last executing test programs: 28m49.694570893s ago: executing program 3 (id=1108): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0xb}, @device_a, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0xd}, {0xd, 0x5}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) 28m49.394227257s ago: executing program 3 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) getsockopt$inet6_opts(r3, 0x29, 0x39, 0xffffffffffffffff, &(0x7f0000000000)) 28m48.255684151s ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, &(0x7f0000001800), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090228bd7000fb00df2501000000000000000841000000"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) 28m47.346635633s ago: executing program 3 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000b2c000/0x3000)=nil, 0x3000}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r8, 0x11}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r8, 0x1}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/74, 0x4a) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x8}, 0xc) bind$tipc(r5, 0x0, 0x0) 28m41.804922683s ago: executing program 3 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2c060000) ioctl(0xffffffffffffffff, 0x890b, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x880008, &(0x7f0000000200)={[], [{@obj_role={'obj_role', 0x3d, '\xd7'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '[^&:['}}]}) unshare(0x28000600) unshare(0x8000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 28m39.578956068s ago: executing program 3 (id=1123): syz_open_procfs(0x0, &(0x7f0000000800)='fdinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) landlock_restrict_self(r5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x28943, 0x1) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 28m23.051875552s ago: executing program 32 (id=1123): syz_open_procfs(0x0, &(0x7f0000000800)='fdinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) landlock_restrict_self(r5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x28943, 0x1) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 27m56.679023948s ago: executing program 0 (id=1171): unshare(0x8000000) 27m55.559466471s ago: executing program 0 (id=1172): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c69666c9ba00d52", 0x28) 27m55.277353194s ago: executing program 0 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000b2c000/0x3000)=nil, 0x3000}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r8, 0x11}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r8, 0x1}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r8, 0x1}) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000000), 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x8}, 0xc) bind$tipc(r5, 0x0, 0x0) 27m51.437664434s ago: executing program 0 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) 27m50.908775438s ago: executing program 0 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fanotify_init(0x0, 0x101000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000880)={0x9, 0xfffffffffffff94e, 0x100, 0x10, 0x1, 0x5, 0xfffffffffffffff8, 0x985a}, &(0x7f00000008c0), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r2, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0x9}], 0x1, 0x20, 0x0) 27m49.399645209s ago: executing program 0 (id=1179): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8cdf40c050023eb3d259266ec9c37865c6c1b4640ce2400bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c487b257ffb3baf7709f49f6dcfd54f11ed2c41d078b9c05fc8f72566153c97ffdc11f30ea6b16b694bb4a6e4606c3fb19d1d2bcd6850d00c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a9744480000000000000000001b1300", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dc850718ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8fffb58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3c35ca9a966036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0484084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835acdabd60da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bacc92dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d18366892b60d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c83981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc575341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3b49901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6fda0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e2f4046afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c12845ad85e69ee17de31e2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bd80000000b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374f000000000000000725e75c257834572026c511f57dce67153a4008f9e75e07edfd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb09370cebaaa80014e3ad280944eae6f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@buf) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 27m34.307495207s ago: executing program 33 (id=1179): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8cdf40c050023eb3d259266ec9c37865c6c1b4640ce2400bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c487b257ffb3baf7709f49f6dcfd54f11ed2c41d078b9c05fc8f72566153c97ffdc11f30ea6b16b694bb4a6e4606c3fb19d1d2bcd6850d00c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a9744480000000000000000001b1300", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@buf) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 26m50.177870696s ago: executing program 2 (id=1242): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000025000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='0', 0x1) 26m49.634213791s ago: executing program 2 (id=1244): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000025000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) 26m48.832845719s ago: executing program 2 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000b2c000/0x3000)=nil, 0x3000}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r8, 0x11}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r8, 0x1}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r8, 0x1}) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/65, 0x41) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x8}, 0xc) bind$tipc(r5, 0x0, 0x0) 26m46.89028791s ago: executing program 2 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x29) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 26m40.457262772s ago: executing program 2 (id=1256): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) openat(0xffffffffffffff9c, 0x0, 0x20100, 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) 26m38.731034262s ago: executing program 2 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) 26m23.583189633s ago: executing program 34 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) 21.220305206s ago: executing program 5 (id=3928): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 14.792118614s ago: executing program 5 (id=3942): read$mtd(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x20000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0xfffff001, 0x7], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9cc0d0fc6b3c372f5ad9c4a90", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 12.799163416s ago: executing program 6 (id=3937): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000980)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000280)='L', 0x1}], 0x1, &(0x7f00000008c0)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x18, 0x800}, 0x8841) 12.618384864s ago: executing program 4 (id=3938): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xede}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x9}}}}}]}}]}}, 0x0) 12.362757016s ago: executing program 6 (id=3939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r5 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 11.190714681s ago: executing program 1 (id=3940): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @result={0x0, 0xfffffffe}}, {0x7, 0x0, 0x0, 0x0, @time={0x4, 0x1fe}, {0x0, 0x5}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0xff, 0x0, 0x1, @tick=0x7f, {}, {}, @time=@time={0x8, 0xa}}], 0x70) close_range(r0, 0xffffffffffffffff, 0x0) 10.750269201s ago: executing program 5 (id=3941): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.607901918s ago: executing program 1 (id=3945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/48, 0xfffffffffffffd15, 0x40000000, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa200000000000007020000c0ffffffb703000040000000b7040000009e0000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r6, 0x25, 0x2, @void}, 0x10) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x202, 0x188) write$mtd(r8, &(0x7f0000000180)="0db0f1604d161238c9bfb1d7c0886da19395f02e860a7ab973ebf16311c62029ce6eb1116ff8fb8bef05729944525ee13259dbf5b4fe0e13a0a753981c3a4c6ded537cdd1740008402ef99b3bfdd7769b85fea98a3d171a6cd0fb76ddca86adb0b9f2656c80415269480105c0b50f01a3f23773b0d8ae2414b933074874a7ee82fc9fcd3e363c2fbe5f952dc46c81c44ac8bedb291cc0cd11165d27bcceb613284afdab210", 0xa5) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc0, 0xc, 0xc, 0x4, [0x5, 0x9, 0x10, 0x6, 0x6, 0x8, 0x400, 0x2174]}}) pread64(r0, &(0x7f0000000080)=""/121, 0x79, 0x2ccb) close_range(r0, 0xffffffffffffffff, 0x0) 10.447372855s ago: executing program 4 (id=3946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842}}) 8.761219574s ago: executing program 5 (id=3947): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x43c1, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x58, 0x0, @fd, 0x8000, 0x0, 0xa3cd, 0x4, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='high-speed\x00', 0xa) 8.151647352s ago: executing program 6 (id=3948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 7.844953526s ago: executing program 1 (id=3949): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20048883) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000140), 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) 7.682099884s ago: executing program 5 (id=3950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181e01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x4, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000003, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.594173297s ago: executing program 4 (id=3951): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 7.514196181s ago: executing program 6 (id=3952): read$mtd(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x20000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0xfffff001, 0x7], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9cc0d0fc6b3c372f5ad9c4a90", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 5.666027767s ago: executing program 5 (id=3953): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x400, 0x0, {{0x1d, 0x4, 0x2, 0x2, 0x74, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x8, 0x24, 0x0, 0x1, [0x4]}, @ssrr={0x89, 0x1b, 0x2a, [@multicast2, @private=0xa010100, @loopback, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @generic={0x86, 0x10, "e2292250418ac33eba3d1fbb76a3"}, @ssrr={0x89, 0x13, 0x9e, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x72, [@broadcast, @loopback, @loopback, @multicast2, @loopback]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0], 0x0, 0xdb, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0x1, 0x0, 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e8}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = dup2(r6, r6) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r8, r9, r10, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000002e80)) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010102}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x4, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000000c0)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 5.277629585s ago: executing program 1 (id=3954): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @result={0x0, 0xfffffffe}}, {0x7, 0x0, 0x0, 0x0, @time={0x4, 0x1fe}, {0x0, 0x5}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0xff, 0x0, 0x1, @tick=0x7f, {}, {}, @time=@time={0x8, 0xa}}], 0x70) close_range(r0, 0xffffffffffffffff, 0x0) 4.221763494s ago: executing program 4 (id=3955): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.45589654s ago: executing program 1 (id=3956): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xede}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x9}}}}}]}}]}}, 0x0) 2.944409963s ago: executing program 6 (id=3957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r5 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 1.883989273s ago: executing program 6 (id=3958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/48, 0xfffffffffffffd15, 0x40000000, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa200000000000007020000c0ffffffb703000040000000b7040000009e0000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r6, 0x25, 0x2, @void}, 0x10) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x202, 0x188) write$mtd(r8, &(0x7f0000000180)="0db0f1604d161238c9bfb1d7c0886da19395f02e860a7ab973ebf16311c62029ce6eb1116ff8fb8bef05729944525ee13259dbf5b4fe0e13a0a753981c3a4c6ded537cdd1740008402ef99b3bfdd7769b85fea98a3d171a6cd0fb76ddca86adb0b9f2656c80415269480105c0b50f01a3f23773b0d8ae2414b933074874a7ee82fc9fcd3e363c2fbe5f952dc46c81c44ac8bedb291cc0cd11165d27bcceb613284afdab210", 0xa5) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc0, 0xc, 0xc, 0x4, [0x5, 0x9, 0x10, 0x6, 0x6, 0x8, 0x400, 0x2174]}}) pread64(r0, &(0x7f0000000080)=""/121, 0x79, 0x2ccb) close_range(r0, 0xffffffffffffffff, 0x0) 1.148285237s ago: executing program 4 (id=3959): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x43c1, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x58, 0x0, @fd, 0x8000, 0x0, 0xa3cd, 0x4, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='high-speed\x00', 0xa) 35.256849ms ago: executing program 1 (id=3960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 0s ago: executing program 4 (id=3961): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x410220) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') kernel console output (not intermixed with test programs): path_number_perm+0x56b/0x5e0 [ 2060.014057][T18002] ? tomoyo_path_number_perm+0x217/0x5e0 [ 2060.019750][T18002] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2060.025268][T18002] ? make_qualifier+0x260/0x260 [ 2060.030170][T18002] ? __fget_files+0x28/0x460 [ 2060.034793][T18002] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2060.039752][T18002] ? security_file_ioctl+0x80/0xa0 [ 2060.044909][T18002] ? make_qualifier+0x260/0x260 [ 2060.049783][T18002] __se_sys_ioctl+0xfd/0x170 [ 2060.054405][T18002] do_syscall_64+0x55/0xb0 [ 2060.058847][T18002] ? clear_bhb_loop+0x40/0x90 [ 2060.063551][T18002] ? clear_bhb_loop+0x40/0x90 [ 2060.068272][T18002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2060.074217][T18002] RIP: 0033:0x7f5c7939ddeb [ 2060.078660][T18002] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2060.098316][T18002] RSP: 002b:00007f5c7a31bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2060.106772][T18002] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5c7939ddeb [ 2060.114766][T18002] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 2060.122780][T18002] RBP: 00007f5c7a31cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 2060.130784][T18002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2060.138799][T18002] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2060.146810][T18002] [ 2060.218114][T18002] raw-gadget.1 gadget.1: usb_ep_alloc_request failed [ 2060.225035][T18002] udc dummy_udc.1: failed to start USB Raw Gadget: -12 [ 2060.235126][T18002] raw-gadget.1: probe of gadget.1 failed with error -12 [ 2060.248714][T18002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.268172][T18002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.160675][T18019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3271'. [ 2063.862544][T18027] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2066.458169][ T971] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2068.378021][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 2068.400683][ T971] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2068.424680][ T971] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2068.440303][ T971] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2068.450772][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.459817][ T971] usb 2-1: Product: syz [ 2068.464132][ T971] usb 2-1: Manufacturer: syz [ 2068.469369][ T971] usb 2-1: SerialNumber: syz [ 2068.702792][ T971] usbhid 2-1:1.0: can't add hid device: -71 [ 2068.718050][ T971] usbhid: probe of 2-1:1.0 failed with error -71 [ 2068.741308][ T971] usb 2-1: USB disconnect, device number 30 [ 2071.449634][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2071.489956][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2071.667772][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2071.708964][T18067] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2071.936749][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2071.973104][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2072.183370][T18069] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2072.390885][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2072.475919][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2072.556163][T18063] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 2073.584438][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3281'. [ 2079.685888][T18109] Cannot find set identified by id 0 to match [ 2082.466917][T16596] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2082.879249][T18126] syz.1.3292[18126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2082.879464][T18126] syz.1.3292[18126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2083.028258][T16596] usb 5-1: Using ep0 maxpacket: 8 [ 2084.827404][T16596] usb 5-1: device descriptor read/all, error -71 [ 2087.038139][T16596] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2087.304656][T16596] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2087.411456][T16596] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2087.605628][T16596] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 2087.758066][T16596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.823751][T16596] usb-storage 5-1:1.0: USB Mass Storage device detected [ 2088.072911][T16596] scsi host1: usb-storage 5-1:1.0 [ 2088.371045][ T23] usb 5-1: USB disconnect, device number 14 [ 2088.595187][T18156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3304'. [ 2094.518324][ T56] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2094.738014][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 2094.746276][ T56] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2094.778873][ T56] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2094.820745][ T56] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2094.837968][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.846036][ T56] usb 6-1: Product: syz [ 2094.862910][ T56] usb 6-1: Manufacturer: syz [ 2094.867590][ T56] usb 6-1: SerialNumber: syz [ 2095.107373][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3318'. [ 2095.852731][ T56] usbhid 6-1:1.0: can't add hid device: -71 [ 2095.887532][ T56] usbhid: probe of 6-1:1.0 failed with error -71 [ 2095.915668][ T56] usb 6-1: USB disconnect, device number 13 [ 2097.918013][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2098.088206][ T23] usb 2-1: device descriptor read/64, error -71 [ 2098.382406][ T23] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2098.588057][ T23] usb 2-1: device descriptor read/64, error -71 [ 2098.888916][ T23] usb usb2-port1: attempt power cycle [ 2099.063701][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.070426][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.498187][ T23] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2099.558760][ T23] usb 2-1: device descriptor read/8, error -71 [ 2099.863080][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3328'. [ 2100.609026][ T23] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2100.773281][ T23] usb 2-1: device descriptor read/8, error -71 [ 2100.908311][ T23] usb usb2-port1: unable to enumerate USB device [ 2100.978050][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2102.038994][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2103.417677][ T9] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2103.437967][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2103.640001][ T9] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2103.657864][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.693234][ T9] usb 5-1: Product: syz [ 2103.740947][ T9] usb 5-1: Manufacturer: syz [ 2103.763692][ T9] usb 5-1: SerialNumber: syz [ 2103.818471][ T9] usb 5-1: can't set config #1, error -71 [ 2103.851575][ T9] usb 5-1: USB disconnect, device number 15 [ 2105.456554][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3337'. [ 2106.572750][T18275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3347'. [ 2107.453217][T18279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2107.489115][T18279] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2107.528679][T18279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2107.535342][T18279] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2107.573631][T18279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2107.580340][T18279] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2107.593504][T18279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2107.602089][T18279] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2107.928312][T13782] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2108.117960][T13782] usb 2-1: Using ep0 maxpacket: 8 [ 2108.133737][T13782] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2108.147615][T13782] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2108.718053][T13782] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2108.820087][T13782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.848665][T13782] usb 2-1: Product: syz [ 2108.856980][T13782] usb 2-1: Manufacturer: syz [ 2108.867962][T13782] usb 2-1: SerialNumber: syz [ 2109.786365][T10497] Bluetooth: hci0: command 0x0406 tx timeout [ 2109.792818][T10497] Bluetooth: hci3: command 0x0406 tx timeout [ 2109.798981][T10497] Bluetooth: hci2: command 0x0406 tx timeout [ 2109.805071][T10497] Bluetooth: hci1: command 0x0406 tx timeout [ 2109.818092][T13782] usbhid 2-1:1.0: can't add hid device: -71 [ 2109.828327][T13782] usbhid: probe of 2-1:1.0 failed with error -71 [ 2109.842419][T13782] usb 2-1: USB disconnect, device number 35 [ 2110.582480][T18306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3349'. [ 2111.847996][T18294] Bluetooth: hci1: command 0x0406 tx timeout [ 2111.854229][T18294] Bluetooth: hci2: command 0x0406 tx timeout [ 2111.860472][ T9614] Bluetooth: hci3: command 0x0406 tx timeout [ 2111.866620][ T9614] Bluetooth: hci0: command 0x0406 tx timeout [ 2113.881580][T18324] FAULT_INJECTION: forcing a failure. [ 2113.881580][T18324] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2113.894996][T18324] CPU: 1 PID: 18324 Comm: syz.4.3355 Not tainted syzkaller #0 [ 2113.902553][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2113.912685][T18324] Call Trace: [ 2113.916040][T18324] [ 2113.919023][T18324] dump_stack_lvl+0x18c/0x250 [ 2113.923792][T18324] ? show_regs_print_info+0x20/0x20 [ 2113.929053][T18324] ? load_image+0x420/0x420 [ 2113.933632][T18324] ? touch_atime+0xee/0x570 [ 2113.938186][T18324] ? splice_direct_to_actor+0x611/0x8e0 [ 2113.943781][T18324] should_fail_ex+0x394/0x4c0 [ 2113.948528][T18324] get_futex_key+0x136/0x1030 [ 2113.953284][T18324] ? futex_setup_timer+0xc0/0xc0 [ 2113.958294][T18324] futex_wake+0x127/0x4f0 [ 2113.962682][T18324] ? futex_wake_mark+0x150/0x150 [ 2113.967665][T18324] ? do_splice_direct+0x2f0/0x2f0 [ 2113.973293][T18324] ? fput+0x154/0x1a0 [ 2113.977325][T18324] do_futex+0x35d/0x3e0 [ 2113.981536][T18324] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2113.987484][T18324] ? do_pwritev+0x3a0/0x3a0 [ 2113.992066][T18324] __se_sys_futex+0x3a9/0x440 [ 2113.996807][T18324] ? __x64_sys_futex+0xf0/0xf0 [ 2114.001623][T18324] ? __x64_sys_futex+0x21/0xf0 [ 2114.006432][T18324] do_syscall_64+0x55/0xb0 [ 2114.010913][T18324] ? clear_bhb_loop+0x40/0x90 [ 2114.015645][T18324] ? clear_bhb_loop+0x40/0x90 [ 2114.020384][T18324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2114.026339][T18324] RIP: 0033:0x7f7b3ef9e159 [ 2114.030805][T18324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.050464][T18324] RSP: 002b:00007f7b3fe8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2114.058932][T18324] RAX: ffffffffffffffda RBX: 00007f7b3f225fa8 RCX: 00007f7b3ef9e159 [ 2114.066951][T18324] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b3f225fac [ 2114.074964][T18324] RBP: 00007f7b3f225fa0 R08: 0000000000745d1f R09: 0000000000000000 [ 2114.082980][T18324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.090997][T18324] R13: 00007f7b3f226038 R14: 00007ffeefeaccd0 R15: 00007ffeefeacdb8 [ 2114.099040][T18324] [ 2116.988254][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 2120.131336][T18358] FAULT_INJECTION: forcing a failure. [ 2120.131336][T18358] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2120.144559][T18358] CPU: 0 PID: 18358 Comm: syz.6.3365 Not tainted syzkaller #0 [ 2120.152091][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2120.162188][T18358] Call Trace: [ 2120.165509][T18358] [ 2120.168476][T18358] dump_stack_lvl+0x18c/0x250 [ 2120.173219][T18358] ? show_regs_print_info+0x20/0x20 [ 2120.178473][T18358] ? load_image+0x420/0x420 [ 2120.183034][T18358] ? touch_atime+0xee/0x570 [ 2120.187588][T18358] ? splice_direct_to_actor+0x611/0x8e0 [ 2120.193209][T18358] should_fail_ex+0x394/0x4c0 [ 2120.197947][T18358] get_futex_key+0x136/0x1030 [ 2120.202693][T18358] ? futex_setup_timer+0xc0/0xc0 [ 2120.207687][T18358] futex_wake+0x127/0x4f0 [ 2120.212073][T18358] ? futex_wake_mark+0x150/0x150 [ 2120.217071][T18358] ? do_splice_direct+0x2f0/0x2f0 [ 2120.222159][T18358] ? fput+0x154/0x1a0 [ 2120.226207][T18358] do_futex+0x35d/0x3e0 [ 2120.230417][T18358] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2120.236356][T18358] ? do_pwritev+0x3a0/0x3a0 [ 2120.240931][T18358] __se_sys_futex+0x3a9/0x440 [ 2120.245721][T18358] ? __x64_sys_futex+0xf0/0xf0 [ 2120.250540][T18358] ? __x64_sys_futex+0x21/0xf0 [ 2120.255354][T18358] do_syscall_64+0x55/0xb0 [ 2120.259845][T18358] ? clear_bhb_loop+0x40/0x90 [ 2120.264610][T18358] ? clear_bhb_loop+0x40/0x90 [ 2120.269340][T18358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.275295][T18358] RIP: 0033:0x7fd89df9e159 [ 2120.279766][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.299440][T18358] RSP: 002b:00007fd89ee6b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2120.307948][T18358] RAX: ffffffffffffffda RBX: 00007fd89e225fa8 RCX: 00007fd89df9e159 [ 2120.315960][T18358] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd89e225fac [ 2120.323978][T18358] RBP: 00007fd89e225fa0 R08: 0000000000745d1f R09: 0000000000000000 [ 2120.331993][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.340002][T18358] R13: 00007fd89e226038 R14: 00007ffc5fc180f0 R15: 00007ffc5fc181d8 [ 2120.348026][T18358] [ 2122.528848][T18364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2122.535079][T18364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2122.544472][T18364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2122.551819][T18364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2123.640534][T18380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3371'. [ 2124.088393][ T56] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2124.338045][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 2124.367090][ T56] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2124.421392][ T56] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2124.452196][ T56] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2124.481978][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.524074][ T56] usb 5-1: Product: syz [ 2124.542592][ T56] usb 5-1: Manufacturer: syz [ 2124.568062][T10497] Bluetooth: hci3: command 0x0406 tx timeout [ 2124.574168][T10497] Bluetooth: hci2: command 0x0406 tx timeout [ 2124.580684][T10497] Bluetooth: hci1: command 0x0406 tx timeout [ 2124.586738][T10497] Bluetooth: hci0: command 0x0406 tx timeout [ 2124.597942][ T56] usb 5-1: SerialNumber: syz [ 2124.732034][T18387] FAULT_INJECTION: forcing a failure. [ 2124.732034][T18387] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2124.745223][T18387] CPU: 0 PID: 18387 Comm: syz.5.3374 Not tainted syzkaller #0 [ 2124.752733][T18387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2124.762832][T18387] Call Trace: [ 2124.766150][T18387] [ 2124.769142][T18387] dump_stack_lvl+0x18c/0x250 [ 2124.773891][T18387] ? show_regs_print_info+0x20/0x20 [ 2124.779156][T18387] ? load_image+0x420/0x420 [ 2124.783717][T18387] ? touch_atime+0xee/0x570 [ 2124.788276][T18387] ? splice_direct_to_actor+0x611/0x8e0 [ 2124.793870][T18387] should_fail_ex+0x394/0x4c0 [ 2124.798605][T18387] get_futex_key+0x136/0x1030 [ 2124.803342][T18387] ? futex_setup_timer+0xc0/0xc0 [ 2124.808332][T18387] futex_wake+0x127/0x4f0 [ 2124.812719][T18387] ? futex_wake_mark+0x150/0x150 [ 2124.817706][T18387] ? do_splice_direct+0x2f0/0x2f0 [ 2124.822797][T18387] ? fput+0x154/0x1a0 [ 2124.826838][T18387] do_futex+0x35d/0x3e0 [ 2124.831055][T18387] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2124.837010][T18387] ? do_pwritev+0x3a0/0x3a0 [ 2124.841601][T18387] __se_sys_futex+0x3a9/0x440 [ 2124.846334][T18387] ? __x64_sys_futex+0xf0/0xf0 [ 2124.851155][T18387] ? __x64_sys_futex+0x21/0xf0 [ 2124.855991][T18387] do_syscall_64+0x55/0xb0 [ 2124.860467][T18387] ? clear_bhb_loop+0x40/0x90 [ 2124.865194][T18387] ? clear_bhb_loop+0x40/0x90 [ 2124.869929][T18387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2124.875878][T18387] RIP: 0033:0x7f1bfcd9e159 [ 2124.880341][T18387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2124.900001][T18387] RSP: 002b:00007f1bfdbe10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2124.908488][T18387] RAX: ffffffffffffffda RBX: 00007f1bfd025fa8 RCX: 00007f1bfcd9e159 [ 2124.916560][T18387] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1bfd025fac [ 2124.924592][T18387] RBP: 00007f1bfd025fa0 R08: 0000000000745d1f R09: 0000000000000000 [ 2124.932613][T18387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2124.940643][T18387] R13: 00007f1bfd026038 R14: 00007ffff5bc89a0 R15: 00007ffff5bc8a88 [ 2124.948695][T18387] [ 2124.985134][ T56] usbhid 5-1:1.0: can't add hid device: -71 [ 2125.025767][ T56] usbhid: probe of 5-1:1.0 failed with error -71 [ 2125.063011][ T56] usb 5-1: USB disconnect, device number 16 [ 2125.642541][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3375'. [ 2129.751072][T18414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2129.777395][T18414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2129.783889][T18414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2129.790186][T18414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2130.025781][T18419] FAULT_INJECTION: forcing a failure. [ 2130.025781][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.038602][T18419] CPU: 1 PID: 18419 Comm: syz.5.3383 Not tainted syzkaller #0 [ 2130.046109][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2130.056205][T18419] Call Trace: [ 2130.059533][T18419] [ 2130.062508][T18419] dump_stack_lvl+0x18c/0x250 [ 2130.067262][T18419] ? show_regs_print_info+0x20/0x20 [ 2130.072520][T18419] ? load_image+0x420/0x420 [ 2130.077082][T18419] ? __might_sleep+0xe0/0xe0 [ 2130.081743][T18419] ? __lock_acquire+0x7d80/0x7d80 [ 2130.086839][T18419] should_fail_ex+0x394/0x4c0 [ 2130.091583][T18419] should_failslab+0x9/0x20 [ 2130.096158][T18419] slab_pre_alloc_hook+0x59/0x300 [ 2130.101268][T18419] ? alloc_pipe_info+0x1f9/0x4b0 [ 2130.106262][T18419] ? alloc_pipe_info+0x1f9/0x4b0 [ 2130.111248][T18419] __kmem_cache_alloc_node+0x53/0x250 [ 2130.116680][T18419] ? alloc_pipe_info+0x1f9/0x4b0 [ 2130.121659][T18419] __kmalloc+0xa7/0x240 [ 2130.125856][T18419] alloc_pipe_info+0x1f9/0x4b0 [ 2130.130657][T18419] splice_direct_to_actor+0x749/0x8e0 [ 2130.136096][T18419] ? aa_file_perm+0x11b/0xee0 [ 2130.140805][T18419] ? direct_file_splice_eof+0xb0/0xb0 [ 2130.146205][T18419] ? aa_file_perm+0x3e3/0xee0 [ 2130.150909][T18419] ? end_current_label_crit_section+0x149/0x170 [ 2130.157198][T18419] ? warn_unsupported+0xc0/0xc0 [ 2130.162081][T18419] ? common_file_perm+0x198/0x1f0 [ 2130.167132][T18419] ? fsnotify_perm+0x5d/0x5e0 [ 2130.171858][T18419] ? security_file_permission+0x79/0xa0 [ 2130.177447][T18419] do_splice_direct+0x1d5/0x2f0 [ 2130.182339][T18419] ? splice_direct_to_actor+0x8e0/0x8e0 [ 2130.187921][T18419] ? rcu_read_lock_any_held+0xb4/0x140 [ 2130.193421][T18419] ? do_splice_direct+0x2f0/0x2f0 [ 2130.198504][T18419] do_sendfile+0x52b/0xe80 [ 2130.202959][T18419] ? __lock_acquire+0x7d80/0x7d80 [ 2130.208013][T18419] ? do_pwritev+0x3a0/0x3a0 [ 2130.212551][T18419] ? __might_fault+0xaa/0x120 [ 2130.217257][T18419] ? __might_fault+0xc6/0x120 [ 2130.221959][T18419] ? __might_fault+0xaa/0x120 [ 2130.226667][T18419] __se_sys_sendfile64+0xe0/0x1a0 [ 2130.231719][T18419] ? lock_chain_count+0x20/0x20 [ 2130.236605][T18419] ? __x64_sys_sendfile64+0xb0/0xb0 [ 2130.241832][T18419] ? lockdep_hardirqs_on+0x98/0x150 [ 2130.247105][T18419] do_syscall_64+0x55/0xb0 [ 2130.251559][T18419] ? clear_bhb_loop+0x40/0x90 [ 2130.256264][T18419] ? clear_bhb_loop+0x40/0x90 [ 2130.260980][T18419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2130.266914][T18419] RIP: 0033:0x7f1bfcd9e159 [ 2130.271362][T18419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2130.291007][T18419] RSP: 002b:00007f1bfdbe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2130.299454][T18419] RAX: ffffffffffffffda RBX: 00007f1bfd025fa0 RCX: 00007f1bfcd9e159 [ 2130.307451][T18419] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 2130.315455][T18419] RBP: 00007f1bfce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2130.323469][T18419] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 2130.331478][T18419] R13: 00007f1bfd026038 R14: 00007f1bfd025fa0 R15: 00007ffff5bc8a88 [ 2130.339499][T18419] [ 2130.848199][T14842] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2131.148701][T14842] usb 5-1: Using ep0 maxpacket: 8 [ 2131.168293][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2131.220369][T14842] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2131.286392][T14842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2131.598131][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 2131.666584][T18438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3382'. [ 2132.088023][T10497] Bluetooth: hci2: command 0x0406 tx timeout [ 2132.094229][T10497] Bluetooth: hci1: command 0x0406 tx timeout [ 2132.100379][T10497] Bluetooth: hci0: command 0x0406 tx timeout [ 2132.106484][T18294] Bluetooth: hci3: command 0x0406 tx timeout [ 2132.198583][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2132.207816][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.294717][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2132.324070][T14842] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2132.335883][ T23] pvrusb2: ********** [ 2132.364879][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2132.397189][T14842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.414840][T14842] usb 5-1: Product: syz [ 2132.419986][ T23] pvrusb2: Important functionality might not be entirely working. [ 2132.427835][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2133.930888][T14842] usb 5-1: Manufacturer: syz [ 2133.947081][ T23] pvrusb2: ********** [ 2133.951318][T14842] usb 5-1: SerialNumber: syz [ 2134.250711][T14842] usb 5-1: can't set config #1, error -71 [ 2134.257285][ T2322] pvrusb2: Invalid write control endpoint [ 2134.264952][ T23] usb 6-1: USB disconnect, device number 14 [ 2134.274830][T14842] usb 5-1: USB disconnect, device number 17 [ 2134.522096][T18449] FAULT_INJECTION: forcing a failure. [ 2134.522096][T18449] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.534925][T18449] CPU: 0 PID: 18449 Comm: syz.4.3395 Not tainted syzkaller #0 [ 2134.542425][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2134.552518][T18449] Call Trace: [ 2134.555828][T18449] [ 2134.558788][T18449] dump_stack_lvl+0x18c/0x250 [ 2134.563524][T18449] ? show_regs_print_info+0x20/0x20 [ 2134.568789][T18449] ? load_image+0x420/0x420 [ 2134.573341][T18449] ? __might_sleep+0xe0/0xe0 [ 2134.577982][T18449] ? __lock_acquire+0x7d80/0x7d80 [ 2134.583053][T18449] should_fail_ex+0x394/0x4c0 [ 2134.587786][T18449] should_failslab+0x9/0x20 [ 2134.592345][T18449] slab_pre_alloc_hook+0x59/0x300 [ 2134.597437][T18449] ? alloc_pipe_info+0x1f9/0x4b0 [ 2134.602439][T18449] ? alloc_pipe_info+0x1f9/0x4b0 [ 2134.607413][T18449] __kmem_cache_alloc_node+0x53/0x250 [ 2134.612831][T18449] ? alloc_pipe_info+0x1f9/0x4b0 [ 2134.617825][T18449] __kmalloc+0xa7/0x240 [ 2134.622036][T18449] alloc_pipe_info+0x1f9/0x4b0 [ 2134.626855][T18449] splice_direct_to_actor+0x749/0x8e0 [ 2134.632292][T18449] ? aa_file_perm+0x11b/0xee0 [ 2134.637020][T18449] ? direct_file_splice_eof+0xb0/0xb0 [ 2134.642432][T18449] ? aa_file_perm+0x3e3/0xee0 [ 2134.647163][T18449] ? end_current_label_crit_section+0x149/0x170 [ 2134.653461][T18449] ? warn_unsupported+0xc0/0xc0 [ 2134.658358][T18449] ? common_file_perm+0x198/0x1f0 [ 2134.663431][T18449] ? fsnotify_perm+0x5d/0x5e0 [ 2134.668154][T18449] ? security_file_permission+0x79/0xa0 [ 2134.673754][T18449] do_splice_direct+0x1d5/0x2f0 [ 2134.678655][T18449] ? splice_direct_to_actor+0x8e0/0x8e0 [ 2134.684246][T18449] ? rcu_read_lock_any_held+0xb4/0x140 [ 2134.689754][T18449] ? do_splice_direct+0x2f0/0x2f0 [ 2134.694835][T18449] do_sendfile+0x52b/0xe80 [ 2134.699300][T18449] ? __lock_acquire+0x7d80/0x7d80 [ 2134.704369][T18449] ? do_pwritev+0x3a0/0x3a0 [ 2134.708917][T18449] ? __might_fault+0xaa/0x120 [ 2134.713633][T18449] ? __might_fault+0xc6/0x120 [ 2134.718358][T18449] ? __might_fault+0xaa/0x120 [ 2134.723081][T18449] __se_sys_sendfile64+0xe0/0x1a0 [ 2134.728155][T18449] ? lock_chain_count+0x20/0x20 [ 2134.733042][T18449] ? __x64_sys_sendfile64+0xb0/0xb0 [ 2134.738289][T18449] ? lockdep_hardirqs_on+0x98/0x150 [ 2134.743531][T18449] do_syscall_64+0x55/0xb0 [ 2134.747994][T18449] ? clear_bhb_loop+0x40/0x90 [ 2134.752712][T18449] ? clear_bhb_loop+0x40/0x90 [ 2134.757457][T18449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2134.763398][T18449] RIP: 0033:0x7f7b3ef9e159 [ 2134.767849][T18449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2134.787496][T18449] RSP: 002b:00007f7b3fe8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2134.795962][T18449] RAX: ffffffffffffffda RBX: 00007f7b3f225fa0 RCX: 00007f7b3ef9e159 [ 2134.803964][T18449] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 2134.811981][T18449] RBP: 00007f7b3f03506b R08: 0000000000000000 R09: 0000000000000000 [ 2134.819988][T18449] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 2134.827998][T18449] R13: 00007f7b3f226038 R14: 00007f7b3f225fa0 R15: 00007ffeefeacdb8 [ 2134.836026][T18449] [ 2134.908459][ T2322] pvrusb2: Invalid write control endpoint [ 2134.930373][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2134.941276][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2134.948969][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2134.959039][ T2322] pvrusb2: Device being rendered inoperable [ 2134.965095][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2135.023446][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2135.098947][T18452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2135.108108][ T2322] pvrusb2: Attached sub-driver cx25840 [ 2135.135121][T18452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2135.152662][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2135.199121][T18452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2135.233854][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2135.253882][T18452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2138.589695][ T9614] Bluetooth: hci1: command 0x0406 tx timeout [ 2138.595870][ T9614] Bluetooth: hci0: command 0x0406 tx timeout [ 2138.602155][ T9614] Bluetooth: hci3: command 0x0406 tx timeout [ 2138.608651][T18294] Bluetooth: hci2: command 0x0406 tx timeout [ 2140.299596][T18494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2140.310036][T18494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2140.342097][T18494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2140.352682][T18494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2140.848094][T13782] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2141.088061][T13782] usb 2-1: Using ep0 maxpacket: 8 [ 2141.095960][T13782] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2141.150967][T13782] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2141.221411][T13782] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2141.275948][T13782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.339223][T13782] usb 2-1: Product: syz [ 2141.354704][T13782] usb 2-1: Manufacturer: syz [ 2141.372985][T13782] usb 2-1: SerialNumber: syz [ 2141.707480][T13782] usbhid 2-1:1.0: can't add hid device: -71 [ 2141.713958][T13782] usbhid: probe of 2-1:1.0 failed with error -71 [ 2141.726585][T13782] usb 2-1: USB disconnect, device number 36 [ 2143.447294][T18483] Bluetooth: hci1: command 0x0406 tx timeout [ 2143.449679][T10497] Bluetooth: hci0: command 0x0406 tx timeout [ 2143.459625][T18294] Bluetooth: hci3: command 0x0406 tx timeout [ 2143.465678][T18294] Bluetooth: hci2: command 0x0406 tx timeout [ 2144.418205][ T56] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 2144.630291][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.655033][ T56] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2144.677922][ T56] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2144.686150][ T56] usb 5-1: Product: syz [ 2144.707993][ T56] usb 5-1: Manufacturer: syz [ 2144.722486][ T56] usb 5-1: SerialNumber: syz [ 2144.742099][ T56] usb 5-1: config 0 descriptor?? [ 2144.767011][ T56] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 2144.801922][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 2144.826776][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 2144.854785][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 2144.881638][ T56] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2144.915649][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 2144.944128][ T56] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2144.984797][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 2145.086234][ T56] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2145.190519][ T56] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 2145.221392][ T56] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2145.293127][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3417'. [ 2145.600978][ T56] usb 5-1: USB disconnect, device number 18 [ 2145.819721][ T56] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2145.916303][ T56] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2146.020407][ T56] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2146.147154][ T56] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2146.196476][ T56] keyspan 5-1:0.0: device disconnected [ 2151.468005][ T56] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2151.678299][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 2151.686379][ T56] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2151.720121][ T56] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2151.760481][ T56] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2151.790243][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.818014][ T56] usb 2-1: Product: syz [ 2151.822336][ T56] usb 2-1: Manufacturer: syz [ 2151.834889][ T56] usb 2-1: SerialNumber: syz [ 2151.930025][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3427'. [ 2152.371403][ T56] usbhid 2-1:1.0: can't add hid device: -71 [ 2152.442477][ T56] usbhid: probe of 2-1:1.0 failed with error -71 [ 2152.488480][ T56] usb 2-1: USB disconnect, device number 37 [ 2156.250302][T18610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3437'. [ 2157.188503][ T5840] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2157.511640][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 2157.525455][ T5840] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2157.538913][ T5840] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2157.566602][ T5840] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2157.580388][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.600033][ T5840] usb 6-1: Product: syz [ 2157.613446][ T5840] usb 6-1: Manufacturer: syz [ 2157.628470][ T5840] usb 6-1: SerialNumber: syz [ 2158.749074][ T5840] usbhid 6-1:1.0: can't add hid device: -71 [ 2158.755153][ T5840] usbhid: probe of 6-1:1.0 failed with error -71 [ 2158.785985][ T5840] usb 6-1: USB disconnect, device number 15 [ 2160.492467][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.499304][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.192487][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3448'. [ 2166.017343][T18669] input: syz1 as /devices/virtual/input/input22 [ 2168.467966][ T56] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2168.674295][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 2168.772415][ T56] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2169.068761][ T56] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2169.351210][ T56] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2169.448086][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.456219][ T56] usb 5-1: Product: syz [ 2169.482909][ T56] usb 5-1: Manufacturer: syz [ 2169.492125][ T56] usb 5-1: SerialNumber: syz [ 2169.755923][ T56] usbhid 5-1:1.0: can't add hid device: -71 [ 2169.782401][ T56] usbhid: probe of 5-1:1.0 failed with error -71 [ 2169.815384][ T56] usb 5-1: USB disconnect, device number 19 [ 2173.707099][T18722] i8042 aux 00:02: in use; can't configure [ 2173.714357][T18722] i8042 aux 00:02: in use; can't configure [ 2176.481458][T18740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3468'. [ 2177.123756][T18294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2177.138059][T18294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2177.146334][T18294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2177.154538][T18294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2177.162383][T18294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2177.171179][T18294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2179.296240][T18294] Bluetooth: hci4: command tx timeout [ 2179.363584][T18739] chnl_net:caif_netlink_parms(): no params data found [ 2179.606048][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 2180.207777][T18739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.229236][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.236617][T18739] bridge_slave_0: entered allmulticast mode [ 2180.245007][T18739] bridge_slave_0: entered promiscuous mode [ 2180.268747][T18739] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.276051][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.283625][T18739] bridge_slave_1: entered allmulticast mode [ 2180.296787][T18739] bridge_slave_1: entered promiscuous mode [ 2180.366995][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3483'. [ 2181.333825][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.568100][T18294] Bluetooth: hci4: command tx timeout [ 2182.723241][T18739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2182.816886][T18739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2182.990458][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.213520][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.305392][T18739] team0: Port device team_slave_0 added [ 2183.332852][T18739] team0: Port device team_slave_1 added [ 2183.466219][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.570992][T18739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2183.597967][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2183.688092][T18739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2183.712511][T18739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2183.730227][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2183.766212][T18739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2183.898146][T18739] hsr_slave_0: entered promiscuous mode [ 2183.905530][T18739] hsr_slave_1: entered promiscuous mode [ 2183.913513][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3489'. [ 2184.008962][T18739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2184.032687][T18739] Cannot create hsr debugfs directory [ 2184.736239][T18294] Bluetooth: hci4: command tx timeout [ 2186.807914][T18294] Bluetooth: hci4: command tx timeout [ 2187.820060][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3492'. [ 2189.412813][T18739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2189.442375][T18739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2189.537702][ T12] dvmrp6 (unregistering): left allmulticast mode [ 2189.558082][T18739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2189.573763][T18739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2189.834107][T18739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2189.931051][ T12] hsr_slave_0: left promiscuous mode [ 2189.937303][ T12] hsr_slave_1: left promiscuous mode [ 2189.958416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.976078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.003191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2190.014005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.029083][ T12] bridge_slave_1: left allmulticast mode [ 2190.034859][ T12] bridge_slave_1: left promiscuous mode [ 2190.052345][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.062112][ T12] bridge_slave_0: left allmulticast mode [ 2190.074917][ T12] bridge_slave_0: left promiscuous mode [ 2190.080950][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.140683][ T12] veth1_macvtap: left promiscuous mode [ 2190.146318][ T12] veth0_macvtap: left promiscuous mode [ 2190.159609][ T12] veth1_vlan: left promiscuous mode [ 2190.164947][ T12] veth0_vlan: left promiscuous mode [ 2190.905890][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2190.964597][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2191.013247][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2191.067874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2191.424300][ T12] bond0 (unregistering): Released all slaves [ 2191.529713][T18739] 8021q: adding VLAN 0 to HW filter on device team0 [ 2191.544545][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.551797][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.576704][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.583959][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2191.913438][T18739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2192.203786][T18739] veth0_vlan: entered promiscuous mode [ 2192.218488][T18739] veth1_vlan: entered promiscuous mode [ 2192.250772][T18739] veth0_macvtap: entered promiscuous mode [ 2192.261097][T18739] veth1_macvtap: entered promiscuous mode [ 2192.285586][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.296132][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.306052][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.317132][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.327085][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.337863][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.353343][T18739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2192.368632][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.379829][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.392253][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.403566][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.414755][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.425417][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.438351][T18739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2192.453255][T18739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.462449][T18739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.471758][T18739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.481139][T18739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.564837][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2192.577733][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2192.620488][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2192.629457][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2193.078466][ T971] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2193.268446][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 2193.281213][ T971] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2193.306349][ T971] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2193.323973][ T971] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2193.333498][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.347894][ T971] usb 5-1: Product: syz [ 2193.356425][ T971] usb 5-1: Manufacturer: syz [ 2193.365463][ T971] usb 5-1: SerialNumber: syz [ 2193.632833][ T971] usbhid 5-1:1.0: can't add hid device: -71 [ 2193.646011][ T971] usbhid: probe of 5-1:1.0 failed with error -71 [ 2193.661939][ T971] usb 5-1: USB disconnect, device number 20 [ 2197.454089][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3506'. [ 2198.744998][T18919] usb usb9: usbfs: process 18919 (syz.1.3510) did not claim interface 47 before use [ 2198.789958][T18923] FAULT_INJECTION: forcing a failure. [ 2198.789958][T18923] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.823229][T18923] CPU: 1 PID: 18923 Comm: syz.5.3513 Not tainted syzkaller #0 [ 2198.830789][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2198.840911][T18923] Call Trace: [ 2198.844249][T18923] [ 2198.847226][T18923] dump_stack_lvl+0x18c/0x250 [ 2198.851977][T18923] ? show_regs_print_info+0x20/0x20 [ 2198.857240][T18923] ? load_image+0x420/0x420 [ 2198.861806][T18923] ? __might_sleep+0xe0/0xe0 [ 2198.866454][T18923] ? __lock_acquire+0x7d80/0x7d80 [ 2198.871543][T18923] should_fail_ex+0x394/0x4c0 [ 2198.876292][T18923] should_failslab+0x9/0x20 [ 2198.880861][T18923] slab_pre_alloc_hook+0x59/0x300 [ 2198.885980][T18923] kmem_cache_alloc+0x5a/0x2c0 [ 2198.890801][T18923] ? security_inode_alloc+0x34/0x110 [ 2198.896166][T18923] security_inode_alloc+0x34/0x110 [ 2198.901343][T18923] inode_init_always+0x914/0xc90 [ 2198.906355][T18923] new_inode_pseudo+0x95/0x1d0 [ 2198.911187][T18923] __sock_create+0x12d/0x940 [ 2198.915934][T18923] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2198.921981][T18923] __sys_socket+0xd7/0x1b0 [ 2198.926451][T18923] __x64_sys_socket+0x7a/0x90 [ 2198.931202][T18923] do_syscall_64+0x55/0xb0 [ 2198.935676][T18923] ? clear_bhb_loop+0x40/0x90 [ 2198.940415][T18923] ? clear_bhb_loop+0x40/0x90 [ 2198.945158][T18923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2198.951109][T18923] RIP: 0033:0x7f1bfcd9e159 [ 2198.955573][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2198.975228][T18923] RSP: 002b:00007f1bfdbe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2198.983680][T18923] RAX: ffffffffffffffda RBX: 00007f1bfd025fa0 RCX: 00007f1bfcd9e159 [ 2198.991683][T18923] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2198.999681][T18923] RBP: 00007f1bfce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2199.007679][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2199.015672][T18923] R13: 00007f1bfd026038 R14: 00007f1bfd025fa0 R15: 00007ffff5bc8a88 [ 2199.023678][T18923] [ 2199.055325][T18923] socket: no more sockets [ 2199.948656][T18933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3504'. [ 2199.964209][ T5840] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2201.364738][T18944] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2201.408109][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 2201.444583][ T5840] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2201.468094][ T5840] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2201.492625][ T5840] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2201.517984][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.526065][ T5840] usb 6-1: Product: syz [ 2201.543690][T18948] Bluetooth: MGMT ver 1.22 [ 2201.553249][T18948] Bluetooth: hci1: too big key_count value 11787 [ 2201.558101][ T5840] usb 6-1: Manufacturer: syz [ 2201.564290][ T5840] usb 6-1: SerialNumber: syz [ 2201.908996][ T5840] usbhid 6-1:1.0: can't add hid device: -71 [ 2201.915439][ T5840] usbhid: probe of 6-1:1.0 failed with error -71 [ 2201.927614][ T5840] usb 6-1: USB disconnect, device number 16 [ 2202.266335][T18954] FAULT_INJECTION: forcing a failure. [ 2202.266335][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.295250][T18956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3523'. [ 2202.298166][T18954] CPU: 0 PID: 18954 Comm: syz.5.3531 Not tainted syzkaller #0 [ 2202.311828][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2202.321956][T18954] Call Trace: [ 2202.325268][T18954] [ 2202.328232][T18954] dump_stack_lvl+0x18c/0x250 [ 2202.332968][T18954] ? show_regs_print_info+0x20/0x20 [ 2202.338212][T18954] ? load_image+0x420/0x420 [ 2202.342751][T18954] ? __lock_acquire+0x7d80/0x7d80 [ 2202.347839][T18954] should_fail_ex+0x394/0x4c0 [ 2202.352575][T18954] should_failslab+0x9/0x20 [ 2202.357135][T18954] slab_pre_alloc_hook+0x59/0x300 [ 2202.362224][T18954] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2202.367382][T18954] ? sock_alloc_inode+0x28/0xc0 [ 2202.372295][T18954] sock_alloc_inode+0x28/0xc0 [ 2202.377017][T18954] ? sockfs_init_fs_context+0xb0/0xb0 [ 2202.382441][T18954] new_inode_pseudo+0x63/0x1d0 [ 2202.387285][T18954] __sock_create+0x12d/0x940 [ 2202.391989][T18954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2202.398059][T18954] __sys_socket+0xd7/0x1b0 [ 2202.402528][T18954] __x64_sys_socket+0x7a/0x90 [ 2202.407257][T18954] do_syscall_64+0x55/0xb0 [ 2202.411735][T18954] ? clear_bhb_loop+0x40/0x90 [ 2202.416459][T18954] ? clear_bhb_loop+0x40/0x90 [ 2202.421190][T18954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2202.427144][T18954] RIP: 0033:0x7f1bfcd9e159 [ 2202.431614][T18954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2202.451267][T18954] RSP: 002b:00007f1bfdbe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2202.459727][T18954] RAX: ffffffffffffffda RBX: 00007f1bfd025fa0 RCX: 00007f1bfcd9e159 [ 2202.467726][T18954] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2202.475753][T18954] RBP: 00007f1bfce3506b R08: 0000000000000000 R09: 0000000000000000 [ 2202.483767][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2202.491778][T18954] R13: 00007f1bfd026038 R14: 00007f1bfd025fa0 R15: 00007ffff5bc8a88 [ 2202.499800][T18954] [ 2202.541060][T18954] socket: no more sockets [ 2202.897990][T18915] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2203.942957][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3526'. [ 2204.504248][T18915] usb 6-1: Using ep0 maxpacket: 8 [ 2204.544208][T18915] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2204.590495][T18915] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2204.641731][T18915] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2204.658787][T18915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.690315][T18915] usb 6-1: Product: syz [ 2204.699282][T18915] usb 6-1: Manufacturer: syz [ 2204.709556][T18915] usb 6-1: SerialNumber: syz [ 2207.219561][T18915] usbhid 6-1:1.0: can't add hid device: -71 [ 2207.235067][T18915] usbhid: probe of 6-1:1.0 failed with error -71 [ 2207.247525][T18915] usb 6-1: USB disconnect, device number 17 [ 2210.109459][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3537'. [ 2213.127993][ T28] audit: type=1800 audit(1789952768.654:100): pid=19029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3542" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 2213.198615][T19032] FAULT_INJECTION: forcing a failure. [ 2213.198615][T19032] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.235517][T19032] CPU: 1 PID: 19032 Comm: syz.6.3543 Not tainted syzkaller #0 [ 2213.243069][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2213.253199][T19032] Call Trace: [ 2213.256519][T19032] [ 2213.259500][T19032] dump_stack_lvl+0x18c/0x250 [ 2213.264246][T19032] ? show_regs_print_info+0x20/0x20 [ 2213.269512][T19032] ? load_image+0x420/0x420 [ 2213.274066][T19032] ? __lock_acquire+0x7d80/0x7d80 [ 2213.279153][T19032] should_fail_ex+0x394/0x4c0 [ 2213.283896][T19032] should_failslab+0x9/0x20 [ 2213.288454][T19032] slab_pre_alloc_hook+0x59/0x300 [ 2213.293540][T19032] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2213.298762][T19032] ? sock_alloc_inode+0x28/0xc0 [ 2213.303688][T19032] sock_alloc_inode+0x28/0xc0 [ 2213.308401][T19032] ? sockfs_init_fs_context+0xb0/0xb0 [ 2213.313808][T19032] new_inode_pseudo+0x63/0x1d0 [ 2213.318606][T19032] __sock_create+0x12d/0x940 [ 2213.323236][T19032] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2213.329253][T19032] __sys_socket+0xd7/0x1b0 [ 2213.333702][T19032] __x64_sys_socket+0x7a/0x90 [ 2213.338414][T19032] do_syscall_64+0x55/0xb0 [ 2213.342877][T19032] ? clear_bhb_loop+0x40/0x90 [ 2213.347592][T19032] ? clear_bhb_loop+0x40/0x90 [ 2213.352303][T19032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2213.358229][T19032] RIP: 0033:0x7fd89df9e159 [ 2213.362673][T19032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2213.382312][T19032] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2213.390775][T19032] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2213.398777][T19032] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2213.406766][T19032] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2213.414759][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2213.422749][T19032] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2213.430778][T19032] [ 2213.467019][T19032] socket: no more sockets [ 2213.768060][T16908] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 2213.963448][T16908] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2214.004499][T16908] usb 6-1: config 0 has no interface number 0 [ 2214.041346][T16908] usb 6-1: config 0 interface 41 has no altsetting 0 [ 2214.105640][T16908] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2214.138996][T16908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.172028][T16908] usb 6-1: Product: syz [ 2214.193721][T16908] usb 6-1: Manufacturer: syz [ 2214.214437][T16908] usb 6-1: SerialNumber: syz [ 2214.378430][T16908] usb 6-1: config 0 descriptor?? [ 2215.172423][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 2215.400782][T16908] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2215.573900][T16908] CoreChips: probe of 6-1:0.41 failed with error -71 [ 2215.698287][T16908] usb 6-1: USB disconnect, device number 18 [ 2218.365033][ T28] audit: type=1800 audit(1789952773.894:101): pid=19069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3554" name="idProduct" dev="configfs" ino=59738 res=0 errno=0 [ 2218.469166][ T28] audit: type=1800 audit(1789952773.904:102): pid=19069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3554" name="max_speed" dev="configfs" ino=59739 res=0 errno=0 [ 2220.866545][T19085] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3559'. [ 2221.172890][T19089] FAULT_INJECTION: forcing a failure. [ 2221.172890][T19089] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.185689][T19089] CPU: 1 PID: 19089 Comm: syz.6.3560 Not tainted syzkaller #0 [ 2221.193206][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2221.203308][T19089] Call Trace: [ 2221.206634][T19089] [ 2221.209597][T19089] dump_stack_lvl+0x18c/0x250 [ 2221.214315][T19089] ? show_regs_print_info+0x20/0x20 [ 2221.219558][T19089] ? load_image+0x420/0x420 [ 2221.224094][T19089] ? __lock_acquire+0x7d80/0x7d80 [ 2221.229167][T19089] should_fail_ex+0x394/0x4c0 [ 2221.233885][T19089] should_failslab+0x9/0x20 [ 2221.238420][T19089] slab_pre_alloc_hook+0x59/0x300 [ 2221.243495][T19089] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2221.248641][T19089] ? sock_alloc_inode+0x28/0xc0 [ 2221.253525][T19089] sock_alloc_inode+0x28/0xc0 [ 2221.258241][T19089] ? sockfs_init_fs_context+0xb0/0xb0 [ 2221.263670][T19089] new_inode_pseudo+0x63/0x1d0 [ 2221.268487][T19089] __sock_create+0x12d/0x940 [ 2221.273119][T19089] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2221.279150][T19089] __sys_socket+0xd7/0x1b0 [ 2221.283609][T19089] __x64_sys_socket+0x7a/0x90 [ 2221.288325][T19089] do_syscall_64+0x55/0xb0 [ 2221.292794][T19089] ? clear_bhb_loop+0x40/0x90 [ 2221.297505][T19089] ? clear_bhb_loop+0x40/0x90 [ 2221.302214][T19089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2221.308166][T19089] RIP: 0033:0x7fd89df9e159 [ 2221.312601][T19089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.332230][T19089] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2221.340673][T19089] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2221.348696][T19089] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2221.356705][T19089] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2221.364713][T19089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2221.372714][T19089] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2221.380730][T19089] [ 2221.432287][T19089] socket: no more sockets [ 2222.591394][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.597921][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.157394][T18483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2224.177298][T18483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2224.186057][T18483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2224.197427][T18483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2224.222964][T18483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2224.239805][T18483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2224.863517][T19108] chnl_net:caif_netlink_parms(): no params data found [ 2225.106371][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.133774][ T28] audit: type=1800 audit(1789952780.664:103): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3564" name="idProduct" dev="configfs" ino=58976 res=0 errno=0 [ 2225.168287][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.194742][T19108] bridge_slave_0: entered allmulticast mode [ 2225.222900][T19108] bridge_slave_0: entered promiscuous mode [ 2225.241794][ T28] audit: type=1800 audit(1789952780.704:104): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3564" name="max_speed" dev="configfs" ino=58977 res=0 errno=0 [ 2225.293647][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.312756][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.390849][T19108] bridge_slave_1: entered allmulticast mode [ 2225.408813][T19108] bridge_slave_1: entered promiscuous mode [ 2225.445110][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.459424][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2225.511778][T19128] FAULT_INJECTION: forcing a failure. [ 2225.511778][T19128] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.530566][T19128] CPU: 0 PID: 19128 Comm: syz.6.3573 Not tainted syzkaller #0 [ 2225.538114][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2225.548217][T19128] Call Trace: [ 2225.551539][T19128] [ 2225.554505][T19128] dump_stack_lvl+0x18c/0x250 [ 2225.559271][T19128] ? show_regs_print_info+0x20/0x20 [ 2225.564548][T19128] ? load_image+0x420/0x420 [ 2225.569104][T19128] ? __might_sleep+0xe0/0xe0 [ 2225.573746][T19128] ? __lock_acquire+0x7d80/0x7d80 [ 2225.578823][T19128] should_fail_ex+0x394/0x4c0 [ 2225.583565][T19128] should_failslab+0x9/0x20 [ 2225.588162][T19128] slab_pre_alloc_hook+0x59/0x300 [ 2225.593246][T19128] kmem_cache_alloc+0x5a/0x2c0 [ 2225.598066][T19128] ? security_inode_alloc+0x34/0x110 [ 2225.603410][T19128] security_inode_alloc+0x34/0x110 [ 2225.608586][T19128] inode_init_always+0x914/0xc90 [ 2225.613572][T19128] new_inode_pseudo+0x95/0x1d0 [ 2225.618383][T19128] __sock_create+0x12d/0x940 [ 2225.623017][T19128] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2225.629066][T19128] __sys_socket+0xd7/0x1b0 [ 2225.633537][T19128] __x64_sys_socket+0x7a/0x90 [ 2225.638275][T19128] do_syscall_64+0x55/0xb0 [ 2225.642743][T19128] ? clear_bhb_loop+0x40/0x90 [ 2225.647470][T19128] ? clear_bhb_loop+0x40/0x90 [ 2225.652198][T19128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.658138][T19128] RIP: 0033:0x7fd89df9e159 [ 2225.662604][T19128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2225.682257][T19128] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2225.690751][T19128] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2225.698761][T19128] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2225.706773][T19128] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2225.714794][T19128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2225.722801][T19128] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2225.730831][T19128] [ 2225.861700][T19128] socket: no more sockets [ 2226.021785][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3567'. [ 2226.501643][T18483] Bluetooth: hci0: command tx timeout [ 2226.535008][T19108] team0: Port device team_slave_0 added [ 2226.561768][T19130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2226.590867][T19108] team0: Port device team_slave_1 added [ 2226.633497][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2226.640821][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.686745][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2226.710588][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2226.728023][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.778005][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2226.857290][T19108] hsr_slave_0: entered promiscuous mode [ 2226.874718][T19108] hsr_slave_1: entered promiscuous mode [ 2226.882217][T19108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2226.900918][T19108] Cannot create hsr debugfs directory [ 2228.640251][T18294] Bluetooth: hci0: command tx timeout [ 2228.814722][T19108] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.959977][ T28] audit: type=1800 audit(1789952784.504:105): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3574" name="idProduct" dev="configfs" ino=59078 res=0 errno=0 [ 2229.021396][ T28] audit: type=1800 audit(1789952784.514:106): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3574" name="max_speed" dev="configfs" ino=59079 res=0 errno=0 [ 2229.061983][T19108] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.720464][T18483] Bluetooth: hci0: command tx timeout [ 2230.835375][T19108] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.012012][T19108] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.383313][T19108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2231.471587][T19108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2231.513039][T19108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2231.555463][T19108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2232.256523][T19108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2232.277428][T19108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2232.363159][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.370490][T14449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2232.426788][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2232.434135][T14449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2232.816657][T18483] Bluetooth: hci0: command tx timeout [ 2234.056546][T19193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3576'. [ 2234.226618][T19196] FAULT_INJECTION: forcing a failure. [ 2234.226618][T19196] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.275863][T19196] CPU: 0 PID: 19196 Comm: syz.4.3581 Not tainted syzkaller #0 [ 2234.283445][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2234.293551][T19196] Call Trace: [ 2234.296866][T19196] [ 2234.299836][T19196] dump_stack_lvl+0x18c/0x250 [ 2234.304576][T19196] ? show_regs_print_info+0x20/0x20 [ 2234.309825][T19196] ? load_image+0x420/0x420 [ 2234.314379][T19196] ? __might_sleep+0xe0/0xe0 [ 2234.319038][T19196] ? __lock_acquire+0x7d80/0x7d80 [ 2234.324141][T19196] should_fail_ex+0x394/0x4c0 [ 2234.328894][T19196] should_failslab+0x9/0x20 [ 2234.333461][T19196] slab_pre_alloc_hook+0x59/0x300 [ 2234.338549][T19196] kmem_cache_alloc+0x5a/0x2c0 [ 2234.343365][T19196] ? security_inode_alloc+0x34/0x110 [ 2234.348701][T19196] security_inode_alloc+0x34/0x110 [ 2234.353857][T19196] inode_init_always+0x914/0xc90 [ 2234.358842][T19196] new_inode_pseudo+0x95/0x1d0 [ 2234.363661][T19196] __sock_create+0x12d/0x940 [ 2234.368299][T19196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2234.374373][T19196] __sys_socket+0xd7/0x1b0 [ 2234.378848][T19196] __x64_sys_socket+0x7a/0x90 [ 2234.383569][T19196] do_syscall_64+0x55/0xb0 [ 2234.388052][T19196] ? clear_bhb_loop+0x40/0x90 [ 2234.392787][T19196] ? clear_bhb_loop+0x40/0x90 [ 2234.397514][T19196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2234.403469][T19196] RIP: 0033:0x7fde49b9e159 [ 2234.407921][T19196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2234.427578][T19196] RSP: 002b:00007fde4aaf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2234.436040][T19196] RAX: ffffffffffffffda RBX: 00007fde49e25fa0 RCX: 00007fde49b9e159 [ 2234.444067][T19196] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2234.452088][T19196] RBP: 00007fde49c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2234.460120][T19196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2234.468136][T19196] R13: 00007fde49e26038 R14: 00007fde49e25fa0 R15: 00007ffde41c7718 [ 2234.476185][T19196] [ 2234.612538][T19196] socket: no more sockets [ 2234.618303][T19108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2234.745546][T19202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3582'. [ 2234.951305][T14842] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2235.238449][T14842] usb 5-1: Using ep0 maxpacket: 8 [ 2235.313739][T14842] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2235.442278][T14842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2235.504353][ T28] audit: type=1800 audit(1789952791.044:107): pid=19204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3583" name="idProduct" dev="configfs" ino=60110 res=0 errno=0 [ 2235.552299][T14842] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2235.657944][T14842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.753252][ T28] audit: type=1800 audit(1789952791.114:108): pid=19204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3583" name="max_speed" dev="configfs" ino=60111 res=0 errno=0 [ 2235.798465][T14842] usb 5-1: Product: syz [ 2235.840557][T14842] usb 5-1: Manufacturer: syz [ 2235.877349][T14842] usb 5-1: SerialNumber: syz [ 2236.319793][T14842] usbhid 5-1:1.0: can't add hid device: -71 [ 2236.325892][T14842] usbhid: probe of 5-1:1.0 failed with error -71 [ 2236.358658][T14842] usb 5-1: USB disconnect, device number 21 [ 2236.567831][T19108] veth0_vlan: entered promiscuous mode [ 2236.613957][T19108] veth1_vlan: entered promiscuous mode [ 2236.746464][T19108] veth0_macvtap: entered promiscuous mode [ 2236.757272][T19108] veth1_macvtap: entered promiscuous mode [ 2236.777402][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2236.788101][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.962008][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.123563][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.308036][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.386918][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.418814][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2237.450919][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.483439][T19108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2237.553358][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2237.608468][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.627113][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2237.648090][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.668153][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2237.697571][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.713593][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2237.725473][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2237.751546][T19108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2238.059102][T19108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.120446][T19108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.305079][T19108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.378648][T19108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2238.661334][T19186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.690073][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.718618][T19186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.726989][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.895814][T19231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3589'. [ 2240.707257][T19247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3592'. [ 2241.234939][ T28] audit: type=1800 audit(1789952796.694:109): pid=19243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3594" name="idProduct" dev="configfs" ino=60525 res=0 errno=0 [ 2242.535358][ T28] audit: type=1800 audit(1789952796.844:110): pid=19243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3594" name="max_speed" dev="configfs" ino=60527 res=0 errno=0 [ 2244.928514][T19263] FAULT_INJECTION: forcing a failure. [ 2244.928514][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.955917][T19263] CPU: 1 PID: 19263 Comm: syz.6.3596 Not tainted syzkaller #0 [ 2244.963473][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2244.973571][T19263] Call Trace: [ 2244.976902][T19263] [ 2244.979869][T19263] dump_stack_lvl+0x18c/0x250 [ 2244.984613][T19263] ? show_regs_print_info+0x20/0x20 [ 2244.989898][T19263] ? load_image+0x420/0x420 [ 2244.994446][T19263] ? __lock_acquire+0x7d80/0x7d80 [ 2244.999541][T19263] should_fail_ex+0x394/0x4c0 [ 2245.004279][T19263] should_failslab+0x9/0x20 [ 2245.008830][T19263] slab_pre_alloc_hook+0x59/0x300 [ 2245.013921][T19263] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2245.019095][T19263] ? sock_alloc_inode+0x28/0xc0 [ 2245.024006][T19263] sock_alloc_inode+0x28/0xc0 [ 2245.028738][T19263] ? sockfs_init_fs_context+0xb0/0xb0 [ 2245.034173][T19263] new_inode_pseudo+0x63/0x1d0 [ 2245.039036][T19263] __sock_create+0x12d/0x940 [ 2245.043685][T19263] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2245.049729][T19263] __sys_socket+0xd7/0x1b0 [ 2245.054210][T19263] __x64_sys_socket+0x7a/0x90 [ 2245.058931][T19263] do_syscall_64+0x55/0xb0 [ 2245.063395][T19263] ? clear_bhb_loop+0x40/0x90 [ 2245.068126][T19263] ? clear_bhb_loop+0x40/0x90 [ 2245.072875][T19263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2245.078820][T19263] RIP: 0033:0x7fd89df9e159 [ 2245.083284][T19263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2245.102953][T19263] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2245.111430][T19263] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2245.119465][T19263] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2245.127511][T19263] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2245.135517][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2245.143525][T19263] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2245.151564][T19263] [ 2245.178040][T19263] socket: no more sockets [ 2245.281209][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3598'. [ 2246.204781][T19272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3599'. [ 2248.536401][T19284] dlm: Unknown command passed to DLM device : 3 [ 2248.536401][T19284] [ 2249.384131][ T28] audit: type=1800 audit(1789952804.924:111): pid=19295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3606" name="idProduct" dev="configfs" ino=61593 res=0 errno=0 [ 2250.852811][T19309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3609'. [ 2251.530755][T19308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3608'. [ 2254.308124][T19320] FAULT_INJECTION: forcing a failure. [ 2254.308124][T19320] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.355906][T19320] CPU: 1 PID: 19320 Comm: syz.1.3612 Not tainted syzkaller #0 [ 2254.363440][T19320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2254.373506][T19320] Call Trace: [ 2254.376794][T19320] [ 2254.379732][T19320] dump_stack_lvl+0x18c/0x250 [ 2254.384432][T19320] ? show_regs_print_info+0x20/0x20 [ 2254.389656][T19320] ? load_image+0x420/0x420 [ 2254.394172][T19320] ? __lock_acquire+0x7d80/0x7d80 [ 2254.399215][T19320] should_fail_ex+0x394/0x4c0 [ 2254.403914][T19320] should_failslab+0x9/0x20 [ 2254.408455][T19320] slab_pre_alloc_hook+0x59/0x300 [ 2254.413580][T19320] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2254.418741][T19320] ? sock_alloc_inode+0x28/0xc0 [ 2254.423614][T19320] sock_alloc_inode+0x28/0xc0 [ 2254.428320][T19320] ? sockfs_init_fs_context+0xb0/0xb0 [ 2254.433729][T19320] new_inode_pseudo+0x63/0x1d0 [ 2254.438535][T19320] __sock_create+0x12d/0x940 [ 2254.443165][T19320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2254.449193][T19320] __sys_socket+0xd7/0x1b0 [ 2254.453660][T19320] __x64_sys_socket+0x7a/0x90 [ 2254.458396][T19320] do_syscall_64+0x55/0xb0 [ 2254.462847][T19320] ? clear_bhb_loop+0x40/0x90 [ 2254.467544][T19320] ? clear_bhb_loop+0x40/0x90 [ 2254.472246][T19320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2254.478200][T19320] RIP: 0033:0x7f5c7939e159 [ 2254.482652][T19320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2254.502278][T19320] RSP: 002b:00007f5c7a31e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2254.510708][T19320] RAX: ffffffffffffffda RBX: 00007f5c79625fa0 RCX: 00007f5c7939e159 [ 2254.518730][T19320] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2254.526713][T19320] RBP: 00007f5c7943506b R08: 0000000000000000 R09: 0000000000000000 [ 2254.534702][T19320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2254.542719][T19320] R13: 00007f5c79626038 R14: 00007f5c79625fa0 R15: 00007ffc8bf43078 [ 2254.550718][T19320] [ 2255.601294][T19320] socket: no more sockets [ 2255.948240][T13782] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2256.371112][T19329] dlm: Unknown command passed to DLM device : 3 [ 2256.371112][T19329] [ 2257.055560][T13782] usb 2-1: Using ep0 maxpacket: 8 [ 2257.063396][T13782] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2257.076460][T13782] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2257.099984][T13782] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2257.114482][T13782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.123016][T13782] usb 2-1: Product: syz [ 2257.127328][T13782] usb 2-1: Manufacturer: syz [ 2257.133038][T13782] usb 2-1: SerialNumber: syz [ 2258.203044][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3613'. [ 2259.132044][T13782] usbhid 2-1:1.0: can't add hid device: -71 [ 2259.138431][T13782] usbhid: probe of 2-1:1.0 failed with error -71 [ 2259.149022][T13782] usb 2-1: USB disconnect, device number 38 [ 2260.562891][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3618'. [ 2260.877653][ T28] audit: type=1800 audit(1789952816.414:112): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3615" name="idProduct" dev="configfs" ino=61838 res=0 errno=0 [ 2264.967505][T19375] FAULT_INJECTION: forcing a failure. [ 2264.967505][T19375] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.981003][T19375] CPU: 0 PID: 19375 Comm: syz.4.3627 Not tainted syzkaller #0 [ 2264.988527][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2264.998633][T19375] Call Trace: [ 2265.001964][T19375] [ 2265.004942][T19375] dump_stack_lvl+0x18c/0x250 [ 2265.009681][T19375] ? show_regs_print_info+0x20/0x20 [ 2265.014940][T19375] ? load_image+0x420/0x420 [ 2265.019514][T19375] ? __lock_acquire+0x7d80/0x7d80 [ 2265.024602][T19375] should_fail_ex+0x394/0x4c0 [ 2265.029335][T19375] should_failslab+0x9/0x20 [ 2265.033891][T19375] slab_pre_alloc_hook+0x59/0x300 [ 2265.038981][T19375] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2265.044149][T19375] ? sock_alloc_inode+0x28/0xc0 [ 2265.049070][T19375] sock_alloc_inode+0x28/0xc0 [ 2265.053806][T19375] ? sockfs_init_fs_context+0xb0/0xb0 [ 2265.059241][T19375] new_inode_pseudo+0x63/0x1d0 [ 2265.064065][T19375] __sock_create+0x12d/0x940 [ 2265.068698][T19375] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2265.074743][T19375] __sys_socket+0xd7/0x1b0 [ 2265.079219][T19375] __x64_sys_socket+0x7a/0x90 [ 2265.083944][T19375] do_syscall_64+0x55/0xb0 [ 2265.088414][T19375] ? clear_bhb_loop+0x40/0x90 [ 2265.093144][T19375] ? clear_bhb_loop+0x40/0x90 [ 2265.097869][T19375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2265.103810][T19375] RIP: 0033:0x7fde49b9e159 [ 2265.108261][T19375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2265.127915][T19375] RSP: 002b:00007fde4aaf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2265.136377][T19375] RAX: ffffffffffffffda RBX: 00007fde49e25fa0 RCX: 00007fde49b9e159 [ 2265.144394][T19375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2265.152412][T19375] RBP: 00007fde49c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2265.160428][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2265.168466][T19375] R13: 00007fde49e26038 R14: 00007fde49e25fa0 R15: 00007ffde41c7718 [ 2265.176502][T19375] [ 2265.208273][T19375] socket: no more sockets [ 2265.457984][T13782] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2265.658070][T13782] usb 5-1: Using ep0 maxpacket: 8 [ 2265.674617][T13782] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2265.823292][T13782] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2265.857487][T13782] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2265.887138][T13782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.895894][T13782] usb 5-1: Product: syz [ 2265.917966][T13782] usb 5-1: Manufacturer: syz [ 2265.933113][T13782] usb 5-1: SerialNumber: syz [ 2266.214777][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3625'. [ 2267.116359][T19390] dlm: Unknown command passed to DLM device : 3 [ 2267.116359][T19390] [ 2268.438798][T13782] usbhid 5-1:1.0: can't add hid device: -71 [ 2268.444972][T13782] usbhid: probe of 5-1:1.0 failed with error -71 [ 2269.535218][T13782] usb 5-1: USB disconnect, device number 22 [ 2269.759496][T19401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3630'. [ 2269.900035][T19400] FAULT_INJECTION: forcing a failure. [ 2269.900035][T19400] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.955083][ T28] audit: type=1800 audit(1789952825.494:113): pid=19396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3631" name="idProduct" dev="configfs" ino=60851 res=0 errno=0 [ 2270.002900][T19400] CPU: 0 PID: 19400 Comm: syz.5.3638 Not tainted syzkaller #0 [ 2270.010546][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2270.020659][T19400] Call Trace: [ 2270.023990][T19400] [ 2270.026963][T19400] dump_stack_lvl+0x18c/0x250 [ 2270.031705][T19400] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2270.037398][T19400] ? show_regs_print_info+0x20/0x20 [ 2270.042657][T19400] ? load_image+0x420/0x420 [ 2270.047237][T19400] should_fail_ex+0x394/0x4c0 [ 2270.051982][T19400] should_failslab+0x9/0x20 [ 2270.056544][T19400] slab_pre_alloc_hook+0x59/0x300 [ 2270.061648][T19400] kmem_cache_alloc+0x5a/0x2c0 [ 2270.066468][T19400] ? security_inode_alloc+0x34/0x110 [ 2270.071816][T19400] security_inode_alloc+0x34/0x110 [ 2270.076988][T19400] inode_init_always+0x914/0xc90 [ 2270.081988][T19400] new_inode_pseudo+0x95/0x1d0 [ 2270.086803][T19400] __sock_create+0x12d/0x940 [ 2270.091435][T19400] ? lockdep_hardirqs_on+0x98/0x150 [ 2270.096691][T19400] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2270.102398][T19400] __sys_socket+0xd7/0x1b0 [ 2270.106877][T19400] __x64_sys_socket+0x7a/0x90 [ 2270.111602][T19400] do_syscall_64+0x55/0xb0 [ 2270.116071][T19400] ? clear_bhb_loop+0x40/0x90 [ 2270.120798][T19400] ? clear_bhb_loop+0x40/0x90 [ 2270.125530][T19400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2270.131500][T19400] RIP: 0033:0x7fbfa859e159 [ 2270.135961][T19400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2270.155618][T19400] RSP: 002b:00007fbfa93f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2270.164097][T19400] RAX: ffffffffffffffda RBX: 00007fbfa8825fa0 RCX: 00007fbfa859e159 [ 2270.172111][T19400] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2270.180126][T19400] RBP: 00007fbfa863506b R08: 0000000000000000 R09: 0000000000000000 [ 2270.188152][T19400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2270.196160][T19400] R13: 00007fbfa8826038 R14: 00007fbfa8825fa0 R15: 00007ffc213d6198 [ 2270.204192][T19400] [ 2270.969824][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3632'. [ 2271.588206][T19400] socket: no more sockets [ 2272.818066][ T23] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2275.046191][T19432] dlm: Unknown command passed to DLM device : 3 [ 2275.046191][T19432] [ 2275.923750][T19435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3641'. [ 2277.270312][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3643'. [ 2277.975687][T19451] FAULT_INJECTION: forcing a failure. [ 2277.975687][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.990434][T19451] CPU: 1 PID: 19451 Comm: syz.6.3645 Not tainted syzkaller #0 [ 2277.997963][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2278.008057][T19451] Call Trace: [ 2278.011379][T19451] [ 2278.014356][T19451] dump_stack_lvl+0x18c/0x250 [ 2278.019099][T19451] ? show_regs_print_info+0x20/0x20 [ 2278.024354][T19451] ? load_image+0x420/0x420 [ 2278.028898][T19451] ? __lock_acquire+0x7d80/0x7d80 [ 2278.033962][T19451] should_fail_ex+0x394/0x4c0 [ 2278.038679][T19451] should_failslab+0x9/0x20 [ 2278.043225][T19451] slab_pre_alloc_hook+0x59/0x300 [ 2278.048296][T19451] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2278.053442][T19451] ? sock_alloc_inode+0x28/0xc0 [ 2278.058332][T19451] sock_alloc_inode+0x28/0xc0 [ 2278.063041][T19451] ? sockfs_init_fs_context+0xb0/0xb0 [ 2278.068438][T19451] new_inode_pseudo+0x63/0x1d0 [ 2278.073235][T19451] __sock_create+0x12d/0x940 [ 2278.077858][T19451] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2278.083904][T19451] __sys_socket+0xd7/0x1b0 [ 2278.088365][T19451] __x64_sys_socket+0x7a/0x90 [ 2278.093082][T19451] do_syscall_64+0x55/0xb0 [ 2278.097530][T19451] ? clear_bhb_loop+0x40/0x90 [ 2278.102242][T19451] ? clear_bhb_loop+0x40/0x90 [ 2278.106958][T19451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2278.112881][T19451] RIP: 0033:0x7fd89df9e159 [ 2278.117326][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2278.136959][T19451] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2278.145414][T19451] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2278.153410][T19451] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2278.161405][T19451] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2278.169397][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2278.177393][T19451] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2278.185403][T19451] [ 2278.195552][T19451] socket: no more sockets [ 2280.756272][T19467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3649'. [ 2281.221330][T19471] dlm: Unknown command passed to DLM device : 3 [ 2281.221330][T19471] [ 2283.380704][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.387296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.634801][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3653'. [ 2284.344965][T19487] Cannot find set identified by id 0 to match [ 2286.041207][T19503] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 2286.041207][T19503] program syz.6.3660 not setting count and/or reply_len properly [ 2287.078066][T19508] FAULT_INJECTION: forcing a failure. [ 2287.078066][T19508] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.107885][T19508] CPU: 1 PID: 19508 Comm: syz.6.3661 Not tainted syzkaller #0 [ 2287.115432][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2287.125519][T19508] Call Trace: [ 2287.128823][T19508] [ 2287.131781][T19508] dump_stack_lvl+0x18c/0x250 [ 2287.136512][T19508] ? show_regs_print_info+0x20/0x20 [ 2287.141738][T19508] ? load_image+0x420/0x420 [ 2287.146271][T19508] ? __lock_acquire+0x7d80/0x7d80 [ 2287.151335][T19508] should_fail_ex+0x394/0x4c0 [ 2287.156067][T19508] should_failslab+0x9/0x20 [ 2287.160602][T19508] slab_pre_alloc_hook+0x59/0x300 [ 2287.165689][T19508] kmem_cache_alloc_lru+0x4d/0x2b0 [ 2287.170838][T19508] ? sock_alloc_inode+0x28/0xc0 [ 2287.175726][T19508] sock_alloc_inode+0x28/0xc0 [ 2287.180450][T19508] ? sockfs_init_fs_context+0xb0/0xb0 [ 2287.185858][T19508] new_inode_pseudo+0x63/0x1d0 [ 2287.190665][T19508] __sock_create+0x12d/0x940 [ 2287.195296][T19508] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2287.201346][T19508] __sys_socket+0xd7/0x1b0 [ 2287.205799][T19508] __x64_sys_socket+0x7a/0x90 [ 2287.210510][T19508] do_syscall_64+0x55/0xb0 [ 2287.214984][T19508] ? clear_bhb_loop+0x40/0x90 [ 2287.219696][T19508] ? clear_bhb_loop+0x40/0x90 [ 2287.224414][T19508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2287.230345][T19508] RIP: 0033:0x7fd89df9e159 [ 2287.234794][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2287.254434][T19508] RSP: 002b:00007fd89ee6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2287.262877][T19508] RAX: ffffffffffffffda RBX: 00007fd89e225fa0 RCX: 00007fd89df9e159 [ 2287.270873][T19508] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2287.278885][T19508] RBP: 00007fd89e03506b R08: 0000000000000000 R09: 0000000000000000 [ 2287.286876][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2287.294875][T19508] R13: 00007fd89e226038 R14: 00007fd89e225fa0 R15: 00007ffc5fc181d8 [ 2287.302897][T19508] [ 2287.348142][T19508] socket: no more sockets [ 2288.202666][T19520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3664'. [ 2290.941922][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3665'. [ 2292.726763][T19546] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 2292.726763][T19546] program syz.4.3669 not setting count and/or reply_len properly [ 2294.331299][ T28] audit: type=1800 audit(1789952849.874:114): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3673" name="idProduct" dev="configfs" ino=62461 res=0 errno=0 [ 2294.417950][ T28] audit: type=1800 audit(1789952849.874:115): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3673" name="max_speed" dev="configfs" ino=62462 res=0 errno=0 [ 2294.898042][ T5840] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2295.304355][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 2295.320237][ T5840] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2295.353795][ T5840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2295.424187][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3676'. [ 2296.200435][ T5840] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2296.220215][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.244334][ T5840] usb 2-1: Product: syz [ 2296.248990][ T5840] usb 2-1: Manufacturer: syz [ 2296.258121][ T5840] usb 2-1: SerialNumber: syz [ 2297.994945][ T5840] usbhid 2-1:1.0: can't add hid device: -71 [ 2298.014786][ T5840] usbhid: probe of 2-1:1.0 failed with error -71 [ 2298.082195][ T5840] usb 2-1: USB disconnect, device number 39 [ 2298.184512][ T28] audit: type=1800 audit(1789952853.724:116): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3682" name="idProduct" dev="configfs" ino=62600 res=0 errno=0 [ 2298.378015][ T28] audit: type=1800 audit(1789952853.724:117): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3682" name="max_speed" dev="configfs" ino=62601 res=0 errno=0 [ 2301.110800][T18483] Bluetooth: hci4: command 0x0406 tx timeout [ 2301.282226][T19605] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 2301.282226][T19605] program syz.5.3685 not setting count and/or reply_len properly [ 2301.607203][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3687'. [ 2304.623920][ T28] audit: type=1800 audit(1789952860.164:118): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3696" name="idProduct" dev="configfs" ino=62752 res=0 errno=0 [ 2304.687886][ T28] audit: type=1800 audit(1789952860.194:119): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3696" name="max_speed" dev="configfs" ino=62753 res=0 errno=0 [ 2305.177212][T19638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3697'. [ 2309.147288][T19662] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 2309.147288][T19662] program syz.1.3703 not setting count and/or reply_len properly [ 2310.405420][T19673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3706'. [ 2312.598433][ T5841] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2312.888391][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 2312.964939][ T5841] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2313.018069][ T5841] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2313.057476][ T5841] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2313.087156][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.118709][ T5841] usb 2-1: Product: syz [ 2313.122968][ T5841] usb 2-1: Manufacturer: syz [ 2313.127597][ T5841] usb 2-1: SerialNumber: syz [ 2313.251246][ T28] audit: type=1800 audit(1789952868.794:120): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3705" name="idProduct" dev="configfs" ino=62935 res=0 errno=0 [ 2313.423110][ T5841] usbhid 2-1:1.0: can't add hid device: -71 [ 2313.453883][ T5841] usbhid: probe of 2-1:1.0 failed with error -71 [ 2313.478267][ T5841] usb 2-1: USB disconnect, device number 40 [ 2314.162665][T19699] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 2314.162665][T19699] program syz.6.3715 not setting count and/or reply_len properly [ 2317.288804][ T28] audit: type=1800 audit(1789952872.834:121): pid=19716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3719" name="idProduct" dev="configfs" ino=61400 res=0 errno=0 [ 2319.678364][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2319.857992][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 2319.875238][ T9] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2319.919060][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2319.978112][ T9] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2319.998335][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.028201][ T9] usb 6-1: Product: syz [ 2320.032504][ T9] usb 6-1: Manufacturer: syz [ 2320.037211][ T9] usb 6-1: SerialNumber: syz [ 2320.571030][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 2320.577139][ T9] usbhid: probe of 6-1:1.0 failed with error -71 [ 2320.635323][ T9] usb 6-1: USB disconnect, device number 20 [ 2320.754024][T19746] Bluetooth: MGMT ver 1.22 [ 2320.832906][T19750] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3727'. [ 2321.222453][ T28] audit: type=1800 audit(1789952876.764:122): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3730" name="idProduct" dev="configfs" ino=63047 res=0 errno=0 [ 2330.865155][ T28] audit: type=1800 audit(1789952886.404:123): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3745" name="idProduct" dev="configfs" ino=63181 res=0 errno=0 [ 2330.949499][ T28] audit: type=1800 audit(1789952886.444:124): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3745" name="max_speed" dev="configfs" ino=63182 res=0 errno=0 [ 2331.077939][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2331.298477][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 2331.313824][ T23] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2331.353715][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2331.376937][ T23] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2331.391789][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.417274][ T23] usb 5-1: Product: syz [ 2331.432264][ T23] usb 5-1: Manufacturer: syz [ 2331.464318][ T23] usb 5-1: SerialNumber: syz [ 2331.919467][ T23] usbhid 5-1:1.0: can't add hid device: -71 [ 2332.062699][ T23] usbhid: probe of 5-1:1.0 failed with error -71 [ 2332.117184][ T23] usb 5-1: USB disconnect, device number 23 [ 2336.972452][ T28] audit: type=1800 audit(1789952892.514:125): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3760" name="(" dev="sda1" ino=2061 res=0 errno=0 [ 2339.819177][ T28] audit: type=1800 audit(1789952895.364:126): pid=19880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3754" name="idProduct" dev="configfs" ino=63810 res=0 errno=0 [ 2339.868010][T18915] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2339.892792][ T28] audit: type=1800 audit(1789952895.364:127): pid=19880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3754" name="max_speed" dev="configfs" ino=63811 res=0 errno=0 [ 2340.118251][T18915] usb 6-1: Using ep0 maxpacket: 8 [ 2340.125503][T18915] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2340.148139][T18915] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2340.217876][T18915] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2340.237480][T18915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.277505][T18915] usb 6-1: Product: syz [ 2340.305558][T18915] usb 6-1: Manufacturer: syz [ 2340.532243][T19891] dlm: Unknown command passed to DLM device : 3 [ 2340.532243][T19891] [ 2340.553272][T18915] usb 6-1: SerialNumber: syz [ 2341.437417][T18915] usbhid 6-1:1.0: can't add hid device: -71 [ 2341.453451][T18915] usbhid: probe of 6-1:1.0 failed with error -71 [ 2341.474016][T18915] usb 6-1: USB disconnect, device number 21 [ 2344.432378][ T28] audit: type=1800 audit(1789952899.974:128): pid=19920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="idProduct" dev="configfs" ino=63365 res=0 errno=0 [ 2344.507935][ T28] audit: type=1800 audit(1789952899.974:129): pid=19920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="max_speed" dev="configfs" ino=63366 res=0 errno=0 [ 2344.858921][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.865303][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.377222][T19933] dlm: Unknown command passed to DLM device : 3 [ 2345.377222][T19933] [ 2347.170431][ T9614] Bluetooth: hci0: command 0x0406 tx timeout [ 2348.646302][ T23] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2348.858037][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 2348.910591][ T23] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2349.093179][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2349.187362][ T23] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2349.273620][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.397086][ T23] usb 2-1: Product: syz [ 2349.403852][ T23] usb 2-1: Manufacturer: syz [ 2349.416324][ T23] usb 2-1: SerialNumber: syz [ 2351.285317][ T23] usbhid 2-1:1.0: can't add hid device: -71 [ 2351.291708][ T23] usbhid: probe of 2-1:1.0 failed with error -71 [ 2351.307010][ T23] usb 2-1: USB disconnect, device number 41 [ 2351.566775][ T28] audit: type=1800 audit(1789952907.104:130): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3787" name="idProduct" dev="configfs" ino=63949 res=0 errno=0 [ 2351.627828][ T28] audit: type=1800 audit(1789952907.114:131): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3787" name="max_speed" dev="configfs" ino=63950 res=0 errno=0 [ 2352.345352][T19977] dlm: Unknown command passed to DLM device : 3 [ 2352.345352][T19977] [ 2356.655275][ T28] audit: type=1800 audit(1789952912.194:132): pid=20019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3799" name="idProduct" dev="configfs" ino=64037 res=0 errno=0 [ 2356.678269][ T23] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2356.707843][ T28] audit: type=1800 audit(1789952912.234:133): pid=20019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3799" name="max_speed" dev="configfs" ino=64038 res=0 errno=0 [ 2357.097826][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 2357.502195][T20027] dlm: Unknown command passed to DLM device : 3 [ 2357.502195][T20027] [ 2357.792892][ T23] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2357.817834][ T23] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2357.853616][ T23] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2357.880993][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.895522][ T23] usb 6-1: Product: syz [ 2358.071912][ T23] usb 6-1: Manufacturer: syz [ 2358.077114][ T23] usb 6-1: SerialNumber: syz [ 2359.015328][ T23] usbhid 6-1:1.0: can't add hid device: -71 [ 2359.021870][ T23] usbhid: probe of 6-1:1.0 failed with error -71 [ 2359.038257][ T23] usb 6-1: USB disconnect, device number 22 [ 2361.620703][ T28] audit: type=1800 audit(1789952917.164:134): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3809" name="idProduct" dev="configfs" ino=64161 res=0 errno=0 [ 2361.845628][ T28] audit: type=1800 audit(1789952917.184:135): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3809" name="max_speed" dev="configfs" ino=64162 res=0 errno=0 [ 2363.433052][T20070] dlm: Unknown command passed to DLM device : 3 [ 2363.433052][T20070] [ 2367.684576][ T5840] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2368.057814][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 2368.065152][ T5840] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2368.823437][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2368.850988][ T5840] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2368.877342][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.915841][ T5840] usb 5-1: Product: syz [ 2368.931714][ T5840] usb 5-1: Manufacturer: syz [ 2368.955343][ T5840] usb 5-1: SerialNumber: syz [ 2369.293434][ T5840] usbhid 5-1:1.0: can't add hid device: -71 [ 2369.307905][ T5840] usbhid: probe of 5-1:1.0 failed with error -71 [ 2369.339409][ T5840] usb 5-1: USB disconnect, device number 24 [ 2369.404116][T20106] dlm: Unknown command passed to DLM device : 3 [ 2369.404116][T20106] [ 2373.151805][ T5840] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2373.215554][T20146] dlm: Unknown command passed to DLM device : 3 [ 2373.215554][T20146] [ 2373.407928][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 2373.574124][ T5840] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2373.597397][ T5840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2373.614580][ T5840] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2374.365370][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.373666][ T5840] usb 2-1: Product: syz [ 2374.377943][ T5840] usb 2-1: Manufacturer: syz [ 2374.382668][ T5840] usb 2-1: SerialNumber: syz [ 2374.651415][ T5840] usbhid 2-1:1.0: can't add hid device: -71 [ 2374.657494][ T5840] usbhid: probe of 2-1:1.0 failed with error -71 [ 2374.678070][ T5840] usb 2-1: USB disconnect, device number 42 [ 2376.461609][T20180] dlm: Unknown command passed to DLM device : 3 [ 2376.461609][T20180] [ 2378.338838][T20208] syz.4.3850 uses obsolete (PF_INET,SOCK_PACKET) [ 2379.446980][T20211] Cannot find set identified by id 0 to match [ 2379.957840][T16908] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2380.285872][T20217] dlm: Unknown command passed to DLM device : 3 [ 2380.285872][T20217] [ 2380.406281][T16908] usb 5-1: Using ep0 maxpacket: 8 [ 2380.413788][T16908] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2380.438962][T16908] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2380.449956][T16908] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2380.465737][T16908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.473931][T16908] usb 5-1: Product: syz [ 2380.487925][T16908] usb 5-1: Manufacturer: syz [ 2380.492601][T16908] usb 5-1: SerialNumber: syz [ 2380.934502][T16908] usbhid 5-1:1.0: can't add hid device: -71 [ 2381.366692][T16908] usbhid: probe of 5-1:1.0 failed with error -71 [ 2381.376850][T16908] usb 5-1: USB disconnect, device number 25 [ 2382.580558][T20248] dlm: Unknown command passed to DLM device : 3 [ 2382.580558][T20248] [ 2387.077626][T20277] fuse: Bad value for 'fd' [ 2387.388071][ T23] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2387.617970][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 2387.646412][ T23] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2387.702678][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2387.733384][ T23] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2387.768824][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.006872][ T23] usb 5-1: Product: syz [ 2388.013169][ T23] usb 5-1: Manufacturer: syz [ 2388.018165][ T23] usb 5-1: SerialNumber: syz [ 2388.078884][T20290] dlm: Unknown command passed to DLM device : 3 [ 2388.078884][T20290] [ 2388.262849][ T23] usbhid 5-1:1.0: can't add hid device: -71 [ 2388.300318][ T23] usbhid: probe of 5-1:1.0 failed with error -71 [ 2388.429538][ T23] usb 5-1: USB disconnect, device number 26 [ 2393.537097][ T28] audit: type=1800 audit(1789952949.074:136): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3882" name="idProduct" dev="configfs" ino=65644 res=0 errno=0 [ 2393.639548][ T28] audit: type=1800 audit(1789952949.084:137): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3882" name="max_speed" dev="configfs" ino=65645 res=0 errno=0 [ 2396.192516][T20328] dlm: Unknown command passed to DLM device : 3 [ 2396.192516][T20328] [ 2400.397950][T16908] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2400.553968][ T28] audit: type=1800 audit(1789952956.094:138): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3891" name="idProduct" dev="configfs" ino=65465 res=0 errno=0 [ 2400.611511][T16908] usb 6-1: Using ep0 maxpacket: 8 [ 2400.615689][ T28] audit: type=1800 audit(1789952956.094:139): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3891" name="max_speed" dev="configfs" ino=65466 res=0 errno=0 [ 2400.633642][T16908] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2400.681630][T16908] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2400.741749][T16908] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2400.768297][T16908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.804597][T16908] usb 6-1: Product: syz [ 2400.814230][T16908] usb 6-1: Manufacturer: syz [ 2400.829455][T16908] usb 6-1: SerialNumber: syz [ 2401.354941][T16908] usbhid 6-1:1.0: can't add hid device: -71 [ 2401.436432][T16908] usbhid: probe of 6-1:1.0 failed with error -71 [ 2401.651842][T16908] usb 6-1: USB disconnect, device number 23 [ 2406.254082][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.260666][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.729783][T20387] dlm: Unknown command passed to DLM device : 3 [ 2406.729783][T20387] [ 2407.968843][ T28] audit: type=1800 audit(1789952963.474:140): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3901" name="idProduct" dev="configfs" ino=65769 res=0 errno=0 [ 2408.010806][ T28] audit: type=1800 audit(1789952963.474:141): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3901" name="max_speed" dev="configfs" ino=65770 res=0 errno=0 [ 2414.795348][T20442] dlm: Unknown command passed to DLM device : 3 [ 2414.795348][T20442] [ 2415.299016][ T28] audit: type=1800 audit(1789952970.844:142): pid=20444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3912" name="idProduct" dev="configfs" ino=66629 res=0 errno=0 [ 2415.379360][ T28] audit: type=1800 audit(1789952970.924:143): pid=20444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3912" name="max_speed" dev="configfs" ino=65836 res=0 errno=0 [ 2415.897981][T13782] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2416.097935][T13782] usb 6-1: Using ep0 maxpacket: 8 [ 2416.108832][T13782] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2416.155774][T13782] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2416.195383][T13782] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2416.219670][T13782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.237810][T13782] usb 6-1: Product: syz [ 2416.246709][T13782] usb 6-1: Manufacturer: syz [ 2416.272152][T13782] usb 6-1: SerialNumber: syz [ 2416.524937][T13782] usbhid 6-1:1.0: can't add hid device: -71 [ 2416.705356][T13782] usbhid: probe of 6-1:1.0 failed with error -71 [ 2417.049064][T13782] usb 6-1: USB disconnect, device number 24 [ 2418.902963][T20475] tipc: Started in network mode [ 2418.914445][T20475] tipc: Node identity ac1414aa, cluster identity 4711 [ 2418.939012][T20475] tipc: New replicast peer: 172.20.20.187 [ 2418.949862][T20475] tipc: Enabled bearer , priority 10 [ 2420.436897][T13782] tipc: Node number set to 2886997162 [ 2420.785743][T20492] dlm: Unknown command passed to DLM device : 3 [ 2420.785743][T20492] [ 2425.120976][T18294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2425.131624][T18294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2425.143438][T18294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2425.154764][T18294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2425.162643][T18294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2425.170229][T18294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2425.560877][T20504] chnl_net:caif_netlink_parms(): no params data found [ 2425.703824][T20504] bridge0: port 1(bridge_slave_0) entered blocking state [ 2425.711215][T20504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.718707][T20504] bridge_slave_0: entered allmulticast mode [ 2425.726070][T20504] bridge_slave_0: entered promiscuous mode [ 2425.735109][T20504] bridge0: port 2(bridge_slave_1) entered blocking state [ 2425.742648][T20504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2425.751775][T20504] bridge_slave_1: entered allmulticast mode [ 2425.760231][T20504] bridge_slave_1: entered promiscuous mode [ 2425.804612][T20504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2425.817530][T20504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2425.860346][T20504] team0: Port device team_slave_0 added [ 2425.892281][T20504] team0: Port device team_slave_1 added [ 2425.961698][T20504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2425.968965][T20504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2425.995653][T20504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2426.029515][T20504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2426.036515][T20504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2426.075535][T20504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.076099][ T5841] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2428.076443][T18294] Bluetooth: hci1: command tx timeout [ 2428.106971][T20504] hsr_slave_0: entered promiscuous mode [ 2428.168542][T20504] hsr_slave_1: entered promiscuous mode [ 2428.183395][T20523] Bluetooth: MGMT ver 1.22 [ 2428.188527][T20504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2428.196118][T20504] Cannot create hsr debugfs directory [ 2428.257962][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 2428.297085][ T5841] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2428.322437][ T5841] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2428.346591][ T5841] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2428.382210][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.401192][ T5841] usb 5-1: Product: syz [ 2428.427843][ T5841] usb 5-1: Manufacturer: syz [ 2428.432498][ T5841] usb 5-1: SerialNumber: syz [ 2429.068458][ T5841] usbhid 5-1:1.0: can't add hid device: -71 [ 2429.074527][ T5841] usbhid: probe of 5-1:1.0 failed with error -71 [ 2429.152417][ T5841] usb 5-1: USB disconnect, device number 27 [ 2429.300849][T20504] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.524597][T20532] dlm: Unknown command passed to DLM device : 3 [ 2429.524597][T20532] [ 2429.781219][T20504] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2430.189322][T18294] Bluetooth: hci1: command tx timeout [ 2430.811710][T20504] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.220951][T20504] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.546232][T20504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2431.587171][T20504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2431.620629][T20504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2431.653616][T20504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2431.911643][T20504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2431.960326][T20504] 8021q: adding VLAN 0 to HW filter on device team0 [ 2431.985035][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.992327][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2432.036218][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.043429][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2432.170772][T20504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2432.248412][T18294] Bluetooth: hci1: command tx timeout [ 2432.692002][T20504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2433.379761][T20504] veth0_vlan: entered promiscuous mode [ 2433.411242][T20504] veth1_vlan: entered promiscuous mode [ 2433.502875][T20504] veth0_macvtap: entered promiscuous mode [ 2433.540263][T20504] veth1_macvtap: entered promiscuous mode [ 2433.614221][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.628039][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.668569][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.691697][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.701891][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.718032][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.728107][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.748073][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.758514][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2433.777833][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.789359][T20504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2433.821052][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2433.832410][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.847880][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2433.858545][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.904595][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2433.915489][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.945170][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2433.955686][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2433.981382][T20504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2433.997993][T20504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2434.019439][T20504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2434.056184][T20504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.077855][T20504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.086650][T20504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.117912][T20504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.328461][T18294] Bluetooth: hci1: command tx timeout [ 2434.358971][T19364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2434.366849][T19364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2434.439155][T19364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2434.448133][T19364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2434.788603][ T28] audit: type=1800 audit(1789952990.334:144): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3922" name="idProduct" dev="configfs" ino=67394 res=0 errno=0 [ 2434.894117][ T28] audit: type=1800 audit(1789952990.414:145): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3922" name="max_speed" dev="configfs" ino=67396 res=0 errno=0 [ 2437.091457][T14842] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2437.277817][T14842] usb 5-1: Using ep0 maxpacket: 8 [ 2437.284588][T14842] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2437.300228][T20586] Cannot find set identified by id 0 to match [ 2437.417268][T14842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2437.685502][T14842] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2437.948127][T14842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.975303][T14842] usb 5-1: Product: syz [ 2438.009153][T14842] usb 5-1: Manufacturer: syz [ 2438.017806][T14842] usb 5-1: SerialNumber: syz [ 2438.294691][T14842] usbhid 5-1:1.0: can't add hid device: -71 [ 2438.308222][T14842] usbhid: probe of 5-1:1.0 failed with error -71 [ 2438.357179][T14842] usb 5-1: USB disconnect, device number 28 [ 2438.586433][T20590] dlm: Unknown command passed to DLM device : 3 [ 2438.586433][T20590] [ 2441.224339][ T12] dvmrp6 (unregistering): left allmulticast mode [ 2441.489555][ T28] audit: type=1800 audit(1789952996.954:146): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3947" name="idProduct" dev="configfs" ino=67466 res=0 errno=0 [ 2441.580588][ T28] audit: type=1800 audit(1789952996.964:147): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3947" name="max_speed" dev="configfs" ino=67467 res=0 errno=0 [ 2444.067750][ T12] hsr_slave_0: left promiscuous mode [ 2444.113262][ T12] hsr_slave_1: left promiscuous mode [ 2445.121235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2445.137775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2445.214007][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2445.222123][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2445.242053][ T12] bridge_slave_1: left allmulticast mode [ 2445.248104][ T12] bridge_slave_1: left promiscuous mode [ 2445.253878][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.269719][ T12] bridge_slave_0: left allmulticast mode [ 2445.275436][ T12] bridge_slave_0: left promiscuous mode [ 2445.288154][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.344459][ T12] veth1_macvtap: left promiscuous mode [ 2445.350434][ T12] veth0_macvtap: left promiscuous mode [ 2445.364536][ T12] veth1_vlan: left promiscuous mode [ 2445.403021][ T12] veth0_vlan: left promiscuous mode [ 2445.743162][T20636] dlm: Unknown command passed to DLM device : 3 [ 2445.743162][T20636] [ 2446.317788][ T5841] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2446.538093][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 2446.608554][T20644] Cannot find set identified by id 0 to match [ 2446.634063][ T5841] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2446.680731][ T5841] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2446.704578][ T5841] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2446.727297][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.754184][ T5841] usb 2-1: Product: syz [ 2446.767471][ T5841] usb 2-1: Manufacturer: syz [ 2446.782119][ T5841] usb 2-1: SerialNumber: syz [ 2447.104107][ T5841] usbhid 2-1:1.0: can't add hid device: -71 [ 2447.118979][ T5841] usbhid: probe of 2-1:1.0 failed with error -71 [ 2447.141604][ T5841] usb 2-1: USB disconnect, device number 43 [ 2448.334845][ T28] audit: type=1800 audit(1789953003.874:148): pid=20653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3959" name="idProduct" dev="configfs" ino=67532 res=0 errno=0 [ 2449.093287][ T28] audit: type=1800 audit(1789953004.234:149): pid=20653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3959" name="max_speed" dev="configfs" ino=67537 res=0 errno=0 [ 2449.429911][T20663] [ 2449.432405][T20663] ====================================================== [ 2449.439460][T20663] WARNING: possible circular locking dependency detected [ 2449.446515][T20663] syzkaller #0 Not tainted [ 2449.450938][T20663] ------------------------------------------------------ [ 2449.457962][T20663] syz.4.3961/20663 is trying to acquire lock: [ 2449.464084][T20663] ffffffff8db2bdb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 2449.473424][T20663] [ 2449.473424][T20663] but task is already holding lock: [ 2449.480810][T20663] ffff888020177910 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 2449.490514][T20663] [ 2449.490514][T20663] which lock already depends on the new lock. [ 2449.490514][T20663] [ 2449.500920][T20663] [ 2449.500920][T20663] the existing dependency chain (in reverse order) is: [ 2449.509936][T20663] [ 2449.509936][T20663] -> #2 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 2449.518645][T20663] down_write+0x97/0x200 [ 2449.523443][T20663] configfs_depend_item_unlocked+0x157/0x430 [ 2449.529967][T20663] usbg_make_tpg+0x1e1/0x550 [ 2449.535156][T20663] target_fabric_make_tpg+0xa4/0x6d0 [ 2449.540980][T20663] configfs_mkdir+0x515/0x9e0 [ 2449.546187][T20663] vfs_mkdir+0x2a5/0x470 [ 2449.550957][T20663] do_mkdirat+0x1dc/0x450 [ 2449.555820][T20663] __x64_sys_mkdirat+0x89/0xa0 [ 2449.561114][T20663] do_syscall_64+0x55/0xb0 [ 2449.566104][T20663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.572533][T20663] [ 2449.572533][T20663] -> #1 (tpg_instances_lock){+.+.}-{3:3}: [ 2449.580482][T20663] __mutex_lock+0x135/0xc80 [ 2449.585525][T20663] usbg_make_tpg+0xf9/0x550 [ 2449.590571][T20663] target_fabric_make_tpg+0xa4/0x6d0 [ 2449.596387][T20663] configfs_mkdir+0x515/0x9e0 [ 2449.601618][T20663] vfs_mkdir+0x2a5/0x470 [ 2449.606411][T20663] do_mkdirat+0x1dc/0x450 [ 2449.611303][T20663] __x64_sys_mkdirat+0x89/0xa0 [ 2449.616592][T20663] do_syscall_64+0x55/0xb0 [ 2449.621543][T20663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.627968][T20663] [ 2449.627968][T20663] -> #0 (&subsys->su_mutex){+.+.}-{3:3}: [ 2449.635789][T20663] __lock_acquire+0x37ef/0x7d80 [ 2449.641193][T20663] lock_acquire+0x19e/0x420 [ 2449.646238][T20663] __mutex_lock+0x135/0xc80 [ 2449.651271][T20663] configfs_rmdir+0x63c/0x980 [ 2449.656491][T20663] vfs_rmdir+0x352/0x4b0 [ 2449.661265][T20663] do_rmdir+0x29f/0x590 [ 2449.665951][T20663] __x64_sys_rmdir+0x49/0x50 [ 2449.671078][T20663] do_syscall_64+0x55/0xb0 [ 2449.676029][T20663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.682475][T20663] [ 2449.682475][T20663] other info that might help us debug this: [ 2449.682475][T20663] [ 2449.692707][T20663] Chain exists of: [ 2449.692707][T20663] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#20 [ 2449.692707][T20663] [ 2449.707257][T20663] Possible unsafe locking scenario: [ 2449.707257][T20663] [ 2449.714712][T20663] CPU0 CPU1 [ 2449.720079][T20663] ---- ---- [ 2449.725469][T20663] lock(&sb->s_type->i_mutex_key#20); [ 2449.730956][T20663] lock(tpg_instances_lock); [ 2449.738164][T20663] lock(&sb->s_type->i_mutex_key#20); [ 2449.746154][T20663] lock(&subsys->su_mutex); [ 2449.750765][T20663] [ 2449.750765][T20663] *** DEADLOCK *** [ 2449.750765][T20663] [ 2449.758914][T20663] 3 locks held by syz.4.3961/20663: [ 2449.764111][T20663] #0: ffff888017db4418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2449.773366][T20663] #1: ffff888148a364d0 (&default_group_class[depth - 1]#7/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 2449.784207][T20663] #2: ffff888020177910 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 2449.794325][T20663] [ 2449.794325][T20663] stack backtrace: [ 2449.800215][T20663] CPU: 1 PID: 20663 Comm: syz.4.3961 Not tainted syzkaller #0 [ 2449.807689][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2449.817771][T20663] Call Trace: [ 2449.821089][T20663] [ 2449.824029][T20663] dump_stack_lvl+0x18c/0x250 [ 2449.828721][T20663] ? load_image+0x420/0x420 [ 2449.833230][T20663] ? show_regs_print_info+0x20/0x20 [ 2449.838467][T20663] ? print_circular_bug+0x12b/0x1a0 [ 2449.843681][T20663] check_noncircular+0x2fc/0x400 [ 2449.848636][T20663] ? print_deadlock_bug+0x5d0/0x5d0 [ 2449.853842][T20663] ? lockdep_lock+0xf5/0x230 [ 2449.858462][T20663] ? _find_first_zero_bit+0xd6/0x100 [ 2449.863797][T20663] __lock_acquire+0x37ef/0x7d80 [ 2449.868664][T20663] ? verify_lock_unused+0x140/0x140 [ 2449.873876][T20663] ? verify_lock_unused+0x140/0x140 [ 2449.879102][T20663] lock_acquire+0x19e/0x420 [ 2449.883650][T20663] ? configfs_rmdir+0x63c/0x980 [ 2449.888551][T20663] ? __might_sleep+0xe0/0xe0 [ 2449.893180][T20663] ? read_lock_is_recursive+0x20/0x20 [ 2449.898586][T20663] __mutex_lock+0x135/0xc80 [ 2449.903100][T20663] ? configfs_rmdir+0x63c/0x980 [ 2449.907964][T20663] ? configfs_rmdir+0x63c/0x980 [ 2449.912822][T20663] ? mutex_lock_nested+0x20/0x20 [ 2449.917777][T20663] ? __lock_acquire+0x7d80/0x7d80 [ 2449.922823][T20663] ? lockref_put_or_lock+0x72/0xb0 [ 2449.927939][T20663] ? dput+0x3b/0x1e0 [ 2449.931846][T20663] ? dput+0x3b/0x1e0 [ 2449.935754][T20663] configfs_rmdir+0x63c/0x980 [ 2449.940468][T20663] vfs_rmdir+0x352/0x4b0 [ 2449.944717][T20663] do_rmdir+0x29f/0x590 [ 2449.948881][T20663] ? __check_object_size+0x4fc/0xa40 [ 2449.954167][T20663] ? d_delete_notify+0x150/0x150 [ 2449.959106][T20663] ? getname_flags+0x20a/0x500 [ 2449.963871][T20663] __x64_sys_rmdir+0x49/0x50 [ 2449.968474][T20663] do_syscall_64+0x55/0xb0 [ 2449.972898][T20663] ? clear_bhb_loop+0x40/0x90 [ 2449.977581][T20663] ? clear_bhb_loop+0x40/0x90 [ 2449.982286][T20663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.988193][T20663] RIP: 0033:0x7fde49b9e159 [ 2449.992638][T20663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2450.012246][T20663] RSP: 002b:00007fde4aaf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 2450.020686][T20663] RAX: ffffffffffffffda RBX: 00007fde49e25fa0 RCX: 00007fde49b9e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2450.028660][T20663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001640 [ 2450.036648][T20663] RBP: 00007fde49c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2450.044685][T20663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2450.052668][T20663] R13: 00007fde49e26038 R14: 00007fde49e25fa0 R15: 00007ffde41c7718 [ 2450.060665][T20663] [ 2450.857057][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2450.902200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2450.949027][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2450.994763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2451.320760][ T12] bond0 (unregistering): Released all slaves [ 2452.393334][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.454609][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.497320][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.562988][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.680682][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.744476][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.796137][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.853361][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.883907][ T12] hsr_slave_0: left promiscuous mode [ 2453.890388][ T12] hsr_slave_1: left promiscuous mode [ 2453.896187][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2453.905448][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2453.913707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2453.921211][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2453.928961][ T12] bridge_slave_1: left allmulticast mode [ 2453.934610][ T12] bridge_slave_1: left promiscuous mode [ 2453.940441][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.953645][ T12] bridge_slave_0: left allmulticast mode [ 2453.960374][ T12] bridge_slave_0: left promiscuous mode [ 2453.966085][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.978770][ T12] hsr_slave_0: left promiscuous mode [ 2453.984540][ T12] hsr_slave_1: left promiscuous mode [ 2453.990588][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2453.998410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2454.006119][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2454.013741][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2454.021611][ T12] bridge_slave_1: left allmulticast mode [ 2454.027257][ T12] bridge_slave_1: left promiscuous mode [ 2454.033178][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2454.041884][ T12] bridge_slave_0: left allmulticast mode [ 2454.047531][ T12] bridge_slave_0: left promiscuous mode [ 2454.053479][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2454.065813][ T12] veth1_macvtap: left promiscuous mode [ 2454.071481][ T12] veth0_macvtap: left promiscuous mode [ 2454.077116][ T12] veth1_vlan: left promiscuous mode [ 2454.082490][ T12] veth0_vlan: left promiscuous mode [ 2454.090471][ T12] veth1_macvtap: left promiscuous mode [ 2454.095986][ T12] veth0_macvtap: left promiscuous mode [ 2454.101652][ T12] veth1_vlan: left promiscuous mode [ 2454.106968][ T12] veth0_vlan: left promiscuous mode [ 2454.431713][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2454.464409][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2454.482236][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2454.499407][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2454.580372][ T12] bond0 (unregistering): Released all slaves [ 2454.750841][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2454.787317][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2454.817011][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2454.855806][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2454.966456][ T12] bond0 (unregistering): Released all slaves