last executing test programs: 3m12.297743488s ago: executing program 0 (id=948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) socket$inet_tcp(0x2, 0x1, 0x0) 3m10.826945635s ago: executing program 0 (id=951): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x620b}, 0x0) r2 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) write$binfmt_register(r2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000800)="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", 0xfff}, {0x0}, {&(0x7f0000001880)="e97c6fba74ca347a9936adc513130abd773444a4b40c90fa8268ec6065b80f9795273f322ea88d83968316d8e5f32632c14fc9ee38da1cef82e71f514143cf6b0d1fb3e39f512502f32249b4b797", 0x4e}], 0x3, &(0x7f0000001940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000001980)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001a00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a40)}, {&(0x7f0000001a80)="791cedf65d525e1c28a8e6699f70ccbe0c7264e54c8d1a0a31a150438752181f912e25610c0667508e7b2d18934f45a1b237accdd2834347f51fabb79d0b61fa1cc217ac135089ac1efb741ee59ed1cd49005a02e42b5224967539da6a116f42b13bd572d4c4024f8f441f9d2b4022c11328fd0ac4497ea5f687fc9d4d66ea2fd4100b98c4d17fb2f3a7ffa83e97eb5cb04b4e8a99b220cfad1e2ab81a6c905480b80394ade31396a37548a38490df6a403a46fc423e4f2df1a76343c2cb3854715720ed83dddea6dc9e29a874f7a620eb4fafcbd8394459552ed33d0deadfabf9d1194c2a5420355065f0ce9d2ac17afda9e6762a", 0xf5}, {&(0x7f0000001b80)="04c1ccf17e8459607c3044a749f9d352abe7d78fc4a2e2a709711f0553f001c2d9df3e2724b780dbf61ba422aba123204eaab43e47183a8966794bbba05fbe91e135237cd4b08fe68184ff1c0d41d79d463c8b2ba2693901f0a652f33294d5f66e68ee5e36df93ce6203a769655e985d94d83a3622f0a1fe1a1de201797e1e896e3db9b58915b45c26784be9002f152bdfb0342c80a8e0", 0x97}, {&(0x7f0000001c40)="0179b33a32eeffcb592f3704daabaa2a2e68c60353e9b063f8bede06fa66bea906d1cb68f3617f1fe503184ec45a0476e80c10", 0x33}, {&(0x7f0000001c80)="25ec08f8cf5b32d7da4481523cec753c03de5bd71d8429b66f6588b0cb60771aa4f8c176e706cf2ee1f06a8d6e238c436f18d46eee4fc36d1ff39a2ec1d4ecae1935eff5eafccff5eef4b97197cc7a56b37f27774f3917ecba44bf6101ef147a3bfabf728b45bb10f481b76ba5099c34660d58ac236ef65ebcd78aef8cd1d523c4fcc87d08d92e78d98312dc9fc0d2edcb5bceb0ff5fb31ddd9cb04591b1fe9f55d28dcf02", 0xa5}], 0x5}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001e00)="5fea3d63cf4e49aca1931bdb96cdb883a59fbc10443b10d8830281ac568efa3f94a1c33a6ee2fe3043e2730953d2eedf1d3bac1cf3c37a347504faff3bd19a0d95445d122e073c878731759e4ea004c6018b139c644e598ffeb41c35d97defc594125df8ba2d3f6d2715db7896503da818805bf41f1d6f25679c851cf8a65a44424d7907a951363f8d2940ac0b8cda59022535ab836d9d6b9f453202631e23d596f0b57b4dd769565fbd81cd0bb0f26cbac45a1f7193a669243ce3f0a046548bdede7cf64450de94bbe5ea94951aa0b773b32362dbc3c577ac78fb1e4ec672b1e227182afd94b539ec92", 0xea}, {&(0x7f0000001f00)="44e1bd47d6b60a3c71e494a49fb914aa9f3355bad9d2201f60d73526536e92702c76bcc29a206053704c63ca849594", 0x2f}, {&(0x7f0000001f80)}, {&(0x7f0000002040)="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", 0xff}, {&(0x7f0000002140)="8cd194e4c116fab0064a3e5531f046f9e77cb12782abf20152bbfee8a4dc80b3906828c440376c61db50f19e67c364e7da4382da40aaedca164cbdf9e84b9ca711bcdc1b62d8780b1bf0592e5904c5977f908435b5d698c529176e981f282d50e63bb3560f4443d6c59f9424e0c34d65e5850778e81eccfe3151fa4c097081755f51e703f39dd8a574abe854e2b770c2910d5a1f3b339b64b137619751cfefc2ced640bc8365666426673698d5232470a5da013908a1879a51681780d552db6848e820ffa28cb038bb00390b4f8091091b2c39a5ae40af370366df54df6e4e08c1bdd72b30", 0xe5}, {&(0x7f0000002240)="1cea17ac9805d6fb32c1d3f5f5c6616f2f40ec4ac64b9d14a1e5fe65d6c08814fa72756287a289a62eac0b80b630c1a5432ab33b9a2380a1c8ae554e160336fef0dbf99b3edd7b3788ade93594c78125850ed4f48812", 0x56}, {&(0x7f00000022c0)="db6bb4779b5f81826c759d0d8d31a92eff60636a2a1debd7d99399dd2727b5fe310122c6881910ffaba8e75068e808c255edaec0a89cb3d2fdfb2c293ce7e6a5cfc4f77bc5aa830a1a24245fe9f0427a45e2466ef4a3115729278c7fdbc419992bfa68db0485318f0dc73c74b4b3a031e3e2e918c97df90d6f9c88c5b2efab9790d73d867d97da88db53f6dbb4bbadf65023f4ecd0844c74a4cd88f52df6acb4e6f0b4bb7c04246927fa2d0ab280348f0726cb15dd9e8a53e7b9c39fefe8b403a4fe9ab48531", 0xc6}, {&(0x7f00000023c0)="6540e16f924170cb440ae9f8273a8ca60e92b773d33930866f543ee4ee349556bb019708a5e34320f274f0840015c4d2ea357fef745a5991e0d933027b7cb1de10afd2e3befa1442c1f8860b7f21987c1c7be84ce3629a74f948e01b519f97c9dae654dc0fcb927ee4928bef4c5a486b0d843741074fcb273dc7f24283dd", 0x7e}, {&(0x7f0000002480)="8cdc08d994637f49c86f20426518d96eced9bffef91c1906378f6e818a786080c7a1c4099d656612b50247efc08010097ec057c5477ba4a8bf8bfb398889cf8c2095414b5657b478cba61716a62cdb810a2bb76fbd06df0c4683d485d44eafe721401a7ae2c201d45f37239ed67b3cde11f896c8b2a77f8e3112150f1e038cb9d8ebafb43de81a1b2536c479f6db254219756b393aa5f7a681be3167513c39f20b214845459c9de9f0a5918c36515a2160a69c877e851a15c1f6356a67a3cec8cac14e774da80d", 0xc7}], 0x9, &(0x7f0000002640)=ANY=[@ANYBLOB="98000000000000000000000007000000891fd1ac1414aae00000010a0101020a010100ffffffffac141423e0000002865b00000000000f2e09700bd3146314059700c0a60602000e920784e347ad81a9a55847ea070473750610510c00d549e27d3a399d919423110703620207af0dafa1a5001032e5f5c130bc70127b48c4d33fef060816397945feba00890b58e000000100000000000014000000000000000000000002000000000400000000000014000000000000000000000001000000260a000000"], 0xc8}}, {{&(0x7f0000002740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000003c00)}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)="7f63239bf49b8333b1eca31a371cf98795bbaa2a92e28f5d2451dc5b1771868c97eab4103078f33bbc638ed55229847bb2464b4b6f9d9c50e0c48442cf679cfc09", 0x41}, {&(0x7f0000003d00)="0fede9558a5967bb8b920ab1c9fd3b8d0c389af8a4efaf02ae73a68be9356bc3547c479728d2d72e3d950293fe3610571938b5d99f20661f70bf9b1e5c2b3199aff1fc586eccb9c09cc77d2c1a35bcfc0afbfea0bb596516254848d70c042f07f588aa513bd91a98577660b4c4c06baaed61e081ef950cfa76db2163deebc2835d9a1acfd95705b0e00c4c2034e1fa3805e10c615414cef744f716e92b8fc43714a5c295f2c777e015d46e34f0753f8ca11cb647606cb300", 0xb8}], 0x2}}, {{&(0x7f0000004380)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000004440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x5}, {@empty, 0x10e}, {@private=0xa010102, 0x8f1}]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0x1, [{@local, 0x8}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x8f}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x5, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0xf6, 0x3, 0x7, [{@private=0xa010100, 0x1}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0xf, 0x0}, 0x1}, {@multicast1, 0x7}, {@multicast1, 0x2ef6afad}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb44}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0xeb, 0x0, 0x5, [0x8, 0x9, 0x2, 0x0, 0x3]}, @noop, @noop, @lsrr={0x83, 0x7, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x140}}], 0x7, 0x4080) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000002c0)=0x1, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10a842, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000001a40)=@ccm_128={{}, "bf297cc716fb4efe", "22d8c1ab81acd5128ec566b746628cb4", "b26c1651", "7f44483d871b806d"}, 0x28) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40900) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000100)) syz_usb_connect(0x4, 0x439, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xf, 0x6, 0xc6, 0x8, 0x5cc, 0x3350, 0x2185, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x427, 0x3, 0x4, 0x8, 0x10, 0x3f, [{{0x9, 0x4, 0x60, 0x5, 0x3, 0xf7, 0x55, 0x59, 0x0, [@hid_hid={0x9, 0x21, 0x4, 0x18, 0x1, {0x22, 0xf4a}}], [{{0x9, 0x5, 0xf, 0x0, 0x79f, 0x7, 0x5, 0xfb, [@generic={0x41, 0x21, "6ccc0da701788f0535bb7c9fcaf14a425ef96e0bed1a34a163686225e66e9c7494f983ea7220202b4022ca4dc4f581a5bf252d624369b799ecf1e2a9836b42"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1200}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1ff}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x40, 0x7, 0x7}}]}}, {{0x9, 0x4, 0x63, 0x81, 0x10, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x6, 0x4, 0xfc}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x42c}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0xd9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7f, 0x6, 0xfb, [@generic={0x1c, 0xc, "5578205711f281e1e9c4de70daea006386ea954792db1c392b5e"}, @generic={0x7f, 0x11, "28b57da76bd1734f940cc5824bdfe1ed77ed7912d9485366b6776d0d1374ddd6ae91a5bec445911f75fee4cc5d663309913c19bc2e4d89564143e6941be287d6f547408aef516379f59ed8c231036ea9a46bb4934c2ab4447a511af7b85b533788149eb70301f749fff791e9b202845d9a1155a4b24269e8f24d924684"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x45, 0x7, 0x3}}, {{0x9, 0x5, 0x6, 0xb, 0x200, 0x6, 0xb0, 0x4}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x3, 0xf7}}, {{0x9, 0x5, 0xe, 0x10, 0x660, 0x0, 0xe, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x9, 0xd9, 0xde}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xb6, 0x4, 0x1, [@generic={0xc6, 0x23, "9d3e4ceef339acfd2d0382780ef1d463eae0bc53c4f6999f8cec10e58d453e5499c2bd825e538111750110fb6350c5647795b14fc04b9f53fb3c1913b4619683fbca33777e1ad48f7a4d6771ab8818acce1ef23969ba040378f9a391199cded747cf3d2778b5f5195549367d05ed4d77d31207722fc6ef36b12be4c7d85eabbc7c33ff14485bba1274bd75e3f0b43fd47bfa56590cc8109eb984c1052d6e8697e963e51e6f599abc3a50b77f8c01316ae502ecdacc190b607658bbe74668c01d7526b65f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x81, 0x0, 0x21}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x7d, 0x3, 0xc7, [@generic={0x3c, 0x24, "c905c3edd2c1dbd859cf2c0d490055045a1ef9012314032b677c46a4e5a08674e6dc58ca84cef6b4af6e7d0dd4f6943f23ad2f97e86d79420bbd"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x1, 0x9, 0x9e}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0xfc, 0xcb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1000}, @generic={0x83, 0xe, "8c6795a64114d83ebcd716bcb7c60f6330ffd361a8ae2592c8383e69e9ec9428bbadfcf6fb48dc14cb016a89b7aed780a055eace693386d2f31672c1088323d52256ef8ea24abd5db498edf36e167836b1789984c25979fb366e89bc46cb7932f051340771c1ebd387ac8af039e4449a29bf331517bebe1842a05a7d33306d1e01"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xb, 0x2, 0xfc}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x40, 0x6, 0xb6, [@generic={0xb4, 0x31, "1c7812e1a20e8e977c1e33fc368eb0a1e088c989d81ddfcc48ac8a224029483f70f56cea40c43528f6c4c52b144212738ce3b32d7ea7f29d928d841e5abed9a2ddc9029aa3a34f2223b904b307ade6a603747d89e31566358c0bd50d0f46e036ed21d87cc12c04f7fe2ea09b1879f0930ca8b2787bdb29145c249b2b6b4d64900a2aa3e52edc2b00df8360c107e5da50c576268caea37c23f288b0a96730b53d7acaeea85b66d50288951dbd24351a37b9f5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x4}]}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0x1, 0x56, 0xb, 0xfd, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0xc, 0x7}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x2, 0xff, 0x48, 0xfb}, 0x54, &(0x7f0000000080)={0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x1f01, 0xf78f, 0x8, [0xc000, 0xc0, 0x0, 0xc030, 0xff00c0, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0xef, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f6068afeca6b7a92e0aa4ec00d982f89"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x5}]}, 0x1, [{0xcf, &(0x7f0000000140)=ANY=[@ANYBLOB="cf038310b1fb5cf7420794f74d8e3d2399c0006a404e153f930ad15820d634ff6d43a0f3a7d3405fe3219b4b1d59131e23337d440e38b8412de832ab667493a877d0a1326c22bc7e091c081509f6d47c7ee71b5eee809738f0f176b74bb6a6492fbce4855d075f3536ba8c87b8cb084666534b2c83d1c3a400a5c72b748c5ab8506f046a93bafbfcf4a2885a6c3abb2d11cab305f464b52d61630da6f3e98f38102ebc28b9e57d61fbc51d523d385b8c17a42ad706ab490cab9752ceee2e591b0cac49301f776cdbcee639e7708e1e"]}]}) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000004a00)={0xfffffffc, 0x7ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x5}) sendmsg$nl_route(r5, &(0x7f0000004b80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004b40)={&(0x7f0000004a40)=@ipv6_delrule={0xc4, 0x21, 0x100, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x14, 0x5, 0x2, 0x0, 0x0, 0x3, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x10001}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff, r8}}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6erspan0\x00'}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xbc}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x620080, 0x0) read(r6, 0x0, 0x0) 3m6.283337116s ago: executing program 0 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x400, 0x2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa2000, &(0x7f0000000640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000180)=0x2, 0x4) r9 = dup(r8) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r9, 0x0, r0}, 0x10) recvmmsg(r9, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000121, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200f13000000fae6de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m2.722000905s ago: executing program 0 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r4, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8a9}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x800, 0x8, 0xfbffffffff7ffffe, 0xe, 0x9, 0x9, 0x100, 0x0, 0xe0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) r10 = open_tree(r9, &(0x7f0000000280)='\x00', 0x89901) move_mount(r10, &(0x7f00000006c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1f000000f7ffffff0300000001000000f0960000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000300"/20, @ANYRES32=r10, @ANYBLOB="00000000dceb8990eb5378f6efd0abd7377b2038b8a65c217940d87f0d22457c5571fc27e97d6149ce14d5cf17eed17c02782808a59e054822ba7c196c4422716809b61ca5471da3b24beb606a1726d067f27ceb62ad5ec976bdec9118c8b0764a43514d726f83a01914b764bc842f591915707019fa2886"], 0x50) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r12}, './file0/../file0/../file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r11, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffe2f, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000702030000000000000000000a0000060500010007000000080006c5974a241d"], 0x24}, 0x1, 0x0, 0x0, 0x40805}, 0x200080d0) 3m1.447210639s ago: executing program 0 (id=978): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3ff, 0x7, 0x3ff, 0x8, 0x4}, 0xee8, 0x0, 0x7fff, 0x0, 0x4, 0x1a, 0x19, 0x18, 0x2, 0x81, {0xffffffff, 0x2, 0x4, 0x0, 0xb, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000080)={0x4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 2m58.737915757s ago: executing program 0 (id=984): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m56.902185093s ago: executing program 32 (id=984): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14.699459981s ago: executing program 3 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) socket$inet_tcp(0x2, 0x1, 0x0) 12.8563469s ago: executing program 3 (id=1425): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@setlink={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1818, 0x2400}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x52}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x50}}, 0x0) syz_io_uring_setup(0x4594, &(0x7f0000000480)={0x0, 0x81d4, 0x80, 0x3, 0x179}, &(0x7f0000000280), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 9.184877607s ago: executing program 5 (id=1434): creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) setxattr$system_posix_acl(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x5}, [{0x2, 0x2}], {}, [{0x8, 0x3}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x4}], {}, {0x20, 0x6}}, 0x5c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 9.112320679s ago: executing program 3 (id=1436): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, 0x0, 0x0) (fail_nth: 4) 8.105504558s ago: executing program 3 (id=1437): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x81, 0x141000) close(r0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1acfa74cf77696c4, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x86, 0x0, 0x10000, 0x0, &(0x7f0000000040)="7a84af1ced39045dea5e499d9165ef1570e9312cfd3f36ec9422861551ce8de7058e3e3f8c8ded7e279123d261663d3b23db5867a6e004f760677a0fc68470769b7a3ba772e58e5c032a17a2dbf91a7a142dec371d7f04b45fb26a84", 0x8, 0x0, 0x1}) r2 = dup(r0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz0\x00', {0x8, 0x8, 0x3}, 0x28, [0x80000001, 0x9, 0x8, 0xc, 0x5, 0x7ff, 0x3, 0x10000, 0x4e11, 0x9, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x2, 0xd9, 0x68d, 0x7ff, 0xc7b5, 0x0, 0x5, 0x80000001, 0xfff, 0xe, 0x8, 0x7, 0x9, 0xb, 0x1, 0xba, 0x8, 0x7, 0x4, 0xf, 0x2, 0x10001, 0x2, 0x3, 0x40, 0x6, 0x9, 0x9, 0xffff, 0x2, 0x0, 0x8, 0x937, 0x6, 0x0, 0x0, 0x909, 0x2, 0x9, 0x3, 0x8, 0x8, 0x6, 0xefc7, 0x4, 0x2, 0x0, 0x9, 0x9], [0x10000, 0xade, 0x8, 0x98, 0x100, 0x5, 0x7, 0x3, 0x400, 0x3, 0x8001, 0xa, 0x7, 0x2, 0x400, 0xe82, 0x0, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x1ff, 0x5, 0x7f, 0x1, 0x9, 0xe, 0x10, 0x9, 0xfff, 0x40000000, 0x5, 0x2, 0x0, 0x8, 0x88e6, 0x3, 0x80000000, 0x5580000, 0x8a17, 0x400, 0x0, 0xe, 0x1000, 0x5, 0x3, 0x7fff, 0x4, 0xffffdecd, 0x8000, 0x87f, 0x972c, 0x8, 0x5fde, 0x7, 0x8, 0x7, 0x8, 0x1, 0x101, 0x10000, 0x6, 0x4], [0x1, 0x3, 0x2b, 0x4, 0x6, 0x9, 0x0, 0xa, 0x2, 0x8b9, 0xff, 0x101, 0x7fff, 0x7, 0x400, 0xae, 0xfd6d, 0xccb2, 0xd68df40, 0x3, 0x240, 0x80000000, 0xc806, 0x7, 0x8, 0xfffffffb, 0x9, 0x2, 0x8000, 0x7ff, 0x4, 0x8fb, 0x9, 0xfffffff8, 0x0, 0x6, 0x10, 0xfff, 0x5, 0x6, 0x9, 0xa, 0x1bc8, 0x4, 0x7, 0x3ff, 0x100, 0x1, 0x0, 0x0, 0x401, 0xe, 0x10d5, 0x1000000, 0x8, 0xf, 0x3, 0x0, 0x5, 0x1, 0x8, 0x6, 0x6, 0x6], [0x100, 0x7, 0x9, 0x6, 0x1, 0x6, 0xffffffff, 0x1ff, 0xb96, 0x92a, 0xc, 0x403f, 0xc, 0x10, 0x0, 0x3, 0xfffffffe, 0x9, 0x70, 0x81, 0x200000, 0xc, 0x6, 0x2, 0x8f72, 0x0, 0x6, 0x4, 0x1, 0x8, 0xe25, 0x7ff, 0x4, 0x4, 0xffff4806, 0x6, 0x4, 0x7, 0x40000000, 0x9, 0x100, 0x5, 0x3, 0x6, 0x401, 0xf49, 0x0, 0x4, 0x6, 0x6, 0x8, 0x1, 0x10001, 0xe6, 0x2, 0xa, 0x0, 0x668, 0x4, 0x5, 0x1, 0x3, 0x2]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz0\x00', {0x8, 0x8, 0x3}, 0x28, [0x80000001, 0x9, 0x8, 0xc, 0x5, 0x7ff, 0x3, 0x10000, 0x4e11, 0x9, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x2, 0xd9, 0x68d, 0x7ff, 0xc7b5, 0x0, 0x5, 0x80000001, 0xfff, 0xe, 0x8, 0x7, 0x9, 0xb, 0x1, 0xba, 0x8, 0x7, 0x4, 0xf, 0x2, 0x10001, 0x2, 0x3, 0x40, 0x6, 0x9, 0x9, 0xffff, 0x2, 0x0, 0x8, 0x937, 0x6, 0x0, 0x0, 0x909, 0x2, 0x9, 0x3, 0x8, 0x8, 0x6, 0xefc7, 0x4, 0x2, 0x0, 0x9, 0x9], [0x10000, 0xade, 0x8, 0x98, 0x100, 0x5, 0x7, 0x3, 0x400, 0x3, 0x8001, 0xa, 0x7, 0x2, 0x400, 0xe82, 0x0, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x1ff, 0x5, 0x7f, 0x1, 0x9, 0xe, 0x10, 0x9, 0xfff, 0x40000000, 0x5, 0x2, 0x0, 0x8, 0x88e6, 0x3, 0x80000000, 0x5580000, 0x8a17, 0x400, 0x0, 0xe, 0x1000, 0x5, 0x3, 0x7fff, 0x4, 0xffffdecd, 0x8000, 0x87f, 0x972c, 0x8, 0x5fde, 0x7, 0x8, 0x7, 0x8, 0x1, 0x101, 0x10000, 0x6, 0x4], [0x1, 0x3, 0x2b, 0x4, 0x6, 0x9, 0x0, 0xa, 0x2, 0x8b9, 0xff, 0x101, 0x7fff, 0x7, 0x400, 0xae, 0xfd6d, 0xccb2, 0xd68df40, 0x3, 0x240, 0x80000000, 0xc806, 0x7, 0x8, 0xfffffffb, 0x9, 0x2, 0x8000, 0x7ff, 0x4, 0x8fb, 0x9, 0xfffffff8, 0x0, 0x6, 0x10, 0xfff, 0x5, 0x6, 0x9, 0xa, 0x1bc8, 0x4, 0x7, 0x3ff, 0x100, 0x1, 0x0, 0x0, 0x401, 0xe, 0x10d5, 0x1000000, 0x8, 0xf, 0x3, 0x0, 0x5, 0x1, 0x8, 0x6, 0x6, 0x6], [0x100, 0x7, 0x9, 0x6, 0x1, 0x6, 0xffffffff, 0x1ff, 0xb96, 0x92a, 0xc, 0x403f, 0xc, 0x10, 0x0, 0x3, 0xfffffffe, 0x9, 0x70, 0x81, 0x200000, 0xc, 0x6, 0x2, 0x8f72, 0x0, 0x6, 0x4, 0x1, 0x8, 0xe25, 0x7ff, 0x4, 0x4, 0xffff4806, 0x6, 0x4, 0x7, 0x40000000, 0x9, 0x100, 0x5, 0x3, 0x6, 0x401, 0xf49, 0x0, 0x4, 0x6, 0x6, 0x8, 0x1, 0x10001, 0xe6, 0x2, 0xa, 0x0, 0x668, 0x4, 0x5, 0x1, 0x3, 0x2]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000600), 0x1, 0x8000) (async) r3 = syz_open_dev$evdev(&(0x7f0000000600), 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@empty, 0x4e22, 0x8, 0x4e24, 0x3, 0x2, 0xa0, 0x10, 0x16, r4, r5}, {0x8, 0x4f, 0x2, 0x3, 0x8, 0x8001, 0x3, 0x1}, {0x1, 0x3b, 0x4, 0x1fd}, 0x1, 0x6e6bb0, 0x2, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d5, 0x33}, 0x8, @in6=@private2, 0x34ff, 0x1, 0x0, 0x60, 0x50, 0xd0f6, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@empty, 0x4e22, 0x8, 0x4e24, 0x3, 0x2, 0xa0, 0x10, 0x16, r4, r5}, {0x8, 0x4f, 0x2, 0x3, 0x8, 0x8001, 0x3, 0x1}, {0x1, 0x3b, 0x4, 0x1fd}, 0x1, 0x6e6bb0, 0x2, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d5, 0x33}, 0x8, @in6=@private2, 0x34ff, 0x1, 0x0, 0x60, 0x50, 0xd0f6, 0x4}}, 0xe8) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000840)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x40}}, 0x24008851) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x40}}, 0x24008851) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x400001, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x400001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r4, r2, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x36}, @ldst={0x1, 0x1, 0x2, 0x8, 0x3, 0x50}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x7fffffff, 0x52, &(0x7f0000000b00)=""/82, 0x41100, 0x21, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000000b80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000c40)=[r2, r2, r2, r2, r2, r2, r7], &(0x7f0000000c80)=[{0x5, 0x3, 0xc, 0x8}, {0x5, 0x1, 0xb}, {0x5, 0x5, 0xb}, {0x0, 0x3}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xa, 0x5}], 0x10, 0x2, @void, @value}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), 0xffffffffffffffff) syz_io_uring_setup(0x4c91, &(0x7f0000000e00)={0x0, 0x4625, 0x1, 0x1, 0x19a}, &(0x7f0000000e80), &(0x7f0000000ec0)) recvmsg(r2, &(0x7f0000001040)={&(0x7f0000000f00)=@xdp, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f80)=""/112, 0x70}], 0x1}, 0x12000) sendmsg$kcm(r2, &(0x7f0000001580)={&(0x7f0000001080)=@llc={0x1a, 0x0, 0x6, 0x5, 0xf, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)="bb84f776809a32e88043056b3e11746d55e06519fd9c9a92c93b5753cb482f66c6933e4e69dfba1376a523e802026a3e2dffdf50e6626ba589d7c626815eac8e177da9ab1ba2530f0a46d20721877fbceca2aa47cacd77c43a1dd9dc55873d53f646bda42b79ae278c3790e34bfd4d6e7ea16e9ca85e6d97c8729ab55998d94b73b562c4d7537e66c4af0733fb1d7b991e4196570800625db04cb6c64db5f00f936906c857", 0xa5}, {&(0x7f00000011c0)="eee37b8908621c3aa6440f5cc754f1f7f5dcfc1a26d0ae22fdc4a22e321a8e6d8574546c6d76469864481a711271c0e8b398602bbe82cda45412f89ce610d5b2d14f358d175e413b8d9900867b268dcf764313d2f2d17879ac1c14a28123310ea918cece3608afa506ed831f40a7618bafaf90c57238d5d03f57c4d131dc6a49f4", 0x81}, {&(0x7f0000001280)="40067e46404f317bfc12908923208d1afe071725158c6b0ea3a5e7edfb61fc3961f7d4202ebdd8b0f1667f4691b934d7c6f08ebd6b6d433c2978728b525a4ef4f9a56f4edc7c5892cacf5cb1a60773074d37eed27b9e9f213d28e904", 0x5c}, {&(0x7f0000001300)="b66f0f7b75ac0bf84a2326d4d55d44b5d9e485d05278b083e34d691cb54537363ab8e0d4047a740c94f1367ed5d9557639e894cf22315915581664d4313df55ce05ce2e55b687d1c25ebc04fe88f1ceabd6b2ea649211097aa4a06139af0dcc7e369e927b11411e41a010971e0f4ad67a723d01e0963c2f00618e94c982b6043736bc2bcdcc9a6cf299025e9643bf5a03ea24ac4669be7df4a2f54039e9127a1e7a59760b03f309d254a3570c05fdbcda99a9287b248874811a16bfd5c748804440dd85c6b5a7ebf5d730aac740c18f80415969c90a52633594a", 0xda}, {&(0x7f0000001400)="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", 0xff}], 0x5}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000001580)={&(0x7f0000001080)=@llc={0x1a, 0x0, 0x6, 0x5, 0xf, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)="bb84f776809a32e88043056b3e11746d55e06519fd9c9a92c93b5753cb482f66c6933e4e69dfba1376a523e802026a3e2dffdf50e6626ba589d7c626815eac8e177da9ab1ba2530f0a46d20721877fbceca2aa47cacd77c43a1dd9dc55873d53f646bda42b79ae278c3790e34bfd4d6e7ea16e9ca85e6d97c8729ab55998d94b73b562c4d7537e66c4af0733fb1d7b991e4196570800625db04cb6c64db5f00f936906c857", 0xa5}, {&(0x7f00000011c0)="eee37b8908621c3aa6440f5cc754f1f7f5dcfc1a26d0ae22fdc4a22e321a8e6d8574546c6d76469864481a711271c0e8b398602bbe82cda45412f89ce610d5b2d14f358d175e413b8d9900867b268dcf764313d2f2d17879ac1c14a28123310ea918cece3608afa506ed831f40a7618bafaf90c57238d5d03f57c4d131dc6a49f4", 0x81}, {&(0x7f0000001280)="40067e46404f317bfc12908923208d1afe071725158c6b0ea3a5e7edfb61fc3961f7d4202ebdd8b0f1667f4691b934d7c6f08ebd6b6d433c2978728b525a4ef4f9a56f4edc7c5892cacf5cb1a60773074d37eed27b9e9f213d28e904", 0x5c}, {&(0x7f0000001300)="b66f0f7b75ac0bf84a2326d4d55d44b5d9e485d05278b083e34d691cb54537363ab8e0d4047a740c94f1367ed5d9557639e894cf22315915581664d4313df55ce05ce2e55b687d1c25ebc04fe88f1ceabd6b2ea649211097aa4a06139af0dcc7e369e927b11411e41a010971e0f4ad67a723d01e0963c2f00618e94c982b6043736bc2bcdcc9a6cf299025e9643bf5a03ea24ac4669be7df4a2f54039e9127a1e7a59760b03f309d254a3570c05fdbcda99a9287b248874811a16bfd5c748804440dd85c6b5a7ebf5d730aac740c18f80415969c90a52633594a", 0xda}, {&(0x7f0000001400)="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", 0xff}], 0x5}, 0x0) mq_open(&(0x7f00000015c0)=',%\x00', 0x800, 0x2c, &(0x7f0000001600)={0x200, 0x9, 0x8}) (async) r9 = mq_open(&(0x7f00000015c0)=',%\x00', 0x800, 0x2c, &(0x7f0000001600)={0x200, 0x9, 0x8}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001680), 0x120400, 0x0) io_submit(0x0, 0x5, &(0x7f0000001a40)=[&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x6, 0x4, r9, &(0x7f0000001640)="a9796cbdc798", 0x6, 0x3, 0x0, 0x1, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000001700)="336aab3940750e9cb608c861a9fb1de25bf66d5e732f28b0cb7301a563b53aa92004d9623c1e63cb351c2f3b1f37d107d74c29754d36bc92bfc29207228bc44dcc3c5b3204394660a3f9cf8a2e94fed5bd49912550c6a852cf8ca7ffdcf0763c8bb526e631d73c5026ae84c766d5e3fb", 0x70, 0xa, 0x0, 0x3, r2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x3, 0x7a9, r8, &(0x7f00000017c0)="e2cdddeb8cee7ae1f2842450ccc86c475fbcc3ef4d26d3be7fb17839e6d25f182a5f3c51363d66252c13663c67e93da7ce02f67a3e6e41dbdadbe845dbb51464709fdaa43663879e301c1c02dc502c5ab4a525d197ad682e646d5c4d7b362034c90fa9a4512a38a9ab4860be6bd10cb2cceefce056072725dc132182b919cddff8e287800d7a82861978b00b29eaa69fb9dbaa28b40321bebca2e50b505d9272d53713", 0xa3, 0x7fff, 0x0, 0x2, r2}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x6, 0xe460, r6, &(0x7f00000018c0)="c033819b5cbf0cd7d01302435cc27e4fbcba02e1925c686f47ff09e8ee3d7718e214a62aa81e83b52d6d7dc9fdeab0c891f80a38f825fc7cc51b61bc536fae59c30f21226a967df4d20928314d5c0da589ec38c3db3b3f75ef308bb2f1749b1bf9ea19456d13b0717e", 0x69, 0x0, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000001980)="28bcd61e323d74f5055e8514889e46082341ecd85d87fd4c74b854e68f2eddca59686effed2a0f14d3ed4496cc5858eed3b1078e90b8920adb75b67b681c6d57d7457abdfef547ea202efd0a97702c11db6caffe0d9627996955ecc1bf1b431c6ed71c66a83279", 0x67, 0xff42, 0x0, 0x3, r2}]) r11 = fcntl$getown(r3, 0x9) prlimit64(r11, 0x9, &(0x7f0000001a80)={0x200, 0x4}, &(0x7f0000001ac0)) syz_emit_ethernet(0xaf, &(0x7f0000001b00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@x25={0x805, {0x2, 0x0, 0x1, "f77d28b3a4b84e28530252b6230aea901461b71a32221b0955235b8e87925edce077826eaa05139476da44dffe75f4d0e4e231922e52183dba6893b3b293516664a42129b7b263463a60ef70e321bd37a65c78372c34b0fb568503ac31b91b85c223a413fba6c23c1ca80428a6d324f3e6d09d395ce334131f61c3c8dad828e3f847abfbd59df14754d91db9f3e52aa84ba8e194163514ebdb053970276c"}}}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r10, 0xc01064ab, &(0x7f0000001f40)={0x1}) 7.826428303s ago: executing program 5 (id=1440): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioperm(0x2, 0xf, 0x9e8f) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080bf8e9b0000000000000000004800"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$hiddev(r5, &(0x7f0000000080)=""/39, 0x27) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000001c0)=0x14) syz_io_uring_setup(0x41c8, &(0x7f0000000240)={0x0, 0xeed6, 0x1, 0x2, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000080)) 7.672697515s ago: executing program 3 (id=1441): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xffff}}, 0x9, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x4, 0x1, {{0x7, 0x4, 0x3, 0x2, 0x1c, 0x67, 0x0, 0x7, 0x0, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x8, 0xf7, 0x0, 0x8, [0xffffffff]}]}}}}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x112, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x1, 0x1, 0x4, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "d66a7d"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x7fff, 0x4}, [@mdlm_detail={0xbb, 0x24, 0x13, 0xb, "e65a77323a460a684a53f2543e55d67340ee5280365d84dc0a34b3ae4cefcca1146464f13a205fe16638c27aa2a75494ea4ea21856f191e0c218bb260fc82f99aebc889fe10b50648ac9837066f0f4da2995600c813847fbb9c104923ed79bb3bad67e1f51a7fdd9effa4c018e958e1460b022afe919f6158921d22cffe583ce26983550392e4631673e49ab7d88a3932f06a8a36be05f9cf21e3099e592c2e10f64823c6426bc23225bb9df5cfd1b484b476a1022bec6"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xa2, 0x97, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x3, 0xd8}}, {{0x9, 0x5, 0x3, 0x2, 0x6e20413cd7811827, 0x9, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x9, 0xff, 0x40, 0x6}, 0x6f, &(0x7f00000001c0)={0x5, 0xf, 0x6f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x69, 0x6, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xa5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "b71ef801af74dfce57ddea17d1150cd6"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "218c7e8ebb3552f5ea430d2deef6c725"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x100, 0xf00, 0x8, [0xc0f0, 0x3ff0, 0x30, 0x0, 0xffc0cf, 0xc00f]}]}, 0x1, [{0x2, &(0x7f00000000c0)=@string={0x2}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0xffff0f00, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r11, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 6.64775996s ago: executing program 5 (id=1444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000000)='./file1\x00', 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000440)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000024c0307a300000000000000000001010008", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) 5.426269513s ago: executing program 5 (id=1446): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@setlink={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1818, 0x2400}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x52}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x50}}, 0x0) syz_io_uring_setup(0x4594, &(0x7f0000000480)={0x0, 0x81d4, 0x80, 0x3, 0x179}, &(0x7f0000000280), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.26566326s ago: executing program 4 (id=1447): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.147140714s ago: executing program 2 (id=1448): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.00756293s ago: executing program 4 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) socket$inet_tcp(0x2, 0x1, 0x0) 4.343128981s ago: executing program 1 (id=1451): creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) setxattr$system_posix_acl(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x5}, [{0x2, 0x2}], {}, [{0x8, 0x3}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x4}], {}, {0x20, 0x6}}, 0x5c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 4.283653867s ago: executing program 2 (id=1452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioperm(0x2, 0xf, 0x9e8f) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080bf8e9b0000000000000000004800"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$hiddev(r6, &(0x7f0000000080)=""/39, 0x27) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f00000001c0)=0x14) write$cgroup_int(r5, &(0x7f0000000140)=0x7ff, 0x12) syz_io_uring_setup(0x41c8, &(0x7f0000000240)={0x0, 0xeed6, 0x1, 0x2, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000080)) 4.176767989s ago: executing program 1 (id=1453): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x400, 0x2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa2000, &(0x7f0000000640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000180)=0x2, 0x4) r9 = dup(r8) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r9, 0x0, r0}, 0x10) recvmmsg(r9, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000121, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200f13000000fae6de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.08711829s ago: executing program 4 (id=1454): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r4 = epoll_create1(0x0) dup3(r4, r3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r0], 0x0) 3.12158773s ago: executing program 2 (id=1455): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0xf) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001814010000000000ffdbdf250800030000000000080001000000000057411cf473b8d02fa1623a2e0bfaf062968b2861b56fb925e8c7f8a89d3af1a1ca409b2f87919f73"], 0x20}}, 0x0) 3.062363615s ago: executing program 3 (id=1456): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xf) chroot(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085080000b200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.852760082s ago: executing program 4 (id=1457): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x4000045) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x280, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x11, 0x5, 0xc, 0x0, {0x4e21, 0x4e23, [0x6, 0xd, 0x6, 0x8], [0x9c, 0x7, 0x20004, 0x6139], 0x0, [0x41, 0x1]}, 0x1, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "51a655b24a5d64b30ce0ae24f71ec7fbd502305c314ab8a68c635ad2785b510f4a334aa982075981e50d249bfdd86563daac32c047d0961b212e3decd2ee9ab85c88fd2604d7398039a89f30489f22464d8232c026db8a7a7a9ccd1948caebfac0e21270240ff70407b642ec3b09cbdb9f2a0541ab48df485c4b59391777269727a544f1111cd99a016b72888e4de60a8baa240fb02f2064a4677d29db930afa77583ce3c2815b54e82cd66ef4f7d5177e54f845c7f79008c5dec187446e140e87c1fd0932d8af370742790d02d25f82bf9bea60d80ca2a27f9eb8050b8fbf"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "c04c28c3520d9ac9cea92f031d2f54ae01829db4ef4c417516158aa3dd8e8676312486304ca10c376cd7b139c81ad8727ed37cc51cbfa7450f086396faff59899ff2869af00ef95893e256c19a1ce338a125449d6d64b96c9bd08ddc9413eae8f9eade10c4414f4d7414007a77564b626ff7b19db528eec5f98e1c4960199698"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "d344aebbafb6e2ea48730413159aa82fa0ef8e7a87545095be2b2bdbbc23689b4f9cb6ced3e70335959a47e10e05e6ccf80084a3ad1be31b4128bae877bf40f671f5d53c2712d373e9d0d488c6d524cb8befb2de989d352eebe5f33a86a9fa5ab5f106bd"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "a23ef06b6f7e12a3b92d163188810e5c5970a655245c56c802090ce4649b922765e144762d"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "e96392f49694faa46efadd4d7aeec9f6051260ecabd55a8535de2a276c220b3baea116ee9eff8395a57c75b52ad1616a235254"}]}, 0x280}, 0x1, 0x0, 0x0, 0x8840}, 0x4) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) 2.794991671s ago: executing program 2 (id=1458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000010000000010a0101010000000000000000000000004e2200004e2300000a0020002100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x4000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r3 = socket(0xa, 0x3, 0x3a) fallocate(r3, 0x2, 0x2, 0x10000) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f00000000c0), 0x4) close_range(r3, r2, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="bfcf0800", @ANYRES16=r4, @ANYRESDEC=r2, @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0x80, r10, 0xfffffc00}, 0xc) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2\xf8\xbd\xdbs\xe6\\#\x9a@\x94/', 0x30, 0x0) 2.035001335s ago: executing program 5 (id=1459): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setrlimit(0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4d7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x6, 0x8, 0x2, 0xfffffffffffffffe, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3fb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0xd, &(0x7f0000000240)=""/13, 0x41000, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x5, 0x7fffffff, 0x4d3f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4ee, @void, @value}, 0x94) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0xa5a4dc1ab6029aa3, 0x0, 0x4e22}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc0585609, &(0x7f00000002c0)=@fd={0x90a, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001200"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x24048014}, 0x8000) setsockopt$sock_attach_bpf(r10, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0xf}, 0x0) 2.012040343s ago: executing program 1 (id=1460): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000002c0)) 1.495208708s ago: executing program 1 (id=1461): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xa5b, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e499422, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8008}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x2a, 0x0, 0x88) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 682.334779ms ago: executing program 1 (id=1462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r1, 0x2f, 0x2020, 0x4, @void, @void, @value=r2}, 0x20) 681.098362ms ago: executing program 4 (id=1463): creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) setxattr$system_posix_acl(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x5}, [{0x2, 0x2}], {}, [{0x8, 0x3}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x4}], {}, {0x20, 0x6}}, 0x5c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 627.074886ms ago: executing program 2 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) socket$inet_tcp(0x2, 0x1, 0x0) 542.649946ms ago: executing program 5 (id=1465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x54, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}]}, 0x54}}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0xffffff62}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10400080}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040014}, 0x24000011) 371.047217ms ago: executing program 1 (id=1466): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 355.417796ms ago: executing program 4 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x1f, 0x7, 0xfffffffe, &(0x7f0000000000)="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"}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40)={0x5, 0x0, [{0xffff1000, 0xfc, &(0x7f0000000580)=""/252}, {0xf000, 0x64, &(0x7f0000000680)=""/100}, {0xf000, 0xfe, &(0x7f0000000700)=""/254}, {0x7777c000, 0xe9, &(0x7f0000000800)=""/233}, {0x8080000, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080083000000000000000000000000b6c6a35bbaddc0b61e0e59c066b1dae10cff569f5fa1d08e678ad7"], 0x3c}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, 0x0, 0xfffffffffffffffe, {0x3, 0x0, 0x4}}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) unshare(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x28031, 0xffffffffffffffff, 0x3ee64000) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 2 (id=1468): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0xf) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001814010000000000ffdbdf250800030000000000080001000000000057411cf473b8d02fa1623a2e0bfaf062968b2861b56fb925e8c7f8a89d3af1a1ca409b2f87919f73"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): altsetting 64: 255, using maximum allowed: 30 [ 451.240718][ T43] usb 2-1: USB disconnect, device number 25 [ 451.257051][ T5942] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 451.286508][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 451.306746][ T5942] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 451.335068][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.835323][ T5942] usb 4-1: config 0 descriptor?? [ 451.850199][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 452.141016][ T5942] usbhid 4-1:0.0: can't add hid device: -71 [ 452.178658][ T5942] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 452.214112][ T5942] usb 4-1: USB disconnect, device number 29 [ 452.898269][ T9429] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.943'. [ 452.958451][ T9428] macvtap3: entered allmulticast mode [ 453.599367][ T5833] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 453.599402][ T5833] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 453.606598][ T5833] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 453.734240][ T9435] syzkaller0: entered promiscuous mode [ 453.747486][ T9435] syzkaller0: entered allmulticast mode [ 455.428717][ T9455] FAULT_INJECTION: forcing a failure. [ 455.428717][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 455.522317][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.1.953 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 455.522349][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.522363][ T9455] Call Trace: [ 455.522372][ T9455] [ 455.522381][ T9455] dump_stack_lvl+0x189/0x250 [ 455.522420][ T9455] ? __pfx____ratelimit+0x10/0x10 [ 455.522453][ T9455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.522486][ T9455] ? __pfx__printk+0x10/0x10 [ 455.522514][ T9455] ? __pfx___might_resched+0x10/0x10 [ 455.522545][ T9455] ? fs_reclaim_acquire+0x7d/0x100 [ 455.522583][ T9455] should_fail_ex+0x414/0x560 [ 455.522618][ T9455] should_failslab+0xa8/0x100 [ 455.522658][ T9455] __kmalloc_noprof+0xcb/0x4f0 [ 455.522684][ T9455] ? kfree+0x4d/0x440 [ 455.522705][ T9455] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 455.522745][ T9455] tomoyo_realpath_from_path+0xe3/0x5d0 [ 455.522782][ T9455] ? tomoyo_domain+0xda/0x130 [ 455.522808][ T9455] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 455.522836][ T9455] tomoyo_path_number_perm+0x1e8/0x5a0 [ 455.522868][ T9455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 455.522917][ T9455] ? __lock_acquire+0xab9/0xd20 [ 455.522970][ T9455] ? __fget_files+0x2a/0x420 [ 455.523003][ T9455] ? __fget_files+0x2a/0x420 [ 455.523032][ T9455] ? __fget_files+0x3a0/0x420 [ 455.523059][ T9455] ? __fget_files+0x2a/0x420 [ 455.523094][ T9455] security_file_ioctl+0xcb/0x2d0 [ 455.523126][ T9455] __se_sys_ioctl+0x47/0x170 [ 455.523153][ T9455] do_syscall_64+0xfa/0x3b0 [ 455.523173][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.523204][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.523225][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 455.523252][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.523272][ T9455] RIP: 0033:0x7f8b1798e929 [ 455.523290][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.523310][ T9455] RSP: 002b:00007f8b18856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.523337][ T9455] RAX: ffffffffffffffda RBX: 00007f8b17bb5fa0 RCX: 00007f8b1798e929 [ 455.523353][ T9455] RDX: 00002000000000c0 RSI: 000000004008af14 RDI: 0000000000000003 [ 455.523368][ T9455] RBP: 00007f8b18856090 R08: 0000000000000000 R09: 0000000000000000 [ 455.523381][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.523394][ T9455] R13: 0000000000000000 R14: 00007f8b17bb5fa0 R15: 00007ffe727ee618 [ 455.523429][ T9455] [ 455.598439][ T9455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.599560][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.780238][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.786332][ T43] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 456.893583][ T43] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 456.907536][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.936604][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 457.169996][ T43] usb 1-1: config 0 has no interface number 0 [ 457.184770][ T43] usb 1-1: config 0 interface 255 has no altsetting 0 [ 457.198176][ T43] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 457.215522][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.017076][ T43] usb 1-1: config 0 descriptor?? [ 458.046603][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 458.076519][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 458.083064][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 458.083116][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x30 [ 458.091026][ T5833] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 458.116962][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 458.117503][ T9477] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006' [ 458.139078][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 458.157628][ T43] usb 1-1: media controller created [ 458.169790][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.218803][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 458.237616][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 458.255551][ T9451] dvb-usb: bulk message failed: -22 (2/0) [ 458.319511][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 458.376905][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 458.403475][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 458.456414][ T43] usb 1-1: USB disconnect, device number 36 [ 459.168745][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 459.448820][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 461.408344][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 461.417650][ T9512] veth0_to_bridge: entered promiscuous mode [ 461.430712][ T9511] veth0_to_bridge: left promiscuous mode [ 461.566438][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 461.566472][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x30 [ 461.575914][ T5833] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 461.600081][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 461.631931][ T9519] veth0_to_bridge: entered promiscuous mode [ 461.637424][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.651367][ T43] usb 1-1: config 0 descriptor?? [ 461.669976][ T43] cp210x 1-1:0.0: cp210x converter detected [ 461.694640][ T9519] FAULT_INJECTION: forcing a failure. [ 461.694640][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 461.770692][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.4.971 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 461.770724][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.770738][ T9519] Call Trace: [ 461.770747][ T9519] [ 461.770756][ T9519] dump_stack_lvl+0x189/0x250 [ 461.770793][ T9519] ? __pfx____ratelimit+0x10/0x10 [ 461.770826][ T9519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.770857][ T9519] ? __pfx__printk+0x10/0x10 [ 461.770883][ T9519] ? __pfx___might_resched+0x10/0x10 [ 461.770921][ T9519] should_fail_ex+0x414/0x560 [ 461.770956][ T9519] should_failslab+0xa8/0x100 [ 461.770989][ T9519] __kmalloc_noprof+0xcb/0x4f0 [ 461.771025][ T9519] ? sk_prot_alloc+0xe7/0x220 [ 461.771057][ T9519] sk_prot_alloc+0xe7/0x220 [ 461.771081][ T9519] ? sk_alloc+0x24/0x370 [ 461.771108][ T9519] sk_alloc+0x3a/0x370 [ 461.771131][ T9519] ? bpf_ctx_init+0x167/0x1d0 [ 461.771159][ T9519] bpf_prog_test_run_skb+0x2ed/0x1560 [ 461.771183][ T9519] ? __fget_files+0x2a/0x420 [ 461.771227][ T9519] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 461.771254][ T9519] bpf_prog_test_run+0x2c4/0x340 [ 461.771289][ T9519] __sys_bpf+0x4a4/0x860 [ 461.771319][ T9519] ? __pfx___sys_bpf+0x10/0x10 [ 461.771359][ T9519] ? ksys_write+0x22a/0x250 [ 461.771388][ T9519] ? __pfx_ksys_write+0x10/0x10 [ 461.771410][ T9519] ? rcu_is_watching+0x15/0xb0 [ 461.771450][ T9519] __x64_sys_bpf+0x7c/0x90 [ 461.771476][ T9519] do_syscall_64+0xfa/0x3b0 [ 461.771496][ T9519] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.771527][ T9519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.771566][ T9519] ? clear_bhb_loop+0x60/0xb0 [ 461.771594][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.771615][ T9519] RIP: 0033:0x7f5c6f78e929 [ 461.771635][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.771654][ T9519] RSP: 002b:00007f5c6d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.771677][ T9519] RAX: ffffffffffffffda RBX: 00007f5c6f9b5fa0 RCX: 00007f5c6f78e929 [ 461.771693][ T9519] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 461.771706][ T9519] RBP: 00007f5c6d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.771720][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.771732][ T9519] R13: 0000000000000000 R14: 00007f5c6f9b5fa0 R15: 00007ffce2b27848 [ 461.771765][ T9519] [ 461.773838][ T9518] veth0_to_bridge: left promiscuous mode [ 461.829067][ T9523] xt_hashlimit: size too large, truncated to 1048576 [ 461.945509][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 462.009056][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 462.247139][ T9529] netlink: 'syz.2.973': attribute type 13 has an invalid length. [ 462.330855][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 462.372964][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 462.433301][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 462.470060][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.746725][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.771225][ T43] usb 1-1: USB disconnect, device number 37 [ 462.796205][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 462.812562][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.824024][ T43] cp210x 1-1:0.0: device disconnected [ 462.865737][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.905029][ T9] usb 4-1: SerialNumber: syz [ 463.050771][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.059573][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.134848][ T9529] batman_adv: batadv0: Interface deactivated: team0 [ 463.176378][ T9] usb 4-1: 0:2 : does not exist [ 464.057869][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 464.089007][ T9538] input: syz0 as /devices/virtual/input/input32 [ 464.162832][ T9] usb 4-1: USB disconnect, device number 30 [ 464.333478][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.039009][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.060824][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.086467][ T9548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.142399][ T9548] overlayfs: statfs failed on './file0' [ 465.252189][ T9529] tipc: Resetting bearer [ 465.271741][ T9529] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.287315][ T9529] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.304331][ T9529] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.317674][ T9529] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.442170][ T9529] veth0_macvtap: left allmulticast mode [ 465.507609][ T5892] lo speed is unknown, defaulting to 1000 [ 465.538261][ T5892] syz1: Port: 1 Link DOWN [ 465.792122][ T8203] bond0: (slave syz_tun): Releasing backup interface [ 466.389311][ T9547] kthread_run failed with err -4 [ 467.569369][ T9570] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.980'. [ 467.937434][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.032466][ T9550] macvtap3: entered allmulticast mode [ 468.110162][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.658938][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.887136][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.080214][ T9578] FAULT_INJECTION: forcing a failure. [ 469.080214][ T9578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.131905][ T9578] CPU: 0 UID: 0 PID: 9578 Comm: syz.4.989 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 469.131938][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.131952][ T9578] Call Trace: [ 469.131960][ T9578] [ 469.131970][ T9578] dump_stack_lvl+0x189/0x250 [ 469.132007][ T9578] ? __pfx____ratelimit+0x10/0x10 [ 469.132041][ T9578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.132072][ T9578] ? __pfx__printk+0x10/0x10 [ 469.132094][ T9578] ? __might_fault+0xb0/0x130 [ 469.132131][ T9578] should_fail_ex+0x414/0x560 [ 469.132164][ T9578] _copy_to_iter+0x3f5/0x16f0 [ 469.132209][ T9578] ? __pfx__copy_to_iter+0x10/0x10 [ 469.132240][ T9578] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 469.132278][ T9578] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 469.132314][ T9578] __skb_datagram_iter+0xf8/0x990 [ 469.132348][ T9578] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 469.132390][ T9578] skb_copy_datagram_iter+0xc5/0x230 [ 469.132427][ T9578] netlink_recvmsg+0x2ab/0xa30 [ 469.132465][ T9578] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.132504][ T9578] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 469.132530][ T9578] ? security_socket_recvmsg+0x7e/0x2e0 [ 469.132557][ T9578] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.132585][ T9578] sock_recvmsg+0x229/0x270 [ 469.132611][ T9578] ____sys_recvmsg+0x1c9/0x460 [ 469.132650][ T9578] ? __pfx_____sys_recvmsg+0x10/0x10 [ 469.132698][ T9578] ? import_iovec+0x74/0xa0 [ 469.132732][ T9578] ___sys_recvmsg+0x1b5/0x510 [ 469.132768][ T9578] ? __pfx____sys_recvmsg+0x10/0x10 [ 469.132826][ T9578] ? __fget_files+0x3a0/0x420 [ 469.132868][ T9578] do_recvmmsg+0x307/0x770 [ 469.132907][ T9578] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.132956][ T9578] ? _copy_from_user+0x94/0xb0 [ 469.132997][ T9578] __x64_sys_recvmmsg+0x1af/0x240 [ 469.133031][ T9578] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.133058][ T9578] ? rcu_is_watching+0x15/0xb0 [ 469.133096][ T9578] ? do_syscall_64+0xbe/0x3b0 [ 469.133120][ T9578] do_syscall_64+0xfa/0x3b0 [ 469.133138][ T9578] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.133170][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.133190][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 469.133216][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.133237][ T9578] RIP: 0033:0x7f5c6f78e929 [ 469.133255][ T9578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.133274][ T9578] RSP: 002b:00007f5c6d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.133297][ T9578] RAX: ffffffffffffffda RBX: 00007f5c6f9b5fa0 RCX: 00007f5c6f78e929 [ 469.133313][ T9578] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 469.133328][ T9578] RBP: 00007f5c6d5f6090 R08: 0000200000003700 R09: 0000000000000000 [ 469.133342][ T9578] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 469.133356][ T9578] R13: 0000000000000000 R14: 00007f5c6f9b5fa0 R15: 00007ffce2b27848 [ 469.133388][ T9578] [ 469.430673][ T49] bridge_slave_1: left allmulticast mode [ 469.445467][ T49] bridge_slave_1: left promiscuous mode [ 469.512317][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.727598][ T5892] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 469.866299][ T49] bridge_slave_0: left allmulticast mode [ 469.895965][ T49] bridge_slave_0: left promiscuous mode [ 470.060761][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.063256][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.079990][ T5892] usb 4-1: device descriptor read/64, error -71 [ 470.086851][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.095746][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.113395][ T49] tipc: Resetting bearer [ 470.119932][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.129207][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.370315][ T5892] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 470.542284][ T5892] usb 4-1: device descriptor read/64, error -71 [ 470.670192][ T5892] usb usb4-port1: attempt power cycle [ 470.750496][ T49] tipc: Disabling bearer [ 471.012201][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.028791][ T5892] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 471.031141][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.054937][ T49] bond0 (unregistering): Released all slaves [ 471.069847][ T5892] usb 4-1: device descriptor read/8, error -71 [ 471.239677][ T49] tipc: Left network mode [ 471.360561][ T5892] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 471.414874][ T5892] usb 4-1: device descriptor read/8, error -71 [ 471.480781][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 471.796630][ T9621] input: syz0 as /devices/virtual/input/input33 [ 472.477163][ T5892] usb usb4-port1: unable to enumerate USB device [ 472.499013][ T5834] Bluetooth: hci0: command tx timeout [ 472.705978][ T9630] FAULT_INJECTION: forcing a failure. [ 472.705978][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.741448][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.1.999 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 472.741489][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.741505][ T9630] Call Trace: [ 472.741513][ T9630] [ 472.741524][ T9630] dump_stack_lvl+0x189/0x250 [ 472.741564][ T9630] ? __pfx____ratelimit+0x10/0x10 [ 472.741599][ T9630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.741632][ T9630] ? __pfx__printk+0x10/0x10 [ 472.741654][ T9630] ? __might_fault+0xb0/0x130 [ 472.741694][ T9630] should_fail_ex+0x414/0x560 [ 472.741729][ T9630] _copy_from_iter+0x1db/0x16f0 [ 472.741768][ T9630] ? rcu_is_watching+0x15/0xb0 [ 472.741802][ T9630] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 472.741833][ T9630] ? __pfx__copy_from_iter+0x10/0x10 [ 472.741869][ T9630] ? __build_skb_around+0x257/0x3e0 [ 472.741900][ T9630] ? netlink_sendmsg+0x642/0xb30 [ 472.741926][ T9630] ? skb_put+0x11b/0x210 [ 472.741957][ T9630] netlink_sendmsg+0x6b2/0xb30 [ 472.741994][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.742031][ T9630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.742058][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.742086][ T9630] __sock_sendmsg+0x219/0x270 [ 472.742110][ T9630] ____sys_sendmsg+0x505/0x830 [ 472.742146][ T9630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.742185][ T9630] ? import_iovec+0x74/0xa0 [ 472.742211][ T9630] ___sys_sendmsg+0x21f/0x2a0 [ 472.742243][ T9630] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.742312][ T9630] ? __fget_files+0x2a/0x420 [ 472.742343][ T9630] ? __fget_files+0x3a0/0x420 [ 472.742384][ T9630] __x64_sys_sendmsg+0x19b/0x260 [ 472.742417][ T9630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.742457][ T9630] ? __pfx_ksys_write+0x10/0x10 [ 472.742490][ T9630] ? rcu_is_watching+0x15/0xb0 [ 472.742528][ T9630] ? do_syscall_64+0xbe/0x3b0 [ 472.742554][ T9630] do_syscall_64+0xfa/0x3b0 [ 472.742574][ T9630] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.742607][ T9630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.742628][ T9630] ? clear_bhb_loop+0x60/0xb0 [ 472.742655][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.742676][ T9630] RIP: 0033:0x7f8b1798e929 [ 472.742695][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.742714][ T9630] RSP: 002b:00007f8b18856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.742738][ T9630] RAX: ffffffffffffffda RBX: 00007f8b17bb5fa0 RCX: 00007f8b1798e929 [ 472.742754][ T9630] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 472.742768][ T9630] RBP: 00007f8b18856090 R08: 0000000000000000 R09: 0000000000000000 [ 472.742782][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.742795][ T9630] R13: 0000000000000000 R14: 00007f8b17bb5fa0 R15: 00007ffe727ee618 [ 472.742828][ T9630] [ 472.745654][ T9631] FAULT_INJECTION: forcing a failure. [ 472.745654][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 473.068244][ T9631] CPU: 1 UID: 0 PID: 9631 Comm: syz.4.998 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 473.068284][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.068297][ T9631] Call Trace: [ 473.068306][ T9631] [ 473.068316][ T9631] dump_stack_lvl+0x189/0x250 [ 473.068352][ T9631] ? __pfx____ratelimit+0x10/0x10 [ 473.068383][ T9631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.068413][ T9631] ? __pfx__printk+0x10/0x10 [ 473.068439][ T9631] ? __pfx___might_resched+0x10/0x10 [ 473.068473][ T9631] should_fail_ex+0x414/0x560 [ 473.068504][ T9631] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 473.068528][ T9631] should_failslab+0xa8/0x100 [ 473.068557][ T9631] __kvmalloc_node_noprof+0x161/0x5f0 [ 473.068584][ T9631] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 473.068613][ T9631] bpf_test_run_xdp_live+0x18e/0x1b10 [ 473.068648][ T9631] ? stack_depot_save_flags+0x40/0x900 [ 473.068686][ T9631] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 473.068708][ T9631] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 473.068730][ T9631] ? bpf_prog_test_run+0x2c4/0x340 [ 473.068755][ T9631] ? __sys_bpf+0x4a4/0x860 [ 473.068776][ T9631] ? __x64_sys_bpf+0x7c/0x90 [ 473.068818][ T9631] ? __lock_acquire+0xab9/0xd20 [ 473.068855][ T9631] ? __might_fault+0xb0/0x130 [ 473.068894][ T9631] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 473.068926][ T9631] ? _copy_from_user+0x94/0xb0 [ 473.068946][ T9631] ? bpf_test_init+0x133/0x170 [ 473.068965][ T9631] ? xdp_convert_md_to_buff+0x5b/0x330 [ 473.068992][ T9631] bpf_prog_test_run_xdp+0x713/0x1000 [ 473.069031][ T9631] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 473.069059][ T9631] ? __fget_files+0x2a/0x420 [ 473.069092][ T9631] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 473.069117][ T9631] bpf_prog_test_run+0x2c4/0x340 [ 473.069148][ T9631] __sys_bpf+0x4a4/0x860 [ 473.069175][ T9631] ? __pfx___sys_bpf+0x10/0x10 [ 473.069213][ T9631] ? ksys_write+0x22a/0x250 [ 473.069239][ T9631] ? __pfx_ksys_write+0x10/0x10 [ 473.069260][ T9631] ? rcu_is_watching+0x15/0xb0 [ 473.069302][ T9631] __x64_sys_bpf+0x7c/0x90 [ 473.069326][ T9631] do_syscall_64+0xfa/0x3b0 [ 473.069344][ T9631] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.069373][ T9631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.069392][ T9631] ? clear_bhb_loop+0x60/0xb0 [ 473.069416][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.069434][ T9631] RIP: 0033:0x7f5c6f78e929 [ 473.069451][ T9631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.069468][ T9631] RSP: 002b:00007f5c6d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.069490][ T9631] RAX: ffffffffffffffda RBX: 00007f5c6f9b5fa0 RCX: 00007f5c6f78e929 [ 473.069504][ T9631] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 473.069517][ T9631] RBP: 00007f5c6d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.069530][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.069541][ T9631] R13: 0000000000000000 R14: 00007f5c6f9b5fa0 R15: 00007ffce2b27848 [ 473.069571][ T9631] [ 473.451613][ T9590] lo speed is unknown, defaulting to 1000 [ 473.768353][ T9638] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 474.065864][ T9638] bond0: (slave gre0): Error -95 calling set_mac_address [ 474.264354][ T9642] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1002'. [ 474.427256][ T9653] binder: BINDER_SET_CONTEXT_MGR already set [ 474.544852][ T9655] binder: 9647:9655 ioctl c0306201 200000000180 returned -22 [ 474.578906][ T5833] Bluetooth: hci0: command tx timeout [ 474.601034][ T9653] binder: 9647:9653 ioctl 4018620d 200000000040 returned -16 [ 474.637365][ T49] hsr_slave_0: left promiscuous mode [ 474.660560][ T49] hsr_slave_1: left promiscuous mode [ 474.671988][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.680269][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.692996][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.701220][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.747762][ T49] veth0_macvtap: left allmulticast mode [ 474.754220][ T49] veth1_macvtap: left promiscuous mode [ 474.761000][ T49] veth0_macvtap: left promiscuous mode [ 474.767334][ T49] veth1_vlan: left promiscuous mode [ 474.773635][ T49] veth0_vlan: left promiscuous mode [ 474.818617][ T5816] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 474.950845][ T9663] ======================================================= [ 474.950845][ T9663] WARNING: The mand mount option has been deprecated and [ 474.950845][ T9663] and is ignored by this kernel. Remove the mand [ 474.950845][ T9663] option from the mount to silence this warning. [ 474.950845][ T9663] ======================================================= [ 474.988391][ T5816] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 474.995151][ T9663] 9pnet_fd: Insufficient options for proto=fd [ 475.017404][ T5816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.046084][ T5816] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 475.071879][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.091967][ T5816] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 475.114554][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.133892][ T5816] usb 5-1: Product: syz [ 475.143924][ T5816] usb 5-1: Manufacturer: syz [ 475.158900][ T5816] usb 5-1: SerialNumber: syz [ 475.194571][ T5816] usb 5-1: config 0 descriptor?? [ 475.225629][ T5816] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 475.269223][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 475.309478][ T5816] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 475.340016][ T5816] usb 5-1: media controller created [ 475.385565][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.581298][ T5816] DVB: Unable to find symbol tda10046_attach() [ 475.588378][ T5816] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 475.602358][ T5816] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 475.821112][ T5816] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 475.851273][ T5816] usb 5-1: USB disconnect, device number 30 [ 476.032955][ T49] team0 (unregistering): Port device team_slave_1 removed [ 476.073659][ T49] team0 (unregistering): Port device team_slave_0 removed [ 476.663521][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 476.758268][ T977] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 476.981566][ T977] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 477.145377][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.251358][ T977] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 477.285031][ T977] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 477.298481][ T977] usb 5-1: Manufacturer: syz [ 477.429609][ T977] usb 5-1: config 0 descriptor?? [ 477.983851][ T9590] chnl_net:caif_netlink_parms(): no params data found [ 477.998387][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.018774][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.026615][ T977] rc_core: IR keymap rc-hauppauge not found [ 478.038162][ T977] Registered IR keymap rc-empty [ 478.054394][ T977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 478.236172][ T977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 478.661356][ T5816] usb 5-1: USB disconnect, device number 31 [ 478.738196][ T5834] Bluetooth: hci0: command 0x040f tx timeout [ 478.770253][ T49] IPVS: stop unused estimator thread 0... [ 478.985648][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.006879][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.014775][ T9590] bridge_slave_0: entered allmulticast mode [ 479.027716][ T9590] bridge_slave_0: entered promiscuous mode [ 479.047167][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.056225][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.069577][ T9590] bridge_slave_1: entered allmulticast mode [ 479.081018][ T9590] bridge_slave_1: entered promiscuous mode [ 479.157559][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.179402][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.492697][ T9590] team0: Port device team_slave_0 added [ 480.173022][ T9590] team0: Port device team_slave_1 added [ 480.479075][ T9734] vivid-003: ================= START STATUS ================= [ 480.490874][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.498055][ T9734] vivid-003: Radio HW Seek Mode: Bounded [ 480.504507][ T9734] vivid-003: Radio Programmable HW Seek: false [ 480.508710][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.511673][ T9734] vivid-003: RDS Rx I/O Mode: [ 480.541440][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.551921][ T9734] Block I/O [ 480.572197][ T9734] vivid-003: Generate RBDS Instead of RDS: false [ 480.572949][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.580197][ T9734] vivid-003: RDS Reception: true [ 480.591540][ T9734] vivid-003: RDS Program Type: 0 inactive [ 480.597542][ T9734] vivid-003: RDS PS Name: inactive [ 480.603734][ T9734] vivid-003: RDS Radio Text: inactive [ 480.609979][ T9734] vivid-003: RDS Traffic Announcement: false inactive [ 480.616293][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.634045][ T9734] vivid-003: RDS Traffic Program: false inactive [ 480.652456][ T9734] vivid-003: RDS Music: false inactive [ 480.664714][ T9734] vivid-003: ================== END STATUS ================== [ 480.673868][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.708330][ T977] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 480.828251][ T5834] Bluetooth: hci0: command 0x040f tx timeout [ 481.668183][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 481.675933][ T977] usb 2-1: device descriptor read/64, error -71 [ 481.702887][ T9590] hsr_slave_0: entered promiscuous mode [ 481.906871][ T9590] hsr_slave_1: entered promiscuous mode [ 481.947484][ T9] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 481.961795][ T9] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 481.975286][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 481.988198][ T977] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 482.000354][ T9] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 482.019683][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 482.041831][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.158385][ T977] usb 2-1: device descriptor read/64, error -71 [ 482.192897][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 482.217468][ T9762] binder: 9757:9762 ioctl 4018620d 200000000040 returned -16 [ 482.239409][ T9762] binder: 9757:9762 ioctl c0306201 200000000180 returned -22 [ 482.269938][ T977] usb usb2-port1: attempt power cycle [ 482.302969][ T9] ath6kl: Failed to submit usb control message: -71 [ 482.323498][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 482.334035][ T9] ath6kl: Unable to send get target info: -71 [ 482.342478][ T9] ath6kl: Failed to init ath6kl core: -71 [ 482.366571][ T9590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.370932][ T9] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 482.399489][ T9] usb 5-1: USB disconnect, device number 32 [ 482.402017][ T9590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.434964][ T9590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.451429][ T9590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.652844][ T977] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 482.724860][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.741078][ T977] usb 2-1: device descriptor read/8, error -71 [ 482.764331][ T9590] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.790519][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.798848][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.826315][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.833597][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.998180][ T977] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 483.084784][ T977] usb 2-1: device descriptor read/8, error -71 [ 483.209151][ T977] usb usb2-port1: unable to enumerate USB device [ 485.492748][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.528362][ T977] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 486.240498][ T977] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 486.262455][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.306493][ T977] usb 2-1: config 0 descriptor?? [ 486.354541][ T977] cp210x 2-1:0.0: cp210x converter detected [ 486.494581][ T9819] vivid-001: ================= START STATUS ================= [ 486.680071][ T9819] vivid-001: Radio HW Seek Mode: Bounded [ 486.703090][ T9819] vivid-001: Radio Programmable HW Seek: false [ 486.724530][ T9819] vivid-001: RDS Rx I/O Mode: Block I/O [ 486.745682][ T9819] vivid-001: Generate RBDS Instead of RDS: false [ 486.752720][ T9819] vivid-001: RDS Reception: true [ 486.757756][ T9819] vivid-001: RDS Program Type: 0 inactive [ 486.796933][ T9819] vivid-001: RDS PS Name: inactive [ 486.807632][ T9819] vivid-001: RDS Radio Text: inactive [ 486.817102][ T9819] vivid-001: RDS Traffic Announcement: false inactive [ 486.828016][ T9819] vivid-001: RDS Traffic Program: false inactive [ 486.836474][ T9819] vivid-001: RDS Music: false inactive [ 486.845943][ T9819] vivid-001: ================== END STATUS ================== [ 486.998223][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 487.055736][ T9590] veth0_vlan: entered promiscuous mode [ 487.092370][ T977] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 487.114255][ T9590] veth1_vlan: entered promiscuous mode [ 487.122475][ T977] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 487.151968][ T977] usb 2-1: cp210x converter now attached to ttyUSB0 [ 487.160908][ T43] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 487.185265][ T977] usb 2-1: USB disconnect, device number 30 [ 487.185680][ T9590] veth0_macvtap: entered promiscuous mode [ 487.208380][ T43] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 487.223414][ T977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 487.258476][ T43] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 487.350086][ T9590] veth1_macvtap: entered promiscuous mode [ 487.357393][ T43] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 487.372636][ T977] cp210x 2-1:0.0: device disconnected [ 487.392818][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 487.421709][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.447331][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.452059][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.475233][ T9834] loop8: detected capacity change from 0 to 7 [ 487.492909][ T9834] Dev loop8: unable to read RDB block 7 [ 487.508544][ T9834] loop8: unable to read partition table [ 487.529470][ T9590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.551264][ T9834] loop8: partition table beyond EOD, truncated [ 487.560931][ T9834] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 487.560931][ T9834] ) failed (rc=-5) [ 487.575871][ T9590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.640470][ T9590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.672965][ T9590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.730751][ T43] ath6kl: Failed to submit usb control message: -71 [ 487.743673][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 487.770332][ T43] ath6kl: Unable to send get target info: -71 [ 487.813143][ T43] ath6kl: Failed to init ath6kl core: -71 [ 487.845461][ T43] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 487.895324][ T43] usb 4-1: USB disconnect, device number 35 [ 488.142777][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.192533][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.300579][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.328159][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.865379][ T9857] FAULT_INJECTION: forcing a failure. [ 488.865379][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.965222][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.5.987 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 488.965256][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.965270][ T9857] Call Trace: [ 488.965279][ T9857] [ 488.965288][ T9857] dump_stack_lvl+0x189/0x250 [ 488.965327][ T9857] ? __pfx____ratelimit+0x10/0x10 [ 488.965369][ T9857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.965402][ T9857] ? __pfx__printk+0x10/0x10 [ 488.965425][ T9857] ? __might_fault+0xb0/0x130 [ 488.965464][ T9857] should_fail_ex+0x414/0x560 [ 488.965500][ T9857] _copy_from_iter+0x1db/0x16f0 [ 488.965538][ T9857] ? rcu_is_watching+0x15/0xb0 [ 488.965573][ T9857] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 488.965603][ T9857] ? __pfx__copy_from_iter+0x10/0x10 [ 488.965638][ T9857] ? __build_skb_around+0x257/0x3e0 [ 488.965669][ T9857] ? netlink_sendmsg+0x642/0xb30 [ 488.965694][ T9857] ? skb_put+0x11b/0x210 [ 488.965725][ T9857] netlink_sendmsg+0x6b2/0xb30 [ 488.965762][ T9857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.965799][ T9857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.965827][ T9857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.965855][ T9857] __sock_sendmsg+0x219/0x270 [ 488.965880][ T9857] ____sys_sendmsg+0x505/0x830 [ 488.965916][ T9857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.965955][ T9857] ? import_iovec+0x74/0xa0 [ 488.965981][ T9857] ___sys_sendmsg+0x21f/0x2a0 [ 488.966013][ T9857] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.966081][ T9857] ? __fget_files+0x2a/0x420 [ 488.966111][ T9857] ? __fget_files+0x3a0/0x420 [ 488.966154][ T9857] __x64_sys_sendmsg+0x19b/0x260 [ 488.966186][ T9857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.966232][ T9857] ? __pfx_ksys_write+0x10/0x10 [ 488.966256][ T9857] ? rcu_is_watching+0x15/0xb0 [ 488.966293][ T9857] ? do_syscall_64+0xbe/0x3b0 [ 488.966319][ T9857] do_syscall_64+0xfa/0x3b0 [ 488.966341][ T9857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.966368][ T9857] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.966390][ T9857] ? clear_bhb_loop+0x60/0xb0 [ 488.966417][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.966438][ T9857] RIP: 0033:0x7f4378b8e929 [ 488.966458][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.966478][ T9857] RSP: 002b:00007f4379a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.966501][ T9857] RAX: ffffffffffffffda RBX: 00007f4378db5fa0 RCX: 00007f4378b8e929 [ 488.966517][ T9857] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 488.966531][ T9857] RBP: 00007f4379a31090 R08: 0000000000000000 R09: 0000000000000000 [ 488.966544][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.966557][ T9857] R13: 0000000000000000 R14: 00007f4378db5fa0 R15: 00007ffe2b44bbf8 [ 488.966591][ T9857] [ 489.394558][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 490.254218][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 494.057007][ T9905] binder: BINDER_SET_CONTEXT_MGR already set [ 494.076315][ T9905] binder: 9903:9905 ioctl 4018620d 200000000040 returned -16 [ 494.150131][ T9905] binder: 9903:9905 ioctl c0306201 200000000180 returned -22 [ 494.231542][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 494.403168][ T9913] FAULT_INJECTION: forcing a failure. [ 494.403168][ T9913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.487825][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.1.1056 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 494.487861][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.487875][ T9913] Call Trace: [ 494.487884][ T9913] [ 494.487893][ T9913] dump_stack_lvl+0x189/0x250 [ 494.487930][ T9913] ? __pfx____ratelimit+0x10/0x10 [ 494.487963][ T9913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.487995][ T9913] ? __pfx__printk+0x10/0x10 [ 494.488016][ T9913] ? __might_fault+0xb0/0x130 [ 494.488056][ T9913] should_fail_ex+0x414/0x560 [ 494.488089][ T9913] _copy_from_iter+0x1db/0x16f0 [ 494.488125][ T9913] ? rcu_is_watching+0x15/0xb0 [ 494.488158][ T9913] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 494.488188][ T9913] ? __pfx__copy_from_iter+0x10/0x10 [ 494.488223][ T9913] ? __build_skb_around+0x257/0x3e0 [ 494.488251][ T9913] ? netlink_sendmsg+0x642/0xb30 [ 494.488276][ T9913] ? skb_put+0x11b/0x210 [ 494.488305][ T9913] netlink_sendmsg+0x6b2/0xb30 [ 494.488341][ T9913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.488377][ T9913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.488404][ T9913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.488432][ T9913] __sock_sendmsg+0x219/0x270 [ 494.488454][ T9913] ____sys_sendmsg+0x505/0x830 [ 494.488489][ T9913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.488527][ T9913] ? import_iovec+0x74/0xa0 [ 494.488552][ T9913] ___sys_sendmsg+0x21f/0x2a0 [ 494.488584][ T9913] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.488664][ T9913] ? __fget_files+0x2a/0x420 [ 494.488700][ T9913] ? __fget_files+0x3a0/0x420 [ 494.488739][ T9913] __x64_sys_sendmsg+0x19b/0x260 [ 494.488770][ T9913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.488828][ T9913] ? __pfx_ksys_write+0x10/0x10 [ 494.488861][ T9913] ? do_syscall_64+0xbe/0x3b0 [ 494.488887][ T9913] do_syscall_64+0xfa/0x3b0 [ 494.488907][ T9913] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.488939][ T9913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.488961][ T9913] ? clear_bhb_loop+0x60/0xb0 [ 494.488987][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.489008][ T9913] RIP: 0033:0x7f8b1798e929 [ 494.489027][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.489047][ T9913] RSP: 002b:00007f8b18835038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.489070][ T9913] RAX: ffffffffffffffda RBX: 00007f8b17bb6080 RCX: 00007f8b1798e929 [ 494.489086][ T9913] RDX: 00000000040040c4 RSI: 0000200000000000 RDI: 0000000000000005 [ 494.489101][ T9913] RBP: 00007f8b18835090 R08: 0000000000000000 R09: 0000000000000000 [ 494.489115][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.489128][ T9913] R13: 0000000000000001 R14: 00007f8b17bb6080 R15: 00007ffe727ee618 [ 494.489161][ T9913] [ 496.038142][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1058'. [ 496.449910][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 496.899085][ T977] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 497.137621][ T9931] netem: incorrect ge model size [ 497.150617][ T9931] netem: change failed [ 497.294207][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 497.325981][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.375475][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.489897][ T977] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 497.587582][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.185546][ T977] usb 4-1: config 0 descriptor?? [ 498.208710][ T977] usb 4-1: can't set config #0, error -71 [ 498.226305][ T977] usb 4-1: USB disconnect, device number 36 [ 499.028460][ T9841] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 499.270755][ T9841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.328870][ T9841] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 499.381529][ T9841] usb 5-1: config 1 interface 0 has no altsetting 0 [ 499.473235][ T9841] usb 5-1: string descriptor 0 read error: -22 [ 499.518874][ T9841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 499.578225][ T9841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.655136][ T9965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.798568][ T5874] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 499.961725][ T9841] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 500.377614][ C0] usblp0: nonzero read bulk status received: -71 [ 500.394033][ T9] usb 5-1: USB disconnect, device number 33 [ 500.412978][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 500.437743][ T9] usblp0: removed [ 500.453270][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 500.471932][ T5874] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 500.485816][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.499698][ T5874] usb 2-1: config 0 descriptor?? [ 500.506130][ T9979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 500.819121][ T977] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 501.031137][ T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.075050][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.150060][ T977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 501.186867][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 501.226561][ T977] usb 4-1: SerialNumber: syz [ 501.617911][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624482][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.017296][ T977] usb 4-1: 0:2 : does not exist [ 502.054068][ T977] usb 4-1: USB disconnect, device number 37 [ 502.574256][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.040316][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 503.046407][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 503.120608][ T5874] usb 2-1: USB disconnect, device number 31 [ 505.658140][ T977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 505.960376][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 505.972764][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 505.984330][ T977] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 505.993628][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.006724][ T977] usb 6-1: config 0 descriptor?? [ 506.012859][T10052] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.081154][ T977] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 507.157390][ T977] cm6533_jd 0003:0D8C:0022.0007: item fetching failed at offset 4/5 [ 507.227481][ T977] cm6533_jd 0003:0D8C:0022.0007: parse failed [ 507.513940][ T977] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22 [ 507.670175][ T9841] usb 6-1: USB disconnect, device number 2 [ 510.173119][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 510.518379][T10109] FAULT_INJECTION: forcing a failure. [ 510.518379][T10109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.596578][T10109] CPU: 1 UID: 0 PID: 10109 Comm: syz.1.1101 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 510.596619][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.596633][T10109] Call Trace: [ 510.596642][T10109] [ 510.596651][T10109] dump_stack_lvl+0x189/0x250 [ 510.596689][T10109] ? __pfx____ratelimit+0x10/0x10 [ 510.596723][T10109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.596755][T10109] ? __pfx__printk+0x10/0x10 [ 510.596778][T10109] ? __might_fault+0xb0/0x130 [ 510.596818][T10109] should_fail_ex+0x414/0x560 [ 510.596850][T10109] _copy_from_iter+0x1db/0x16f0 [ 510.596887][T10109] ? rcu_is_watching+0x15/0xb0 [ 510.596921][T10109] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 510.596949][T10109] ? __pfx__copy_from_iter+0x10/0x10 [ 510.596981][T10109] ? __build_skb_around+0x257/0x3e0 [ 510.597009][T10109] ? netlink_sendmsg+0x642/0xb30 [ 510.597031][T10109] ? skb_put+0x11b/0x210 [ 510.597059][T10109] netlink_sendmsg+0x6b2/0xb30 [ 510.597094][T10109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.597128][T10109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.597153][T10109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.597179][T10109] __sock_sendmsg+0x219/0x270 [ 510.597202][T10109] ____sys_sendmsg+0x505/0x830 [ 510.597235][T10109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.597270][T10109] ? import_iovec+0x74/0xa0 [ 510.597297][T10109] ___sys_sendmsg+0x21f/0x2a0 [ 510.597326][T10109] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.597390][T10109] ? __fget_files+0x2a/0x420 [ 510.597419][T10109] ? __fget_files+0x3a0/0x420 [ 510.597459][T10109] __x64_sys_sendmsg+0x19b/0x260 [ 510.597489][T10109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.597528][T10109] ? __pfx_ksys_write+0x10/0x10 [ 510.597552][T10109] ? rcu_is_watching+0x15/0xb0 [ 510.597603][T10109] ? do_syscall_64+0xbe/0x3b0 [ 510.597629][T10109] do_syscall_64+0xfa/0x3b0 [ 510.597647][T10109] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.597678][T10109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.597699][T10109] ? clear_bhb_loop+0x60/0xb0 [ 510.597725][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.597745][T10109] RIP: 0033:0x7f8b1798e929 [ 510.597765][T10109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.597784][T10109] RSP: 002b:00007f8b18856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.597807][T10109] RAX: ffffffffffffffda RBX: 00007f8b17bb5fa0 RCX: 00007f8b1798e929 [ 510.597823][T10109] RDX: 000000002008c014 RSI: 00002000000000c0 RDI: 0000000000000004 [ 510.597837][T10109] RBP: 00007f8b18856090 R08: 0000000000000000 R09: 0000000000000000 [ 510.597851][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.597864][T10109] R13: 0000000000000000 R14: 00007f8b17bb5fa0 R15: 00007ffe727ee618 [ 510.597898][T10109] [ 511.338884][ T977] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 511.418551][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 511.490611][ T977] usb 4-1: device descriptor read/64, error -71 [ 511.532079][ T5942] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 511.598670][ T5874] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.627187][ T5874] usb 6-1: config 0 has no interface number 0 [ 511.652299][ T5874] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 511.680088][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.697612][ T5874] usb 6-1: Product: syz [ 511.710585][ T5874] usb 6-1: Manufacturer: syz [ 511.720185][ T5942] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 511.725628][ T5874] usb 6-1: SerialNumber: syz [ 511.734825][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.747821][ T5874] usb 6-1: config 0 descriptor?? [ 511.752940][ T977] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 511.767998][ T5942] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 511.799853][ T5942] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 511.807933][ T5942] usb 2-1: Manufacturer: syz [ 511.831393][ T5942] usb 2-1: config 0 descriptor?? [ 511.986358][ T5874] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 511.998696][ T977] usb 4-1: device descriptor read/64, error -71 [ 512.028275][ T9841] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 512.045203][ T5874] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 512.067035][ T5874] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 512.088229][ T5874] usb 6-1: media controller created [ 512.108679][ T977] usb usb4-port1: attempt power cycle [ 512.111273][ T5942] rc_core: IR keymap rc-hauppauge not found [ 512.125883][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.142976][ T5942] Registered IR keymap rc-empty [ 512.148429][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.150458][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.171672][ T5942] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 512.191195][T10122] overlayfs: failed to resolve './file1': -2 [ 512.214215][ T9841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 512.226198][ T5942] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 512.234930][ T5874] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 512.247447][ T9841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 512.273529][ T9841] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 512.292019][ T9841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.307752][ T5942] usb 2-1: USB disconnect, device number 32 [ 512.329292][ T9841] usb 5-1: config 0 descriptor?? [ 512.347748][T10138] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 512.458189][ T977] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 512.498436][ T5874] usb 6-1: USB disconnect, device number 3 [ 512.540753][ T977] usb 4-1: device descriptor read/8, error -71 [ 512.801110][ T977] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 512.874193][ T977] usb 4-1: device descriptor read/8, error -71 [ 512.934005][T10161] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 512.963467][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 512.988946][ T977] usb usb4-port1: unable to enumerate USB device [ 513.262464][ T9841] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 513.309419][ T9841] cm6533_jd 0003:0D8C:0022.0008: item fetching failed at offset 4/5 [ 514.076611][ T9841] cm6533_jd 0003:0D8C:0022.0008: parse failed [ 514.082969][ T9841] cm6533_jd 0003:0D8C:0022.0008: probe with driver cm6533_jd failed with error -22 [ 514.448228][ T9841] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 514.707782][ T9841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.793493][ T9841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 514.915513][ T9841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.890045][ T9841] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 515.916619][ T9841] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.927565][ T9841] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.938249][ T9841] usb 2-1: Manufacturer: syz [ 515.947286][ T9841] usb 2-1: config 0 descriptor?? [ 515.957365][ T5874] usb 5-1: USB disconnect, device number 34 [ 516.415499][ T9841] rc_core: IR keymap rc-hauppauge not found [ 516.469501][ T9841] Registered IR keymap rc-empty [ 516.477691][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.508377][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.531616][ T9841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 516.593705][ T9841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 516.634367][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.668334][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.688698][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.738354][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.765265][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.818267][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.878393][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 516.909056][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 517.000377][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 517.034419][ T9841] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 517.113437][ T9841] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 517.160815][ T9841] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 517.258272][ T5874] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 517.325475][ T977] usb 2-1: USB disconnect, device number 33 [ 517.333509][T10222] usb usb8: usbfs: process 10222 (syz.5.1126) did not claim interface 9 before use [ 517.444895][ T5874] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 517.458424][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.495204][ T5874] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 518.280505][ T5874] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 518.341075][ T5874] usb 5-1: Manufacturer: syz [ 518.426038][ T5874] usb 5-1: config 0 descriptor?? [ 518.475632][ T5874] igorplugusb 5-1:0.0: incorrect number of endpoints [ 519.707839][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1134'. [ 522.243073][ T977] usb 5-1: USB disconnect, device number 35 [ 522.468437][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 523.092147][T10270] usb usb8: usbfs: process 10270 (syz.1.1140) did not claim interface 9 before use [ 523.114507][T10268] loop8: detected capacity change from 0 to 7 [ 523.125509][T10268] Dev loop8: unable to read RDB block 7 [ 523.131209][T10268] loop8: unable to read partition table [ 523.137037][T10268] loop8: partition table beyond EOD, truncated [ 523.143504][T10268] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 523.143504][T10268] ) failed (rc=-5) [ 524.378208][ T977] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 525.618546][ T977] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 525.752544][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.791815][ T977] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 525.842954][ T977] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 525.869840][ T977] usb 4-1: Manufacturer: syz [ 525.935495][ T977] usb 4-1: config 0 descriptor?? [ 526.128789][ T9841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 526.202800][ T977] rc_core: IR keymap rc-hauppauge not found [ 526.212523][ T977] Registered IR keymap rc-empty [ 526.240198][ T977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 526.716982][ T977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 526.752666][T10291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.766850][T10291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.791024][ T9841] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 526.812144][ T9841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.824534][ T5942] usb 4-1: USB disconnect, device number 42 [ 526.885716][ T9841] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 526.907029][ T9841] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 526.937907][ T9841] usb 6-1: Manufacturer: syz [ 526.950308][ T9841] usb 6-1: config 0 descriptor?? [ 527.172198][ T9841] igorplugusb 6-1:0.0: incorrect number of endpoints [ 528.382967][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.452786][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.677499][T10346] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1155'. [ 529.185937][T10345] macvtap3: entered allmulticast mode [ 530.112605][ T9116] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 530.481939][ T9116] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 530.510667][ T9116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.554223][ T9116] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 530.603981][ T9116] usb 4-1: config 0 has no interface number 0 [ 530.627437][ T9116] usb 4-1: config 0 interface 255 has no altsetting 0 [ 530.635413][ T9116] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 530.645789][ T9116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.657448][ T9116] usb 4-1: config 0 descriptor?? [ 530.677181][ T9116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 530.695477][ T9116] dvb-usb: bulk message failed: -22 (3/0) [ 530.714292][ T9116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 530.745687][ T9116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 530.754733][ T9116] usb 4-1: media controller created [ 531.271439][ T9116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.351398][ T9116] dvb-usb: bulk message failed: -22 (6/0) [ 531.357299][ T9116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 531.419354][ T9116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 531.477932][ T9116] dvb-usb: schedule remote query interval to 150 msecs. [ 531.505905][ T9116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 531.510564][ T5942] usb 6-1: USB disconnect, device number 4 [ 531.526937][ T9116] usb 4-1: USB disconnect, device number 43 [ 531.751487][ T9116] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 532.661871][T10378] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1162'. [ 532.685119][T10380] macvtap1: entered allmulticast mode [ 532.690628][T10380] veth0_macvtap: entered allmulticast mode [ 533.076506][T10390] syzkaller0: entered promiscuous mode [ 533.082286][T10390] syzkaller0: entered allmulticast mode [ 533.393222][T10393] fuse: Bad value for 'group_id' [ 533.442346][T10393] fuse: Bad value for 'group_id' [ 534.295533][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 534.364464][T10407] input: syz0 as /devices/virtual/input/input44 [ 535.479079][T10414] tipc: Enabling of bearer rejected, already enabled [ 535.532898][T10414] lo speed is unknown, defaulting to 1000 [ 535.698437][ T5942] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 535.871743][ T5942] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 535.886589][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.907349][ T5942] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 535.941256][ T5942] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 535.971254][ T5942] usb 5-1: Manufacturer: syz [ 536.098180][T10433] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 536.128647][T10433] bond0: (slave gre0): Error -95 calling set_mac_address [ 536.495330][ T5942] usb 5-1: config 0 descriptor?? [ 536.707827][ T5942] igorplugusb 5-1:0.0: incorrect number of endpoints [ 537.155556][T10445] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 537.166162][T10445] bond0: (slave gre0): Error -95 calling set_mac_address [ 537.378611][ T5942] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 537.560765][ T5942] usb 6-1: config 0 has no interfaces? [ 537.567700][ T5942] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 537.590380][ T5942] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 537.612284][ T5942] usb 6-1: Manufacturer: syz [ 538.257756][ T5942] usb 6-1: config 0 descriptor?? [ 538.756548][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.898854][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.009789][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.123941][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.646096][ T5942] usb 5-1: USB disconnect, device number 36 [ 541.022707][T10479] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1183'. [ 541.150160][T10478] macvtap4: entered allmulticast mode [ 541.483637][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 541.621347][T10490] input: syz0 as /devices/virtual/input/input45 [ 542.058683][T10488] syzkaller0: entered promiscuous mode [ 542.064237][T10488] syzkaller0: entered allmulticast mode [ 542.480168][T10499] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 542.492215][T10499] bond0: (slave gre0): Error -95 calling set_mac_address [ 542.670037][ T9116] usb 6-1: USB disconnect, device number 5 [ 543.538370][ T977] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 544.750485][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 544.817571][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 545.186640][ T977] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 545.286233][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.314942][ T977] usb 2-1: config 0 descriptor?? [ 545.344628][T10510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.479240][ T5942] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 545.690115][ T5942] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 545.927957][ T977] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 545.954697][ T977] cm6533_jd 0003:0D8C:0022.0009: No inputs registered, leaving [ 546.305399][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.324393][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.459326][ T977] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 546.475296][ T5942] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 546.492937][ T5942] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 546.502598][ T5942] usb 4-1: Manufacturer: syz [ 546.625663][ T977] usb 2-1: USB disconnect, device number 34 [ 546.669434][ T5942] usb 4-1: config 0 descriptor?? [ 546.713219][ T5942] igorplugusb 4-1:0.0: incorrect number of endpoints [ 547.069840][T10534] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1195'. [ 547.100384][T10533] macvtap5: entered allmulticast mode [ 547.368966][T10530] fido_id[10530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 547.674477][T10541] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 547.696695][T10541] bond0: (slave gre0): Error -95 calling set_mac_address [ 548.153709][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.190421][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.400759][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 549.174576][T10557] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 549.187977][T10557] bond0: (slave gre0): Error -95 calling set_mac_address [ 549.733688][ T5942] usb 4-1: USB disconnect, device number 44 [ 549.893790][T10568] tipc: Enabling of bearer rejected, already enabled [ 550.082493][T10568] lo speed is unknown, defaulting to 1000 [ 550.218461][ T5942] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 550.698243][ T5942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.758815][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.956363][ T5942] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.001416][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.312146][ T5942] usb 5-1: SerialNumber: syz [ 551.647866][T10591] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1207'. [ 551.690818][T10590] macvtap3: entered allmulticast mode [ 551.696312][T10590] veth0_macvtap: entered allmulticast mode [ 552.050750][ T5942] usb 5-1: 0:2 : does not exist [ 552.805740][ T5942] usb 5-1: USB disconnect, device number 37 [ 552.842767][T10604] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 553.005763][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.511970][T10621] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 553.538340][T10621] bond0: (slave gre0): Error -95 calling set_mac_address [ 554.772695][T10631] ntfs3(nullb0): Primary boot signature is not NTFS. [ 554.783107][T10631] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 554.798742][ T977] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 556.276061][ T977] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 556.334223][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.366717][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.506740][ T977] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 556.802976][ T977] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 557.018187][ T977] usb 5-1: Manufacturer: syz [ 557.069637][ T977] usb 5-1: config 0 descriptor?? [ 557.086876][ T977] igorplugusb 5-1:0.0: incorrect number of endpoints [ 557.427478][T10651] tipc: Enabling of bearer rejected, already enabled [ 557.459393][T10650] macvtap2: entered allmulticast mode [ 557.474840][T10650] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1219'. [ 557.565176][T10654] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 557.590595][T10654] bond0: (slave gre0): Error -95 calling set_mac_address [ 558.050012][T10651] lo speed is unknown, defaulting to 1000 [ 558.227488][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.443664][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.110203][T10667] binder: BINDER_SET_CONTEXT_MGR already set [ 559.132669][T10667] binder: 10666:10667 ioctl 4018620d 200000000040 returned -16 [ 559.156424][T10667] binder: 10666:10667 ioctl c0306201 200000000180 returned -22 [ 559.331339][T10673] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 559.360783][T10673] bond0: (slave gre0): Error -95 calling set_mac_address [ 561.181693][ T5948] usb 5-1: USB disconnect, device number 38 [ 561.362821][T10688] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 562.032061][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 562.167460][T10700] input: syz0 as /devices/virtual/input/input46 [ 562.715938][T10704] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 562.726775][T10704] bond0: (slave gre0): Error -95 calling set_mac_address [ 562.911494][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1232'. [ 563.589061][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.595531][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.976703][T10717] tipc: Enabling of bearer rejected, already enabled [ 565.107117][T10717] lo speed is unknown, defaulting to 1000 [ 565.240725][T10724] binder: BINDER_SET_CONTEXT_MGR already set [ 565.267965][T10724] binder: 10723:10724 ioctl 4018620d 200000000040 returned -16 [ 565.300359][T10724] binder: 10723:10724 ioctl c0306201 200000000180 returned -22 [ 565.863386][T10731] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 565.877811][T10731] bond0: (slave gre0): Error -95 calling set_mac_address [ 567.519561][T10747] syzkaller0: entered promiscuous mode [ 567.525629][T10747] syzkaller0: entered allmulticast mode [ 567.552470][T10751] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 567.628163][ T977] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 567.778656][ T5942] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 567.870076][ T977] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 567.908138][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.928133][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.954314][ T977] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 567.979218][ T5942] usb 6-1: config 0 has an invalid interface number: 255 but max is 1 [ 567.982639][ T977] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 567.987662][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.006511][ T977] usb 2-1: Manufacturer: syz [ 568.046783][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 568.073641][ T5942] usb 6-1: config 0 has no interface number 0 [ 568.112902][ T5942] usb 6-1: config 0 interface 255 has no altsetting 0 [ 568.129900][ T5942] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 568.152594][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.209407][ T5942] usb 6-1: config 0 descriptor?? [ 568.273545][ T5942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 568.309391][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 568.339950][ T5942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 568.359256][ T977] usb 2-1: config 0 descriptor?? [ 568.379108][ T977] igorplugusb 2-1:0.0: incorrect number of endpoints [ 568.389812][ T5942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 568.404773][ T5942] usb 6-1: media controller created [ 568.425815][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 568.427956][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.499939][ T5942] dvb-usb: bulk message failed: -22 (6/0) [ 568.524194][ T5942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 568.550099][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 568.590519][ T5942] dvb-usb: schedule remote query interval to 150 msecs. [ 568.618183][ T5942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 568.864138][T10771] tipc: Enabling of bearer rejected, already enabled [ 568.899805][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 568.905822][ T5892] dvb-usb: error while querying for an remote control event. [ 568.930769][ T5942] usb 6-1: USB disconnect, device number 6 [ 569.007955][ T5942] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 569.057302][T10771] lo speed is unknown, defaulting to 1000 [ 570.547378][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.726835][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.398710][T10808] ntfs3(nullb0): Primary boot signature is not NTFS. [ 572.405677][T10808] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 573.020202][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 573.034983][ T9116] usb 2-1: USB disconnect, device number 35 [ 573.167923][T10795] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.177824][T10795] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.187062][T10795] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.196661][T10795] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.223384][T10825] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1263'. [ 574.233196][T10795] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.243058][T10795] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.252699][T10795] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.261840][T10795] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.723222][T10826] tipc: Started in network mode [ 574.734298][T10826] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 574.744215][T10826] tipc: Enabled bearer , priority 10 [ 574.761027][T10834] macvtap6: entered allmulticast mode [ 574.792984][T10835] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 574.803845][T10835] bond0: (slave gre0): Error -95 calling set_mac_address [ 575.097725][T10846] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 577.321826][ T5948] tipc: Node number set to 15444650 [ 578.817329][T10862] FAULT_INJECTION: forcing a failure. [ 578.817329][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.873270][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.4.1273 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 578.873303][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.873317][T10862] Call Trace: [ 578.873326][T10862] [ 578.873340][T10862] dump_stack_lvl+0x189/0x250 [ 578.873379][T10862] ? __pfx____ratelimit+0x10/0x10 [ 578.873412][T10862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.873445][T10862] ? __pfx__printk+0x10/0x10 [ 578.873480][T10862] should_fail_ex+0x414/0x560 [ 578.873514][T10862] _copy_to_user+0x31/0xb0 [ 578.873539][T10862] simple_read_from_buffer+0xe1/0x170 [ 578.873572][T10862] proc_fail_nth_read+0x1df/0x250 [ 578.873608][T10862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.873642][T10862] ? rw_verify_area+0x258/0x650 [ 578.873667][T10862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.873700][T10862] vfs_read+0x1fd/0x980 [ 578.873731][T10862] ? __pfx___mutex_lock+0x10/0x10 [ 578.873753][T10862] ? __pfx_vfs_read+0x10/0x10 [ 578.873786][T10862] ? __fget_files+0x2a/0x420 [ 578.873821][T10862] ? __fget_files+0x3a0/0x420 [ 578.873849][T10862] ? __fget_files+0x2a/0x420 [ 578.873888][T10862] ksys_read+0x145/0x250 [ 578.873917][T10862] ? __pfx_ksys_read+0x10/0x10 [ 578.873948][T10862] ? do_syscall_64+0xbe/0x3b0 [ 578.873973][T10862] do_syscall_64+0xfa/0x3b0 [ 578.873992][T10862] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.874025][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.874046][T10862] ? clear_bhb_loop+0x60/0xb0 [ 578.874073][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.874093][T10862] RIP: 0033:0x7f5c6f78d33c [ 578.874112][T10862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 578.874131][T10862] RSP: 002b:00007f5c6d5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.874153][T10862] RAX: ffffffffffffffda RBX: 00007f5c6f9b5fa0 RCX: 00007f5c6f78d33c [ 578.874169][T10862] RDX: 000000000000000f RSI: 00007f5c6d5f60a0 RDI: 0000000000000003 [ 578.874183][T10862] RBP: 00007f5c6d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.874196][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.874208][T10862] R13: 0000000000000000 R14: 00007f5c6f9b5fa0 R15: 00007ffce2b27848 [ 578.874243][T10862] [ 579.168434][ T5942] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 579.198784][T10864] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 579.209453][T10864] bond0: (slave gre0): Error -95 calling set_mac_address [ 579.346658][T10868] loop8: detected capacity change from 0 to 7 [ 579.571366][T10868] Dev loop8: unable to read RDB block 7 [ 579.577275][T10868] loop8: unable to read partition table [ 579.583543][T10868] loop8: partition table beyond EOD, truncated [ 579.613466][T10868] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 579.613466][T10868] ) failed (rc=-5) [ 579.616070][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 579.791666][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 579.997522][ T5942] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 580.150126][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.237227][ T5942] usb 2-1: config 0 descriptor?? [ 580.282651][ T5942] usb 2-1: can't set config #0, error -71 [ 580.555901][T10879] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 581.309289][T10879] bond0: (slave gre0): Error -95 calling set_mac_address [ 581.365641][T10884] FAULT_INJECTION: forcing a failure. [ 581.365641][T10884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.484582][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.5.1278 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 581.484605][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.484615][T10884] Call Trace: [ 581.484621][T10884] [ 581.484628][T10884] dump_stack_lvl+0x189/0x250 [ 581.484655][T10884] ? __pfx____ratelimit+0x10/0x10 [ 581.484679][T10884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.484702][T10884] ? __pfx__printk+0x10/0x10 [ 581.484717][T10884] ? __might_fault+0xb0/0x130 [ 581.484745][T10884] should_fail_ex+0x414/0x560 [ 581.484769][T10884] _copy_from_iter+0x1db/0x16f0 [ 581.484796][T10884] ? rcu_is_watching+0x15/0xb0 [ 581.484819][T10884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 581.484840][T10884] ? __pfx__copy_from_iter+0x10/0x10 [ 581.484863][T10884] ? __build_skb_around+0x257/0x3e0 [ 581.484884][T10884] ? netlink_sendmsg+0x642/0xb30 [ 581.484902][T10884] ? skb_put+0x11b/0x210 [ 581.484922][T10884] netlink_sendmsg+0x6b2/0xb30 [ 581.484947][T10884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.484971][T10884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.484990][T10884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.485009][T10884] __sock_sendmsg+0x219/0x270 [ 581.485025][T10884] ____sys_sendmsg+0x505/0x830 [ 581.485050][T10884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.485076][T10884] ? import_iovec+0x74/0xa0 [ 581.485094][T10884] ___sys_sendmsg+0x21f/0x2a0 [ 581.485115][T10884] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.485162][T10884] ? __fget_files+0x2a/0x420 [ 581.485182][T10884] ? __fget_files+0x3a0/0x420 [ 581.485211][T10884] __x64_sys_sendmsg+0x19b/0x260 [ 581.485232][T10884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.485259][T10884] ? __pfx_ksys_write+0x10/0x10 [ 581.485276][T10884] ? rcu_is_watching+0x15/0xb0 [ 581.485301][T10884] ? do_syscall_64+0xbe/0x3b0 [ 581.485318][T10884] do_syscall_64+0xfa/0x3b0 [ 581.485331][T10884] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.485353][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.485368][T10884] ? clear_bhb_loop+0x60/0xb0 [ 581.485386][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.485401][T10884] RIP: 0033:0x7f4378b8e929 [ 581.485414][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.485427][T10884] RSP: 002b:00007f4379a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.485443][T10884] RAX: ffffffffffffffda RBX: 00007f4378db5fa0 RCX: 00007f4378b8e929 [ 581.485455][T10884] RDX: 0000000004004088 RSI: 0000200000000600 RDI: 0000000000000003 [ 581.485464][T10884] RBP: 00007f4379a31090 R08: 0000000000000000 R09: 0000000000000000 [ 581.485474][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.485483][T10884] R13: 0000000000000000 R14: 00007f4378db5fa0 R15: 00007ffe2b44bbf8 [ 581.485506][T10884] [ 581.833503][ T5942] usb 2-1: USB disconnect, device number 36 [ 582.189434][T10894] ntfs3(nullb0): Primary boot signature is not NTFS. [ 582.197418][T10894] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 583.042443][ T5942] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 583.397932][T10898] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 583.446758][ T5942] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 583.465759][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.500973][ T5942] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.510982][ T5942] usb 2-1: config 0 has no interface number 0 [ 583.517140][ T5942] usb 2-1: config 0 interface 255 has no altsetting 0 [ 583.524663][ T5942] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 583.537250][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.576319][ T5942] usb 2-1: config 0 descriptor?? [ 583.644566][ T5942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 583.663309][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 583.704467][ T5942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 583.925222][ T5942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 583.949889][ T5942] usb 2-1: media controller created [ 583.969374][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.080211][ T5942] dvb-usb: bulk message failed: -22 (6/0) [ 584.176284][ T5942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 584.464680][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 584.735302][ T5942] dvb-usb: schedule remote query interval to 150 msecs. [ 584.785049][ T5942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 584.804362][ T5942] usb 2-1: USB disconnect, device number 37 [ 585.944247][T10923] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 585.955071][T10923] bond0: (slave gre0): Error -95 calling set_mac_address [ 586.048799][ T5942] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 586.128220][ T5948] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 586.528934][ T5948] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 586.569976][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 586.648698][ T5948] usb 4-1: can't read configurations, error -61 [ 586.883507][ T5948] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 587.101178][T10932] trusted_key: syz.5.1295 sent an empty control message without MSG_MORE. [ 587.742146][ T5948] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 587.796151][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 587.823246][ T5948] usb 4-1: can't read configurations, error -71 [ 587.857915][ T5948] usb usb4-port1: attempt power cycle [ 590.272047][T10957] FAULT_INJECTION: forcing a failure. [ 590.272047][T10957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.297305][T10957] CPU: 1 UID: 0 PID: 10957 Comm: syz.1.1302 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 590.297329][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.297339][T10957] Call Trace: [ 590.297346][T10957] [ 590.297353][T10957] dump_stack_lvl+0x189/0x250 [ 590.297381][T10957] ? __pfx____ratelimit+0x10/0x10 [ 590.297406][T10957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.297433][T10957] ? __pfx__printk+0x10/0x10 [ 590.297449][T10957] ? __might_fault+0xb0/0x130 [ 590.297477][T10957] should_fail_ex+0x414/0x560 [ 590.297501][T10957] _copy_from_iter+0x1db/0x16f0 [ 590.297528][T10957] ? rcu_is_watching+0x15/0xb0 [ 590.297552][T10957] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 590.297573][T10957] ? __pfx__copy_from_iter+0x10/0x10 [ 590.297597][T10957] ? __build_skb_around+0x257/0x3e0 [ 590.297617][T10957] ? netlink_sendmsg+0x642/0xb30 [ 590.297635][T10957] ? skb_put+0x11b/0x210 [ 590.297655][T10957] netlink_sendmsg+0x6b2/0xb30 [ 590.297680][T10957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.297705][T10957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.297724][T10957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.297742][T10957] __sock_sendmsg+0x219/0x270 [ 590.297764][T10957] ____sys_sendmsg+0x505/0x830 [ 590.297788][T10957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.297815][T10957] ? import_iovec+0x74/0xa0 [ 590.297833][T10957] ___sys_sendmsg+0x21f/0x2a0 [ 590.297855][T10957] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.297902][T10957] ? __fget_files+0x2a/0x420 [ 590.297923][T10957] ? __fget_files+0x3a0/0x420 [ 590.297952][T10957] __x64_sys_sendmsg+0x19b/0x260 [ 590.297974][T10957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.298003][T10957] ? __pfx_ksys_write+0x10/0x10 [ 590.298019][T10957] ? rcu_is_watching+0x15/0xb0 [ 590.298055][T10957] ? do_syscall_64+0xbe/0x3b0 [ 590.298079][T10957] do_syscall_64+0xfa/0x3b0 [ 590.298100][T10957] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.298124][T10957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.298139][T10957] ? clear_bhb_loop+0x60/0xb0 [ 590.298156][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.298171][T10957] RIP: 0033:0x7f8b1798e929 [ 590.298185][T10957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.298198][T10957] RSP: 002b:00007f8b18856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.298214][T10957] RAX: ffffffffffffffda RBX: 00007f8b17bb5fa0 RCX: 00007f8b1798e929 [ 590.298225][T10957] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 590.298245][T10957] RBP: 00007f8b18856090 R08: 0000000000000000 R09: 0000000000000000 [ 590.298259][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.298271][T10957] R13: 0000000000000000 R14: 00007f8b17bb5fa0 R15: 00007ffe727ee618 [ 590.298305][T10957] [ 590.706105][T10951] lo speed is unknown, defaulting to 1000 [ 592.198157][T10967] loop8: detected capacity change from 0 to 7 [ 592.473076][T10967] Dev loop8: unable to read RDB block 7 [ 592.507461][T10967] loop8: unable to read partition table [ 592.730215][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 592.948074][T10976] input: syz0 as /devices/virtual/input/input49 [ 592.969023][T10967] loop8: partition table beyond EOD, truncated [ 593.203860][T10967] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 593.203860][T10967] ) failed (rc=-5) [ 593.884612][T10986] ubi31: attaching mtd0 [ 593.893589][T10986] ubi31 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 593.919187][T10984] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 594.730499][ T977] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 595.108182][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 595.115696][ T977] usb 5-1: config 8 has an invalid interface number: 247 but max is 0 [ 595.124553][ T977] usb 5-1: config 8 has no interface number 0 [ 595.140380][ T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=c8.cf [ 595.150131][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.170689][ T977] usb 5-1: Product: syz [ 595.174934][ T977] usb 5-1: Manufacturer: syz [ 595.180001][ T977] usb 5-1: SerialNumber: syz [ 595.398485][ T977] appledisplay 5-1:8.247: Could not find int-in endpoint [ 595.406943][ T977] usbhid 5-1:8.247: couldn't find an input interrupt endpoint [ 595.445319][ T977] usb 5-1: USB disconnect, device number 39 [ 595.778505][T10981] Bluetooth: hci0: command 0x040f tx timeout [ 595.956921][T11013] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 595.988872][T11013] bond0: (slave gre0): Error -95 calling set_mac_address [ 598.462883][T11029] loop8: detected capacity change from 0 to 7 [ 598.913337][T11029] Dev loop8: unable to read RDB block 7 [ 598.935826][T11029] loop8: unable to read partition table [ 598.952832][T11029] loop8: partition table beyond EOD, truncated [ 598.968360][T11029] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 598.968360][T11029] ) failed (rc=-5) [ 599.885358][T11049] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 600.141200][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 600.329218][T11058] input: syz0 as /devices/virtual/input/input50 [ 608.785408][T11134] netlink: 'syz.3.1351': attribute type 4 has an invalid length. [ 608.806263][T11134] netlink: 'syz.3.1351': attribute type 2 has an invalid length. [ 609.835763][T11143] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 615.121854][T11184] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1367'. [ 615.150669][ T9116] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 615.332238][ T9116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.357385][ T9116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.398257][ T9116] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 615.408403][ T9116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.448688][ T5948] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 615.457611][ T9116] usb 4-1: config 0 descriptor?? [ 615.888750][T11187] loop8: detected capacity change from 0 to 7 [ 615.944119][T11187] Dev loop8: unable to read RDB block 7 [ 615.952682][T11187] loop8: unable to read partition table [ 615.972372][T11187] loop8: partition table beyond EOD, truncated [ 615.979985][T11187] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 615.979985][T11187] ) failed (rc=-5) [ 616.060132][ T5948] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 616.088194][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.141718][ T5948] usb 6-1: Product: syz [ 616.145984][ T5948] usb 6-1: Manufacturer: syz [ 616.171104][ T5948] usb 6-1: SerialNumber: syz [ 616.195336][ T5948] usb 6-1: config 0 descriptor?? [ 616.401383][ T9116] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 616.414585][ T9116] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 616.423451][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 616.461226][ T9116] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000A/input/input51 [ 616.515504][ T5948] hso 6-1:0.0: Failed to find BULK IN ep [ 616.607160][ T5948] usb-storage 6-1:0.0: USB Mass Storage device detected [ 616.629480][ T9116] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 616.724823][T11184] pim6reg: entered allmulticast mode [ 617.418590][T11183] pim6reg: left allmulticast mode [ 617.561230][ T43] usb 6-1: USB disconnect, device number 7 [ 617.810877][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 617.828261][ T5892] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 617.848944][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 617.998165][ T5948] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 618.185194][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.225738][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.255330][ T5948] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.273414][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.404256][ T5948] usb 2-1: SerialNumber: syz [ 619.320143][ T5948] usb 2-1: 0:2 : does not exist [ 619.353842][ T5948] usb 2-1: USB disconnect, device number 38 [ 619.626417][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.705620][T11228] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 620.273115][T11241] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 620.305835][T11241] bond0: (slave gre0): Error -95 calling set_mac_address [ 620.494764][ T9841] usb 4-1: USB disconnect, device number 48 [ 621.685853][T11256] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 621.717860][T11256] bond0: (slave gre0): Error -95 calling set_mac_address [ 622.646828][T11266] vivid-000: ================= START STATUS ================= [ 622.768169][T11266] vivid-000: Radio HW Seek Mode: Bounded [ 622.928185][T11266] vivid-000: Radio Programmable HW Seek: false [ 623.112354][T11266] vivid-000: RDS Rx I/O Mode: Block I/O [ 623.208508][T11266] vivid-000: Generate RBDS Instead of RDS: false [ 623.224314][T11266] vivid-000: RDS Reception: true [ 623.229647][T11266] vivid-000: RDS Program Type: 0 inactive [ 623.235448][T11266] vivid-000: RDS PS Name: inactive [ 623.251504][T11266] vivid-000: RDS Radio Text: inactive [ 623.280408][T11266] vivid-000: RDS Traffic Announcement: false inactive [ 623.358267][T11266] vivid-000: RDS Traffic Program: false inactive [ 623.364717][T11266] vivid-000: RDS Music: false inactive [ 623.402193][T11266] vivid-000: ================== END STATUS ================== [ 623.488380][ T5942] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 623.700502][ T5942] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 623.711690][ T5942] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 623.723452][ T5942] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 623.734467][ T5942] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 623.747716][ T5942] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 623.756949][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.061595][ T5942] ath6kl: Failed to submit usb control message: -71 [ 624.090010][ T5942] ath6kl: unable to send the bmi data to the device: -71 [ 624.097127][ T5942] ath6kl: Unable to send get target info: -71 [ 624.124990][ T5942] ath6kl: Failed to init ath6kl core: -71 [ 624.151765][ T5942] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 624.186544][ T5942] usb 6-1: USB disconnect, device number 8 [ 624.264546][T11280] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1393'. [ 624.427183][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.433673][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.568724][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 624.835889][ T9116] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 625.096092][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 625.106414][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.116822][ T43] usb 2-1: Product: syz [ 625.122708][ T43] usb 2-1: Manufacturer: syz [ 625.149280][ T43] usb 2-1: SerialNumber: syz [ 625.162269][ T43] usb 2-1: config 0 descriptor?? [ 625.192287][ T9116] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.214349][ T9116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.227034][ T9116] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 625.245375][ T9116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 625.260110][ T9116] usb 5-1: SerialNumber: syz [ 625.375195][ T43] hso 2-1:0.0: Failed to find BULK IN ep [ 625.400138][ T43] usb-storage 2-1:0.0: USB Mass Storage device detected [ 625.492230][ T9116] usb 5-1: 0:2 : does not exist [ 625.517764][ T9116] usb 5-1: USB disconnect, device number 40 [ 625.648466][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.651311][T11280] pim6reg: entered allmulticast mode [ 625.681219][T11278] pim6reg: left allmulticast mode [ 626.528393][ T5942] usb 2-1: USB disconnect, device number 39 [ 626.757958][T11312] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 626.933748][T11316] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 626.960991][T11316] bond0: (slave gre0): Error -95 calling set_mac_address [ 627.718208][T11327] vivid-001: ================= START STATUS ================= [ 627.733870][T11327] vivid-001: Radio HW Seek Mode: Bounded [ 627.745107][T11327] vivid-001: Radio Programmable HW Seek: false [ 627.760413][T11327] vivid-001: RDS Rx I/O Mode: Block I/O [ 627.788196][T11327] vivid-001: Generate RBDS Instead of RDS: false [ 627.806501][T11327] vivid-001: RDS Reception: true [ 627.824100][T11327] vivid-001: RDS Program Type: 0 inactive [ 627.849727][T11327] vivid-001: RDS PS Name: inactive [ 627.861720][T11327] vivid-001: RDS Radio Text: inactive [ 627.875890][T11327] vivid-001: RDS Traffic Announcement: false inactive [ 627.896380][T11327] vivid-001: RDS Traffic Program: false inactive [ 627.917668][T11327] vivid-001: RDS Music: false inactive [ 627.933356][T11327] vivid-001: ================== END STATUS ================== [ 628.098672][ T977] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 628.273674][ T977] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 628.300198][ T977] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 628.333564][ T977] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 628.365058][ T977] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 628.514112][ T977] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 628.525480][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.753844][ T977] ath6kl: Failed to submit usb control message: -71 [ 628.769881][ T977] ath6kl: unable to send the bmi data to the device: -71 [ 628.787335][ T977] ath6kl: Unable to send get target info: -71 [ 628.805329][ T977] ath6kl: Failed to init ath6kl core: -71 [ 628.821798][ T977] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 628.891585][ T977] usb 4-1: USB disconnect, device number 49 [ 629.268158][T11344] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 629.296659][T11344] bond0: (slave gre0): Error -95 calling set_mac_address [ 630.144802][T11350] FAULT_INJECTION: forcing a failure. [ 630.144802][T11350] name failslab, interval 1, probability 0, space 0, times 0 [ 630.158776][T11350] CPU: 0 UID: 0 PID: 11350 Comm: syz.3.1414 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 630.158809][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.158824][T11350] Call Trace: [ 630.158833][T11350] [ 630.158842][T11350] dump_stack_lvl+0x189/0x250 [ 630.158880][T11350] ? __pfx____ratelimit+0x10/0x10 [ 630.158914][T11350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.158947][T11350] ? __pfx__printk+0x10/0x10 [ 630.158976][T11350] ? __pfx___might_resched+0x10/0x10 [ 630.159015][T11350] should_fail_ex+0x414/0x560 [ 630.159050][T11350] should_failslab+0xa8/0x100 [ 630.159082][T11350] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 630.159112][T11350] ? __alloc_skb+0x112/0x2d0 [ 630.159142][T11350] __alloc_skb+0x112/0x2d0 [ 630.159173][T11350] netlink_sendmsg+0x5c6/0xb30 [ 630.159212][T11350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.159252][T11350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.159281][T11350] __sock_sendmsg+0x219/0x270 [ 630.159306][T11350] ____sys_sendmsg+0x505/0x830 [ 630.159357][T11350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.159398][T11350] ? import_iovec+0x74/0xa0 [ 630.159426][T11350] ___sys_sendmsg+0x21f/0x2a0 [ 630.159458][T11350] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.159529][T11350] ? __fget_files+0x2a/0x420 [ 630.159559][T11350] ? __fget_files+0x3a0/0x420 [ 630.159602][T11350] __x64_sys_sendmsg+0x19b/0x260 [ 630.159634][T11350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.159692][T11350] do_syscall_64+0xfa/0x3b0 [ 630.159716][T11350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.159738][T11350] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 630.159759][T11350] ? clear_bhb_loop+0x60/0xb0 [ 630.159786][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.159808][T11350] RIP: 0033:0x7f8ab8d8e929 [ 630.159828][T11350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.159848][T11350] RSP: 002b:00007f8ab6bb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.159872][T11350] RAX: ffffffffffffffda RBX: 00007f8ab8fb6160 RCX: 00007f8ab8d8e929 [ 630.159888][T11350] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000005 [ 630.159902][T11350] RBP: 00007f8ab6bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 630.159915][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.159928][T11350] R13: 0000000000000000 R14: 00007f8ab8fb6160 R15: 00007ffe765b1768 [ 630.159962][T11350] [ 631.168527][ T5942] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 631.477915][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 631.516685][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.559003][ T5942] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 631.572356][T11364] syzkaller0: entered promiscuous mode [ 631.577899][T11364] syzkaller0: entered allmulticast mode [ 631.598281][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 631.607413][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.670110][T11366] overlayfs: failed to clone upperpath [ 631.689404][ T5942] usb 6-1: config 0 descriptor?? [ 632.040347][T11373] vivid-002: ================= START STATUS ================= [ 632.107989][T11373] vivid-002: Radio HW Seek Mode: Bounded [ 632.211635][T11373] vivid-002: Radio Programmable HW Seek: false [ 632.337758][T11373] vivid-002: RDS Rx I/O Mode: Block I/O [ 632.378549][T11373] vivid-002: Generate RBDS Instead of RDS: false [ 632.506368][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.519942][T11373] vivid-002: RDS Reception: true [ 632.524989][T11373] vivid-002: RDS Program Type: 0 inactive [ 632.548863][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.572009][T11373] vivid-002: RDS PS Name: inactive [ 632.577328][T11373] vivid-002: RDS Radio Text: inactive [ 632.600426][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.618227][T11373] vivid-002: RDS Traffic Announcement: false inactive [ 632.639554][T11373] vivid-002: RDS Traffic Program: false inactive [ 632.666735][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.674834][T11373] vivid-002: RDS Music: false inactive [ 632.684564][T11373] vivid-002: ================== END STATUS ================== [ 632.838110][ T9116] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 632.992143][ T9116] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 633.004806][ T9116] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 633.017319][ T9116] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 633.029966][ T9116] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 633.044114][ T9116] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 633.053337][ T9116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.110059][T11386] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 633.280661][ T9116] ath6kl: Failed to submit usb control message: -71 [ 633.287386][ T9116] ath6kl: unable to send the bmi data to the device: -71 [ 633.307152][ T9116] ath6kl: Unable to send get target info: -71 [ 633.323097][ T9116] ath6kl: Failed to init ath6kl core: -71 [ 633.330464][ T9116] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 633.364593][ T9116] usb 2-1: USB disconnect, device number 40 [ 634.320613][ T43] usb 6-1: USB disconnect, device number 9 [ 634.427946][T11397] 9pnet_fd: Insufficient options for proto=fd [ 634.579884][T11399] tc_dump_action: action bad kind [ 636.801615][T11417] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 636.828434][T11417] bond0: (slave gre0): Error -95 calling set_mac_address [ 637.651554][T11424] tipc: Withdrawal distribution failure [ 637.907814][T11425] overlayfs: failed to resolve './file0': -2 [ 637.998863][T11428] vivid-003: ================= START STATUS ================= [ 638.006556][T11428] vivid-003: Radio HW Seek Mode: Bounded [ 638.014592][T11428] vivid-003: Radio Programmable HW Seek: false [ 638.028069][T11428] vivid-003: RDS Rx I/O Mode: Block I/O [ 638.036088][T11428] vivid-003: Generate RBDS Instead of RDS: false [ 638.059163][T11428] vivid-003: RDS Reception: true [ 638.073673][T11428] vivid-003: RDS Program Type: 0 inactive [ 638.079545][T11428] vivid-003: RDS PS Name: inactive [ 638.084885][T11428] vivid-003: RDS Radio Text: inactive [ 638.090644][T11428] vivid-003: RDS Traffic Announcement: false inactive [ 638.103219][T11428] vivid-003: RDS Traffic Program: false inactive [ 638.115245][T11428] vivid-003: RDS Music: false inactive [ 638.125529][T11428] vivid-003: ================== END STATUS ================== [ 638.317265][T11440] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 638.339752][T11440] bond0: (slave gre0): Error -95 calling set_mac_address [ 638.733267][ T9116] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 638.840576][T11446] FAULT_INJECTION: forcing a failure. [ 638.840576][T11446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.856491][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.1.1442 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 638.856530][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.856543][T11446] Call Trace: [ 638.856552][T11446] [ 638.856562][T11446] dump_stack_lvl+0x189/0x250 [ 638.856598][T11446] ? __pfx____ratelimit+0x10/0x10 [ 638.856632][T11446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.856664][T11446] ? __pfx__printk+0x10/0x10 [ 638.856684][T11446] ? __might_fault+0xb0/0x130 [ 638.856723][T11446] should_fail_ex+0x414/0x560 [ 638.856757][T11446] _copy_from_iter+0x1db/0x16f0 [ 638.856795][T11446] ? rcu_is_watching+0x15/0xb0 [ 638.856829][T11446] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 638.856859][T11446] ? __pfx__copy_from_iter+0x10/0x10 [ 638.856894][T11446] ? __build_skb_around+0x257/0x3e0 [ 638.856925][T11446] ? netlink_sendmsg+0x642/0xb30 [ 638.856951][T11446] ? skb_put+0x11b/0x210 [ 638.856981][T11446] netlink_sendmsg+0x6b2/0xb30 [ 638.857019][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.857056][T11446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.857083][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.857111][T11446] __sock_sendmsg+0x219/0x270 [ 638.857136][T11446] ____sys_sendmsg+0x505/0x830 [ 638.857172][T11446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.857212][T11446] ? import_iovec+0x74/0xa0 [ 638.857238][T11446] ___sys_sendmsg+0x21f/0x2a0 [ 638.857270][T11446] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.857340][T11446] ? __fget_files+0x2a/0x420 [ 638.857371][T11446] ? __fget_files+0x3a0/0x420 [ 638.857412][T11446] __x64_sys_sendmsg+0x19b/0x260 [ 638.857444][T11446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.857489][T11446] ? __pfx_ksys_write+0x10/0x10 [ 638.857520][T11446] ? rcu_is_watching+0x15/0xb0 [ 638.857557][T11446] ? do_syscall_64+0xbe/0x3b0 [ 638.857582][T11446] do_syscall_64+0xfa/0x3b0 [ 638.857601][T11446] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.857634][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.857655][T11446] ? clear_bhb_loop+0x60/0xb0 [ 638.857681][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.857701][T11446] RIP: 0033:0x7f8b1798e929 [ 638.857719][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.857737][T11446] RSP: 002b:00007f8b18856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.857760][T11446] RAX: ffffffffffffffda RBX: 00007f8b17bb5fa0 RCX: 00007f8b1798e929 [ 638.857777][T11446] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 638.857789][T11446] RBP: 00007f8b18856090 R08: 0000000000000000 R09: 0000000000000000 [ 638.857802][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.857814][T11446] R13: 0000000000000000 R14: 00007f8b17bb5fa0 R15: 00007ffe727ee618 [ 638.857845][T11446] [ 639.180931][ T9116] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 639.191939][ T9116] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 639.203412][ T9116] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 639.235470][ T9116] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 639.251165][ T9116] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 639.260326][ T9116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.288263][ T5948] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 639.450384][ T5948] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 639.459896][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 639.482525][ T5948] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 639.502133][ T9116] ath6kl: Failed to submit usb control message: -71 [ 639.513467][ T5948] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 639.530783][ T9116] ath6kl: unable to send the bmi data to the device: -71 [ 639.555925][ T5948] usb 4-1: Manufacturer: syz [ 639.575951][ T9116] ath6kl: Unable to send get target info: -71 [ 639.589307][ T5948] usb 4-1: config 0 descriptor?? [ 640.324863][ T9116] ath6kl: Failed to init ath6kl core: -71 [ 640.345012][ T5948] igorplugusb 4-1:0.0: incorrect number of endpoints [ 640.353854][ T9116] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 640.449490][T11456] loop8: detected capacity change from 0 to 7 [ 640.488578][ T9116] usb 5-1: USB disconnect, device number 41 [ 640.499281][T11456] Dev loop8: unable to read RDB block 7 [ 640.504953][T11456] loop8: unable to read partition table [ 640.510996][T11456] loop8: partition table beyond EOD, truncated [ 640.517218][T11456] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 640.517218][T11456] ) failed (rc=-5) [ 640.695545][T11465] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 641.068821][T11474] syzkaller0: entered promiscuous mode [ 641.074375][T11474] syzkaller0: entered allmulticast mode [ 641.273364][T11478] fuse: Bad value for 'fd' [ 641.482312][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.531235][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.612766][T11481] overlayfs: failed to resolve './file0': -2 [ 642.398398][ T9116] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 642.618634][ T9116] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 642.627775][ T9116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.660028][ T9116] usb 2-1: config 0 descriptor?? [ 642.690095][ T9116] cp210x 2-1:0.0: cp210x converter detected [ 642.769054][T11465] overlayfs: missing 'lowerdir' [ 642.785663][ T5892] usb 4-1: USB disconnect, device number 50 [ 643.114049][T11498] vivid-003: ================= START STATUS ================= [ 643.142541][T11498] vivid-003: Radio HW Seek Mode: Bounded [ 643.162771][T11498] vivid-003: Radio Programmable HW Seek: false [ 643.189697][T11498] vivid-003: RDS Rx I/O Mode: Block I/O [ 643.217605][T11498] vivid-003: Generate RBDS Instead of RDS: false [ 643.239284][T11501] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1458'. [ 643.248802][T11498] vivid-003: RDS Reception: true [ 643.262052][T11498] vivid-003: RDS Program Type: 0 inactive [ 643.285923][ T9116] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 643.286897][T11498] vivid-003: RDS PS Name: inactive [ 643.319315][ T9116] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 643.333353][T11501] pim6reg: entered allmulticast mode [ 643.347559][ T9116] usb 2-1: cp210x converter now attached to ttyUSB0 [ 643.349021][T11498] vivid-003: RDS Radio Text: inactive [ 643.384032][T11498] vivid-003: RDS Traffic Announcement: false inactive [ 643.389531][ T9116] usb 2-1: USB disconnect, device number 41 [ 643.405486][T11500] pim6reg: left allmulticast mode [ 643.414371][T11498] vivid-003: RDS Traffic Program: false inactive [ 643.425369][ T9116] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 643.431749][T11498] vivid-003: RDS Music: false inactive [ 643.461564][ T9116] cp210x 2-1:0.0: device disconnected [ 643.464927][T11498] vivid-003: ================== END STATUS ================== [ 643.508131][ T5892] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 643.670822][ T5892] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 643.703593][ T5892] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 643.734954][ T5892] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 643.764249][ T5892] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 643.786774][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 643.832317][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.086953][ T5892] ath6kl: Failed to submit usb control message: -71 [ 644.123018][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 645.113640][ T5892] ath6kl: Unable to send get target info: -71 [ 645.125370][T11513] fuse: Bad value for 'fd' [ 645.183700][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 645.191077][ T5892] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 645.286100][T11517] overlayfs: failed to resolve './file0': -2 [ 645.398511][ T5892] usb 5-1: USB disconnect, device number 42 [ 645.940181][T11524] [ 645.942599][T11524] ====================================================== [ 645.949647][T11524] WARNING: possible circular locking dependency detected [ 645.956720][T11524] 6.15.0-syzkaller-13743-g8630c59e9936 #0 Not tainted [ 645.963515][T11524] ------------------------------------------------------ [ 645.970746][T11524] syz.5.1465/11524 is trying to acquire lock: [ 645.976846][T11524] ffffffff8e2247c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 645.986498][T11524] [ 645.986498][T11524] but task is already holding lock: [ 645.993898][T11524] ffff888142f4a7c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 646.004263][T11524] [ 646.004263][T11524] which lock already depends on the new lock. [ 646.004263][T11524] [ 646.014700][T11524] [ 646.014700][T11524] the existing dependency chain (in reverse order) is: [ 646.023747][T11524] [ 646.023747][T11524] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 646.032431][T11524] lock_acquire+0x120/0x360 [ 646.037511][T11524] blk_alloc_queue+0x538/0x620 [ 646.042858][T11524] __blk_mq_alloc_disk+0x162/0x340 [ 646.048548][T11524] nbd_dev_add+0x476/0xb00 [ 646.053540][T11524] nbd_init+0x21a/0x2d0 [ 646.058261][T11524] do_one_initcall+0x233/0x820 [ 646.063587][T11524] do_initcall_level+0x137/0x1f0 [ 646.069110][T11524] do_initcalls+0x69/0xd0 [ 646.074024][T11524] kernel_init_freeable+0x3d9/0x570 [ 646.079854][T11524] kernel_init+0x1d/0x1d0 [ 646.084753][T11524] ret_from_fork+0x3f9/0x770 [ 646.089912][T11524] ret_from_fork_asm+0x1a/0x30 [ 646.095243][T11524] [ 646.095243][T11524] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 646.102533][T11524] lock_acquire+0x120/0x360 [ 646.107615][T11524] fs_reclaim_acquire+0x72/0x100 [ 646.113123][T11524] prepare_alloc_pages+0x153/0x610 [ 646.118818][T11524] __alloc_frozen_pages_noprof+0x123/0x370 [ 646.125210][T11524] __alloc_pages_noprof+0xa/0x30 [ 646.130729][T11524] pcpu_populate_chunk+0x182/0xb30 [ 646.136420][T11524] pcpu_alloc_noprof+0xcbf/0x16b0 [ 646.142017][T11524] xt_percpu_counter_alloc+0x161/0x220 [ 646.148051][T11524] translate_table+0x1323/0x2040 [ 646.153567][T11524] ip6t_register_table+0x106/0x7d0 [ 646.159252][T11524] ip6table_security_table_init+0x41/0x70 [ 646.165544][T11524] xt_find_table_lock+0x30c/0x3e0 [ 646.171152][T11524] xt_request_find_table_lock+0x26/0x100 [ 646.177362][T11524] do_ip6t_get_ctl+0x730/0x1180 [ 646.182784][T11524] nf_getsockopt+0x26e/0x290 [ 646.187949][T11524] ipv6_getsockopt+0x1ed/0x290 [ 646.193296][T11524] do_sock_getsockopt+0x35d/0x650 [ 646.198883][T11524] __x64_sys_getsockopt+0x1a5/0x250 [ 646.204651][T11524] do_syscall_64+0xfa/0x3b0 [ 646.209716][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.216166][T11524] [ 646.216166][T11524] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 646.223977][T11524] validate_chain+0xb9b/0x2140 [ 646.229315][T11524] __lock_acquire+0xab9/0xd20 [ 646.234563][T11524] lock_acquire+0x120/0x360 [ 646.239630][T11524] __mutex_lock+0x182/0xe80 [ 646.244690][T11524] pcpu_alloc_noprof+0x286/0x16b0 [ 646.250284][T11524] sbitmap_init_node+0x1e1/0x630 [ 646.255789][T11524] sbitmap_queue_init_node+0x41/0x660 [ 646.261738][T11524] blk_mq_init_tags+0x110/0x280 [ 646.267153][T11524] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 646.273189][T11524] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 646.279640][T11524] nbd_start_device+0x16c/0xac0 [ 646.285146][T11524] nbd_genl_connect+0x1250/0x1930 [ 646.290746][T11524] genl_family_rcv_msg_doit+0x215/0x300 [ 646.296863][T11524] genl_rcv_msg+0x60e/0x790 [ 646.301936][T11524] netlink_rcv_skb+0x208/0x470 [ 646.307321][T11524] genl_rcv+0x28/0x40 [ 646.311869][T11524] netlink_unicast+0x75b/0x8d0 [ 646.317191][T11524] netlink_sendmsg+0x805/0xb30 [ 646.322533][T11524] __sock_sendmsg+0x219/0x270 [ 646.327773][T11524] ____sys_sendmsg+0x505/0x830 [ 646.333104][T11524] ___sys_sendmsg+0x21f/0x2a0 [ 646.338343][T11524] __x64_sys_sendmsg+0x19b/0x260 [ 646.343848][T11524] do_syscall_64+0xfa/0x3b0 [ 646.348908][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.355368][T11524] [ 646.355368][T11524] other info that might help us debug this: [ 646.355368][T11524] [ 646.365629][T11524] Chain exists of: [ 646.365629][T11524] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 646.365629][T11524] [ 646.379530][T11524] Possible unsafe locking scenario: [ 646.379530][T11524] [ 646.387017][T11524] CPU0 CPU1 [ 646.392397][T11524] ---- ---- [ 646.397769][T11524] lock(&q->q_usage_counter(io)#49); [ 646.403166][T11524] lock(fs_reclaim); [ 646.409684][T11524] lock(&q->q_usage_counter(io)#49); [ 646.417604][T11524] lock(pcpu_alloc_mutex); [ 646.422145][T11524] [ 646.422145][T11524] *** DEADLOCK *** [ 646.422145][T11524] [ 646.430318][T11524] 7 locks held by syz.5.1465/11524: [ 646.435516][T11524] #0: ffffffff8f564630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.443723][T11524] #1: ffffffff8f564448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 646.452707][T11524] #2: ffff8880252d3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930 [ 646.462730][T11524] #3: ffff8880252d3988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 646.474138][T11524] #4: ffff8880252d38d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0 [ 646.485128][T11524] #5: ffff888142f4a7c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 646.495861][T11524] #6: ffff888142f4a800 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 646.506594][T11524] [ 646.506594][T11524] stack backtrace: [ 646.512482][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.5.1465 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 646.512502][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.512512][T11524] Call Trace: [ 646.512519][T11524] [ 646.512525][T11524] dump_stack_lvl+0x189/0x250 [ 646.512552][T11524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.512575][T11524] ? __pfx__printk+0x10/0x10 [ 646.512591][T11524] ? print_lock_name+0xde/0x100 [ 646.512617][T11524] print_circular_bug+0x2ee/0x310 [ 646.512634][T11524] check_noncircular+0x134/0x160 [ 646.512662][T11524] validate_chain+0xb9b/0x2140 [ 646.512695][T11524] __lock_acquire+0xab9/0xd20 [ 646.512718][T11524] ? pcpu_alloc_noprof+0x286/0x16b0 [ 646.512738][T11524] lock_acquire+0x120/0x360 [ 646.512757][T11524] ? pcpu_alloc_noprof+0x286/0x16b0 [ 646.512782][T11524] __mutex_lock+0x182/0xe80 [ 646.512796][T11524] ? pcpu_alloc_noprof+0x286/0x16b0 [ 646.512816][T11524] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 646.512840][T11524] ? kasan_save_track+0x4f/0x80 [ 646.512857][T11524] ? kasan_save_track+0x3e/0x80 [ 646.512873][T11524] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 646.512902][T11524] ? pcpu_alloc_noprof+0x286/0x16b0 [ 646.512929][T11524] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 646.512972][T11524] ? blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 646.512990][T11524] ? __pfx___mutex_lock+0x10/0x10 [ 646.513004][T11524] ? genl_rcv+0x28/0x40 [ 646.513026][T11524] ? __sock_sendmsg+0x219/0x270 [ 646.513039][T11524] ? ____sys_sendmsg+0x505/0x830 [ 646.513065][T11524] pcpu_alloc_noprof+0x286/0x16b0 [ 646.513091][T11524] sbitmap_init_node+0x1e1/0x630 [ 646.513116][T11524] ? __kasan_kmalloc+0x93/0xb0 [ 646.513136][T11524] sbitmap_queue_init_node+0x41/0x660 [ 646.513161][T11524] ? __raw_spin_lock_init+0x45/0x100 [ 646.513178][T11524] blk_mq_init_tags+0x110/0x280 [ 646.513198][T11524] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 646.513224][T11524] ? blk_mq_update_nr_hw_queues+0x678/0x14c0 [ 646.513239][T11524] ? kfree+0x18e/0x440 [ 646.513258][T11524] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 646.513280][T11524] nbd_start_device+0x16c/0xac0 [ 646.513305][T11524] ? __nla_parse+0x40/0x60 [ 646.513329][T11524] nbd_genl_connect+0x1250/0x1930 [ 646.513356][T11524] ? __pfx_nbd_genl_connect+0x10/0x10 [ 646.513384][T11524] ? __nla_parse+0x40/0x60 [ 646.513408][T11524] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 646.513436][T11524] genl_family_rcv_msg_doit+0x215/0x300 [ 646.513463][T11524] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 646.513495][T11524] genl_rcv_msg+0x60e/0x790 [ 646.513520][T11524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.513543][T11524] ? __pfx_nbd_genl_connect+0x10/0x10 [ 646.513571][T11524] netlink_rcv_skb+0x208/0x470 [ 646.513589][T11524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.513612][T11524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.513636][T11524] ? down_read+0x1ad/0x2e0 [ 646.513652][T11524] genl_rcv+0x28/0x40 [ 646.513674][T11524] netlink_unicast+0x75b/0x8d0 [ 646.513693][T11524] netlink_sendmsg+0x805/0xb30 [ 646.513716][T11524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.513737][T11524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.513756][T11524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.513775][T11524] __sock_sendmsg+0x219/0x270 [ 646.513790][T11524] ____sys_sendmsg+0x505/0x830 [ 646.513811][T11524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.513834][T11524] ? import_iovec+0x74/0xa0 [ 646.513851][T11524] ___sys_sendmsg+0x21f/0x2a0 [ 646.513872][T11524] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.513905][T11524] ? __fget_files+0x2a/0x420 [ 646.513926][T11524] ? __fget_files+0x3a0/0x420 [ 646.513956][T11524] __x64_sys_sendmsg+0x19b/0x260 [ 646.513977][T11524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.514001][T11524] ? rcu_is_watching+0x15/0xb0 [ 646.514026][T11524] ? do_syscall_64+0xbe/0x3b0 [ 646.514041][T11524] do_syscall_64+0xfa/0x3b0 [ 646.514055][T11524] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.514079][T11524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.514093][T11524] ? clear_bhb_loop+0x60/0xb0 [ 646.514111][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.514125][T11524] RIP: 0033:0x7f4378b8e929 [ 646.514139][T11524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.514153][T11524] RSP: 002b:00007f4379a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.514169][T11524] RAX: ffffffffffffffda RBX: 00007f4378db5fa0 RCX: 00007f4378b8e929 [ 646.514181][T11524] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 646.514192][T11524] RBP: 00007f4378c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 646.514202][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.514211][T11524] R13: 0000000000000000 R14: 00007f4378db5fa0 R15: 00007ffe2b44bbf8 [ 646.514228][T11524] [ 647.018765][ T5834] block nbd0: Receive control failed (result -32) [ 647.025357][ T5834] block nbd0: Receive control failed (result -32) [ 647.032003][ T5834] block nbd0: Receive control failed (result -32)