0x3, 0x400, 0xc, 0x4) (async) fchdir(r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001640)=""/37, &(0x7f0000001680)=0x25) r2 = accept$inet6(r0, &(0x7f00000016c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001700)=0x1c) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001740), 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001780)={0x3, 0xfffff000, 0x0, 'queue0\x00', 0x5}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000018c0)={0x9, &(0x7f0000001840)=[{0xca, 0x8, 0x6, 0xf5}, {0xfb, 0x0, 0xe6, 0x9}, {0xc6, 0x0, 0x10, 0x5}, {0xc5, 0x6, 0x7a, 0x10000}, {0xe5, 0x1, 0x4, 0x7fff}, {0x0, 0x1, 0x8, 0xffffffff}, {0x2, 0xf2, 0x5, 0x6}, {0x7f, 0x5, 0xce, 0x4}, {0x7f, 0x8, 0xf8}]}, 0x10) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x1b) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/keys\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000001980)) (async) r6 = accept$packet(r5, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a00)=0x14) (async) getpeername$packet(r5, &(0x7f0000007680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000076c0)=0x14) sendmmsg(r6, &(0x7f0000007c80)=[{{&(0x7f0000001a40)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001ac0)="60e779402f34907d22ba2b74f3cda02da0d0b81f3b274f04b30a1a997bfa0b04e33128e628128974bce7c2b38b7c7672f48118f9725c03370dddd507ee0955954c7429eb44cfe4926ca55013386812ab47246477b69f0796606f41be5220db2386752ff593da6fd00344fb380eeb808e96812ace5b11a326dfbc3754ca2688c607cf55090461c0b41d3ebd8c967815361b7d5ee309aad3691fb61c4a571436b9c681c553f2b7cee3d1f13b233a2d21bb82984d49a6e63f3c6c5a6aa51c37f3f185e68eac792dd2d795da0fd6281d8a4625ef97be529a45401c60d50d166f09b87ae4e2d27b0122842ae71fb81867b825", 0xf0}, {&(0x7f0000001bc0)="01aa6c8a82f8d8b55065b18861", 0xd}, {&(0x7f0000001c00)="cbebed6c357752e414be52652237023fdaff3529437019f0850631ce719d38340d5cba41e0ebee606e3ed882ecad6c6bb923a883cce9aadf405e3fe1cfa6aaa5c3759352f41c2df92e14009992b44ce00b0f335627aa5b26f7ca86933a8c3ba8817524ac7340b74bb7db4a69ae9b7a27a6e30973eeb3fd1ad020d4f72860a4494ff28aafde90ce5a0d148c316f6681dd710a9cfd9facdf8e398d2d449944d07ff98f7185f026857f41c561dba26953fa10b51d3ddb62ed37997099911e38863804d2b8e9df595ffc9542259baeab", 0xce}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="854c35bb67d1c0c41dfac072401c3122b556c3c5c5c3c448558b9f22ffdf0dba680ead1d9e251efbeb717883e2380061b22ffcc9470c8b77e5d74f17597ccc613985", 0x42}], 0x5, &(0x7f0000002e00)=[{0xc0, 0x10a, 0x4, "3520999c5d0639e102d451cb8483eeaaf5d6d8d624fed6cbc134a183a9ca2a796d756d77278571c69ba6042affc82bbf3235910c2f4afc9d048e9d30649588783a8de2691f8bcc00ebda05837b64bc96f2b5fe25ba0e4a08cb63f5017a177b28e9c8e3146c068cbf910bf28d86556a3c762aa3a80ccb5ab5c34573d141f587fc0857e4392ef332281041b1b64ce5b43f4146d218111c2b3480ab1391ba9b8f8892b7abc200f0f6e93189cd53280b0b4a"}, {0x1010, 0x119, 0xf, "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"}, {0xc0, 0x84, 0x5, "aea1b5ec569816d224f118684a1c9251ee509f53ee167de377a6afe04caddc0d0e04e64738f7a15c992279f9dd990f66444c4b3c1cdd28dc79e6d5aedb8bc9875b3d5f20a9597ff03a1c5666b667829b8bb573132528cdd7d87094a36d1b39996c4b345c492e1fa0b10746b805a7a1430c97595fb04497c03b5fc81995f3bb2a0ba61145116ba5d93d951f9988ef7538c9510a9a24840bfd20943364476c8605fae42faf9b7b4358dcd30f2657"}, {0xb8, 0x111, 0x0, "63b82b4b07f29f7e9d9a9109ffa53f946f9514ad2cd847e96f08bc8bd57be2cf473456e0c27cf3431a75bf5918c9ea678a3144dd36c9c7ae26cd1b2a6c9655ad1128145e208df1f301c1a5799db5f002365e59ab2e0a95d181a153dbaeee1145c2b54451a65bc8c45a5a3bda1a0a321a3d01aa45e9389cd830e12f52a8926bd64dbaeb99ec6f4321b97aa5c0e0c4a563977c8dfbdf1e959f01f1667e7cd1bff4d3b8e7956ef86f36"}, {0x40, 0x344, 0x5, "f8b4e527052e4a18283e8b897ccdedb5ad084ebe2952a3aab1766bf9a0d8ba13096cf8513f94450ed3c6"}], 0x1288}}, {{&(0x7f00000040c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x80, &(0x7f0000004140)}}, {{&(0x7f0000004180)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004200)="fe9c64f2e2dd6dd7efa7a12a6cfc6664e85e", 0x12}, {&(0x7f0000004240)="a18e2f", 0x3}, {&(0x7f0000004280)="01b36c0dcf6d974bcecbfd703164373377fffc28541bb082b72da1c20cf76a0c78b84909bd79073a01d618a6c618ce04d0e606f96be823a2babb33e1c946f9611076a0bf958dbd989b7890e2472601abe3ab82bb7c949a947a62e61d239a75414b11159b5d41c8cc4440b6debc1693a4e3e6ec2031b100495d864275acb08c778c537c8ade0d2c84a385a12f811743e2", 0x90}], 0x3, &(0x7f0000004380)=[{0x68, 0x1, 0xffffffff, "d52ecbfdb309d6e1b099c9e99c7747349d436a1590090b2c4d01216cb4fee3e0e04468e5e20261476d320287f9f2e98259a68fe85f0400483279fa5f1d3b79af85f8751f2310f60d2d54e91c2590ef559c2c6b"}, {0x88, 0x10b, 0x2, "915cfaa4c2bea061aed06f63a6a5325029abcd456cd5c29264979f0a43afb0df3b4ddfe0962f2a472f47ba2e1f51beabc1b237ff7b0eccf73596c0f0aa0a92a47b41fa9d4b053de6bce8db67bd307a8cf9933161eb41ba7ef55f556bbe6894ba4ede7baebd0cbfe1db09868d953c0860bad98b7878a96ac1"}, {0xc0, 0x112, 0x8, "28d867992b3dc78d7ac5a4b8c21c8fb6e3a7b48efec17317a904b484b4f4d813831a2ffdd7ec38699793d1f356b6399813b66caa59f892286c81b28b2f671949062971fb52aafe017a62f023df06c391f88dadedf9453179f6c8281a4ba69b78924b33f9aba3c1b535addc97b2ef48342d94acfda36a3c393499b7d0b70ada3ef8a45a56bd2c724378dfcdce1da78c9ac8f2f50153e56f819725b6434eedb3e2a055e814d31c39530402"}, {0x48, 0x3eb27801996e3d14, 0x0, "a0ab2d9a328ffd39fed0435c84a10d67aa17dff6d2fab3d288776a9422e32409486ba1cf1b949c6a5ebeaa17e6233215584f8aeb8caa"}, {0x48, 0x111, 0x3ff, "13fc8c8b3dba37fe145825e50330c2b3273ad1a3d970678d5aaa5baff9bf6d939725eb2f3580d89a8c638917f31d554d944f31af"}], 0x240}}, {{&(0x7f00000045c0)=@in={0x2, 0x4e22, @private=0xa010100}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004640)="da5ec78146b63a5bf5b1c26869eb7eacedea105d1c845cfe4bd8e832988bb74f0885e12977d8525efd994dca4acdbedf5ad5368645a4f733cdae5ed2f1865d9b095c60aab1ad401ee9ce62a06d2e510fdb3b0f70e6c6379f9079003a831b8b6d7b0d5adbe35646b7eec9273d3c40d6353c46e4d173d71d82857dfd701f765da686026a56c4bc24a75fe4e756236132b220cd79ef73a9e16aa628f8bf0008c78ec7a5e3a9a91a723e7e3a429dafe855", 0xaf}], 0x1, &(0x7f0000004740)=[{0x10, 0x119, 0x4}], 0x10}}, {{&(0x7f0000004780)=@ax25={{0x3, @default, 0x7}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default, @bcast]}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004800)="e3030c099ba5f8fafefc534f7f0052ed65fb64931f94ea0335d8d343f3a49c6ead11ffb5db96877d738593945c0760934efd18cb53db2753083143101f11f5439856fbf696a68554833b9ae411", 0x4d}, {&(0x7f0000004880)="90ab4f28419af7bd13e0eaebeffc62b21e02be22e141f989d20d737d0d8ec69ea1b4882b1f70517507b9a243d5ad9f9c599108867857384d37611be5c8b101809de04046ad83fb29fa542015cf3c7f17e473e4d8b869816f3f8f74358d52306215b06068aa8b3b33000ec000f5594116b49e60fe9f2b567b23361be5ec5a4974f715678da38f81bda6378e199b0964357d908b63caf63914a4dbf42406258ea7ef0fcb91161df39d48cd069b96eab5f4a95fbc3f44689d8b0c2adbafbbb8ae94d55a6da02c7eca01436a9e236b139dbc4c24a57c7a43c6005b8462bfd09ec8d32987d71d3cec893537a8988f21e745", 0xef}, {&(0x7f0000004980)="1270f038df5715bb597ee1c2ea65ab25b0a551459f44c217d2bfcf410c44c82a37b2b1598d14126175391c9e40dff785fed9fca1a8bf3b8b61f4500aa0bc57b22ed8dafacf19f74d70dc9fcb", 0x4c}, {&(0x7f0000004a00)="c37d863366", 0x5}, {&(0x7f0000004a40)="54e577e4138aeab3356bf796b609dd52722d7373cdd6cde12f41a2b7133eb7f684336b685a008f340637bd03b4e79cddb1bc011edf27a3b622cdb10d7b6765eb09fd53847dd44aae7b31f2fa1f9cdc988a8ed5d18ad38c72bad16199063c1ee518b312a78ca38c170e8529389c205ef30c8a2a43f5ce9c4bcdc0eff16435167b7fd3bd1962e1a753d663342ff324aeaaed841062e94ddf59fb0cfb60a7d3ced84638834a678c9dbbc49c", 0xaa}, {&(0x7f0000004b00)="95ab0d380cf347dc92d494ae0dd900159af154cea41779a30fcd68b72e4c4b49409d41156652c0212e723f2cbe56469c5cc3ece6a468deb90ceef1f63bd96f831f1b44ce1fbdfcb19deeba707e82b3014dd74a3a5d8fee940ff7b800b9132db8bbc5844538f64ea8031a95025dad918d731dbd3d5e1c6fd680f5cfa05223e4b19c11c5690241f92ef9a243bc32572e5529ef5580f592aebe7b8135bfa8450946c89ec6", 0xa3}, {&(0x7f0000004bc0)="0586fe712aefc1df76f6489731b9a05d1250a1b80057938acb1a767cad5a4d4065d7efb93c787630b473d0206db30d8084840b833aabcc5f1a47df584d9764c01763d6d9bdbb6406c4b0b0cbe53907201ac61fcb70e45fd7f29abc78aacd6b3fa9d80f7cac8756b2080f40dd7913d4a3ddfcd13c3451ed52419da1a61c2f7e60d02837e528d5575aca154b8408df39d2655edd7a96e5a8399a0d9cb8474fa57407a78d3675c81478c6f8b856c3dd5e40a541cc683bcce06fba93596293a4b83f52d8f9ba1c", 0xc5}, {&(0x7f0000004cc0)="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", 0x1000}, {&(0x7f0000005cc0)="317017d0c426a150be50699c4d27739c9c7b797f75963d06df7e2b38d95248ec1da4f369c493ee425dbe89d41a29d2611017c771cccfa3d6eb7613c5eb1c5108afcb1f00cae24c6ad1ee44db4babab9f667f745e609b1b4a92b8ed2b7d2b076dc7035e8b3c3c0ff967d0dac9e2d84cb1c2615fe6fe72fc07bb0a649046e1eeb864062693f70b2651f384782583a69debbf52ee19bbb067ca138e0941d6a60e5845694b31e2a243b903f85a", 0xab}], 0x9, &(0x7f0000005e40)=[{0x1010, 0x118, 0x0, "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"}], 0x1010}}, {{&(0x7f0000006e80)=@isdn={0x22, 0x0, 0xcf, 0x9, 0x3}, 0x80, &(0x7f0000007180)=[{&(0x7f0000006f00)="85b42d87a15b910cbc7f7876afd2966f2b0ee9e6fe981686efb73cc2ece0ce120c15e3bb7d1402b1a8e42876d838cddb2fd0c9db8d0402be38391455706170615d53ca50472d4c7e41c8754ba181ca1fb46b5e4f328256567b8b290dc465bc4e448b44ffc5fc2125c1078b5725c1be3750fc81b435262e4d67a0e218ce7bee0b47ba1c60fb196d55995dfe06f01506899292d0c8178b478c1bbcae6513de496e206f7fbef6eea62d6e15fae05d804e5865fc21", 0xb3}, {&(0x7f0000006fc0)="da11eea393c8a1722b15fce1013def7dc9aa1ac2af6fbab70327b712b4efde58770f318eff6ba93b49c25f560d89fd7a80ae64ca2892", 0x36}, {&(0x7f0000007000)="6ff6f30b73f54b055034dfd43ec5c735c3cd479b1e8c2e0c217cb8f2132ba0f7d626f8c6c87bbf4d85e5fad3ad8e", 0x2e}, {&(0x7f0000007040)="aad7d1f0eea66bccca892f9d0cd47279db78af48eb6634d4fc5fbd06ec08921660a57dd5c2a2206817262b3eb867479ea72fdfa79e25048961d04890a9e645719505da19fb5ae045ceeea01391a7ea7e3e07b09e517e566089677b1a4d910bfd4e2bcdac24ede5d21c9f15602b9984867a1c56821feb2f29d56914e19a5bbaa82b327312b705a87647e6e324888f6b39a6d2e8872128d358550d56f32f322a2aae4dbd885053f6e135ece9b21fbf0a27d09c1518294b4981d92a472687a605085e9ba08bceda8c817511aa0f029dc3543d04cf5bee881bf2a4771d60e695f6e6fd35", 0xe2}, {&(0x7f0000007140)}], 0x5, &(0x7f0000007200)=[{0x28, 0xff, 0x400, "19964b073b50bc2a9df1c92a5797ff7a7f"}], 0x28}}, {{&(0x7f0000007240)=@hci={0x1f, 0x6093, 0x4}, 0x80, &(0x7f0000007600)=[{&(0x7f00000072c0)="c9424d56f8b4e2d2678ed993be9fdfcb34bedd87660b81205ec991b41bcc53d5b781023031c108da46f7634055707f7eecd9b111e1cffd0bb08cf360baf79421c22db3532fff45b1dd54531b6c3bce17065ab127ac1e0b30f485c19cfae2da456d9db06c6a70f24bb5b662647b", 0x6d}, {&(0x7f0000007340)="82a5950e5c230170f4a78a44deafc4ead1ae84424e945fe0647bb4ee6a7a272f02f3af7fa15e821704b72d0ecb51e1ecfc113297a1e3ded830383c8d30989b2e64b8161666a83d2477beee4b0ce4c4bcc3c54994b58a079f587be134ed5be31f3b0bf1e4093aa8c2b993697044d23b93e8b18ee34166caeac077e2a119813c0b86ded3f75b8224ff9802", 0x8a}, {&(0x7f0000007400)="66d266eeff4165ed845b354bbfd6472230a85ee1be8d52a62c93b6102c560f578be67be9c1ece9a9e3c373338a6a888a41c51a9e33404fb617bbdb87d58d4d23ff48516fda7f1ddeac592ca8bd6165d9956f436aae94e7282c5e02b8c95de631cce04cedc8fdd190c34436", 0x6b}, {&(0x7f0000007480)="093ba211b9ec0cc3b4f6cb403bdc5e9ca7d61074eea37e0076532a12a283854f75c31cb77489222cdaa2d7fcdbfbb20cbfecb8a5f4db27e09451bdfd97773051b295466e376f1cfc61c1774df3baca93f6365bca0e411bbdbf8cae8e2149ff4e5984b2b6ac43e5ed1cec0a975d9287ae0b5f9ba9a1a78c5fe7c53f279174d8537397146f51ac12fdd8651a901211471de8a9781cdd9754b95f78d093cf0e9a9f0c9aa86ba1c1dc875c5792fc78963154cc2e2066d618ebb7d958d51d85ae555a2c68e936a88c035838f1e433809ed17b34b3e1d9c5941e7e91e6b64314e9847f94c97b644a17531aa0aeeb66af", 0xed}, {&(0x7f0000007580)="9b1a2c033986b7058c9c0afec591925d1b851198150acb5064dc11e4a300ff6108d58e78c93aef3df576fea58732409ff218568f60c75590e2465036c22e77e5096c573e7aa23d765cd9e889da2f4ece79fabbd0ab4f8d4e8db35cedf21c39cd4c946f8bdbd51f8967d1b4c202aa1c2f0e", 0x71}], 0x5}}, {{&(0x7f0000007700)=@xdp={0x2c, 0x2, r7, 0xe}, 0x80, &(0x7f0000007b40)=[{&(0x7f0000007780)="e61ec579016c62dfaa9ebc43f3c14a4dd54e8045a78195ad6a2007b6f50b8efce6acf05e642f660b703de75f3154f377654128113fa2e20acfc0140098d61917c59fffa37d1f5a1be6999ebbcff3f7817295b5f0ed5fa36815da130bb5dc1732caeafb9be2524a59b908250921b16f810894cbc38ae4f8130aacb82fc10ef1e7a1b5a66b8d81d7f7b4f9479f85182d6b88ec499ba816fc7b3ef30c32da2c5dc08d", 0xa1}, {&(0x7f0000007840)="a7fe3b47726e8fa07dde8090ddbf9fdb9ba82836259e8838ea41a38d340046db07be744d5ede51f7935c9f0a4208eea62878e899d37f3212ef9f6047c4061fda388acbb44d7d44f430a30918480748c0bd26ab86a2ca13ad27e6aee50763d12b7b", 0x61}, {&(0x7f00000078c0)="eb5dbe42dfcd5c9a547c6533b070885f416c150937ad8bdd440baa4b54e89c526cf7ce96d73e0bdd566b5ea70ba81554275d477fbdc4dca283c4ddd2b2e62e41f195ff3b920cae6c8b5cb46ef42a3158f34bb42fcde03b15691c0dd2cd84b45cc78eaba7dbc477b73f6493673ca42fd1b5119a2182", 0x75}, {&(0x7f0000007940)="4e36b4319aa3cfafed6282d6b56f644c14099edc1419842f2fa5dd7b1f24e9a99f3bcd22603d347b0c25aa4f46c4b1dc55563d57acbf5255e7205af54f28a0f12bf8eca21421602dc3c1a986fe7cd301a8ba11def11289c5b23bf0359b945c01121897676f6268258e497ed89a22dfff39dd5cae3affdf5c9693cd7ab75f1aee21b45f863a5f6321e37bb39c8757357d5f021ea2d7ca3422029ebaac35fc0729e6e8ebf10f868f12c61321d80be2cabbecaa54909808bfc66c4f86ee19a0114f095fb4", 0xc3}, {&(0x7f0000007a40)="6f3c90d8a9327b960c52ba094ba87e473d3a4236dd5667dcae958b50d5b5da570adcf7af8fa8f0182d1063ea62b45362321f7cce45a0b269c15d6330c3f897a2afa00f9d70cc75762f48057748f3d37cad9f7002631aaccf8729ec13ad1cfc6e356bc9ce61", 0x65}, {&(0x7f0000007ac0)="a55c3e542cbb8203a64a551f305f2c5df77bc650f220aa", 0x17}, {&(0x7f0000007b00)="5e0d2a7ba6bfaaa986f6bb", 0xb}], 0x7, &(0x7f0000007bc0)=[{0x88, 0x101, 0x6, "b64f259f60c8093ebefada754dc9ffe4ed5cb33f7d6cdda6199a7c5905f7e26dc22c3f04ad754751cb25344a5937eff7aec090fa2f629688c06bb49dde2be46a7da5dd26614c18920053964d08d4064931d58e1369f8206392f92510786b298fc10b848d1a64bd0d43b144b79122b95a57521f72"}], 0x88}}], 0x8, 0x4004100) recvmsg$can_j1939(r5, &(0x7f0000009140)={&(0x7f0000007e80)=@hci, 0x80, &(0x7f0000008100)=[{&(0x7f0000007f00)=""/182, 0xb6}, {&(0x7f0000007fc0)=""/13, 0xd}, {&(0x7f0000008000)=""/85, 0x55}, {&(0x7f0000008080)=""/113, 0x71}], 0x4, &(0x7f0000008140)=""/4096, 0x1000}, 0x12000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000009180)={0x3, 0x4, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000009200), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000009300)={&(0x7f00000091c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000092c0)={&(0x7f0000009240)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x48}}, 0x20004885) (async) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000009340)=0x74) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000009380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000009700)={0x2c, &(0x7f0000009400)={0x40, 0x9, 0xf1, {0xf1, 0x22, "87afa78998c59da4d3bd588cc842173d01d511c6a5d2d4f1c7635a555cf9510abed84625ed47bbba90f9db017a5b7357dd3c1ea17975e4017866a45250d17379d76c8dc5a42363d28870282efcd2c7f52c253076fe766223288b2b7228a8ee50c2074549e4113e94b1f44c77021723fd3d09fc22162014329a88b6202ee1dc0b293c9ca1c2431da2b011ab11eab151fa6ad63bd487a27e26e4dc4a2ee3974228d0c5a866d7fbe24ac3751509ba6b54783749296ad6b715c62d8fab226634d34b8b79d55b863306a4c09a9fb108bc680dbd3a41581e3a0dba2580f2fa905aa91675125da0b683c0751f347a104b8b2d"}}, &(0x7f0000009500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000009540)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x5, [@generic={0xc6, 0x10, 0xb, "6af9d33355cba1774a65a296efdee32021f12b3678a3c341b05a60f31edb1aff40d5024fceea694ad703b8e7e07cc0af9d53cb900d7b6a3d2dd69d2e929e6a10136f28a13b8037bcfcca393e72f2fdc94a772e89bb56f53b17df6bb92408fe90662a9c62269c59b175a8c90dcdb9566f17073f0474d78f3e4d0efe1b46b73a7891d63fcf0846ba354b12f440e5e507aaab28226b49d54bc61683ea39012b416e74c8c628e2af81dff6a4390883e8c8907b0c6d3aa3000e6e816a7ff529866d523e44fa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "72d0679adfb504c2337b6c74e4669c90"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "871da9dbc8194745adb69b351c17a75e"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x398d, 0xff0f, 0x100, [0xc0c0, 0x0, 0xdf8f, 0x30]}]}}, &(0x7f0000009680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x2, 0x0, "203c923c", "f8714a79"}}, &(0x7f00000096c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x80, 0x5, 0x28, 0x1, 0x9}}}, &(0x7f0000009c40)={0x84, &(0x7f0000009740)={0x20, 0xd, 0x100, "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"}, &(0x7f0000009880)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000098c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000009900)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000009940)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000009980)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000099c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000009a00)={0x40, 0xb, 0x2, "6593"}, &(0x7f0000009a40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000009a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000009ac0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000009b00)={0x40, 0x19, 0x2, "f0b0"}, &(0x7f0000009b40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000009b80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000009bc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000009c00)={0x40, 0x21, 0x1, 0x3}}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000009d40), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000009e40)={&(0x7f0000009d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000009e00)={&(0x7f0000009d80)={0x60, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) 40.435016872s ago: executing program 0 (id=3042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c441, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}], 0x1, 0xfffffff8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="deaad7654c33389a00cf52e4afa0baf2aab93e96e65dbeec50d5d643c787e4a36a885d3b0b2ace120fadd0411faf563bbdd8adc2bbcebe417a15138ba764ac6eec5b8fe57398b065affaf5eb72ac"], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfd, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 12.600524381s ago: executing program 1 (id=3104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c441, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}], 0x1, 0xfffffff8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="deaad7654c33389a00cf52e4afa0baf2aab93e96e65dbeec50d5d643c787e4a36a885d3b0b2ace120fadd0411faf563bbdd8adc2bbcebe417a15138ba764ac6eec5b8fe57398b065affaf5eb72ac"], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfd, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 10.311288161s ago: executing program 1 (id=3108): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback={0x9d}, 0xa7a}, 0x1c) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/96, 0x60}, {0x0}], 0x2}, 0x8}], 0x2, 0x1832b, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x43b4, &(0x7f0000000440)={0x0, 0x607b, 0x8, 0x0, 0x27d}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r6, &(0x7f0000007900), 0x847, 0x10162, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendto$inet6(r7, &(0x7f0000001400)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e1", 0x61, 0x6d91fb6102dc910c, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 8.909686531s ago: executing program 2 (id=3112): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) unshare(0x22020600) open_by_handle_at(0xffffffffffffffff, 0x0, 0x143900) bind(0xffffffffffffffff, &(0x7f0000000240)=@phonet={0x23, 0x1, 0x1, 0x10}, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x41, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000200)={0x1f, 0x9b73, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) open(&(0x7f0000000340)='./cgroup.net/devices.allow\x00', 0x204000, 0x4a) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 8.851020009s ago: executing program 1 (id=3113): r0 = socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@echo=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000a0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300000000000014003500626f6e643000000000000000000000001c001280b430068a1e98e2cc000000000c00028005000d0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) 6.982849465s ago: executing program 1 (id=3116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c441, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}], 0x1, 0xfffffff8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 6.145713101s ago: executing program 5 (id=3117): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x83) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1000095}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) socket$inet6(0xa, 0x80002, 0x0) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2a, 0x0) 6.055779667s ago: executing program 2 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec970003b02b00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="27133aefc254a01358100b26e8868928f21ddb1eaa86c9bea34a273a229b844b20651b72e56ee074f17ec537aa711e"], 0xffe) 6.054295032s ago: executing program 1 (id=3119): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x3, 0xcaf, 0x384c4150, 0x0, 0x1, 0x5, 0x3, 0x2, 0x1, 0x2, 0x2, 0x5}}) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) write$bt_hci(r5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0xfffffd3b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x580, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x20007) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r9, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="29a82c1aae98", @ANYRES16=r8, @ANYBLOB="01000000000000000000080000000c0002800800038004000180180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) mount$fuseblk(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x2010002, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_dev$tty20(0xc, 0x4, 0x0) 5.314300988s ago: executing program 5 (id=3120): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(0x0, 0x2, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000440)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x1c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55}, 0x20) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) getpgid(0x0) 5.213391876s ago: executing program 5 (id=3122): mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r0 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x2ce0, 0xc, 0xfffffff7, 0xff, 0x6]}, 0x0) socket(0x1f, 0x800, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x400006, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x0, {0x4}}, 0x18) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) utimes(&(0x7f0000000200)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000640)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0) 5.132290643s ago: executing program 1 (id=3123): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.130608961s ago: executing program 2 (id=3124): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x762, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x2, 0x63, 0x4b, 0x20, 0x10c4, 0x8664, 0x964a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x750, 0x4, 0x2, 0x8, 0xf0, 0xd, [{{0x9, 0x4, 0xa8, 0x6, 0x7, 0x6c, 0x8c, 0xd7, 0x9, [], [{{0x9, 0x5, 0x4, 0x2, 0x40, 0x5, 0x6, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xa, 0x7f, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2, 0x30, 0x10, [@generic={0xb7, 0xa, "ba9aff4c4dbeaccdfe99685d87aeac413e2eda957f1570265acb3f2464e02e32593b50dddebf44d0ce44f869d2be661dcc782aaf893e76f818ee3ab65ce7f0fc5e2c194cd2a98f18d9fa266145ebd3671df64828f0fbd86fbd15da60a9f6a6bf9fa42cced60a15dd033627f4c4b3ddfc5df6113c10fc5c5555d2ba52df78d1de1adf0f5610b473289aa8bc99a5515783aee5d3b7e8568937b5778e6537d0083f801c6847a15509adde0d87bf64d6524dd82044dc29"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8ea4781626a94de6, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x1}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x0, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7d, 0x4}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8a38416de89566ea, 0x5, 0x80, 0x6}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x33, 0x1, 0x5}}]}}, {{0x9, 0x4, 0x86, 0x3, 0x4, 0x98, 0xeb, 0xaf, 0x7, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x3, 0x1, "1742d29897b94fac"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc6c, 0x7, 0x1, "57fa2a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfc, 0x4, 0x0, 0x5, "b27a3ec7d566"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x3d, 0x9, 0x3, "1e6f", "deb3"}]}], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x2, 0x7, 0x8, [@generic={0x1a, 0x3, "15558076dc13c05674edc6ebb18cd28771d03c17a336fbb9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0x7, 0x0, [@generic={0xb5, 0x23, "0120559e7e787c81b0ebc1e474bf8fababea37f4520d7724f0086fcecb9152318ea54126d128a7796c8af852d2de0a393be926bc918b73de33894ea0e96a8a85803565eae5b3952ff5acbd594b6a56fb07d1af3508d011812745b679424e5ca425a4a99b5f0fdeafae71b9903ebda15e4aeb618fde95cfa8d77def781cb86746fa751b9aa4c3bb6a4885914331731097f1631f36bcc531bc8ef4514b7b8e9344a477aedc0e01acea702bf453fece6e12f31984"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7b, 0x40}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x76, 0x2, 0x9, [@generic={0x98, 0x5, "7ccf89de3094ec6bee6d3cfcf4b8bf69174a95fa51e4ae5a1e39873d2faa339b5ae7e76b0f9e78ba1f0194b988c63b55b37492155b7ba7d727aa5b571ca5d79d65fb661375578d406eda14b1e88dcc1cdae30f216efaae337303af6fcc66b6f4852aa4bef20abd0a0514e99f59902f3cbc5df848b21a23bd2cdc7aa42ed09a892e0d2eeee168af00d1a7b95f756bc6a1cf7dcbf9acc4"}, @generic={0xf1, 0x22, "d24aca159a75849a97fa355885c8105d2739cdae231202167852a9e6030f8861711df9c064eabb5e312fd6059bbf17338915aabc64f0dfd0cf69102ea5cbfcec325454d82edd7e9234e5369fa00135b9f0e816e153b5b58926a1a8a7cc3fbce14e57a7d382e50cdd3c1642bdb6eb233dc116cc3c26fdcbf6809ef7c1f4adcc31cf639f12030a5d2447dc3d02b041e4c952962b54735dd7913729fa3fdb733f454771388411e29d4d2b30e38e0bfd8a400123170033013698470c82d75e33fe368eed727861889df0aa99f557776fff7811a02c797db13617fbc57ad3e07bf28a1ed47ee32f21ef2c87adb57eaf58ae"}]}}]}}, {{0x9, 0x4, 0x4b, 0x6, 0x3, 0xd5, 0x74, 0x73, 0x4f, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0x6, 0xa}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x2, 0xe2, 0x10}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x9, 0x2, 0x38}}]}}, {{0x9, 0x4, 0x31, 0x3, 0x5, 0xb5, 0x99, 0x10, 0x8, [@uac_as, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0xdd, 0x0, "86950f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x80, 0x8, "825a", "e1"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0xec, "a1df", "033679"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x8, 0x3, "7c95a7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x32, 0x3, 0x3, 0x5c, "b1", "df16"}]}], [{{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x2, 0xb, 0x5, [@generic={0x8f, 0x7, "86df53924b71da6aad78806169650756d8ad98bfedfffd7bfc3f0dec4ebdde2899f77b56aedda8ac0e00198ea5355681bc4a2b8cbbb32c16ba06f26bdaf2a3389a0b2dfd1febce27402630cd014c1a6a15760e692a880243fa00193d7be425f84e9e66b8d96967dbccccde896bfd5b16f9b37c88734288777196aa79b380800df0a4030128e08f8151acc8c3a9"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0xea, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3d, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x2, 0x4, [@generic={0x4a, 0x30, "5139434b4ff32870098a9bd115417f82286f2259fba1ecd4c2257076de8dbc9ecf21c60a67da40fda1b47ae7fb9793abe906b6de7acde9a59eeffc48a2f0939b52d7a7ca78871f50"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0xb, 0x8, [@generic={0x2c, 0xa, "8c6a9d6d9729b947a323ac6356d0e07958677af99770ddf371c0da19a99534dd312747f7e7dbd97b67c6"}, @generic={0xc9, 0x30, "52d2d68fbccaf6c07de6070ea69c5b2446f15d9170d5f3864b2570e06acd613b14b597bebf2e183148e7fd2b823a125140d4e102e720b5edfe9bf5edfb31a1c35b5595366fe0134060ac7b6effa1982b5824057c9cbf5117ae59b0907643b5c483e150e5db90b0f50cc40beba981197269c178ecd94c28d89fa2f98ad199283a5770605571811be49839f08219364642db13c2104e39c61e79cb4106b4179e60ac4eaa71c91d91aff30af8d2f2d08b3511a1a065207565dbedcb2f1873815510f3c2d04db27046"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0xfc, 0x1, 0x4, [@generic={0xf3, 0x24, "34f87a70d4bd29d73f1cebf38a4e804f0016f0275cb403aa13f193825931d23b173eb188e08871bda5b7fcf0278e7e332278bc136a8e717a5fd46bd50cc3c70a95d9b96cc8f4ed1eff9a8bfaf7bab4e459417bed8fdab416697958b75f67b21b76faebd5a4c5843625b8c08ddc0309d961d3ed46173163ffca36b55efc72c41bab87e5b056493e02909e16a281cdc1ed93b62d3f93e3d58bb7add6bde5f6267ac6e4731bf5e8df1079abcb75b1bc6001d7bf7c46a64ddabde0820252fccbd3c8c4e825afc111ecf234b00abd097116e1fc56bd20199a91f2daa86cc559035dd5b9b34497979075eb40700c6ce8d10fcf38"}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x200, 0xf, 0x1, 0x5, 0xff}, 0x90, &(0x7f00000007c0)={0x5, 0xf, 0x90, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0xa, 0x6}, @generic={0x81, 0x10, 0x1, "0f3120e7c18b5dfcf20b4bd4106449183773a33486c190efe5e11fafa9dbb831f3ac7728779b13f2efaf810ac20b1880fe2f128d088ef56fa0293baa22e2a58579e921c40be0fdc1beb747eb68caed70cdc97f8067c4d772d862c3bb80ec1375f78637764b7e167f5abf0cd55e38ce007958a89ecb525759a0d41901567b"}]}, 0xa, [{0x4c, &(0x7f0000000880)=@string={0x4c, 0x3, "a361d1cdc460ffcace7c028a7e702f8ada137ecc26d14564fbfde8a653dc7eee07f0ca5cc18cf10421c192e86fd8443f5f2f9c26e11110f876c79f9fc7244eecfd62473d91dd34245f92"}}, {0x96, &(0x7f0000001280)=@string={0x96, 0x3, "2d0209bd9c244bc35147d8b775b85b4373590d103eb0effabc88118322beb44bfb4c7cb6d63fcdc3d21ab89d34e2a22a503b45bb41ea2e299d7c914f90657f05dd1198ca7ae7e6969a55606560095fd0573730d48183683b5181e5f2f6e37b8c00993441cbefe0d70f89f52d903c1199a1ff83eecada7536ff712d787e3ee5b115b22ae0984db8ae02a04d242febba5859347e2e"}}, {0xd4, &(0x7f0000001340)=@string={0xd4, 0x3, "6d9c620e61cd2bfcfb81a3ce40e79c10df3799a2eec06fd902ca1d8d0fffd08cc57126eb24b8f33370a5f170e367e2cc8bbc10b9b7bd04125f65ca2ca2e3b73b8a76c3cd1a6ed267ce17697628363dad6422995265b57e92191c101f28340ddbcb3e8c87c576e660d8ef96f7474ee6a53b408fdd4900d611bff5e36609e9a4c6af1c926bba50f2d3e9444e814a1cd7cbcb5749152521ffb887232401c7be784a6a056823222151e225b0b906c51b83c45316a181d182e16e358c47b1624c613f3a57966b9289f50c1ac3707d9704e339b318"}}, {0xb7, &(0x7f0000001440)=@string={0xb7, 0x3, "8232885c3e4826b194a1b794b89662c271c79bb7954269f6a619081887b05ecd73a10f26d2a3998dbf67ea665ba28fefde1ac46d1432ea3e6b0525cd55bad8f5a2980f74937dc1f25f1bf7b897d1014d7868f73abdb74ba9f36f6bf6a0d4457cff136e67b0272b534b97792cde82363d6bd737d8a28f659f38279eecbb5351e51de5e497c336340c9be6332313aa0d544ae57176b1f3423564572e7d9325afa889c1aabc5b584718b5223ecb0d4d788bb0243ec109"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x804}}, {0x52, &(0x7f0000000a40)=@string={0x52, 0x3, "fac3b4a1100d3c21f98d5e40b9ed69605ee824490612d7b7ee1209a52f48710d4e456ded4ae3f940e356daa2813d49b0e477f3296cfc259da818f2cd4fc7d5fd4f192a01216c92c06b4a363bdd9dddeb"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xb6fa485e45c88e05}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x9ec6}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0xce, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x6, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x2, 0xa, 0x5, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x1, 0xf4, 0xffde, 0x5, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x5, 0x2, 0x8}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x366d82eead92507e, 0x4, "fdfd2c7b44"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x3, 0x9, "ff63"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1d, 0x9, "18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6c, 0x2, 0x1, {0x7, 0x25, 0x1, 0xc1, 0xe7, 0x4c3c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xc, 0x3}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xe, 0xd9, "d14355854b9f966d57"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x40, 0x1, {0x7, 0x25, 0x1, 0x1, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x3, 0x6, 0x2, 0x20, 0x2}, 0x34, &(0x7f00000001c0)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "11b94a5a9c56ee2fd6a5932039ed25be"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xd, 0xf, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x5, 0x7}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b8a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x10, "8d109cce38d2613839ee51693a75f3e3"}, 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x3f, 0x0}, 0x4000) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.942379997s ago: executing program 3 (id=3125): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x620041, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) mkdirat(0xffffffffffffffff, 0x0, 0xa1) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 4.208705468s ago: executing program 5 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\"', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 3.969601628s ago: executing program 5 (id=3127): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) unshare(0x22020600) open_by_handle_at(0xffffffffffffffff, 0x0, 0x143900) bind(0xffffffffffffffff, &(0x7f0000000240)=@phonet={0x23, 0x1, 0x1, 0x10}, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x41, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000200)={0x1f, 0x9b73, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) open(&(0x7f0000000340)='./cgroup.net/devices.allow\x00', 0x204000, 0x4a) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 3.946068512s ago: executing program 3 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x44}, 0x1, 0x9000000}, 0x0) 3.527160908s ago: executing program 3 (id=3129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1, 0xfffe}) 2.583058555s ago: executing program 5 (id=3130): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="e4", 0x1}, {&(0x7f0000000000)="68affbf98f6a57a5730dc18530ddf10cf7f12afa333a7a7bdcc5e7bd4e561b9eee883caf67dcc2e8044428ad05ade5e340225524050223a1cbdca118d729262a581fdb5b920d04121b57e68b41b0483ba1004b1d6b98879b8911a9ceaac428318a7eae6f9c590ad74b984d0ab4545efddbbb99b6d080f53ab6befb2319bfef6f900411850f2bf90ddfb41170c589b28fe4da2e8e30afa160bae17444b44b96c4d3e52d7670179a536a5ea126144dbd8d340e461d6732ae6702d0cee6e1f74827e52aff1ae6ddbacae332b953560ebb19ea9ef3f4044ed33bf246c406242b593c973054aa", 0xfffffc4f}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="1ef5ddb6cf5e4f84290eac35b9531726d22b549a83721755a180637b6f8d069c7b74cae86f61eeab1b0328a25bf4b3c500b5506666f4491b79d3855a259d8a01939242481f48de9aaf8ee0993cd6c8115ff36fc6b061556d19e375a286c361c2585e6c0da5b4b0435499f28940c41d9a6a1b8479e99234f038405334e7a99ffe0324f3e217115fb7891dd0b58bf63215917b7c17ced0d337c20fb06eadf3699298ce2375ac76d1eb54d2a465b9430dd7dbdb1747b16d6dcf3301a654f7ec785a19c87df9d4bd0ce4d21964a9185b19ae583a7c9d2ff3dfebe9dd851a880719ae006fc887ca3ac8", 0xe7}, {&(0x7f00000017c0)="d2cea23a7bc76f15f93c658365d00cfba8c873a343558d1caf6f746cbcbefecab7597bc116c896c055989744a204d0c0d3801be7ca873d6d7fbef825992ba25e0d9789b5aa6dce29dcccb93d47d0a2642b0dcd5b0f99a3bb7f34992048a02a35ec70f919918f4f66cd348ee34f03c608cb77c99180215659fd679de90ee054b7364d8c4ba971c2226a13a2a4bfc88929111fdef444c23087b729c542c27095a1f34a40e2f03dcb418239a3928bde307a40c79e432296466486b01f6fdc4180e200e60b967dd931b1cdf353a27c6a7c006f4654", 0xd3}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000440)="f88417eb0aff000000ae783750275564000144933f1b8b396b1b19c76a9cb9036b101738204bc2d75f04883cafa3ff67cc0f4224c9e1c6a8704a30483683263f64a0a5899c46cd3020390e57f35fc7f7a4b52a6cc1782f22446e6b2524df9c43f97d7c8c65b57d69e163de46cc460572a286de175597678e53ff0ef2cdfe216a3118", 0x82}, {&(0x7f0000000300)="0ca3e00772bcc56a5948091b31d5884a297b122ecc90a3f7f77869b7dae60571394c1f4430e6"}], 0x7}, 0x45b6703c254b99d8) ioctl$SIOCSIFHWADDR(r5, 0x541b, 0x0) write$binfmt_register(r4, &(0x7f0000002f80)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x10001, 0x3a, '/dev/kvm\x00', 0x3a, '/dev/vhost-vsock\x00', 0x3a, './file0'}, 0x41) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="31dbcab4dcd729d69ed62c84130a9326334352d2eb93f134e5128ca257ca26d5899c61ef5ac12b2f84fd29f53b11b5d4aaa7ac99ea8694c536071e107594fe06f073e61f317efeb5ba5d3515e30d20ea3ccbddd26c79661629f376c2574454eacdaae248a4"], 0x0) r7 = dup(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x1, 0x0, &(0x7f0000000080)="f8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.507458874s ago: executing program 3 (id=3131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv4_getaddr={0x74, 0x16, 0x20, 0x70bd2b, 0x25dfdbfc, {0x2, 0x10, 0x20, 0xfc, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x800, 0x51, 0x9a7}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0xf, 0xb9c, 0x182}}, @IFA_FLAGS={0x8, 0x8, 0x101}, @IFA_CACHEINFO={0x14, 0x6, {0xe9, 0x1, 0x2, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000009a00000018000d0100000008000600"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1}, 0x4, 0x2, 0x0, 0x0, "3141d7e12fc26845"}, 0x10}, 0x1, 0x0, 0x0, 0x860}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) ioctl$int_out(r7, 0x5462, &(0x7f0000000000)) r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRESOCT=r1, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) poll(&(0x7f0000000180)=[{r8, 0x2}], 0x1, 0x7f) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000340)) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4) 2.367315225s ago: executing program 0 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) fcntl$notify(r1, 0x402, 0x8000003d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0400"], 0x38}}, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fadvise64(0xffffffffffffffff, 0x9, 0x6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x201}, {&(0x7f0000000280)="05", 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r10, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x8000, 0x5}, &(0x7f0000000100)=0x90) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)={0x58, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffec}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x20000010) 2.263338561s ago: executing program 2 (id=3132): mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r0 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000280)='./file0\x00', 0x250000, 0x0) socket(0x1f, 0x800, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x400006, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x0, {0x4}}, 0x18) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) utimes(&(0x7f0000000200)='./bus\x00', 0x0) mknodat$loop(r1, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000640)='./file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) 2.131872775s ago: executing program 3 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec970003b02b00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="27133aefc254a01358100b26e8868928f21ddb1eaa86c9bea34a273a229b844b20651b72e56ee074f17ec537aa711e"], 0xffe) 1.410790993s ago: executing program 2 (id=3135): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0x5, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r10, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x18}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 766.096082ms ago: executing program 3 (id=3136): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x8000000}) write(r2, &(0x7f0000000000)="fc", 0x1) close(0xffffffffffffffff) splice(r1, 0x0, r1, 0x0, 0x1100000000f336, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000240)='.\x00', 0x40, 0xc4) mkdirat(r4, &(0x7f0000000180)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) 0s ago: executing program 2 (id=3137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r3 = socket(0xa, 0x3, 0xff) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000340)=0x10001, 0x4) unshare(0x2040400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r8, r7}, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000540)={@random="61fe71b72b5f", @multicast, @void, {@llc={0x4, {@llc={0x4, 0x0, "3f7f", "c2e8f0ce1813d1a65f5196b293753c607c306bdcb8a757ad2f6aa645149e0b0794974902679960bf867b335bd1f974ed7dffbc0bf16af1c6961b9dff4e6cf943a8e5916f6c3ef2ca02db346f32130b7f1ff75caa8c7e9291aaa4fc50407cdb68ec049af208983b5a7ad73cd2e8fabf75a629c77d9d800ff28116846b71f327bbca91ed320b5e6dd62226797d59ceaf5547bd9e6c00f05fae461e6588217ff899f99145609757ee5bdc3bdd7d911402cea0f8e975db5b5cb8e9b5925da28a"}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082c0120410000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f000000a680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010120, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x4000}) kernel console output (not intermixed with test programs): in process `syz.3.2444'. [ 1101.997535][ T5836] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1102.103082][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.137461][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.437098][ T976] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1102.534031][T15093] SET target dimension over the limit! [ 1102.665931][ T976] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1102.784332][ T976] usb 2-1: config 1 has no interface number 1 [ 1103.063487][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1103.083662][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.114674][ T976] usb 2-1: Product: syz [ 1103.141389][ T976] usb 2-1: Manufacturer: syz [ 1103.170197][ T976] usb 2-1: SerialNumber: syz [ 1103.378714][T15102] overlayfs: failed to resolve './file1': -2 [ 1104.293024][ T976] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1104.341169][ T976] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1104.411372][ T976] usb 2-1: USB disconnect, device number 87 [ 1105.663658][T15118] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2457'. [ 1105.896855][T15126] fuse: Bad value for 'fd' [ 1107.072175][T15139] overlayfs: failed to resolve './file1': -2 [ 1110.113885][T15172] pim6reg: entered allmulticast mode [ 1110.138340][T15172] pim6reg: left allmulticast mode [ 1110.446920][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1110.447168][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1110.947483][T15177] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2471'. [ 1112.030124][T15190] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1112.176423][T15196] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1112.558776][T15197] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1112.566240][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1112.576236][T15197] vhci_hcd vhci_hcd.0: Device attached [ 1113.514849][T15198] vhci_hcd: connection closed [ 1113.515764][ T9967] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1113.565127][ T9805] vhci_hcd: stop threads [ 1113.620230][ T9805] vhci_hcd: release socket [ 1113.649386][ T9805] vhci_hcd: disconnect device [ 1113.696474][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.739248][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.783427][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.826185][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.445475][T15215] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2483'. [ 1115.459095][T15215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.879491][T15225] fuse: Bad value for 'fd' [ 1118.255591][ T5836] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1118.272022][T15258] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1118.520726][T15262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2496'. [ 1118.986018][ T9967] vhci_hcd: vhci_device speed not set [ 1119.100998][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.111233][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.139264][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.157749][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.267219][ T5869] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1119.301561][T15269] fuse: Bad value for 'fd' [ 1119.427456][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1120.318935][ T5869] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1120.445152][T15280] overlayfs: failed to resolve './file1': -2 [ 1120.466984][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1120.577482][ T5869] usb usb2-port1: attempt power cycle [ 1120.692678][T15290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.696039][T15295] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2502'. [ 1120.713173][T15295] IPVS: set_ctl: invalid protocol: 41 172.20.20.37:20003 [ 1120.857115][ T9967] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1120.926952][ T5869] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1120.985605][ T5869] usb 2-1: device descriptor read/8, error -71 [ 1120.992053][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2508'. [ 1121.232637][ T9967] usb 6-1: Using ep0 maxpacket: 8 [ 1121.339242][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.424955][ T5869] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1121.435720][ T9967] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1121.453616][ T5869] usb 2-1: device descriptor read/8, error -71 [ 1121.455115][ T9967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.535755][ T9967] usb 6-1: Product: syz [ 1121.558628][ T9967] usb 6-1: Manufacturer: syz [ 1121.563365][ T9967] usb 6-1: SerialNumber: syz [ 1121.572098][ T9967] usb 6-1: config 0 descriptor?? [ 1121.702689][ T5869] usb usb2-port1: unable to enumerate USB device [ 1121.745028][ T9967] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1122.240588][T15289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.299449][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1122.310527][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 1122.332931][T13413] Bluetooth: hci4: hardware error 0x00 [ 1122.381802][T15306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.393929][T15306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.553176][ T9967] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1122.597884][ T9967] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1122.733505][ T9967] usb 6-1: USB disconnect, device number 52 [ 1124.847357][T13413] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1124.877722][T15317] fuse: Bad value for 'fd' [ 1125.417630][T15321] overlayfs: failed to resolve './file1': -2 [ 1125.647699][T15331] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2519'. [ 1125.667430][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2519'. [ 1125.677706][T15333] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1125.806944][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.814322][ C0] bridge0: topology change detected, propagating [ 1125.822616][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.830014][ C0] bridge0: topology change detected, propagating [ 1125.837290][ T9967] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1125.989224][ T9967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.174573][ T9967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1128.231068][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 1128.324376][ T9967] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1128.360118][ T9967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.609697][ T9967] usb 4-1: config 0 descriptor?? [ 1128.697274][ T9967] usb 4-1: can't set config #0, error -71 [ 1128.788925][ T9967] usb 4-1: USB disconnect, device number 96 [ 1130.274428][T15369] overlayfs: failed to resolve './file1': -2 [ 1130.421542][ T1215] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1131.119242][ T1215] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1131.136855][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.156076][ T1215] usb 6-1: Product: syz [ 1131.172478][ T1215] usb 6-1: Manufacturer: syz [ 1131.186912][ T1215] usb 6-1: SerialNumber: syz [ 1131.211737][ T1215] usb 6-1: config 0 descriptor?? [ 1131.601585][T15367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.657332][T15367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.924852][ T5869] usb 6-1: USB disconnect, device number 53 [ 1133.159807][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1134.199339][T15408] tipc: Started in network mode [ 1134.204667][T15408] tipc: Node identity 06107d75654, cluster identity 4711 [ 1134.215902][T15408] tipc: Enabled bearer , priority 0 [ 1134.228728][T15408] syzkaller0: entered promiscuous mode [ 1134.234710][T15408] syzkaller0: entered allmulticast mode [ 1134.637299][T15410] tipc: Resetting bearer [ 1134.797526][T15414] overlayfs: failed to resolve './file0': -2 [ 1134.804315][T15404] tipc: Resetting bearer [ 1134.864729][T15404] tipc: Disabling bearer [ 1136.098326][ T5869] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1136.458466][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 1136.489125][ T5869] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 1136.499027][ T5869] usb 6-1: config 0 has no interface number 0 [ 1137.053360][ T5869] usb 6-1: New USB device found, idVendor=0bfd, idProduct=001a, bcdDevice=ec.47 [ 1137.100019][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.169151][ T5869] usb 6-1: config 0 descriptor?? [ 1137.188017][ T5869] kvaser_usb 6-1:0.72: error -ENODEV: Cannot get usb endpoint(s) [ 1137.472358][T15440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 1137.780000][T15442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2550'. [ 1137.862678][T10934] usb 6-1: USB disconnect, device number 54 [ 1138.041741][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1139.629847][T15478] FAULT_INJECTION: forcing a failure. [ 1139.629847][T15478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.643701][T15478] CPU: 0 UID: 0 PID: 15478 Comm: syz.5.2560 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1139.643732][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1139.643748][T15478] Call Trace: [ 1139.643758][T15478] [ 1139.643769][T15478] dump_stack_lvl+0x189/0x250 [ 1139.643802][T15478] ? __pfx____ratelimit+0x10/0x10 [ 1139.643827][T15478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.643853][T15478] ? __pfx__printk+0x10/0x10 [ 1139.643883][T15478] ? __might_fault+0xb0/0x130 [ 1139.643918][T15478] should_fail_ex+0x414/0x560 [ 1139.643948][T15478] _copy_from_user+0x2d/0xb0 [ 1139.643981][T15478] ___sys_recvmsg+0x12e/0x510 [ 1139.644010][T15478] ? __pfx____sys_recvmsg+0x10/0x10 [ 1139.644070][T15478] ? __might_fault+0xb0/0x130 [ 1139.644097][T15478] do_recvmmsg+0x307/0x770 [ 1139.644129][T15478] ? __pfx_do_recvmmsg+0x10/0x10 [ 1139.644166][T15478] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1139.644193][T15478] ? __rcu_read_unlock+0x84/0xe0 [ 1139.644243][T15478] __x64_sys_recvmmsg+0x190/0x240 [ 1139.644269][T15478] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1139.644290][T15478] ? rcu_is_watching+0x15/0xb0 [ 1139.644320][T15478] ? do_syscall_64+0xbe/0x3b0 [ 1139.644350][T15478] do_syscall_64+0xfa/0x3b0 [ 1139.644377][T15478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.644400][T15478] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.644423][T15478] ? clear_bhb_loop+0x60/0xb0 [ 1139.644450][T15478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.644473][T15478] RIP: 0033:0x7f2353f8ebe9 [ 1139.644494][T15478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.644515][T15478] RSP: 002b:00007f2354e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1139.644540][T15478] RAX: ffffffffffffffda RBX: 00007f23541b6180 RCX: 00007f2353f8ebe9 [ 1139.644557][T15478] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 1139.644572][T15478] RBP: 00007f2354e63090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.644587][T15478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1139.644601][T15478] R13: 00007f23541b6218 R14: 00007f23541b6180 R15: 00007ffee2501f68 [ 1139.644637][T15478] [ 1140.062518][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2561'. [ 1140.897973][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.925194][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.044326][ T30] audit: type=1326 audit(1755307635.086:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.3.2567" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee7118ebe9 code=0x0 [ 1141.067057][ T5869] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1141.207117][T10934] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1141.220125][ T5869] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1141.229688][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.240156][ T5869] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1141.251164][ T5869] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1141.264625][ T5869] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.273877][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.282099][ T5869] usb 2-1: Product: syz [ 1141.286324][ T5869] usb 2-1: Manufacturer: syz [ 1141.291024][ T5869] usb 2-1: SerialNumber: syz [ 1141.389001][T10934] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.402200][T10934] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1141.413220][T10934] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1141.422809][T10934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.430936][T10934] usb 6-1: Product: syz [ 1141.435432][T10934] usb 6-1: Manufacturer: syz [ 1141.440366][T10934] usb 6-1: SerialNumber: syz [ 1141.505680][ T5869] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1141.514116][ T5869] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1141.522912][ T5869] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1141.531270][ T5869] usb 2-1: 2:1: All rates were zero [ 1141.562284][ T5869] usb 2-1: USB disconnect, device number 92 [ 1141.588764][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.597931][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.660118][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.669798][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.785157][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.026674][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.867742][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.907135][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.152106][T10934] usbhid 6-1:1.0: can't add hid device: -71 [ 1143.153036][T10934] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1143.194533][T10934] usb 6-1: USB disconnect, device number 55 [ 1143.857337][T15521] Cache volume key already in use (9p,(null),) [ 1144.559266][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2573'. [ 1145.141996][T13413] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1145.192085][ T30] audit: type=1326 audit(1755307639.236:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.192505][ T30] audit: type=1326 audit(1755307639.236:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.193030][ T30] audit: type=1326 audit(1755307639.236:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.193508][ T30] audit: type=1326 audit(1755307639.236:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.193686][ T30] audit: type=1326 audit(1755307639.236:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.194014][ T30] audit: type=1326 audit(1755307639.236:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.194143][ T30] audit: type=1326 audit(1755307639.236:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142818ebe9 code=0x7ffc0000 [ 1145.194483][ T30] audit: type=1326 audit(1755307639.236:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f142818d550 code=0x7ffc0000 [ 1145.195129][ T30] audit: type=1326 audit(1755307639.236:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15529 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f142818e7eb code=0x7ffc0000 [ 1145.196033][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.196384][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.207607][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.207836][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.209877][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.210112][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.405253][ T1215] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1145.629677][ T1215] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1145.629712][ T1215] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1145.713950][T15546] netlink: 'syz.1.2581': attribute type 3 has an invalid length. [ 1145.714038][T15546] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1145.714427][T15546] FAULT_INJECTION: forcing a failure. [ 1145.714427][T15546] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.714573][T15546] CPU: 1 UID: 0 PID: 15546 Comm: syz.1.2581 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1145.714601][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1145.714616][T15546] Call Trace: [ 1145.714625][T15546] [ 1145.714636][T15546] dump_stack_lvl+0x189/0x250 [ 1145.714667][T15546] ? __pfx____ratelimit+0x10/0x10 [ 1145.714692][T15546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.714719][T15546] ? __pfx__printk+0x10/0x10 [ 1145.714756][T15546] ? __pfx___might_resched+0x10/0x10 [ 1145.714781][T15546] ? fs_reclaim_acquire+0x7d/0x100 [ 1145.714815][T15546] should_fail_ex+0x414/0x560 [ 1145.714846][T15546] should_failslab+0xa8/0x100 [ 1145.714873][T15546] __kmalloc_cache_noprof+0x70/0x3d0 [ 1145.714896][T15546] ? nl802154_dump_wpan_phy+0xf4/0x960 [ 1145.714925][T15546] nl802154_dump_wpan_phy+0xf4/0x960 [ 1145.714962][T15546] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 1145.714984][T15546] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 1145.715021][T15546] genl_dumpit+0x108/0x1b0 [ 1145.715052][T15546] netlink_dump+0x6db/0xe60 [ 1145.715098][T15546] ? __pfx_netlink_dump+0x10/0x10 [ 1145.715146][T15546] ? genl_start+0x499/0x6c0 [ 1145.715189][T15546] __netlink_dump_start+0x5cb/0x7e0 [ 1145.715231][T15546] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1145.715261][T15546] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1145.715285][T15546] ? genl_get_cmd+0x67f/0x910 [ 1145.715312][T15546] ? __pfx___mutex_lock+0x10/0x10 [ 1145.715339][T15546] ? __pfx_genl_start+0x10/0x10 [ 1145.715360][T15546] ? __pfx_genl_dumpit+0x10/0x10 [ 1145.715382][T15546] ? __pfx_genl_done+0x10/0x10 [ 1145.715410][T15546] ? genl_rcv_msg+0x10d/0x790 [ 1145.715431][T15546] ? genl_rcv_msg+0xff/0x790 [ 1145.715464][T15546] genl_rcv_msg+0x5da/0x790 [ 1145.715497][T15546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.715520][T15546] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 1145.715542][T15546] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 1145.715585][T15546] netlink_rcv_skb+0x205/0x470 [ 1145.715618][T15546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.715644][T15546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.715698][T15546] ? down_read+0x1ad/0x2e0 [ 1145.715729][T15546] genl_rcv+0x28/0x40 [ 1145.715750][T15546] netlink_unicast+0x75c/0x8e0 [ 1145.715793][T15546] netlink_sendmsg+0x805/0xb30 [ 1145.715838][T15546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.715881][T15546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1145.715904][T15546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.715938][T15546] __sock_sendmsg+0x21c/0x270 [ 1145.715970][T15546] ____sys_sendmsg+0x505/0x830 [ 1145.716012][T15546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.716060][T15546] ? import_iovec+0x74/0xa0 [ 1145.716096][T15546] ___sys_sendmsg+0x21f/0x2a0 [ 1145.716134][T15546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.716177][T15546] ? do_raw_spin_lock+0x121/0x290 [ 1145.716254][T15546] ? __fget_files+0x2a/0x420 [ 1145.716279][T15546] ? __fget_files+0x3a0/0x420 [ 1145.716318][T15546] __x64_sys_sendmsg+0x19b/0x260 [ 1145.716358][T15546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1145.716391][T15546] ? irqentry_exit+0x74/0x90 [ 1145.716438][T15546] ? do_syscall_64+0xbe/0x3b0 [ 1145.716469][T15546] do_syscall_64+0xfa/0x3b0 [ 1145.716496][T15546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.716517][T15546] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1145.716539][T15546] ? clear_bhb_loop+0x60/0xb0 [ 1145.716568][T15546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.716590][T15546] RIP: 0033:0x7fc36f58ebe9 [ 1145.716611][T15546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.716631][T15546] RSP: 002b:00007fc37033c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.716654][T15546] RAX: ffffffffffffffda RBX: 00007fc36f7b6180 RCX: 00007fc36f58ebe9 [ 1145.716671][T15546] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1145.716687][T15546] RBP: 00007fc37033c090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.716701][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1145.716715][T15546] R13: 00007fc36f7b6218 R14: 00007fc36f7b6180 R15: 00007ffe4a027df8 [ 1145.716753][T15546] [ 1146.377141][ T1215] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1146.377176][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.377200][ T1215] usb 6-1: Product: syz [ 1146.377218][ T1215] usb 6-1: Manufacturer: syz [ 1146.377236][ T1215] usb 6-1: SerialNumber: syz [ 1146.380211][ T1215] usb 6-1: config 0 descriptor?? [ 1146.398923][ T1215] usb 6-1: selecting invalid altsetting 0 [ 1146.473338][T15548] kvm: kvm [15547]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000085) = 0xdd589 [ 1146.696427][ T1215] usb 6-1: USB disconnect, device number 56 [ 1146.878832][T15553] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1148.916876][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2588'. [ 1150.946895][ T1215] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1151.359383][ T1215] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1151.371564][ T1215] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1151.609659][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1151.620544][T15591] netlink: 'syz.2.2595': attribute type 7 has an invalid length. [ 1151.628715][T15591] netlink: 'syz.2.2595': attribute type 8 has an invalid length. [ 1151.634333][ T1215] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1151.636492][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1152.599015][T15591] fuse: Bad value for 'fd' [ 1152.613341][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.648127][ T1215] usb 4-1: Product: syz [ 1152.652378][ T1215] usb 4-1: Manufacturer: syz [ 1152.692916][ T1215] usb 4-1: SerialNumber: syz [ 1153.221084][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 1153.688344][ T1215] usb 4-1: config 0 descriptor?? [ 1153.696633][ T1215] usb 4-1: can't set config #0, error -71 [ 1153.708785][ T1215] usb 4-1: USB disconnect, device number 97 [ 1153.987903][T15612] nfs: Unknown parameter 'smackfst' [ 1155.260947][T15631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.597562][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2612'. [ 1156.742548][T15646] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1156.757384][T15646] batadv1: entered promiscuous mode [ 1156.763302][T15646] batadv1: entered allmulticast mode [ 1156.892836][T15652] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1157.458621][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'. [ 1158.197980][T15665] overlay: filesystem on ./bus not supported as upperdir [ 1158.383004][T15669] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1158.617474][ T1215] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1159.000148][ T1215] usb 6-1: device descriptor read/64, error -71 [ 1159.371907][ T1215] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1160.507029][ T1215] usb 6-1: device descriptor read/64, error -71 [ 1160.533904][T15684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1160.649722][ T1215] usb usb6-port1: attempt power cycle [ 1160.934036][T15697] proc: Unknown parameter 'ñÿÿÿ0x0000000000000000' [ 1161.097239][ T1215] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1161.132117][ T1215] usb 6-1: device descriptor read/8, error -71 [ 1162.648382][ T1215] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1162.784009][ T1215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.981460][ T1215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.032713][ T1215] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1163.066044][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.097579][ T1215] usb 6-1: config 0 descriptor?? [ 1163.611496][ T1215] usbhid 6-1:0.0: can't add hid device: -32 [ 1163.657967][ T1215] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1164.046308][ T1215] usb 6-1: USB disconnect, device number 60 [ 1164.667619][T15723] xt_TCPMSS: Only works on TCP SYN packets [ 1164.844667][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2639'. [ 1165.934692][T15741] syz.5.2638 (15741) used greatest stack depth: 16880 bytes left [ 1166.010137][T15750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1167.850542][T15769] fuse: Bad value for 'fd' [ 1168.189232][T15773] FAULT_INJECTION: forcing a failure. [ 1168.189232][T15773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.202876][T15773] CPU: 0 UID: 0 PID: 15773 Comm: syz.3.2648 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1168.202906][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.202920][T15773] Call Trace: [ 1168.202928][T15773] [ 1168.202939][T15773] dump_stack_lvl+0x189/0x250 [ 1168.202971][T15773] ? __pfx____ratelimit+0x10/0x10 [ 1168.202996][T15773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.203021][T15773] ? __pfx__printk+0x10/0x10 [ 1168.203051][T15773] ? __might_fault+0xb0/0x130 [ 1168.203085][T15773] should_fail_ex+0x414/0x560 [ 1168.203115][T15773] _copy_from_iter+0x1db/0x16f0 [ 1168.203148][T15773] ? rcu_is_watching+0x15/0xb0 [ 1168.203174][T15773] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1168.203199][T15773] ? __pfx__copy_from_iter+0x10/0x10 [ 1168.203229][T15773] ? __build_skb_around+0x257/0x3e0 [ 1168.203266][T15773] ? netlink_sendmsg+0x642/0xb30 [ 1168.203296][T15773] ? skb_put+0x11b/0x210 [ 1168.203332][T15773] netlink_sendmsg+0x6b2/0xb30 [ 1168.203374][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.203415][T15773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.203438][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.203471][T15773] __sock_sendmsg+0x21c/0x270 [ 1168.203502][T15773] ____sys_sendmsg+0x505/0x830 [ 1168.203558][T15773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.203604][T15773] ? import_iovec+0x74/0xa0 [ 1168.203639][T15773] ___sys_sendmsg+0x21f/0x2a0 [ 1168.203677][T15773] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.203787][T15773] ? __fget_files+0x2a/0x420 [ 1168.203812][T15773] ? __fget_files+0x3a0/0x420 [ 1168.203849][T15773] __x64_sys_sendmsg+0x19b/0x260 [ 1168.203888][T15773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.203934][T15773] ? __pfx_ksys_write+0x10/0x10 [ 1168.203953][T15773] ? rcu_is_watching+0x15/0xb0 [ 1168.203983][T15773] ? do_syscall_64+0xbe/0x3b0 [ 1168.204013][T15773] do_syscall_64+0xfa/0x3b0 [ 1168.204037][T15773] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.204060][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.204082][T15773] ? clear_bhb_loop+0x60/0xb0 [ 1168.204110][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.204133][T15773] RIP: 0033:0x7fee7118ebe9 [ 1168.204153][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.204173][T15773] RSP: 002b:00007fee72092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.204197][T15773] RAX: ffffffffffffffda RBX: 00007fee713b5fa0 RCX: 00007fee7118ebe9 [ 1168.204214][T15773] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1168.204229][T15773] RBP: 00007fee72092090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.204243][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.204257][T15773] R13: 00007fee713b6038 R14: 00007fee713b5fa0 R15: 00007ffdec20a568 [ 1168.204293][T15773] [ 1169.657597][ T9967] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1170.622204][ T9967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1170.631474][ T9967] usb 2-1: can't read configurations, error -61 [ 1170.777425][ T9967] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1170.878524][T15811] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1170.968304][T15813] NILFS (nullb0): couldn't find nilfs on the device [ 1172.708924][ T9967] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1172.717765][ T9967] usb 2-1: can't read configurations, error -71 [ 1172.725071][ T9967] usb usb2-port1: attempt power cycle [ 1172.830532][T15820] fuse: Bad value for 'fd' [ 1172.976916][T12950] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1173.771328][T12950] usb 4-1: Using ep0 maxpacket: 8 [ 1173.925128][T12950] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1173.927577][T15823] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1173.933923][T12950] usb 4-1: config 179 has no interface number 0 [ 1173.934550][T12950] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1174.275764][T12950] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1174.308494][T12950] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1174.324493][T12950] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1174.336538][T12950] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1174.419802][T12950] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1174.429354][T12950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.568725][T15815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1175.358743][ T5869] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input29 [ 1175.421499][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1175.421537][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1175.421811][T10934] usb 4-1: USB disconnect, device number 98 [ 1175.683172][T12950] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1175.874368][T12950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.893096][T12950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1176.044876][T12950] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1176.207233][ T9967] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1176.317106][T12950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.336595][T12950] usb 2-1: config 0 descriptor?? [ 1176.490186][ T9967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.620569][ T9967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1176.673444][ T9967] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1176.704500][ T9967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.732802][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1176.788890][ T9967] usb 6-1: config 0 descriptor?? [ 1176.953351][T12950] kovaplus 0003:1E7D:2D50.003B: item fetching failed at offset 3/5 [ 1177.053537][T12950] kovaplus 0003:1E7D:2D50.003B: parse failed [ 1177.085862][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.106989][T12950] kovaplus 0003:1E7D:2D50.003B: probe with driver kovaplus failed with error -22 [ 1177.107517][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.715102][ T9967] kovaplus 0003:1E7D:2D50.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1177.762427][T15855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1178.027222][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1178.212023][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1178.534009][T15880] fuse: Bad value for 'fd' [ 1178.714442][ T9967] kovaplus 0003:1E7D:2D50.003C: couldn't init struct kovaplus_device [ 1178.743700][ T9967] kovaplus 0003:1E7D:2D50.003C: couldn't install mouse [ 1178.788620][ T9967] kovaplus 0003:1E7D:2D50.003C: probe with driver kovaplus failed with error -71 [ 1179.027343][ T9967] usb 6-1: USB disconnect, device number 61 [ 1179.182184][T12950] usb 2-1: USB disconnect, device number 96 [ 1180.609094][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1180.692793][T15900] fuse: Bad value for 'fd' [ 1181.553338][T15918] bridge0: port 5(gretap0) entered blocking state [ 1181.610758][T15918] bridge0: port 5(gretap0) entered disabled state [ 1181.668876][T15918] gretap0: entered allmulticast mode [ 1181.709093][T15918] gretap0: entered promiscuous mode [ 1181.717184][ T5869] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1181.906200][T15918] bridge0: port 5(gretap0) entered blocking state [ 1181.912809][T15918] bridge0: port 5(gretap0) entered listening state [ 1182.664439][T15922] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1182.777524][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.822950][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.834541][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.845102][ T5869] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1182.854262][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.870192][ T5869] usb 4-1: config 0 descriptor?? [ 1183.149174][T15934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.160802][T15934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.176904][T15934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.187656][T15934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.156350][ T5869] ath6kl: Failed to submit usb control message: -110 [ 1184.202596][ T5869] ath6kl: unable to send the bmi data to the device: -110 [ 1184.237653][ T5869] ath6kl: Unable to send get target info: -110 [ 1184.395602][ T5869] ath6kl: Failed to init ath6kl core: -110 [ 1184.430681][ T5869] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1184.451343][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1184.462185][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1184.470926][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1184.508347][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1184.516275][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1185.052781][ T976] usb 3-1: USB disconnect, device number 50 [ 1185.067671][ T976] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1185.168085][ T976] keyspan 3-1:0.133: device disconnected [ 1187.208371][ T5836] Bluetooth: hci5: command tx timeout [ 1187.518065][ T9808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.627279][ T9808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46081 - 0 [ 1187.666964][ T9808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 60965 - 0 [ 1188.244337][ T9808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.255318][ T9808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46081 - 0 [ 1188.266308][ T9808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 60965 - 0 [ 1188.527487][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1189.037292][T15942] chnl_net:caif_netlink_parms(): no params data found [ 1189.247747][ T5836] Bluetooth: hci5: command tx timeout [ 1189.389098][ T9808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.411999][ T9808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46081 - 0 [ 1189.470587][ T9808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 60965 - 0 [ 1191.327124][ T5836] Bluetooth: hci5: command tx timeout [ 1191.470103][ T9808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.487034][ T9808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46081 - 0 [ 1191.500100][ T9808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 60965 - 0 [ 1192.426122][T15942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.436247][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.443920][T15942] bridge_slave_0: entered allmulticast mode [ 1192.455610][T15942] bridge_slave_0: entered promiscuous mode [ 1192.536082][T15942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.545622][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.553671][T15942] bridge_slave_1: entered allmulticast mode [ 1192.586082][T15942] bridge_slave_1: entered promiscuous mode [ 1192.738540][ T9967] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1192.780891][T16007] virtio-fs: tag not found [ 1192.827771][ T1189] blk_print_req_error: 21 callbacks suppressed [ 1192.827789][ T1189] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1192.914004][T15942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.945477][ T9967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1192.996581][ T9967] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1193.024340][ T9967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1193.039967][ T9967] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1193.052627][ T9967] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1193.065818][ T9967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.011218][ T9967] usb 2-1: config 0 descriptor?? [ 1194.031152][ T5836] Bluetooth: hci5: command tx timeout [ 1194.221072][T16005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.322147][T16005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.339066][ T9967] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 1194.366510][ T9967] hdpvr 2-1:0.0: device init failed [ 1194.473399][ T9967] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1195.005727][ T9967] usb 2-1: USB disconnect, device number 97 [ 1196.005419][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2718'. [ 1196.885027][ T9] usb 4-1: USB disconnect, device number 99 [ 1197.386441][ T9808] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1197.442429][ T9808] bridge_slave_1: left promiscuous mode [ 1197.467280][ T9808] bridge_slave_1: left allmulticast mode [ 1197.474539][ T9808] bond0 (unregistering): Released all slaves [ 1197.487120][ C0] bridge0: port 5(gretap0) entered learning state [ 1197.560849][ T9808] bond1 (unregistering): Released all slaves [ 1198.112178][ T9808] bond2 (unregistering): Released all slaves [ 1198.134954][T15942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.152437][T16036] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1198.336891][ T9] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1198.381805][ T9808] : left promiscuous mode [ 1198.414049][T15942] team0: Port device team_slave_0 added [ 1199.160936][T15942] team0: Port device team_slave_1 added [ 1199.207347][ T9] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 1199.225909][ T9] usb 6-1: config 0 has no interface number 0 [ 1199.234662][ T9] usb 6-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=63.f3 [ 1199.278386][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.306424][ T9] usb 6-1: config 0 descriptor?? [ 1199.350071][ T9808] tipc: Left network mode [ 1199.366104][T15942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.410480][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.490652][T15942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.541865][ T9] snd-usb-caiaq 6-1:0.223: can't set alt interface. [ 1199.548696][ T9] usb 6-1: unable to init card! (ret=-5) [ 1199.554954][ T9] snd-usb-caiaq 6-1:0.223: probe with driver snd-usb-caiaq failed with error -5 [ 1199.705111][T16057] netlink: 'syz.0.2723': attribute type 15 has an invalid length. [ 1199.732673][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2723'. [ 1199.733276][T15942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.771773][T12950] usb 6-1: USB disconnect, device number 62 [ 1199.790374][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.875038][T15942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.088196][T16062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1200.097947][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1200.477509][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1200.939301][T15942] hsr_slave_0: entered promiscuous mode [ 1200.951295][T15942] hsr_slave_1: entered promiscuous mode [ 1200.961694][T15942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1200.977353][T15942] Cannot create hsr debugfs directory [ 1201.166374][ T9808] hsr_slave_0: left promiscuous mode [ 1201.720207][ T9808] hsr_slave_1: left promiscuous mode [ 1202.589163][T16079] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1202.620760][ T9808] veth1_macvtap: left promiscuous mode [ 1202.762468][ T9808] veth0_macvtap: left promiscuous mode [ 1202.774884][ T9808] veth1_vlan: left promiscuous mode [ 1202.797445][ T9808] veth0_vlan: left promiscuous mode [ 1202.877364][T16089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2729'. [ 1202.945073][T16089] random: crng reseeded on system resumption [ 1205.613987][T16108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1205.623246][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1205.676621][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1205.852400][T16113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.860860][T16113] FAULT_INJECTION: forcing a failure. [ 1205.860860][T16113] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 1205.874304][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.3.2731 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1205.874335][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1205.874350][T16113] Call Trace: [ 1205.874359][T16113] [ 1205.874369][T16113] dump_stack_lvl+0x189/0x250 [ 1205.874400][T16113] ? __pfx____ratelimit+0x10/0x10 [ 1205.874425][T16113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.874451][T16113] ? __pfx__printk+0x10/0x10 [ 1205.874477][T16113] ? do_vfs_ioctl+0xf37/0x1990 [ 1205.874513][T16113] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1205.874557][T16113] should_fail_ex+0x414/0x560 [ 1205.874587][T16113] iommufd_get_object+0x78/0x4b0 [ 1205.874620][T16113] ? __pfx_iommufd_get_object+0x10/0x10 [ 1205.874660][T16113] iommufd_hwpt_invalidate+0x3b1/0x820 [ 1205.874691][T16113] ? __pfx_iommufd_hwpt_invalidate+0x10/0x10 [ 1205.874731][T16113] iommufd_fops_ioctl+0x446/0x520 [ 1205.874764][T16113] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1205.874807][T16113] ? __fget_files+0x3a0/0x420 [ 1205.874831][T16113] ? __fget_files+0x2a/0x420 [ 1205.874861][T16113] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1205.874887][T16113] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1205.874917][T16113] __se_sys_ioctl+0xfc/0x170 [ 1205.874952][T16113] do_syscall_64+0xfa/0x3b0 [ 1205.874977][T16113] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.875000][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.875023][T16113] ? clear_bhb_loop+0x60/0xb0 [ 1205.875051][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.875073][T16113] RIP: 0033:0x7fee7118ebe9 [ 1205.875095][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.875114][T16113] RSP: 002b:00007fee72050038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.875146][T16113] RAX: ffffffffffffffda RBX: 00007fee713b6180 RCX: 00007fee7118ebe9 [ 1205.875164][T16113] RDX: 0000200000000000 RSI: 0000000000003b8d RDI: 0000000000000007 [ 1205.875178][T16113] RBP: 00007fee72050090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.875192][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.875205][T16113] R13: 00007fee713b6218 R14: 00007fee713b6180 R15: 00007ffdec20a568 [ 1205.875240][T16113] [ 1206.767096][T16119] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1207.118082][T16127] syz.1.2738 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1208.791072][T16136] overlayfs: missing 'lowerdir' [ 1209.081486][ T976] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1209.942363][ T976] usb 2-1: device descriptor read/64, error -71 [ 1210.410420][ T976] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1210.848560][ T976] usb 2-1: device descriptor read/64, error -71 [ 1210.934174][T16085] batadv1: entered promiscuous mode [ 1211.276887][ T976] usb usb2-port1: attempt power cycle [ 1212.846874][ C0] bridge0: port 5(gretap0) entered forwarding state [ 1212.853656][ C0] bridge0: topology change detected, propagating [ 1212.884119][T16161] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1213.264700][T16165] 9pnet_fd: Insufficient options for proto=fd [ 1213.292369][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1213.292389][ T30] audit: type=1326 audit(1755307707.336:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16162 comm="syz.0.2747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77858ebe9 code=0x0 [ 1213.351009][ T9808] IPVS: stop unused estimator thread 0... [ 1214.743767][T16169] overlayfs: missing 'lowerdir' [ 1216.326293][T16189] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2754'. [ 1216.414169][T16189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.620982][T16197] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1218.151128][T15942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1218.184705][T15942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1218.198619][T15942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1218.325416][T15942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1218.366444][T16218] overlayfs: missing 'lowerdir' [ 1219.991910][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.100629][T15942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.173511][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.180828][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.222315][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.229620][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.418604][ T9967] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1221.270011][ T9967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.319601][ T9967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1221.377182][ T9967] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1221.412988][ T9967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.451296][ T9967] usb 2-1: config 0 descriptor?? [ 1221.721947][T15942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.824255][T15942] veth0_vlan: entered promiscuous mode [ 1221.844641][T15942] veth1_vlan: entered promiscuous mode [ 1221.885471][T16260] overlayfs: missing 'workdir' [ 1221.905147][T15942] veth0_macvtap: entered promiscuous mode [ 1221.918065][ T9967] kovaplus 0003:1E7D:2D50.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1221.936016][T15942] veth1_macvtap: entered promiscuous mode [ 1221.959842][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.975231][T15942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.987949][T15942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.001874][T15942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.011970][T15942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.012912][ T30] audit: type=1326 audit(1755307716.056:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.5.2774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2353f8ebe9 code=0x0 [ 1222.020843][T15942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.375206][ T9967] kovaplus 0003:1E7D:2D50.003D: couldn't init struct kovaplus_device [ 1222.456099][ T9967] kovaplus 0003:1E7D:2D50.003D: couldn't install mouse [ 1222.602658][ T9967] kovaplus 0003:1E7D:2D50.003D: probe with driver kovaplus failed with error -32 [ 1222.727904][ T9967] usb 2-1: USB disconnect, device number 101 [ 1222.746408][ T9822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.776700][ T9822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.824232][ T9807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.849759][ T9807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.087729][T16269] ubi: mtd0 is already attached to ubi31 [ 1227.243999][T16294] FAULT_INJECTION: forcing a failure. [ 1227.243999][T16294] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.349490][T12950] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1227.496231][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.1.2782 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1227.496263][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1227.496278][T16294] Call Trace: [ 1227.496287][T16294] [ 1227.496298][T16294] dump_stack_lvl+0x189/0x250 [ 1227.496331][T16294] ? __pfx____ratelimit+0x10/0x10 [ 1227.496355][T16294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1227.496385][T16294] ? __pfx__printk+0x10/0x10 [ 1227.496419][T16294] ? __pfx___might_resched+0x10/0x10 [ 1227.496443][T16294] ? fs_reclaim_acquire+0x7d/0x100 [ 1227.496473][T16294] should_fail_ex+0x414/0x560 [ 1227.496501][T16294] should_failslab+0xa8/0x100 [ 1227.496528][T16294] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1227.496548][T16294] ? getname_flags+0xb8/0x540 [ 1227.496578][T16294] getname_flags+0xb8/0x540 [ 1227.496609][T16294] __se_sys_acct+0x3d/0x800 [ 1227.496638][T16294] ? do_syscall_64+0xbe/0x3b0 [ 1227.496665][T16294] do_syscall_64+0xfa/0x3b0 [ 1227.496688][T16294] ? lockdep_hardirqs_on+0x9c/0x150 [ 1227.496711][T16294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.496737][T16294] ? clear_bhb_loop+0x60/0xb0 [ 1227.496763][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.496783][T16294] RIP: 0033:0x7fc36f58ebe9 [ 1227.496804][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.496823][T16294] RSP: 002b:00007fc37037e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1227.496846][T16294] RAX: ffffffffffffffda RBX: 00007fc36f7b5fa0 RCX: 00007fc36f58ebe9 [ 1227.496864][T16294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1227.496877][T16294] RBP: 00007fc37037e090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.496891][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.496905][T16294] R13: 00007fc36f7b6038 R14: 00007fc36f7b5fa0 R15: 00007ffe4a027df8 [ 1227.496939][T16294] [ 1227.738583][T16298] overlayfs: missing 'workdir' [ 1227.836998][T12950] usb 3-1: Using ep0 maxpacket: 16 [ 1227.992415][T12950] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1228.010952][T12950] usb 3-1: config 1 has no interface number 0 [ 1228.019915][T12950] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1228.051156][T12950] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1228.064669][T12950] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1228.111484][T12950] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1228.123328][T12950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.159888][T12950] usb 3-1: Product: syz [ 1228.166667][T12950] usb 3-1: Manufacturer: syz [ 1228.184074][T12950] usb 3-1: SerialNumber: syz [ 1228.469044][T16284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1228.476473][T16284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1228.637286][T16279] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1228.982719][T16284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1228.990173][T16284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1229.104540][T16279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.130937][T16279] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1229.183892][T16279] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1229.206872][T16279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.258055][T16279] usb 6-1: config 0 descriptor?? [ 1229.401662][T12950] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1229.441466][T12950] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1229.513146][T12950] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:86:ee:b1:11:f4 [ 1229.876616][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.897935][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.909514][T16279] kovaplus 0003:1E7D:2D50.003E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1230.140199][ T9808] Bluetooth: (null): Too short H5 packet [ 1230.197302][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.205314][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.264918][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.326204][T16279] kovaplus 0003:1E7D:2D50.003E: couldn't init struct kovaplus_device [ 1230.334901][T16279] kovaplus 0003:1E7D:2D50.003E: couldn't install mouse [ 1230.348380][T16279] kovaplus 0003:1E7D:2D50.003E: probe with driver kovaplus failed with error -32 [ 1230.858007][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.864273][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.871631][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.878055][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.885352][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.885770][T16279] usb 6-1: USB disconnect, device number 63 [ 1230.891690][ T9808] Bluetooth: (null): Invalid header checksum [ 1230.904191][ T9808] Bluetooth: (null): Invalid header checksum [ 1231.017328][ T9808] Bluetooth: (null): Invalid header checksum [ 1231.170227][ T9822] Bluetooth: (null): Invalid header checksum [ 1231.422080][ T9822] Bluetooth: (null): Invalid header checksum [ 1231.455842][ T9822] Bluetooth: (null): Invalid header checksum [ 1231.485650][ T9822] Bluetooth: (null): Invalid header checksum [ 1231.574200][ T9822] Bluetooth: (null): Invalid header checksum [ 1231.678351][ T59] Bluetooth: (null): Invalid header checksum [ 1232.280495][T16279] usb 3-1: USB disconnect, device number 51 [ 1232.292775][T16279] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1232.365099][ T30] audit: type=1326 audit(1755307726.396:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16324 comm="syz.5.2792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2353f8ebe9 code=0x0 [ 1232.947240][ T5914] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1233.205102][T16279] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1233.236300][T16279] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1233.275858][T16340] overlayfs: missing 'workdir' [ 1233.277045][T16279] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1233.434418][T16343] all: renamed from bridge_slave_0 (while UP) [ 1233.459626][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.486852][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.506856][ T5914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1233.516412][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.534793][ T5914] usb 2-1: config 0 descriptor?? [ 1233.707234][T16279] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1233.716867][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1233.787001][T16265] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1233.859758][T16279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.871271][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1233.876642][T16279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.887249][T16279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.901489][T16279] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.911061][T16279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.922452][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1233.933288][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.942308][T16279] usb 3-1: config 0 descriptor?? [ 1233.950313][T16265] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1233.962473][ T10] usb 4-1: Product: syz [ 1233.972480][ T5914] isku 0003:1E7D:319C.003F: unknown main item tag 0x0 [ 1233.979477][ T10] usb 4-1: Manufacturer: syz [ 1233.984150][T16265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.993192][ T10] usb 4-1: SerialNumber: syz [ 1233.998307][ T5914] isku 0003:1E7D:319C.003F: unknown main item tag 0x0 [ 1234.012176][ T10] usb 4-1: config 0 descriptor?? [ 1234.018161][T16265] usb 6-1: config 0 descriptor?? [ 1234.032050][ T5914] isku 0003:1E7D:319C.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1234.045383][ T10] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1234.235862][T16345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.251686][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.261852][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.352304][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.366820][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.407412][T16279] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1234.447329][T10934] usb 2-1: USB disconnect, device number 102 [ 1234.454162][T16279] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1234.472432][T16279] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1234.530319][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.549176][T16279] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1234.562170][T16279] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1234.605863][ T10] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1234.624931][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.638397][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1234.648408][ T10] usb 4-1: USB disconnect, device number 100 [ 1234.658129][T16279] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1235.002019][T10934] usb 3-1: USB disconnect, device number 52 [ 1235.159353][T16265] ath6kl: Failed to submit usb control message: -110 [ 1235.167167][T16265] ath6kl: unable to send the bmi data to the device: -110 [ 1235.177285][T16265] ath6kl: Unable to send get target info: -110 [ 1235.227368][T16265] ath6kl: Failed to init ath6kl core: -110 [ 1235.234926][T16265] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1235.738524][T16366] overlayfs: missing 'lowerdir' [ 1236.800523][T12950] usb 6-1: USB disconnect, device number 64 [ 1236.992138][T16374] 9pnet_fd: Insufficient options for proto=fd [ 1237.217262][T16279] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1237.331763][ T30] audit: type=1326 audit(1755307731.376:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16375 comm="syz.2.2807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb398ebe9 code=0x0 [ 1237.549318][T16279] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1237.559541][T16279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.933518][T16279] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1237.946515][T16279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.954839][T16279] usb 4-1: Product: syz [ 1237.961532][T16279] usb 4-1: Manufacturer: syz [ 1237.966270][T16279] usb 4-1: SerialNumber: syz [ 1237.980050][T16279] usb 4-1: config 0 descriptor?? [ 1237.994645][T16279] usb 4-1: selecting invalid altsetting 0 [ 1238.230584][ T10] usb 4-1: USB disconnect, device number 101 [ 1238.347262][T16279] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1239.289408][T16279] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1239.393546][T16279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.552023][T16279] usb 6-1: Product: syz [ 1239.685652][T16279] usb 6-1: Manufacturer: syz [ 1239.836856][T16279] usb 6-1: SerialNumber: syz [ 1239.887621][T16279] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1239.916808][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1241.098383][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1241.105424][ T10] ath9k_htc: Failed to initialize the device [ 1241.138340][T16279] usb 6-1: USB disconnect, device number 65 [ 1241.158328][T16279] usb 6-1: ath9k_htc: USB layer deinitialized [ 1241.555311][T16413] overlayfs: missing 'lowerdir' [ 1242.348908][T16279] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1242.506936][T16279] usb 2-1: Using ep0 maxpacket: 8 [ 1242.521712][T16279] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1242.569083][T16279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.819564][T16279] usb 2-1: Product: syz [ 1242.824472][T16279] usb 2-1: Manufacturer: syz [ 1242.868263][T16279] usb 2-1: SerialNumber: syz [ 1243.012407][T16279] usb 2-1: config 0 descriptor?? [ 1243.092166][T16279] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1243.109228][T16420] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 1243.244752][T16411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.297885][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.394447][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.723290][ T30] audit: type=1326 audit(1755307737.766:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16432 comm="syz.5.2821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2353f8ebe9 code=0x0 [ 1243.809417][T16279] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1244.300453][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.320466][T16279] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1244.362353][T16279] usb 2-1: USB disconnect, device number 103 [ 1244.642549][T16441] --map-set only usable from mangle table [ 1244.724783][T16443] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1244.951048][T16446] overlayfs: missing 'lowerdir' [ 1246.427707][ T1215] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1246.981700][ T1215] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1246.991054][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.000833][ T1215] usb 6-1: Product: syz [ 1247.007131][ T1215] usb 6-1: Manufacturer: syz [ 1247.013644][ T1215] usb 6-1: SerialNumber: syz [ 1247.035167][ T1215] usb 6-1: config 0 descriptor?? [ 1247.228497][T10934] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1247.417323][T16454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.438853][T10934] usb 4-1: device descriptor read/64, error -71 [ 1247.439347][T16454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.707372][T10934] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1247.847059][T10934] usb 4-1: device descriptor read/64, error -71 [ 1247.861745][T12950] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1247.991328][T10934] usb usb4-port1: attempt power cycle [ 1248.111534][T12950] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1248.122744][T12950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.207658][ T1215] usb 6-1: USB disconnect, device number 66 [ 1248.209757][T12950] usb 2-1: config 0 descriptor?? [ 1248.377497][T10934] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1248.407922][T10934] usb 4-1: device descriptor read/8, error -71 [ 1248.615264][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.625195][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.645819][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.660664][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.670924][T10934] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1248.760297][T10934] usb 4-1: device descriptor read/8, error -71 [ 1248.888039][T10934] usb usb4-port1: unable to enumerate USB device [ 1249.410454][T12950] ath6kl: Failed to submit usb control message: -110 [ 1249.486933][T12950] ath6kl: unable to send the bmi data to the device: -110 [ 1249.534289][T12950] ath6kl: Unable to send get target info: -110 [ 1249.564323][T12950] ath6kl: Failed to init ath6kl core: -110 [ 1249.758686][T12950] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1251.074980][T12950] usb 2-1: USB disconnect, device number 104 [ 1252.168599][T10934] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1252.246656][T16527] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2853'. [ 1252.354809][T10934] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1252.404013][T10934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.437099][T10934] usb 4-1: Product: syz [ 1252.476971][T10934] usb 4-1: Manufacturer: syz [ 1252.481661][T10934] usb 4-1: SerialNumber: syz [ 1252.522488][T10934] usb 4-1: config 0 descriptor?? [ 1252.759680][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1252.797320][ T1215] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1252.821026][T16516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.916504][T16516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.986599][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1252.996918][ T1215] usb 2-1: Using ep0 maxpacket: 8 [ 1253.003418][T16541] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1253.034752][T16541] cramfs: wrong magic [ 1253.267368][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.467054][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1253.476575][ T1215] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1253.496996][ T10] usb 6-1: config 1 has no interface number 1 [ 1253.503182][ T1215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.521442][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1253.546119][ T1215] usb 2-1: Product: syz [ 1253.556683][ T1215] usb 2-1: Manufacturer: syz [ 1253.586936][ T1215] usb 2-1: SerialNumber: syz [ 1253.604686][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.621686][ T1215] usb 2-1: config 0 descriptor?? [ 1253.647899][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.656450][ T10] usb 6-1: Product: syz [ 1253.669883][ T1215] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1253.690808][ T10] usb 6-1: Manufacturer: syz [ 1253.695491][ T10] usb 6-1: SerialNumber: syz [ 1253.833203][T16279] usb 4-1: USB disconnect, device number 106 [ 1253.866713][T16536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.883991][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.000750][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.027277][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.036069][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.441696][ T10] usb 6-1: USB disconnect, device number 67 [ 1254.522954][ T1215] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1254.561232][ T1215] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1254.590158][ T1215] usb 2-1: USB disconnect, device number 105 [ 1254.803915][T16552] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 1254.880066][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1256.318827][T10934] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1257.096864][T10934] usb 3-1: Using ep0 maxpacket: 32 [ 1257.290213][T10934] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1257.314109][T10934] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1257.333039][T10934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1257.344423][T10934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 1257.361157][T10934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1257.375386][T10934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1257.390078][T10934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1257.440054][T10934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1257.463735][T10934] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1257.485552][T10934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.535946][T10934] usb 3-1: config 0 descriptor?? [ 1257.550457][T16566] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1257.562966][T10934] usblp0: Disabling reads from problematic bidirectional printer [ 1257.772946][T16566] IPv6: addrconf: prefix option has invalid lifetime [ 1257.785857][T10934] usblp 3-1:0.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 1257.803962][T10934] usb 3-1: USB disconnect, device number 53 [ 1257.822521][T10934] usblp0: removed [ 1257.962205][ T5922] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1258.452116][ T5922] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1258.481966][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.593502][ T5922] usb 6-1: Product: syz [ 1258.612054][ T5922] usb 6-1: Manufacturer: syz [ 1258.631548][ T5922] usb 6-1: SerialNumber: syz [ 1258.647614][ T5922] usb 6-1: config 0 descriptor?? [ 1258.722537][T16605] fuse: Bad value for 'fd' [ 1258.959289][T16595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.977925][T16595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.251317][ T10] usb 6-1: USB disconnect, device number 68 [ 1259.316901][T12950] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1259.885221][T12950] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1259.894413][T12950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.938792][T12950] usb 2-1: config 0 descriptor?? [ 1260.664368][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.675134][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.718035][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.794049][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.007367][T12950] ath6kl: Failed to submit usb control message: -110 [ 1261.014291][T12950] ath6kl: unable to send the bmi data to the device: -110 [ 1261.042161][T12950] ath6kl: Unable to send get target info: -110 [ 1261.079604][T12950] ath6kl: Failed to init ath6kl core: -110 [ 1261.107344][T12950] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1262.137049][T12950] usb 2-1: USB disconnect, device number 106 [ 1262.244106][T16643] fuse: Bad value for 'fd' [ 1262.616019][T16647] FAULT_INJECTION: forcing a failure. [ 1262.616019][T16647] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.629396][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.5.2884 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1262.629426][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1262.629442][T16647] Call Trace: [ 1262.629454][T16647] [ 1262.629466][T16647] dump_stack_lvl+0x189/0x250 [ 1262.629499][T16647] ? __pfx____ratelimit+0x10/0x10 [ 1262.629524][T16647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1262.629550][T16647] ? __pfx__printk+0x10/0x10 [ 1262.629586][T16647] ? __pfx___might_resched+0x10/0x10 [ 1262.629611][T16647] ? fs_reclaim_acquire+0x7d/0x100 [ 1262.629645][T16647] should_fail_ex+0x414/0x560 [ 1262.629676][T16647] should_failslab+0xa8/0x100 [ 1262.629704][T16647] __kmalloc_noprof+0xcb/0x4f0 [ 1262.629724][T16647] ? kfree+0x4d/0x440 [ 1262.629755][T16647] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1262.629792][T16647] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1262.629839][T16647] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1262.629867][T16647] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1262.629891][T16647] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1262.629922][T16647] ? ovl_iterate+0xdbd/0x1f40 [ 1262.629994][T16647] ? tomoyo_file_open+0x166/0x220 [ 1262.630031][T16647] security_file_open+0xb1/0x270 [ 1262.630059][T16647] do_dentry_open+0x35e/0x1970 [ 1262.630109][T16647] vfs_open+0x3b/0x340 [ 1262.630141][T16647] dentry_open+0x61/0xa0 [ 1262.630170][T16647] ovl_dir_read+0x85/0x5f0 [ 1262.630196][T16647] ? lockdep_hardirqs_on+0x9c/0x150 [ 1262.630230][T16647] ? __pfx_ovl_dir_read+0x10/0x10 [ 1262.630253][T16647] ? ovl_path_upper+0x105/0x170 [ 1262.630279][T16647] ? ovl_path_next+0x23c/0x470 [ 1262.630318][T16647] ovl_dir_read_merged+0x19d/0x360 [ 1262.630349][T16647] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1262.630379][T16647] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1262.630417][T16647] ? __kasan_kmalloc+0x93/0xb0 [ 1262.630444][T16647] ? ovl_iterate+0xcf6/0x1f40 [ 1262.630476][T16647] ovl_iterate+0xdbd/0x1f40 [ 1262.630503][T16647] ? __pfx___schedule+0x10/0x10 [ 1262.630539][T16647] ? lockdep_hardirqs_on+0x9c/0x150 [ 1262.630565][T16647] ? __pfx_ovl_iterate+0x10/0x10 [ 1262.630592][T16647] ? preempt_schedule+0xae/0xc0 [ 1262.630630][T16647] ? __lock_acquire+0xab9/0xd20 [ 1262.630664][T16647] ? wrap_directory_iterator+0x5a/0xe0 [ 1262.630716][T16647] ? down_write+0x162/0x1f0 [ 1262.630743][T16647] ? __pfx_down_write+0x10/0x10 [ 1262.630780][T16647] ? __pfx_ovl_iterate+0x10/0x10 [ 1262.630809][T16647] wrap_directory_iterator+0x96/0xe0 [ 1262.630848][T16647] iterate_dir+0x5af/0x770 [ 1262.630890][T16647] __se_sys_getdents64+0xe4/0x260 [ 1262.630935][T16647] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1262.630969][T16647] ? __pfx_filldir64+0x10/0x10 [ 1262.631003][T16647] ? do_syscall_64+0xbe/0x3b0 [ 1262.631034][T16647] do_syscall_64+0xfa/0x3b0 [ 1262.631062][T16647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.631083][T16647] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1262.631106][T16647] ? clear_bhb_loop+0x60/0xb0 [ 1262.631134][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.631157][T16647] RIP: 0033:0x7f2353f8ebe9 [ 1262.631177][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.631197][T16647] RSP: 002b:00007f2354e63038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1262.631221][T16647] RAX: ffffffffffffffda RBX: 00007f23541b6180 RCX: 00007f2353f8ebe9 [ 1262.631238][T16647] RDX: 0000000000000029 RSI: 9999999999999999 RDI: 0000000000000006 [ 1262.631253][T16647] RBP: 00007f2354e63090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.631267][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.631281][T16647] R13: 00007f23541b6218 R14: 00007f23541b6180 R15: 00007ffee2501f68 [ 1262.631319][T16647] [ 1262.631355][T16647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1263.093561][ T30] audit: type=1326 audit(1755307757.136:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16648 comm="syz.1.2883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36f58ebe9 code=0x0 [ 1263.471657][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1264.166858][ T1215] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1264.346997][T12950] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1264.697276][ T1215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.496195][ T1215] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1266.513857][ T1215] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1266.523130][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.534387][ T1215] usb 6-1: config 0 descriptor?? [ 1266.708766][T12950] usb 3-1: device descriptor read/all, error -71 [ 1266.752472][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.790781][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.400254][T16667] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1267.457788][T16667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.537947][ T1215] kovaplus 0003:1E7D:2D50.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1267.688524][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1268.007668][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1268.173530][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1268.188983][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.222499][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.241058][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1268.263837][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.293203][ T10] usb 4-1: Product: syz [ 1268.302024][ T10] usb 4-1: Manufacturer: syz [ 1268.346839][ T10] usb 4-1: SerialNumber: syz [ 1268.397695][ T1215] kovaplus 0003:1E7D:2D50.0041: couldn't init struct kovaplus_device [ 1268.406177][ T1215] kovaplus 0003:1E7D:2D50.0041: couldn't install mouse [ 1268.528057][ T1215] kovaplus 0003:1E7D:2D50.0041: probe with driver kovaplus failed with error -71 [ 1268.546375][ T1215] usb 6-1: USB disconnect, device number 69 [ 1268.821159][ T10] usb 4-1: 0:2 : does not exist [ 1268.987001][T16265] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1269.299171][T16673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.435441][T16690] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1270.103673][T16673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.118506][T16265] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1270.128629][T16265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.271509][T16265] usb 2-1: config 0 descriptor?? [ 1270.446412][ T10] usb 4-1: USB disconnect, device number 107 [ 1271.022456][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.032991][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.107979][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.164965][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.455474][T16265] ath6kl: Failed to submit usb control message: -110 [ 1271.462547][T16265] ath6kl: unable to send the bmi data to the device: -110 [ 1271.476229][T16265] ath6kl: Unable to send get target info: -110 [ 1271.500336][T16265] ath6kl: Failed to init ath6kl core: -110 [ 1271.528139][T16265] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1271.918606][T16712] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2899'. [ 1272.669194][T16721] fuse: Bad value for 'fd' [ 1272.872490][T16725] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 1273.046943][ T976] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1273.200267][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.315270][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1274.285775][ T976] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1274.808422][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.207874][ T976] usb 6-1: config 0 descriptor?? [ 1275.483563][T10934] usb 2-1: USB disconnect, device number 107 [ 1275.753973][ T976] kovaplus 0003:1E7D:2D50.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1276.562129][T16753] netlink: 14473 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1276.730836][ T976] kovaplus 0003:1E7D:2D50.0042: couldn't init struct kovaplus_device [ 1276.745814][ T976] kovaplus 0003:1E7D:2D50.0042: couldn't install mouse [ 1276.785709][ T976] kovaplus 0003:1E7D:2D50.0042: probe with driver kovaplus failed with error -5 [ 1276.941081][ T10] usb 6-1: USB disconnect, device number 70 [ 1277.003813][T16755] binder_alloc: 16749: binder_alloc_buf size 12280 failed, no address space [ 1277.044673][T16755] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 1277.820696][T16764] netlink: 'syz.5.2913': attribute type 10 has an invalid length. [ 1277.872235][T16764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.904820][T16764] team0: entered promiscuous mode [ 1277.910710][T16764] team_slave_0: entered promiscuous mode [ 1277.919532][T16764] team_slave_1: entered promiscuous mode [ 1277.930869][T16764] team0: entered allmulticast mode [ 1277.936601][T16764] team_slave_0: entered allmulticast mode [ 1277.942743][T16764] team_slave_1: entered allmulticast mode [ 1277.954414][T16764] bond0: (slave team0): Enslaving as an active interface with an up link [ 1279.424147][T16768] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1280.066869][T16265] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1280.156887][T10934] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1280.285713][T16265] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1280.347463][T16265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.350919][T10934] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1280.850891][T10934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.870111][T16265] usb 3-1: config 0 descriptor?? [ 1280.879509][T10934] usb 4-1: Product: syz [ 1280.888949][T10934] usb 4-1: Manufacturer: syz [ 1280.912700][T10934] usb 4-1: SerialNumber: syz [ 1280.959607][T10934] usb 4-1: config 0 descriptor?? [ 1281.182205][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.257669][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.385839][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.408228][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.433993][ T1215] usb 4-1: USB disconnect, device number 108 [ 1282.103463][T16265] ath6kl: Failed to submit usb control message: -110 [ 1282.111342][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.111732][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.140602][T16265] ath6kl: unable to send the bmi data to the device: -110 [ 1282.147904][T16265] ath6kl: Unable to send get target info: -110 [ 1282.179335][T16265] ath6kl: Failed to init ath6kl core: -110 [ 1282.186673][T16265] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1282.292179][T16811] fuse: Bad value for 'fd' [ 1284.921710][T16265] usb 3-1: USB disconnect, device number 56 [ 1285.148701][T16831] pim6reg: entered allmulticast mode [ 1285.245314][T16835] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2931'. [ 1285.270665][T16831] pim6reg: left allmulticast mode [ 1285.888407][T16843] 9pnet_fd: Insufficient options for proto=fd [ 1287.096821][ T30] audit: type=1326 audit(1755307781.136:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16849 comm="syz.2.2936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facb398ebe9 code=0x0 [ 1287.445591][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 1287.475268][ T30] audit: type=1326 audit(1755307781.516:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16862 comm="syz.2.2939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb398ebe9 code=0x0 [ 1287.653912][T16855] loop4: detected capacity change from 0 to 7 [ 1287.915996][T16855] Dev loop4: unable to read RDB block 7 [ 1288.062975][T16855] loop4: unable to read partition table [ 1288.156700][T16855] loop4: partition table beyond EOD, truncated [ 1288.210703][T16855] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1290.164885][T16896] 9pnet_fd: Insufficient options for proto=fd [ 1290.337983][T12950] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1290.546522][T12950] usb 6-1: Using ep0 maxpacket: 32 [ 1290.557385][ T30] audit: type=1326 audit(1755307784.606:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16894 comm="syz.3.2949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee7118ebe9 code=0x0 [ 1290.562782][T12950] usb 6-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1290.594170][T16899] vivid-000: disconnect [ 1290.676082][T12950] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1290.735029][T12950] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1290.847571][T12950] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=2a.74 [ 1290.908048][T12950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.975349][T12950] usb 6-1: Product: syz [ 1291.011707][T12950] usb 6-1: Manufacturer: syz [ 1291.055061][T12950] usb 6-1: SerialNumber: syz [ 1291.197819][T12950] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1291.206648][T12950] usb 6-1: no configuration chosen from 1 choice [ 1291.255425][T16898] vivid-000: reconnect [ 1291.274326][T16903] xt_CT: No such helper "syz0" [ 1291.352093][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 1291.504100][T16909] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1292.020449][ T976] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1292.189561][ T976] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1292.200412][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1292.220972][ T976] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1292.237129][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.255828][ T976] usb 3-1: Product: syz [ 1292.288377][ T976] usb 3-1: Manufacturer: syz [ 1292.293102][ T976] usb 3-1: SerialNumber: syz [ 1292.326323][ T976] usb 3-1: config 0 descriptor?? [ 1292.341426][ T976] usb 3-1: selecting invalid altsetting 0 [ 1292.544739][ T976] usb 3-1: USB disconnect, device number 57 [ 1293.024841][T16265] usb 6-1: USB disconnect, device number 71 [ 1293.643538][T16942] 9pnet_fd: Insufficient options for proto=fd [ 1294.417134][ T30] audit: type=1326 audit(1755307788.456:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16949 comm="syz.1.2963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36f58ebe9 code=0x0 [ 1295.721999][T16966] Invalid ELF header magic: != ELF [ 1296.998161][T16265] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1297.459107][ T1215] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1297.539337][T16265] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1297.550170][T16265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1297.566655][T16265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1297.580597][T16265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.606933][T16265] usb 4-1: Product: syz [ 1297.611796][T16265] usb 4-1: Manufacturer: syz [ 1297.616543][T16265] usb 4-1: SerialNumber: syz [ 1297.643117][T16265] usb 4-1: config 0 descriptor?? [ 1297.682253][T16265] usb 4-1: selecting invalid altsetting 0 [ 1297.709363][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.720011][ T1215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1297.787681][ T1215] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1297.809947][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.847019][ T1215] usb 3-1: config 0 descriptor?? [ 1297.875404][T10934] usb 4-1: USB disconnect, device number 109 [ 1298.283684][ T1215] kovaplus 0003:1E7D:2D50.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1298.315278][ T30] audit: type=1326 audit(1755307792.356:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16992 comm="syz.0.2976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77858ebe9 code=0x0 [ 1298.344861][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 1298.872029][ T1215] kovaplus 0003:1E7D:2D50.0043: couldn't init struct kovaplus_device [ 1298.890286][ T1215] kovaplus 0003:1E7D:2D50.0043: couldn't install mouse [ 1298.899308][ T1215] kovaplus 0003:1E7D:2D50.0043: probe with driver kovaplus failed with error -5 [ 1299.451927][T10934] usb 3-1: USB disconnect, device number 58 [ 1304.295953][T10934] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1304.317936][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1304.387288][ T976] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1304.457097][T10934] usb 2-1: device descriptor read/64, error -32 [ 1304.526028][ T30] audit: type=1326 audit(1755307798.566:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17049 comm="syz.5.2992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2353f8ebe9 code=0x0 [ 1305.568396][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 1305.616809][ T976] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1305.664520][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.685146][ T976] usb 3-1: can't read configurations, error -61 [ 1306.096916][T10934] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1306.119798][T17061] overlay: Bad value for 'metacopy' [ 1306.294345][T17065] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1306.362777][ T976] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1306.663632][T10934] usb 2-1: device not accepting address 109, error -71 [ 1306.671826][T10934] usb usb2-port1: attempt power cycle [ 1307.886916][T17057] Bluetooth: hci5: command 0x0406 tx timeout [ 1308.429233][T17082] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1309.615247][T17085] kvm: MWAIT instruction emulated as NOP! [ 1311.064931][T17096] NILFS (nullb0): couldn't find nilfs on the device [ 1311.206199][ T1215] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1311.328343][ T976] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1311.614603][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.628617][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1311.642750][ T1215] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1311.645937][ T976] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1311.661666][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.676892][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.687437][ T976] usb 6-1: config 0 descriptor?? [ 1311.708043][ T1215] usb 2-1: config 0 descriptor?? [ 1311.904490][T17107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1311.911953][T17107] IPv6: NLM_F_CREATE should be set when creating new route [ 1311.919564][T17107] IPv6: NLM_F_CREATE should be set when creating new route [ 1311.927060][T17107] IPv6: NLM_F_CREATE should be set when creating new route [ 1311.983835][T17107] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3007'. [ 1312.362740][ T976] kovaplus 0003:1E7D:2D50.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1312.460837][T17108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.471367][T17108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.493203][T17108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.548694][T17108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.901356][T17117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1313.016895][T16265] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1313.088024][ T1215] ath6kl: Failed to submit usb control message: -110 [ 1313.212452][ T1215] ath6kl: unable to send the bmi data to the device: -110 [ 1313.253046][ T1215] ath6kl: Unable to send get target info: -110 [ 1313.286276][T16265] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1313.303706][ T1215] ath6kl: Failed to init ath6kl core: -110 [ 1313.318745][T16265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1313.325949][ T1215] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1313.370933][ T976] kovaplus 0003:1E7D:2D50.0044: couldn't init struct kovaplus_device [ 1313.381953][ T976] kovaplus 0003:1E7D:2D50.0044: couldn't install mouse [ 1313.405184][T16265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1313.525444][ T976] kovaplus 0003:1E7D:2D50.0044: probe with driver kovaplus failed with error -71 [ 1313.657057][T16265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.667563][T16265] usb 4-1: Product: syz [ 1313.682506][T16265] usb 4-1: Manufacturer: syz [ 1313.687876][T16265] usb 4-1: SerialNumber: syz [ 1313.692327][ T976] usb 6-1: USB disconnect, device number 72 [ 1313.711792][T16265] usb 4-1: config 0 descriptor?? [ 1313.727114][T16265] usb 4-1: selecting invalid altsetting 0 [ 1314.077323][ T976] usb 4-1: USB disconnect, device number 110 [ 1314.303236][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1314.312760][T17127] bond0: entered promiscuous mode [ 1314.318076][T17127] bond_slave_0: entered promiscuous mode [ 1314.326378][T17127] bond_slave_1: entered promiscuous mode [ 1314.335551][T17127] bond0: entered allmulticast mode [ 1314.341198][T17127] bond_slave_0: entered allmulticast mode [ 1314.347266][T17127] bond_slave_1: entered allmulticast mode [ 1315.771966][T12950] usb 2-1: USB disconnect, device number 111 [ 1316.119570][T10934] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1316.663881][T10934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.677282][T10934] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1316.772049][T10934] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1316.782187][T10934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.871699][T10934] usb 6-1: config 0 descriptor?? [ 1317.632491][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3019'. [ 1317.712871][T10934] kovaplus 0003:1E7D:2D50.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1317.867006][ T976] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1318.031168][ T976] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1318.057564][ T976] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1318.083410][ T976] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1318.103371][T10934] kovaplus 0003:1E7D:2D50.0045: couldn't init struct kovaplus_device [ 1318.111887][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.123492][T10934] kovaplus 0003:1E7D:2D50.0045: couldn't install mouse [ 1318.136111][T10934] kovaplus 0003:1E7D:2D50.0045: probe with driver kovaplus failed with error -5 [ 1318.147540][T17153] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1318.158296][ T976] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1318.335783][ T976] usb 6-1: USB disconnect, device number 73 [ 1318.361846][T10934] usb 3-1: USB disconnect, device number 61 [ 1319.057155][T16265] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1319.067682][T17187] 9pnet_fd: Insufficient options for proto=fd [ 1319.148331][T17187] overlayfs: failed to resolve '/000000000000004': -2 [ 1319.262108][T16265] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1319.266307][T17193] IPVS: Error joining to the multicast group [ 1319.406914][T16265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.817845][T16265] usb 4-1: config 0 descriptor?? [ 1320.734050][T17206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.788480][T17206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.931589][T16265] ath6kl: Failed to submit usb control message: -110 [ 1320.938738][T16265] ath6kl: unable to send the bmi data to the device: -110 [ 1320.946199][T16265] ath6kl: Unable to send get target info: -110 [ 1320.977788][T16265] ath6kl: Failed to init ath6kl core: -110 [ 1320.993195][T16265] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1321.050541][T17206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.477730][T17206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.560392][T16265] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1321.732354][T16265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.746312][T16265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.771648][T16265] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1321.823976][T16265] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1321.855366][T16265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.898455][T16265] usb 3-1: config 0 descriptor?? [ 1322.004174][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1322.519836][T16265] usbhid 3-1:0.0: can't add hid device: -71 [ 1322.537036][T16265] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1322.572194][T16265] usb 3-1: USB disconnect, device number 62 [ 1324.107740][ T976] usb 4-1: USB disconnect, device number 111 [ 1324.161055][T17245] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1329.724172][T17057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1329.735278][T17057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1329.748474][T17057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1329.756906][T17057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1329.769690][T17057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.520166][T10934] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1330.669638][T16102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.710096][T10934] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1330.722140][T10934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.895196][T10934] usb 4-1: config 0 descriptor?? [ 1330.949203][T16102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.632684][T16102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.702989][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.733551][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.765684][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.775432][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.817184][T17057] Bluetooth: hci4: command tx timeout [ 1331.978410][T10934] ath6kl: Failed to submit usb control message: -110 [ 1331.986375][T10934] ath6kl: unable to send the bmi data to the device: -110 [ 1331.993896][T10934] ath6kl: Unable to send get target info: -110 [ 1332.097321][T10934] ath6kl: Failed to init ath6kl core: -110 [ 1332.126386][T10934] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1332.144407][T16102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.886563][T17312] syz.2.3064 (17312) used obsolete PPPIOCDETACH ioctl [ 1333.671640][T17272] chnl_net:caif_netlink_parms(): no params data found [ 1333.800833][ T976] usb 4-1: USB disconnect, device number 112 [ 1333.887767][T17057] Bluetooth: hci4: command tx timeout [ 1334.927982][T16102] bridge0: port 1(team0) entered disabled state [ 1336.166980][T17057] Bluetooth: hci4: command tx timeout [ 1338.211059][T17057] Bluetooth: hci4: command tx timeout [ 1340.412354][T16102] bond0 (unregistering): Released all slaves [ 1340.455759][T16102] bond1 (unregistering): Released all slaves [ 1340.642256][T17364] bridge0: entered allmulticast mode [ 1341.094094][T16102] : left promiscuous mode [ 1341.286002][T17372] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3078'. [ 1341.554886][T17383] FAULT_INJECTION: forcing a failure. [ 1341.554886][T17383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.569472][T17383] CPU: 0 UID: 0 PID: 17383 Comm: syz.2.3080 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1341.569504][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1341.569519][T17383] Call Trace: [ 1341.569527][T17383] [ 1341.569535][T17383] dump_stack_lvl+0x189/0x250 [ 1341.569559][T17383] ? irqentry_exit+0x74/0x90 [ 1341.569578][T17383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1341.569610][T17383] should_fail_ex+0x414/0x560 [ 1341.569630][T17383] _copy_from_user+0x2d/0xb0 [ 1341.569653][T17383] wants_mount_setattr+0x1c1/0x930 [ 1341.569683][T17383] ? __pfx_wants_mount_setattr+0x10/0x10 [ 1341.569707][T17383] ? trace_irq_disable+0x37/0x110 [ 1341.569730][T17383] ? preempt_schedule_irq+0xde/0x150 [ 1341.569751][T17383] __se_sys_mount_setattr+0x184/0x2f0 [ 1341.569778][T17383] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 1341.569803][T17383] ? __x64_sys_mount_setattr+0x20/0xc0 [ 1341.569825][T17383] do_syscall_64+0xfa/0x3b0 [ 1341.569844][T17383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.569859][T17383] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1341.569875][T17383] ? clear_bhb_loop+0x60/0xb0 [ 1341.569894][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.569909][T17383] RIP: 0033:0x7facb398ebe9 [ 1341.569924][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.569938][T17383] RSP: 002b:00007facb1bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1341.569956][T17383] RAX: ffffffffffffffda RBX: 00007facb3bb6090 RCX: 00007facb398ebe9 [ 1341.569968][T17383] RDX: 0000000000008000 RSI: 0000200000001d80 RDI: 0000000000000004 [ 1341.569978][T17383] RBP: 00007facb1bf6090 R08: 0000000000000020 R09: 0000000000000000 [ 1341.569989][T17383] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 1341.569999][T17383] R13: 00007facb3bb6128 R14: 00007facb3bb6090 R15: 00007fffbb3178a8 [ 1341.570023][T17383] [ 1342.675587][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.682914][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.690377][T17272] bridge_slave_0: entered allmulticast mode [ 1342.701618][T17272] bridge_slave_0: entered promiscuous mode [ 1342.726572][T16102] tipc: Left network mode [ 1342.794817][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.831148][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.851346][T17272] bridge_slave_1: entered allmulticast mode [ 1342.955554][T17272] bridge_slave_1: entered promiscuous mode [ 1343.115891][T17272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.234028][T17272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.203852][T17408] overlayfs: missing 'lowerdir' [ 1344.842296][T17272] team0: Port device team_slave_0 added [ 1345.621558][T17272] team0: Port device team_slave_1 added [ 1345.725557][T17423] FAULT_INJECTION: forcing a failure. [ 1345.725557][T17423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.892291][T17423] CPU: 1 UID: 0 PID: 17423 Comm: syz.2.3090 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1345.892325][T17423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1345.892340][T17423] Call Trace: [ 1345.892358][T17423] [ 1345.892370][T17423] dump_stack_lvl+0x189/0x250 [ 1345.892401][T17423] ? __pfx____ratelimit+0x10/0x10 [ 1345.892427][T17423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1345.892453][T17423] ? __pfx__printk+0x10/0x10 [ 1345.892483][T17423] ? __might_fault+0xb0/0x130 [ 1345.892519][T17423] should_fail_ex+0x414/0x560 [ 1345.892550][T17423] _copy_from_user+0x2d/0xb0 [ 1345.892584][T17423] ___sys_recvmsg+0x12e/0x510 [ 1345.892614][T17423] ? __pfx____sys_recvmsg+0x10/0x10 [ 1345.892687][T17423] ? __might_fault+0xb0/0x130 [ 1345.892715][T17423] do_recvmmsg+0x307/0x770 [ 1345.892749][T17423] ? __pfx_do_recvmmsg+0x10/0x10 [ 1345.892785][T17423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1345.892834][T17423] __x64_sys_recvmmsg+0x190/0x240 [ 1345.892861][T17423] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1345.892895][T17423] ? do_syscall_64+0xbe/0x3b0 [ 1345.892926][T17423] do_syscall_64+0xfa/0x3b0 [ 1345.892953][T17423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.892975][T17423] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1345.892998][T17423] ? clear_bhb_loop+0x60/0xb0 [ 1345.893026][T17423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.893049][T17423] RIP: 0033:0x7facb398ebe9 [ 1345.893070][T17423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.893090][T17423] RSP: 002b:00007facb472c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1345.893115][T17423] RAX: ffffffffffffffda RBX: 00007facb3bb5fa0 RCX: 00007facb398ebe9 [ 1345.893132][T17423] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1345.893147][T17423] RBP: 00007facb472c090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.893161][T17423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.893175][T17423] R13: 00007facb3bb6038 R14: 00007facb3bb5fa0 R15: 00007fffbb3178a8 [ 1345.893211][T17423] [ 1346.522714][T17428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1346.547152][T17428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1346.554548][T17428] IPv6: NLM_F_CREATE should be set when creating new route [ 1347.157044][ T1215] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1347.216162][T17272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.326827][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 1347.956960][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.052959][T17272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.079876][ T1215] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1348.106784][ T1215] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1348.121212][ T1215] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1348.132842][ T1215] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.146452][ T1215] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1348.155626][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.259334][T17272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.266517][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.494736][ T1215] usb 3-1: GET_CAPABILITIES returned 0 [ 1348.500561][T17272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.875312][ T1215] usbtmc 3-1:16.0: can't read capabilities [ 1348.898128][T16102] hsr_slave_0: left promiscuous mode [ 1348.914595][T16102] hsr_slave_1: left promiscuous mode [ 1348.976409][T16102] veth1_macvtap: left promiscuous mode [ 1348.995504][T16102] veth0_macvtap: left promiscuous mode [ 1349.011283][T16102] veth1_vlan: left allmulticast mode [ 1349.193761][T16102] veth1_vlan: left promiscuous mode [ 1349.216942][T16102] veth0_vlan: left promiscuous mode [ 1350.211161][ T1215] usb 3-1: USB disconnect, device number 63 [ 1350.798297][T17463] overlay: ./file0 is not a directory [ 1353.099385][T17476] FAULT_INJECTION: forcing a failure. [ 1353.099385][T17476] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.118856][T17476] CPU: 0 UID: 0 PID: 17476 Comm: syz.5.3107 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1353.118891][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1353.118905][T17476] Call Trace: [ 1353.118915][T17476] [ 1353.118926][T17476] dump_stack_lvl+0x189/0x250 [ 1353.118966][T17476] ? __pfx____ratelimit+0x10/0x10 [ 1353.118991][T17476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.119016][T17476] ? __pfx__printk+0x10/0x10 [ 1353.119061][T17476] should_fail_ex+0x414/0x560 [ 1353.119091][T17476] should_failslab+0xa8/0x100 [ 1353.119117][T17476] __kmalloc_cache_noprof+0x70/0x3d0 [ 1353.119140][T17476] ? sctp_add_bind_addr+0x8c/0x370 [ 1353.119172][T17476] sctp_add_bind_addr+0x8c/0x370 [ 1353.119204][T17476] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1353.119236][T17476] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1353.119264][T17476] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1353.119293][T17476] ? sctp_v6_is_any+0x64/0x80 [ 1353.119323][T17476] ? sctp_copy_one_addr+0x93/0x360 [ 1353.119354][T17476] sctp_bind_addr_copy+0xb3/0x3c0 [ 1353.119383][T17476] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1353.119411][T17476] sctp_connect_new_asoc+0x2e0/0x690 [ 1353.119448][T17476] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1353.119488][T17476] ? sctp_get_af_specific+0x29/0x80 [ 1353.119514][T17476] ? sctp_inet6_send_verify+0x80/0x300 [ 1353.119540][T17476] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1353.119576][T17476] __sctp_connect+0x5ba/0xd50 [ 1353.119623][T17476] ? __pfx___sctp_connect+0x10/0x10 [ 1353.119660][T17476] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1353.119685][T17476] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1353.119715][T17476] sctp_getsockopt_connectx3+0x2c4/0x440 [ 1353.119747][T17476] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1353.119777][T17476] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1353.119801][T17476] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1353.119838][T17476] sctp_getsockopt+0x98a/0xb60 [ 1353.119869][T17476] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1353.119900][T17476] do_sock_getsockopt+0x36f/0x450 [ 1353.119938][T17476] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1353.119976][T17476] ? do_syscall_64+0x20/0x3b0 [ 1353.120000][T17476] ? __fget_files+0x3a0/0x420 [ 1353.120024][T17476] ? __fget_files+0x2a/0x420 [ 1353.120057][T17476] __x64_sys_getsockopt+0x1a5/0x250 [ 1353.120090][T17476] ? do_syscall_64+0x20/0x3b0 [ 1353.120116][T17476] ? do_syscall_64+0x20/0x3b0 [ 1353.120145][T17476] do_syscall_64+0xfa/0x3b0 [ 1353.120169][T17476] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.120193][T17476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.120216][T17476] ? clear_bhb_loop+0x60/0xb0 [ 1353.120243][T17476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.120266][T17476] RIP: 0033:0x7f2353f8ebe9 [ 1353.120286][T17476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.120305][T17476] RSP: 002b:00007f2354ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1353.120330][T17476] RAX: ffffffffffffffda RBX: 00007f23541b5fa0 RCX: 00007f2353f8ebe9 [ 1353.120346][T17476] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1353.120360][T17476] RBP: 00007f2354ea5090 R08: 0000200000000540 R09: 0000000000000000 [ 1353.120375][T17476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1353.120390][T17476] R13: 00007f23541b6038 R14: 00007f23541b5fa0 R15: 00007ffee2501f68 [ 1353.120426][T17476] [ 1353.509407][T17481] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 1353.822717][T17272] hsr_slave_0: entered promiscuous mode [ 1353.853877][T17272] hsr_slave_1: entered promiscuous mode [ 1353.862413][T17272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.870174][T17272] Cannot create hsr debugfs directory [ 1355.732357][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1358.537229][T12950] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1358.673339][T16265] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1358.716876][ T30] audit: type=1326 audit(1755307852.746:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17531 comm="syz.3.3125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee7118ebe9 code=0x0 [ 1358.972357][T12950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.006894][T12950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1359.046806][T12950] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1359.054824][T16265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.066250][T16265] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1359.084643][T12950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.104538][T17272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1359.116006][T12950] usb 3-1: config 0 descriptor?? [ 1359.145177][T17272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1359.148516][T16265] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1359.183846][T17272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1359.192177][T16265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.222168][T17272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1359.231972][T16265] usb 2-1: config 0 descriptor?? [ 1359.383361][T17527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.405362][T17527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.486037][T17272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.552738][T17272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.581442][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.588755][ T9817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.645713][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.652988][ T9817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.683252][T16265] kovaplus 0003:1E7D:2D50.0046: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1359.715957][T12950] kovaplus 0003:1E7D:2D50.0047: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1359.801248][T17272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.072692][T16265] kovaplus 0003:1E7D:2D50.0046: couldn't init struct kovaplus_device [ 1360.122962][T16265] kovaplus 0003:1E7D:2D50.0046: couldn't install mouse [ 1360.162088][T16265] kovaplus 0003:1E7D:2D50.0046: probe with driver kovaplus failed with error -32 [ 1360.272423][T17272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.373510][T17272] veth0_vlan: entered promiscuous mode [ 1360.395773][T17272] veth1_vlan: entered promiscuous mode [ 1360.461480][T17272] veth0_macvtap: entered promiscuous mode [ 1360.474106][T17272] veth1_macvtap: entered promiscuous mode [ 1360.508126][T12950] kovaplus 0003:1E7D:2D50.0047: couldn't init struct kovaplus_device [ 1360.514348][T17272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.518354][T12950] kovaplus 0003:1E7D:2D50.0047: couldn't install mouse [ 1360.539761][T17272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.556668][T12950] kovaplus 0003:1E7D:2D50.0047: probe with driver kovaplus failed with error -71 [ 1360.568728][T17272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.575408][T12950] usb 3-1: USB disconnect, device number 64 [ 1360.592691][T17272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.617317][T17272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.626116][T17272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.783321][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.805943][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.866935][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.891940][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.985579][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1361.167463][T16279] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1361.362224][T16279] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1361.402867][T16279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.810756][T12950] usb 2-1: USB disconnect, device number 112 [ 1361.830060][T16279] usb 6-1: config 0 descriptor?? [ 1362.091135][T16279] kaweth 6-1:0.0: Firmware present in device. [ 1362.269313][T16279] kaweth 6-1:0.0: Statistics collection: 0 [ 1362.293184][T16279] kaweth 6-1:0.0: Multicast filter limit: 0 [ 1362.370653][T16279] kaweth 6-1:0.0: MTU: 0 [ 1362.446292][T16279] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1363.454273][T17563] [ 1363.456684][T17563] ===================================================== [ 1363.463653][T17563] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1363.471157][T17563] 6.16.0-syzkaller #0 Not tainted [ 1363.476223][T17563] ----------------------------------------------------- [ 1363.483197][T17563] syz.0.3046/17563 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1363.491046][T17563] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1363.499749][T17563] [ 1363.499749][T17563] and this task is already holding: [ 1363.507147][T17563] ffff88805890e620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1363.515838][T17563] which would create a new lock dependency: [ 1363.521781][T17563] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1363.529433][T17563] [ 1363.529433][T17563] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1363.538917][T17563] (&client->buffer_lock){..-.}-{3:3} [ 1363.538959][T17563] [ 1363.538959][T17563] ... which became SOFTIRQ-irq-safe at: [ 1363.552053][T17563] lock_acquire+0x120/0x360 [ 1363.556705][T17563] _raw_spin_lock+0x2e/0x40 [ 1363.561347][T17563] evdev_pass_values+0xb9/0xbd0 [ 1363.566306][T17563] evdev_events+0x1e6/0x340 [ 1363.571022][T17563] input_pass_values+0x285/0x890 [ 1363.576087][T17563] input_event_dispose+0x3e5/0x6b0 [ 1363.581309][T17563] input_inject_event+0x1fe/0x320 [ 1363.586485][T17563] led_trigger_event+0x138/0x210 [ 1363.591630][T17563] kbd_bh+0x1c6/0x2e0 [ 1363.595744][T17563] tasklet_action_common+0x369/0x580 [ 1363.601140][T17563] handle_softirqs+0x283/0x870 [ 1363.606100][T17563] run_ksoftirqd+0x9b/0x100 [ 1363.610761][T17563] smpboot_thread_fn+0x53f/0xa60 [ 1363.615919][T17563] kthread+0x70e/0x8a0 [ 1363.620105][T17563] ret_from_fork+0x3fc/0x770 [ 1363.624805][T17563] ret_from_fork_asm+0x1a/0x30 [ 1363.629682][T17563] [ 1363.629682][T17563] to a SOFTIRQ-irq-unsafe lock: [ 1363.636729][T17563] (tasklist_lock){.+.+}-{3:3} [ 1363.636771][T17563] [ 1363.636771][T17563] ... which became SOFTIRQ-irq-unsafe at: [ 1363.649445][T17563] ... [ 1363.649459][T17563] lock_acquire+0x120/0x360 [ 1363.656693][T17563] _raw_read_lock+0x36/0x50 [ 1363.661335][T17563] __do_wait+0xde/0x740 [ 1363.665620][T17563] do_wait+0x1f8/0x520 [ 1363.669810][T17563] kernel_wait+0xab/0x170 [ 1363.674279][T17563] call_usermodehelper_exec_work+0xbe/0x230 [ 1363.680432][T17563] process_scheduled_works+0xade/0x17b0 [ 1363.686131][T17563] worker_thread+0x8a0/0xda0 [ 1363.690927][T17563] kthread+0x70e/0x8a0 [ 1363.695217][T17563] ret_from_fork+0x3fc/0x770 [ 1363.699915][T17563] ret_from_fork_asm+0x1a/0x30 [ 1363.704806][T17563] [ 1363.704806][T17563] other info that might help us debug this: [ 1363.704806][T17563] [ 1363.715053][T17563] Chain exists of: [ 1363.715053][T17563] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1363.715053][T17563] [ 1363.728309][T17563] Possible interrupt unsafe locking scenario: [ 1363.728309][T17563] [ 1363.736640][T17563] CPU0 CPU1 [ 1363.742064][T17563] ---- ---- [ 1363.747446][T17563] lock(tasklist_lock); [ 1363.751890][T17563] local_irq_disable(); [ 1363.758657][T17563] lock(&client->buffer_lock); [ 1363.766058][T17563] lock(&f_owner->lock); [ 1363.772934][T17563] [ 1363.776409][T17563] lock(&client->buffer_lock); [ 1363.781460][T17563] [ 1363.781460][T17563] *** DEADLOCK *** [ 1363.781460][T17563] [ 1363.789630][T17563] 5 locks held by syz.0.3046/17563: [ 1363.794840][T17563] #0: ffff888043fa6428 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1363.804041][T17563] #1: ffff888076c057b0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470 [ 1363.814757][T17563] #2: ffffffff99af1e90 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x735/0x1a80 [ 1363.824293][T17563] #3: ffff88803363e420 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1363.834003][T17563] #4: ffff88805890e620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1363.843144][T17563] [ 1363.843144][T17563] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1363.853576][T17563] -> (&client->buffer_lock){..-.}-{3:3} { [ 1363.859612][T17563] IN-SOFTIRQ-W at: [ 1363.863789][T17563] lock_acquire+0x120/0x360 [ 1363.870315][T17563] _raw_spin_lock+0x2e/0x40 [ 1363.876855][T17563] evdev_pass_values+0xb9/0xbd0 [ 1363.883723][T17563] evdev_events+0x1e6/0x340 [ 1363.890353][T17563] input_pass_values+0x285/0x890 [ 1363.897320][T17563] input_event_dispose+0x3e5/0x6b0 [ 1363.904456][T17563] input_inject_event+0x1fe/0x320 [ 1363.911507][T17563] led_trigger_event+0x138/0x210 [ 1363.918476][T17563] kbd_bh+0x1c6/0x2e0 [ 1363.924486][T17563] tasklet_action_common+0x369/0x580 [ 1363.932067][T17563] handle_softirqs+0x283/0x870 [ 1363.939215][T17563] run_ksoftirqd+0x9b/0x100 [ 1363.945761][T17563] smpboot_thread_fn+0x53f/0xa60 [ 1363.952810][T17563] kthread+0x70e/0x8a0 [ 1363.958935][T17563] ret_from_fork+0x3fc/0x770 [ 1363.965561][T17563] ret_from_fork_asm+0x1a/0x30 [ 1363.972392][T17563] INITIAL USE at: [ 1363.976488][T17563] lock_acquire+0x120/0x360 [ 1363.982929][T17563] _raw_spin_lock+0x2e/0x40 [ 1363.989374][T17563] evdev_pass_values+0xb9/0xbd0 [ 1363.996174][T17563] evdev_events+0x1e6/0x340 [ 1364.002642][T17563] input_pass_values+0x285/0x890 [ 1364.009528][T17563] input_event_dispose+0x330/0x6b0 [ 1364.016596][T17563] input_inject_event+0x1fe/0x320 [ 1364.023569][T17563] evdev_write+0x2fc/0x480 [ 1364.029921][T17563] vfs_write+0x27e/0xa90 [ 1364.036095][T17563] ksys_write+0x145/0x250 [ 1364.042355][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.048817][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.056669][T17563] } [ 1364.059368][T17563] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1364.068048][T17563] -> (&new->fa_lock){....}-{3:3} { [ 1364.073337][T17563] INITIAL USE at: [ 1364.077391][T17563] lock_acquire+0x120/0x360 [ 1364.083665][T17563] _raw_write_lock_irq+0xa2/0xf0 [ 1364.090420][T17563] fasync_remove_entry+0xf1/0x1c0 [ 1364.097261][T17563] sock_fasync+0x85/0xf0 [ 1364.103312][T17563] __fput+0x8a2/0xa70 [ 1364.109078][T17563] task_work_run+0x1d1/0x260 [ 1364.115440][T17563] exit_to_user_mode_loop+0xec/0x110 [ 1364.122483][T17563] do_syscall_64+0x2bd/0x3b0 [ 1364.128835][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.136492][T17563] INITIAL READ USE at: [ 1364.140926][T17563] lock_acquire+0x120/0x360 [ 1364.147619][T17563] _raw_read_lock_irqsave+0xaf/0x100 [ 1364.155111][T17563] kill_fasync+0x199/0x4d0 [ 1364.161736][T17563] anon_pipe_read+0xf06/0x1040 [ 1364.168699][T17563] vfs_read+0x4d0/0x980 [ 1364.175054][T17563] ksys_read+0x145/0x250 [ 1364.181487][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.188187][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.196274][T17563] } [ 1364.198873][T17563] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1364.207715][T17563] ... acquired at: [ 1364.211623][T17563] lock_acquire+0x120/0x360 [ 1364.216321][T17563] _raw_read_lock_irqsave+0xaf/0x100 [ 1364.221800][T17563] kill_fasync+0x199/0x4d0 [ 1364.226424][T17563] evdev_pass_values+0x627/0xbd0 [ 1364.231555][T17563] evdev_events+0x1e6/0x340 [ 1364.236262][T17563] input_pass_values+0x285/0x890 [ 1364.241412][T17563] input_event_dispose+0x330/0x6b0 [ 1364.246736][T17563] input_inject_event+0x1fe/0x320 [ 1364.251965][T17563] evdev_write+0x2fc/0x480 [ 1364.256575][T17563] vfs_write+0x27e/0xa90 [ 1364.261006][T17563] ksys_write+0x145/0x250 [ 1364.265522][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.270311][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.276399][T17563] [ 1364.278746][T17563] -> (&f_owner->lock){....}-{3:3} { [ 1364.284076][T17563] INITIAL USE at: [ 1364.288001][T17563] lock_acquire+0x120/0x360 [ 1364.294086][T17563] _raw_write_lock_irq+0xa2/0xf0 [ 1364.300615][T17563] __f_setown+0x67/0x370 [ 1364.306448][T17563] fcntl_dirnotify+0x3fa/0x6a0 [ 1364.312806][T17563] do_fcntl+0x6d0/0x1910 [ 1364.318655][T17563] __se_sys_fcntl+0xc8/0x150 [ 1364.324854][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.330958][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.338452][T17563] INITIAL READ USE at: [ 1364.342820][T17563] lock_acquire+0x120/0x360 [ 1364.349358][T17563] _raw_read_lock_irqsave+0xaf/0x100 [ 1364.356681][T17563] send_sigio+0x38/0x370 [ 1364.362971][T17563] kill_fasync+0x24d/0x4d0 [ 1364.369452][T17563] fsnotify_insert_event+0x32e/0x3e0 [ 1364.376798][T17563] inotify_handle_inode_event+0x3ea/0x5f0 [ 1364.384566][T17563] inotify_ignored_and_remove_idr+0x29/0x70 [ 1364.392508][T17563] fsnotify_destroy_marks+0x155/0x330 [ 1364.399906][T17563] dentry_unlink_inode+0x2c2/0x3f0 [ 1364.407061][T17563] vfs_rmdir+0x262/0x520 [ 1364.413433][T17563] do_rmdir+0x2ac/0x630 [ 1364.419607][T17563] __x64_sys_rmdir+0x47/0x50 [ 1364.426237][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.432777][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.440696][T17563] } [ 1364.443313][T17563] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1364.452308][T17563] ... acquired at: [ 1364.456133][T17563] lock_acquire+0x120/0x360 [ 1364.460851][T17563] _raw_read_lock_irqsave+0xaf/0x100 [ 1364.466466][T17563] send_sigio+0x38/0x370 [ 1364.470920][T17563] kill_fasync+0x24d/0x4d0 [ 1364.475542][T17563] fsnotify_insert_event+0x32e/0x3e0 [ 1364.481019][T17563] inotify_handle_inode_event+0x3ea/0x5f0 [ 1364.486945][T17563] inotify_ignored_and_remove_idr+0x29/0x70 [ 1364.493052][T17563] fsnotify_destroy_marks+0x155/0x330 [ 1364.498625][T17563] dentry_unlink_inode+0x2c2/0x3f0 [ 1364.503936][T17563] vfs_rmdir+0x262/0x520 [ 1364.508378][T17563] do_rmdir+0x2ac/0x630 [ 1364.512725][T17563] __x64_sys_rmdir+0x47/0x50 [ 1364.517502][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.522237][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.528326][T17563] [ 1364.530688][T17563] [ 1364.530688][T17563] the dependencies between the lock to be acquired [ 1364.530700][T17563] and SOFTIRQ-irq-unsafe lock: [ 1364.544269][T17563] -> (tasklist_lock){.+.+}-{3:3} { [ 1364.549425][T17563] HARDIRQ-ON-R at: [ 1364.553422][T17563] lock_acquire+0x120/0x360 [ 1364.559597][T17563] _raw_read_lock+0x36/0x50 [ 1364.565766][T17563] __do_wait+0xde/0x740 [ 1364.571600][T17563] do_wait+0x1f8/0x520 [ 1364.577345][T17563] kernel_wait+0xab/0x170 [ 1364.583349][T17563] call_usermodehelper_exec_work+0xbe/0x230 [ 1364.590922][T17563] process_scheduled_works+0xade/0x17b0 [ 1364.598154][T17563] worker_thread+0x8a0/0xda0 [ 1364.604446][T17563] kthread+0x70e/0x8a0 [ 1364.610278][T17563] ret_from_fork+0x3fc/0x770 [ 1364.616542][T17563] ret_from_fork_asm+0x1a/0x30 [ 1364.622983][T17563] SOFTIRQ-ON-R at: [ 1364.626989][T17563] lock_acquire+0x120/0x360 [ 1364.633162][T17563] _raw_read_lock+0x36/0x50 [ 1364.639329][T17563] __do_wait+0xde/0x740 [ 1364.645170][T17563] do_wait+0x1f8/0x520 [ 1364.650919][T17563] kernel_wait+0xab/0x170 [ 1364.656927][T17563] call_usermodehelper_exec_work+0xbe/0x230 [ 1364.664500][T17563] process_scheduled_works+0xade/0x17b0 [ 1364.671722][T17563] worker_thread+0x8a0/0xda0 [ 1364.677988][T17563] kthread+0x70e/0x8a0 [ 1364.683737][T17563] ret_from_fork+0x3fc/0x770 [ 1364.690000][T17563] ret_from_fork_asm+0x1a/0x30 [ 1364.696440][T17563] INITIAL USE at: [ 1364.700363][T17563] lock_acquire+0x120/0x360 [ 1364.706453][T17563] _raw_write_lock_irq+0xa2/0xf0 [ 1364.712981][T17563] copy_process+0x21d5/0x3b80 [ 1364.719244][T17563] kernel_clone+0x224/0x7f0 [ 1364.725339][T17563] user_mode_thread+0xdd/0x140 [ 1364.731689][T17563] rest_init+0x23/0x300 [ 1364.737443][T17563] start_kernel+0x47d/0x500 [ 1364.743617][T17563] x86_64_start_reservations+0x24/0x30 [ 1364.750709][T17563] x86_64_start_kernel+0x143/0x1c0 [ 1364.757414][T17563] common_startup_64+0x13e/0x147 [ 1364.763969][T17563] INITIAL READ USE at: [ 1364.768330][T17563] lock_acquire+0x120/0x360 [ 1364.774849][T17563] _raw_read_lock+0x36/0x50 [ 1364.781369][T17563] __do_wait+0xde/0x740 [ 1364.787551][T17563] do_wait+0x1f8/0x520 [ 1364.793651][T17563] kernel_wait+0xab/0x170 [ 1364.800009][T17563] call_usermodehelper_exec_work+0xbe/0x230 [ 1364.807925][T17563] process_scheduled_works+0xade/0x17b0 [ 1364.815491][T17563] worker_thread+0x8a0/0xda0 [ 1364.822107][T17563] kthread+0x70e/0x8a0 [ 1364.828234][T17563] ret_from_fork+0x3fc/0x770 [ 1364.834852][T17563] ret_from_fork_asm+0x1a/0x30 [ 1364.841675][T17563] } [ 1364.844194][T17563] ... key at: [] tasklist_lock+0x18/0x40 [ 1364.851948][T17563] ... acquired at: [ 1364.855766][T17563] lock_acquire+0x120/0x360 [ 1364.860460][T17563] _raw_read_lock+0x36/0x50 [ 1364.865160][T17563] send_sigio+0x101/0x370 [ 1364.869699][T17563] dnotify_handle_event+0x169/0x440 [ 1364.875100][T17563] fsnotify+0x1814/0x1a80 [ 1364.879617][T17563] vfs_mkdir+0x477/0x510 [ 1364.884092][T17563] do_mkdirat+0x247/0x590 [ 1364.888621][T17563] __x64_sys_mkdirat+0x87/0xa0 [ 1364.893588][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.898292][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.904381][T17563] [ 1364.906729][T17563] [ 1364.906729][T17563] stack backtrace: [ 1364.912741][T17563] CPU: 1 UID: 0 PID: 17563 Comm: syz.0.3046 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1364.912766][T17563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1364.912779][T17563] Call Trace: [ 1364.912789][T17563] [ 1364.912799][T17563] dump_stack_lvl+0x189/0x250 [ 1364.912828][T17563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1364.912849][T17563] ? __pfx__printk+0x10/0x10 [ 1364.912878][T17563] validate_chain+0x1f05/0x2140 [ 1364.912910][T17563] __lock_acquire+0xab9/0xd20 [ 1364.912930][T17563] ? send_sigio+0x101/0x370 [ 1364.912958][T17563] lock_acquire+0x120/0x360 [ 1364.912973][T17563] ? send_sigio+0x101/0x370 [ 1364.912998][T17563] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1364.913033][T17563] ? dnotify_handle_event+0x62/0x440 [ 1364.913058][T17563] _raw_read_lock+0x36/0x50 [ 1364.913090][T17563] ? send_sigio+0x101/0x370 [ 1364.913113][T17563] send_sigio+0x101/0x370 [ 1364.913139][T17563] dnotify_handle_event+0x169/0x440 [ 1364.913166][T17563] fsnotify+0x1814/0x1a80 [ 1364.913190][T17563] ? fsnotify+0x735/0x1a80 [ 1364.913207][T17563] ? __pfx_fsnotify+0x10/0x10 [ 1364.913231][T17563] ? inc_nlink+0x4d/0x150 [ 1364.913252][T17563] vfs_mkdir+0x477/0x510 [ 1364.913283][T17563] do_mkdirat+0x247/0x590 [ 1364.913311][T17563] ? __pfx_do_mkdirat+0x10/0x10 [ 1364.913339][T17563] ? getname_flags+0x1e5/0x540 [ 1364.913366][T17563] __x64_sys_mkdirat+0x87/0xa0 [ 1364.913395][T17563] do_syscall_64+0xfa/0x3b0 [ 1364.913415][T17563] ? lockdep_hardirqs_on+0x9c/0x150 [ 1364.913433][T17563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.913451][T17563] ? clear_bhb_loop+0x60/0xb0 [ 1364.913471][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.913491][T17563] RIP: 0033:0x7fa92d18ebe9 [ 1364.913511][T17563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.913527][T17563] RSP: 002b:00007fa92e057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1364.913547][T17563] RAX: ffffffffffffffda RBX: 00007fa92d3b5fa0 RCX: 00007fa92d18ebe9 [ 1364.913562][T17563] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 1364.913574][T17563] RBP: 00007fa92d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1364.913586][T17563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.913597][T17563] R13: 00007fa92d3b6038 R14: 00007fa92d3b5fa0 R15: 00007ffd3be9f158 [ 1364.913619][T17563] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1365.325420][T16279] kaweth 6-1:0.0: Error setting receive filter [ 1365.356991][T16279] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 1365.369142][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1365.377084][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1365.396461][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1365.404636][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1365.416956][T16279] usb 6-1: USB disconnect, device number 74 [ 1365.456952][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1365.832487][ T3571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.941441][ T3571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.063509][ T3571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.121753][T17588] chnl_net:caif_netlink_parms(): no params data found [ 1366.163736][ T3571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.380801][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.392365][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.402225][T17588] bridge_slave_0: entered allmulticast mode [ 1366.409998][T17588] bridge_slave_0: entered promiscuous mode [ 1366.433208][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.445198][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.456079][T17588] bridge_slave_1: entered allmulticast mode [ 1366.466315][T17588] bridge_slave_1: entered promiscuous mode [ 1366.495504][ T3571] gretap0: left allmulticast mode [ 1366.502921][ T3571] gretap0: left promiscuous mode [ 1366.508193][ T3571] bridge0: port 5(gretap0) entered disabled state [ 1366.516217][ T3571] bond2: left promiscuous mode [ 1366.523493][ T3571] bridge0: port 4(bond2) entered disabled state [ 1366.531806][ T3571] bond1: left promiscuous mode [ 1366.539172][ T3571] bridge0: port 3(bond1) entered disabled state [ 1366.549998][ T3571] bridge_slave_1: left allmulticast mode [ 1366.555706][ T3571] bridge_slave_1: left promiscuous mode [ 1366.562781][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.571934][ T3571] bridge_slave_0: left allmulticast mode [ 1366.578154][ T3571] bridge_slave_0: left promiscuous mode [ 1366.583893][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.882474][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.892754][ T3571] bond_slave_0: left promiscuous mode [ 1366.898424][ T3571] bond_slave_0: left allmulticast mode [ 1366.905244][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.914425][ T3571] bond_slave_1: left promiscuous mode [ 1366.920982][ T3571] bond_slave_1: left allmulticast mode [ 1366.927487][ T3571] bond0 (unregistering): Released all slaves [ 1367.054633][ T3571] bond1 (unregistering): Released all slaves [ 1367.094112][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.187587][ T3571] bond2 (unregistering): Released all slaves [ 1367.206471][T17588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.221148][T17588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.255721][ T3571] : left promiscuous mode [ 1367.264600][T17588] team0: Port device team_slave_0 added [ 1367.273200][T17588] team0: Port device team_slave_1 added [ 1367.295549][T17588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.302864][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.329341][T17588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.340619][ T3571] tipc: Left network mode [ 1367.342000][T17588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.352486][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.378654][T17588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.432187][T17588] hsr_slave_0: entered promiscuous mode [ 1367.438667][T17588] hsr_slave_1: entered promiscuous mode [ 1367.444660][T17588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1367.452630][T17588] Cannot create hsr debugfs directory [ 1367.486777][ T5836] Bluetooth: hci1: command tx timeout [ 1367.530734][ T3571] hsr_slave_1: left promiscuous mode [ 1367.536440][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.544194][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.554587][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.562615][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.573471][ T3571] veth1_macvtap: left promiscuous mode [ 1367.579172][ T3571] veth0_macvtap: left promiscuous mode [ 1367.584735][ T3571] veth1_vlan: left promiscuous mode [ 1367.590085][ T3571] veth0_vlan: left promiscuous mode [ 1367.749695][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 1367.785077][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 1368.166466][T17588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1368.176556][T17588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1368.185990][T17588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1368.195365][T17588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1368.217489][ T3571] IPVS: stop unused estimator thread 0... [ 1368.260868][T17588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.290869][ T3571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.305402][T17588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.316142][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.323325][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.335692][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.342883][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.361739][ T3571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.412994][ T3571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.480754][ T3571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.518120][T17588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.571492][ T3571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.586279][T17588] veth0_vlan: entered promiscuous mode [ 1368.597027][T17588] veth1_vlan: entered promiscuous mode [ 1368.613305][ T3571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.635680][T17588] veth0_macvtap: entered promiscuous mode [ 1368.643913][T17588] veth1_macvtap: entered promiscuous mode [ 1368.663136][ T3571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.678246][T17588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.691560][T17588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.702338][T17588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.712039][T17588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.721101][T17588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.729938][T17588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.744518][ T3571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.776603][T17588] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1368.799726][T17588] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 1368.800302][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.815547][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.839400][ T9808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.848180][ T9808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.867734][ T3571] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.921050][ T3571] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.982778][ T3571] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.054005][ T3571] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.122410][ T3571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.161709][ T3571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.221666][ T3571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.291298][ T3571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.402087][ T3571] bridge_slave_1: left allmulticast mode [ 1369.408536][ T3571] bridge_slave_1: left promiscuous mode [ 1369.414265][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.424315][ T3571] bridge_slave_0: left allmulticast mode [ 1369.430372][ T3571] bridge_slave_0: left promiscuous mode [ 1369.436152][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.445823][ T3571] bridge_slave_1: left allmulticast mode [ 1369.451846][ T3571] bridge_slave_1: left promiscuous mode [ 1369.457971][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.466450][ T3571] bridge_slave_0: left allmulticast mode [ 1369.472985][ T3571] bridge_slave_0: left promiscuous mode [ 1369.479446][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.490076][ T3571] bridge_slave_1: left promiscuous mode [ 1369.496746][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.504892][ T3571] bridge_slave_0: left allmulticast mode [ 1369.510991][ T3571] bridge_slave_0: left promiscuous mode [ 1369.516720][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.525705][ T3571] bridge_slave_1: left allmulticast mode [ 1369.531996][ T3571] bridge_slave_1: left promiscuous mode [ 1369.537924][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.546076][ T3571] bridge_slave_0: left allmulticast mode [ 1369.552707][ T3571] bridge_slave_0: left promiscuous mode [ 1369.558667][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.733283][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.742535][ T3571] bond_slave_0: left promiscuous mode [ 1369.748280][ T3571] bond_slave_0: left allmulticast mode [ 1369.755657][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.764845][ T3571] bond_slave_1: left promiscuous mode [ 1369.771602][ T3571] bond_slave_1: left allmulticast mode [ 1369.777852][ T3571] bond0 (unregistering): Released all slaves [ 1369.788569][ T3571] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1369.797915][ T3571] bond1 (unregistering): Released all slaves [ 1369.875974][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.888920][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.898820][ T3571] bond0 (unregistering): Released all slaves [ 1369.992754][ T3571] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1370.004329][ T3571] bridge0 (unregistering): left promiscuous mode [ 1370.061496][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.070617][ T3571] bond_slave_0: left promiscuous mode [ 1370.076107][ T3571] bond_slave_0: left allmulticast mode [ 1370.083072][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.093474][ T3571] bond_slave_1: left promiscuous mode [ 1370.099250][ T3571] bond_slave_1: left allmulticast mode [ 1370.106090][ T3571] bond0 (unregistering): (slave team0): Releasing backup interface [ 1370.115706][ T3571] team0: left promiscuous mode [ 1370.120617][ T3571] team_slave_0: left promiscuous mode [ 1370.126150][ T3571] team_slave_1: left promiscuous mode [ 1370.132020][ T3571] team0: left allmulticast mode [ 1370.136989][ T3571] team_slave_0: left allmulticast mode [ 1370.142461][ T3571] team_slave_1: left allmulticast mode [ 1370.149212][ T3571] bond0 (unregistering): Released all slaves [ 1370.219942][ T3571] dvmrp0 (unregistering): left allmulticast mode [ 1370.394274][ T3571]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.402923][ T3571] bond_slave_0: left promiscuous mode [ 1370.408560][ T3571] bond_slave_0: left allmulticast mode [ 1370.415194][ T3571]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.424623][ T3571] bond_slave_1: left promiscuous mode [ 1370.430206][ T3571] bond_slave_1: left allmulticast mode [ 1370.436414][ T3571]  (unregistering): Released all slaves [ 1370.446128][ T3571] bond1 (unregistering): Released all slaves [ 1370.529597][ T3571] : left promiscuous mode [ 1370.558361][ T3571] : left promiscuous mode [ 1370.611051][ T3571] tipc: Left network mode [ 1370.630267][ T3571] tipc: Left network mode [ 1371.204723][ T3571] hsr_slave_0: left promiscuous mode [ 1371.210742][ T3571] hsr_slave_1: left promiscuous mode [ 1371.216442][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.224044][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.231804][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.239577][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.253975][ T3571] hsr_slave_0: left promiscuous mode [ 1371.259948][ T3571] hsr_slave_1: left promiscuous mode [ 1371.265667][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.273144][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.280938][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.288761][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.300136][ T3571] hsr_slave_0: left promiscuous mode [ 1371.305877][ T3571] hsr_slave_1: left promiscuous mode [ 1371.311686][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.319169][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.327137][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.334591][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.345018][ T3571] hsr_slave_1: left promiscuous mode [ 1371.350803][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.358384][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.366443][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.374011][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.392073][ T3571] veth1_macvtap: left promiscuous mode [ 1371.397706][ T3571] veth0_macvtap: left promiscuous mode [ 1371.403291][ T3571] veth1_vlan: left promiscuous mode [ 1371.408702][ T3571] veth0_vlan: left promiscuous mode [ 1371.414818][ T3571] veth1_macvtap: left promiscuous mode [ 1371.420973][ T3571] veth0_macvtap: left promiscuous mode [ 1371.426562][ T3571] veth1_vlan: left promiscuous mode [ 1371.431955][ T3571] veth0_vlan: left promiscuous mode [ 1371.438125][ T3571] veth1_macvtap: left promiscuous mode [ 1371.443845][ T3571] veth0_macvtap: left promiscuous mode [ 1371.449633][ T3571] veth1_vlan: left promiscuous mode [ 1371.454953][ T3571] veth0_vlan: left promiscuous mode [ 1371.461250][ T3571] veth1_macvtap: left promiscuous mode [ 1371.466895][ T3571] veth0_macvtap: left promiscuous mode [ 1371.472572][ T3571] veth1_vlan: left promiscuous mode [ 1371.478094][ T3571] veth0_vlan: left promiscuous mode [ 1371.785093][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 1371.820847][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 1372.028321][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 1372.059902][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 1372.300378][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 1372.331527][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 1372.660463][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 1372.693592][ T3571] team0 (unregistering): Port device team_slave_0 removed