last executing test programs: 5m57.383221477s ago: executing program 2 (id=241): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000001800)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)={0x20, r2, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) 5m56.903629626s ago: executing program 2 (id=242): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setns(0xc9, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) write(r1, 0x0, 0x0) 5m56.075515141s ago: executing program 2 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x1094}, 0x0) 5m55.02913887s ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5m54.708712863s ago: executing program 2 (id=256): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8004) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) inotify_init() 5m54.2551712s ago: executing program 2 (id=261): timer_create(0x7, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x80383, 0x0) 5m53.66992093s ago: executing program 32 (id=261): timer_create(0x7, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x80383, 0x0) 1m10.627203875s ago: executing program 1 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000000500)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000019540), 0x2) r0 = memfd_create(&(0x7f0000019580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) 1m8.305775535s ago: executing program 1 (id=1079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 1m7.302124648s ago: executing program 3 (id=1082): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x4, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x200) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x12) write(r0, &(0x7f00000001c0)='27', 0x2) 1m4.176387591s ago: executing program 3 (id=1086): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8004) listen(0xffffffffffffffff, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) inotify_init() 1m3.713674049s ago: executing program 3 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0xd87f0000, 0x0, 0x24008840}, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="0dc2", 0x2}], 0x1}, 0x820) 1m2.789789925s ago: executing program 1 (id=1094): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) write$eventfd(0xffffffffffffffff, &(0x7f0000003380)=0x80000001, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0xb}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0800000000000000d20000000400000008000000c00b00000100000056eae7f33ae53d68871c9c49bd453039a8e6ac7ba5db64664a11ff40992df6d4bf2cea553f65b207c9ffcaf14cacb31d836ccb409a985e9931ee65fd12ebf191690d039fc2d25c3ce1bce14666be17aee314a1966d523fdafa5cb4460946662bcf3750019073ec2bd40990b73665d7f71872c7986c298734b9cc1348cb5514f92432038d109f2bd50586f6b4b8de95ed6c7118c10a1099c98e8a44eeb802bec50efca089f4747e2ccc560685bc7b3c5702ea3d24661d976d7b89face72fb000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"/28], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) pread64$ublk_bdev(r6, &(0x7f0000000180)=""/7, 0x7, 0x25) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000001240)={0x0, 0xffff, 0x0, 0x0, 0x0}) write$cgroup_pid(r6, &(0x7f0000001300)=r7, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) chdir(&(0x7f00000000c0)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, 0x0) write(r2, &(0x7f0000000960)='1', 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getpid() 1m2.745482449s ago: executing program 3 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700), 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/../file0\x00', 0x0) 1m1.790001857s ago: executing program 3 (id=1099): r0 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX, @ANYRES64=r0], 0x0) 1m0.884312451s ago: executing program 1 (id=1100): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffff9c, 0x0, 0x20480) write(r2, &(0x7f00000003c0)="28229e8804eb28de1ffa7f0df156b6765966e68d0ae4cc6b402214279bb4910ed3b43637528766bd5d8ac23dd5617c0a11becb2c4802aba4a8", 0x39) write(r2, &(0x7f00000000c0)='1\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e3", 0x48) 59.109374805s ago: executing program 3 (id=1102): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x80\x9aV%\x8f\xd8\xd3\xbdQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000bf61000000000000b702000000000000bfa300000000000007030000f8ffffffb704000004000000b7050000010000008500000044000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0xc4) socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000580)={'full'}, 0x2f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffd) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)) ioctl(r4, 0xc048aeca, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r5, &(0x7f0000000680)='nullb1\x00', 0x200) 57.262669696s ago: executing program 33 (id=1102): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x80\x9aV%\x8f\xd8\xd3\xbdQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000bf61000000000000b702000000000000bfa300000000000007030000f8ffffffb704000004000000b7050000010000008500000044000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0xc4) socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000580)={'full'}, 0x2f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffd) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)) ioctl(r4, 0xc048aeca, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r5, &(0x7f0000000680)='nullb1\x00', 0x200) 57.244562917s ago: executing program 1 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x21) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, 0x0, 0x0, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xc0c) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 56.869104756s ago: executing program 1 (id=1109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0xd87f0000, 0x0, 0x24008840}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="0dc2", 0x2}], 0x1}, 0x820) 41.472561176s ago: executing program 34 (id=1109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0xd87f0000, 0x0, 0x24008840}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="0dc2", 0x2}], 0x1}, 0x820) 11.107037023s ago: executing program 4 (id=1190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x20, 0x3, 0xb, 0xfffff034}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000480)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) 9.401577549s ago: executing program 4 (id=1194): syz_usb_connect$uac2(0x0, 0x9b, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) landlock_create_ruleset(&(0x7f0000000180)={0x4000}, 0x18, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 9.349163794s ago: executing program 0 (id=1195): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.348883365s ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 8.969520724s ago: executing program 5 (id=1196): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8004) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(0xffffffffffffffff, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) inotify_init() 8.964776665s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 8.42126811s ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 7.957342668s ago: executing program 5 (id=1197): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x2, 0x20000006) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r2, 0x2}, 0xc) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 7.956943888s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 7.537165921s ago: executing program 0 (id=1198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$binder_nlctrl_getfamily(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}}, 0x0) recvfrom$binder_nlctrl_getfamily(r0, &(0x7f00000001c0)={""/76, 0x0}, 0x80, 0x40, 0x0, 0x0) setsockopt$binder_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=r1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) recvfrom$binder_report(r0, &(0x7f0000000500)={""/44, 0x0}, 0x80, 0x40, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000008c0)={r3, 0x1, 0x64}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100, 0x0, &(0x7f0000000a40)}) 7.525598973s ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 7.108159386s ago: executing program 5 (id=1199): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f", 0x56) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f00000016c0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000001700)={0xf0f01f, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) close(r6) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)}}], 0x2, 0x48000) 7.106692206s ago: executing program 0 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000300), 0xf02, 0xf0, 0x0) 7.100079587s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 5.296140443s ago: executing program 0 (id=1201): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000000500)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000019540), 0x2) r1 = memfd_create(&(0x7f0000019580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) 5.281354035s ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 4.349229781s ago: executing program 5 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$char_usb(r0, &(0x7f0000000240)="620482", 0x3) 4.348143441s ago: executing program 4 (id=1203): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) 4.318178554s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 3.600765808s ago: executing program 0 (id=1204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x20, 0x3, 0xb, 0xfffff034}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) 3.600601658s ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 2.019456502s ago: executing program 5 (id=1205): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x1d}, {0x9, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x7fffffff, 0x0, 0x5c4}, {0x1000, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private2, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x6, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4001, 0x0, 0x9, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x2, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x44, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0x80, 0x6}}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2.003330453s ago: executing program 4 (id=1206): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x0, 0x2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.139860902s ago: executing program 0 (id=1207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000001a00)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x40, 0x4}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.122810694s ago: executing program 4 (id=1208): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8004) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(0xffffffffffffffff, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) inotify_init() 1.093233987s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 481.47665ms ago: executing program 7 (id=1136): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x100000040000006, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/mem_sleep', 0x20001, 0x18f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x9c85, 0x0, 0x0, 0x9, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b0155cd4a5d83cd4a524bd3ffc60c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "e701000080510acb66f77857d70000000200d7ff0000000000001000", [0x7fffffff, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 2.50677ms ago: executing program 4 (id=1209): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x2, 0x20000006) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r3, 0x2}, 0xc) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 429.41µs ago: executing program 5 (id=1210): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000007c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001880)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000018c0)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001900)={0x1, &(0x7f0000001940)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x8, 0x4, 0xbffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) kernel console output (not intermixed with test programs): [ T7083] ? md_notify_reboot+0x330/0x330 [ 318.562134][ T7083] md_probe+0x53/0xc0 [ 318.566148][ T7083] blk_request_module+0x26e/0x290 [ 318.571215][ T7083] blkdev_get_no_open+0x33/0xc0 [ 318.576096][ T7083] blkdev_get_by_dev+0x77/0xa60 [ 318.580975][ T7083] ? __rwlock_init+0x140/0x140 [ 318.585780][ T7083] blkdev_open+0x119/0x2d0 [ 318.590229][ T7083] ? blkdev_mmap+0x1a0/0x1a0 [ 318.594853][ T7083] do_dentry_open+0x7dd/0x10b0 [ 318.599680][ T7083] path_openat+0x2674/0x2f10 [ 318.604342][ T7083] ? kasan_set_track+0x60/0x70 [ 318.609240][ T7083] ? verify_lock_unused+0x140/0x140 [ 318.614473][ T7083] ? do_sys_openat2+0xdd/0x4f0 [ 318.619286][ T7083] ? do_filp_open+0x420/0x420 [ 318.624027][ T7083] do_filp_open+0x1ee/0x420 [ 318.628567][ T7083] ? vfs_tmpfile+0x490/0x490 [ 318.633219][ T7083] ? _raw_spin_unlock+0x24/0x40 [ 318.638102][ T7083] ? alloc_fd+0x590/0x640 [ 318.642489][ T7083] do_sys_openat2+0x14b/0x4f0 [ 318.647212][ T7083] ? do_sys_open+0xe0/0xe0 [ 318.651675][ T7083] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 318.657701][ T7083] ? lock_chain_count+0x20/0x20 [ 318.662598][ T7083] __x64_sys_openat+0x135/0x160 [ 318.667496][ T7083] do_syscall_64+0x4c/0xa0 [ 318.671951][ T7083] ? clear_bhb_loop+0x60/0xb0 [ 318.676667][ T7083] ? clear_bhb_loop+0x60/0xb0 [ 318.681386][ T7083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.687315][ T7083] RIP: 0033:0x7f916959fb19 [ 318.691771][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.711416][ T7083] RSP: 002b:00007f916a4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.719870][ T7083] RAX: ffffffffffffffda RBX: 00007f9169826090 RCX: 00007f916959fb19 [ 318.727874][ T7083] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 318.735907][ T7083] RBP: 00007f9169637b70 R08: 0000000000000000 R09: 0000000000000000 [ 318.743915][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.751999][ T7083] R13: 00007f9169826128 R14: 00007f9169826090 R15: 00007fff1db51b58 [ 318.760025][ T7083] [ 318.764262][ T7083] kobject_add_internal failed for queue (error: -12 parent: md5) [ 319.091908][ T7092] CIFS: Attempting to mount \\127.0.0.1\share [ 319.098145][ T7092] CIFS: VFS: No username specified [ 319.940341][ T7098] FAULT_INJECTION: forcing a failure. [ 319.940341][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 319.953024][ T7098] CPU: 1 PID: 7098 Comm: syz.4.749 Not tainted syzkaller #0 [ 319.960305][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 319.970358][ T7098] Call Trace: [ 319.973661][ T7098] [ 319.976592][ T7098] dump_stack_lvl+0x188/0x24e [ 319.981289][ T7098] ? show_regs_print_info+0x12/0x12 [ 319.986487][ T7098] ? load_image+0x410/0x410 [ 319.991009][ T7098] ? __might_sleep+0xd0/0xd0 [ 319.995625][ T7098] ? __lock_acquire+0x7ea0/0x7ea0 [ 320.000660][ T7098] should_fail_ex+0x390/0x4c0 [ 320.005337][ T7098] should_failslab+0x5/0x20 [ 320.009847][ T7098] slab_pre_alloc_hook+0x59/0x300 [ 320.014864][ T7098] kmem_cache_alloc+0x56/0x2f0 [ 320.019619][ T7098] ? __kernfs_new_node+0xe1/0x7f0 [ 320.024653][ T7098] __kernfs_new_node+0xe1/0x7f0 [ 320.029504][ T7098] ? __lock_acquire+0x7ea0/0x7ea0 [ 320.034532][ T7098] ? kernfs_new_node+0x250/0x250 [ 320.039479][ T7098] kernfs_new_node+0x148/0x250 [ 320.044253][ T7098] __kernfs_create_file+0x47/0x2e0 [ 320.049370][ T7098] sysfs_add_file_mode_ns+0x233/0x2f0 [ 320.054818][ T7098] internal_create_group+0x490/0xce0 [ 320.060121][ T7098] ? sysfs_create_group+0x20/0x20 [ 320.065153][ T7098] ? sysfs_create_dir_ns+0x167/0x290 [ 320.070469][ T7098] ? sysfs_warn_dup+0xa0/0xa0 [ 320.075161][ T7098] sysfs_create_groups+0x55/0x120 [ 320.080206][ T7098] kobject_add_internal+0x65e/0xca0 [ 320.085411][ T7098] kobject_add+0x160/0x230 [ 320.089839][ T7098] ? kobject_init+0x1c0/0x1c0 [ 320.094645][ T7098] blk_register_queue+0x94/0x3d0 [ 320.099623][ T7098] device_add_disk+0x644/0x1020 [ 320.104488][ T7098] md_alloc+0x7f3/0xd00 [ 320.108653][ T7098] ? md_notify_reboot+0x330/0x330 [ 320.113693][ T7098] md_probe+0x53/0xc0 [ 320.117673][ T7098] blk_request_module+0x26e/0x290 [ 320.122721][ T7098] blkdev_get_no_open+0x33/0xc0 [ 320.127569][ T7098] blkdev_get_by_dev+0x77/0xa60 [ 320.132410][ T7098] ? __rwlock_init+0x140/0x140 [ 320.137172][ T7098] blkdev_open+0x119/0x2d0 [ 320.141597][ T7098] ? blkdev_mmap+0x1a0/0x1a0 [ 320.146187][ T7098] do_dentry_open+0x7dd/0x10b0 [ 320.150965][ T7098] path_openat+0x2674/0x2f10 [ 320.155559][ T7098] ? kasan_set_track+0x60/0x70 [ 320.160350][ T7098] ? verify_lock_unused+0x140/0x140 [ 320.165549][ T7098] ? do_sys_openat2+0xdd/0x4f0 [ 320.170352][ T7098] ? do_filp_open+0x420/0x420 [ 320.175036][ T7098] do_filp_open+0x1ee/0x420 [ 320.179564][ T7098] ? vfs_tmpfile+0x490/0x490 [ 320.184178][ T7098] ? _raw_spin_unlock+0x24/0x40 [ 320.189028][ T7098] ? alloc_fd+0x590/0x640 [ 320.193362][ T7098] do_sys_openat2+0x14b/0x4f0 [ 320.198124][ T7098] ? do_sys_open+0xe0/0xe0 [ 320.202551][ T7098] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.208536][ T7098] ? lock_chain_count+0x20/0x20 [ 320.213402][ T7098] __x64_sys_openat+0x135/0x160 [ 320.218256][ T7098] do_syscall_64+0x4c/0xa0 [ 320.222669][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 320.227357][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 320.232057][ T7098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.237948][ T7098] RIP: 0033:0x7fb236f9fb19 [ 320.242367][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.261970][ T7098] RSP: 002b:00007fb237ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.270402][ T7098] RAX: ffffffffffffffda RBX: 00007fb237225fa0 RCX: 00007fb236f9fb19 [ 320.278392][ T7098] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 320.286361][ T7098] RBP: 00007fb237037b70 R08: 0000000000000000 R09: 0000000000000000 [ 320.294349][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.302314][ T7098] R13: 00007fb237226038 R14: 00007fb237225fa0 R15: 00007ffc7da42a28 [ 320.310314][ T7098] [ 320.314574][ T7098] kobject_add_internal failed for queue (error: -12 parent: md4) [ 320.557609][ T7109] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 320.570953][ T4292] Bluetooth: hci3: unexpected event for opcode 0x200f [ 320.617252][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 320.898537][ T7116] hub 1-0:1.0: USB hub found [ 320.904821][ T7116] hub 1-0:1.0: 1 port detected [ 322.436033][ T7105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.450518][ T7105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.457491][ T7105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.463558][ T7105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.470139][ T7105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.867548][ T7137] FAULT_INJECTION: forcing a failure. [ 322.867548][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 322.880551][ T7137] CPU: 1 PID: 7137 Comm: syz.4.759 Not tainted syzkaller #0 [ 322.888050][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.898135][ T7137] Call Trace: [ 322.901445][ T7137] [ 322.904404][ T7137] dump_stack_lvl+0x188/0x24e [ 322.909135][ T7137] ? show_regs_print_info+0x12/0x12 [ 322.914372][ T7137] ? load_image+0x410/0x410 [ 322.919000][ T7137] ? __might_sleep+0xd0/0xd0 [ 322.923620][ T7137] ? __lock_acquire+0x7ea0/0x7ea0 [ 322.928695][ T7137] should_fail_ex+0x390/0x4c0 [ 322.933417][ T7137] should_failslab+0x5/0x20 [ 322.937949][ T7137] slab_pre_alloc_hook+0x59/0x300 [ 322.943017][ T7137] kmem_cache_alloc+0x56/0x2f0 [ 322.947813][ T7137] ? __kernfs_new_node+0xe1/0x7f0 [ 322.952877][ T7137] __kernfs_new_node+0xe1/0x7f0 [ 322.957769][ T7137] ? __lock_acquire+0x7ea0/0x7ea0 [ 322.962829][ T7137] ? kernfs_new_node+0x250/0x250 [ 322.967828][ T7137] kernfs_new_node+0x148/0x250 [ 322.972634][ T7137] __kernfs_create_file+0x47/0x2e0 [ 322.977785][ T7137] sysfs_add_file_mode_ns+0x233/0x2f0 [ 322.983205][ T7137] internal_create_group+0x490/0xce0 [ 322.988548][ T7137] ? sysfs_create_group+0x20/0x20 [ 322.993610][ T7137] ? sysfs_create_dir_ns+0x167/0x290 [ 322.998939][ T7137] ? sysfs_warn_dup+0xa0/0xa0 [ 323.003668][ T7137] sysfs_create_groups+0x55/0x120 [ 323.008743][ T7137] kobject_add_internal+0x65e/0xca0 [ 323.013988][ T7137] kobject_add+0x160/0x230 [ 323.018449][ T7137] ? kobject_init+0x1c0/0x1c0 [ 323.023214][ T7137] blk_register_queue+0x94/0x3d0 [ 323.028203][ T7137] device_add_disk+0x644/0x1020 [ 323.033109][ T7137] md_alloc+0x7f3/0xd00 [ 323.037306][ T7137] ? md_notify_reboot+0x330/0x330 [ 323.042378][ T7137] md_probe+0x53/0xc0 [ 323.046395][ T7137] blk_request_module+0x26e/0x290 [ 323.051462][ T7137] blkdev_get_no_open+0x33/0xc0 [ 323.056350][ T7137] blkdev_get_by_dev+0x77/0xa60 [ 323.061234][ T7137] ? __rwlock_init+0x140/0x140 [ 323.066037][ T7137] blkdev_open+0x119/0x2d0 [ 323.070507][ T7137] ? blkdev_mmap+0x1a0/0x1a0 [ 323.075126][ T7137] do_dentry_open+0x7dd/0x10b0 [ 323.079947][ T7137] path_openat+0x2674/0x2f10 [ 323.084596][ T7137] ? kasan_set_track+0x60/0x70 [ 323.089405][ T7137] ? verify_lock_unused+0x140/0x140 [ 323.094643][ T7137] ? do_sys_openat2+0xdd/0x4f0 [ 323.099454][ T7137] ? do_filp_open+0x420/0x420 [ 323.104195][ T7137] do_filp_open+0x1ee/0x420 [ 323.108743][ T7137] ? vfs_tmpfile+0x490/0x490 [ 323.113398][ T7137] ? _raw_spin_unlock+0x24/0x40 [ 323.118286][ T7137] ? alloc_fd+0x590/0x640 [ 323.122682][ T7137] do_sys_openat2+0x14b/0x4f0 [ 323.127420][ T7137] ? do_sys_open+0xe0/0xe0 [ 323.131895][ T7137] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.137929][ T7137] ? lock_chain_count+0x20/0x20 [ 323.142837][ T7137] __x64_sys_openat+0x135/0x160 [ 323.147741][ T7137] do_syscall_64+0x4c/0xa0 [ 323.152203][ T7137] ? clear_bhb_loop+0x60/0xb0 [ 323.156919][ T7137] ? clear_bhb_loop+0x60/0xb0 [ 323.161640][ T7137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.167571][ T7137] RIP: 0033:0x7fb236f9fb19 [ 323.172015][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.191660][ T7137] RSP: 002b:00007fb237e9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.200116][ T7137] RAX: ffffffffffffffda RBX: 00007fb237226090 RCX: 00007fb236f9fb19 [ 323.208116][ T7137] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 323.216117][ T7137] RBP: 00007fb237037b70 R08: 0000000000000000 R09: 0000000000000000 [ 323.224118][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.232120][ T7137] R13: 00007fb237226128 R14: 00007fb237226090 R15: 00007ffc7da42a28 [ 323.240147][ T7137] [ 323.243358][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.250991][ T7137] kobject_add_internal failed for queue (error: -12 parent: md4) [ 323.849931][ T7143] CIFS: Attempting to mount \\127.0.0.1\share [ 323.856469][ T7143] CIFS: VFS: No username specified [ 324.485271][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.485549][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 324.491316][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.491349][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.806610][ T7153] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 324.901481][ T7155] hub 1-0:1.0: USB hub found [ 324.906920][ T7155] hub 1-0:1.0: 1 port detected [ 325.726920][ T7132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.735429][ T7132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.756803][ T7132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.762924][ T7132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.773894][ T7132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.812530][ T4293] Bluetooth: hci1: unexpected event for opcode 0x200f [ 325.844471][ T7160] FAULT_INJECTION: forcing a failure. [ 325.844471][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 325.865217][ T7160] CPU: 0 PID: 7160 Comm: syz.5.768 Not tainted syzkaller #0 [ 325.872589][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 325.875115][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.882660][ T7160] Call Trace: [ 325.882685][ T7160] [ 325.882697][ T7160] dump_stack_lvl+0x188/0x24e [ 325.882736][ T7160] ? show_regs_print_info+0x12/0x12 [ 325.882764][ T7160] ? load_image+0x410/0x410 [ 325.909475][ T7160] ? kasan_set_track+0x60/0x70 [ 325.914249][ T7160] ? __kasan_slab_alloc+0x6b/0x80 [ 325.919301][ T7160] ? slab_post_alloc_hook+0x4b/0x490 [ 325.924610][ T7160] ? kmem_cache_alloc+0x18b/0x2f0 [ 325.929632][ T7160] ? dst_alloc+0x101/0x160 [ 325.934067][ T7160] ? ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 325.940311][ T7160] ? ip_route_output_key_hash+0x1ef/0x330 [ 325.946026][ T7160] should_fail_ex+0x390/0x4c0 [ 325.950709][ T7160] should_failslab+0x5/0x20 [ 325.955302][ T7160] slab_pre_alloc_hook+0x59/0x300 [ 325.960325][ T7160] ? ref_tracker_alloc+0x14f/0x490 [ 325.965427][ T7160] __kmem_cache_alloc_node+0x4f/0x270 [ 325.970787][ T7160] ? ref_tracker_alloc+0x14f/0x490 [ 325.975913][ T7160] kmalloc_trace+0x26/0xe0 [ 325.980325][ T7160] ref_tracker_alloc+0x14f/0x490 [ 325.985277][ T7160] ? ref_tracker_dir_print+0x150/0x150 [ 325.990747][ T7160] ? ip_check_mc_rcu+0x61f/0x660 [ 325.995679][ T7160] ? __kasan_slab_alloc+0x6b/0x80 [ 326.000771][ T7160] ? slab_post_alloc_hook+0x67/0x490 [ 326.006085][ T7160] ? slab_pre_alloc_hook+0x59/0x300 [ 326.011296][ T7160] ? rcu_is_watching+0x11/0xa0 [ 326.016071][ T7160] dst_init+0xb1/0x400 [ 326.020140][ T7160] dst_alloc+0x12a/0x160 [ 326.024396][ T7160] ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 326.030467][ T7160] ? ip_route_output_key_hash+0x139/0x330 [ 326.036203][ T7160] ip_route_output_key_hash+0x1ef/0x330 [ 326.041759][ T7160] ? ip_route_input_rcu+0x3110/0x3110 [ 326.047125][ T7160] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.052151][ T7160] ip_route_output_flow+0x26/0x150 [ 326.057266][ T7160] ? security_sk_classify_flow+0x77/0x90 [ 326.062897][ T7160] udp_sendmsg+0x1637/0x23d0 [ 326.067483][ T7160] ? verify_lock_unused+0x140/0x140 [ 326.072685][ T7160] ? ip_skb_dst_mtu+0xb60/0xb60 [ 326.077540][ T7160] ? udp_cmsg_send+0x350/0x350 [ 326.082305][ T7160] ? mark_lock+0x94/0x320 [ 326.086637][ T7160] ? __lock_acquire+0x1359/0x7ea0 [ 326.091669][ T7160] ? aa_label_sk_perm+0x501/0x6b0 [ 326.096698][ T7160] udpv6_sendmsg+0x7df/0x22c0 [ 326.101377][ T7160] ? udp_v6_early_demux+0xf00/0xf00 [ 326.106582][ T7160] ? aa_af_perm+0x340/0x340 [ 326.111090][ T7160] ? sock_rps_record_flow+0x19/0x3f0 [ 326.116397][ T7160] ? inet_send_prepare+0x57/0x250 [ 326.121472][ T7160] ? inet6_sendmsg+0x5b/0xd0 [ 326.126113][ T7160] sock_write_iter+0x2d5/0x3e0 [ 326.130883][ T7160] ? sock_read_iter+0x3a0/0x3a0 [ 326.135745][ T7160] ? common_file_perm+0x171/0x1c0 [ 326.140770][ T7160] vfs_write+0x482/0x9a0 [ 326.145009][ T7160] ? file_end_write+0x250/0x250 [ 326.149854][ T7160] ? __fget_files+0x3fc/0x460 [ 326.154532][ T7160] ? __fdget_pos+0x1d4/0x360 [ 326.159125][ T7160] ? ksys_write+0x70/0x260 [ 326.163533][ T7160] ksys_write+0x14d/0x260 [ 326.167863][ T7160] ? __ia32_sys_read+0x80/0x80 [ 326.172625][ T7160] ? lockdep_hardirqs_on+0x94/0x140 [ 326.177827][ T7160] do_syscall_64+0x4c/0xa0 [ 326.182242][ T7160] ? clear_bhb_loop+0x60/0xb0 [ 326.186933][ T7160] ? clear_bhb_loop+0x60/0xb0 [ 326.191609][ T7160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.197506][ T7160] RIP: 0033:0x7f916959fb19 [ 326.201936][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.221540][ T7160] RSP: 002b:00007f916a516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.229952][ T7160] RAX: ffffffffffffffda RBX: 00007f9169825fa0 RCX: 00007f916959fb19 [ 326.238020][ T7160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 326.245983][ T7160] RBP: 00007f9169637b70 R08: 0000000000000000 R09: 0000000000000000 [ 326.253946][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.261909][ T7160] R13: 00007f9169826038 R14: 00007f9169825fa0 R15: 00007fff1db51b58 [ 326.269887][ T7160] [ 326.274722][ T7160] memory allocation failure, unreliable refcount tracker. [ 326.376437][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 326.728822][ T7174] FAULT_INJECTION: forcing a failure. [ 326.728822][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 326.741811][ T7174] CPU: 0 PID: 7174 Comm: syz.4.773 Not tainted syzkaller #0 [ 326.749155][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.759240][ T7174] Call Trace: [ 326.762548][ T7174] [ 326.765513][ T7174] dump_stack_lvl+0x188/0x24e [ 326.770252][ T7174] ? show_regs_print_info+0x12/0x12 [ 326.775496][ T7174] ? load_image+0x410/0x410 [ 326.780043][ T7174] ? __might_sleep+0xd0/0xd0 [ 326.784674][ T7174] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.789748][ T7174] should_fail_ex+0x390/0x4c0 [ 326.794467][ T7174] should_failslab+0x5/0x20 [ 326.799003][ T7174] slab_pre_alloc_hook+0x59/0x300 [ 326.804092][ T7174] kmem_cache_alloc+0x56/0x2f0 [ 326.808904][ T7174] ? __kernfs_new_node+0xe1/0x7f0 [ 326.813995][ T7174] __kernfs_new_node+0xe1/0x7f0 [ 326.818890][ T7174] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.823983][ T7174] ? kernfs_new_node+0x250/0x250 [ 326.828993][ T7174] kernfs_new_node+0x148/0x250 [ 326.833801][ T7174] __kernfs_create_file+0x47/0x2e0 [ 326.838955][ T7174] sysfs_add_file_mode_ns+0x233/0x2f0 [ 326.844382][ T7174] internal_create_group+0x490/0xce0 [ 326.849728][ T7174] ? sysfs_create_group+0x20/0x20 [ 326.854789][ T7174] ? sysfs_create_dir_ns+0x167/0x290 [ 326.860121][ T7174] ? sysfs_warn_dup+0xa0/0xa0 [ 326.864851][ T7174] sysfs_create_groups+0x55/0x120 [ 326.869922][ T7174] kobject_add_internal+0x65e/0xca0 [ 326.875174][ T7174] kobject_add+0x160/0x230 [ 326.879630][ T7174] ? kobject_init+0x1c0/0x1c0 [ 326.884357][ T7174] blk_register_queue+0x94/0x3d0 [ 326.889346][ T7174] device_add_disk+0x644/0x1020 [ 326.894254][ T7174] md_alloc+0x7f3/0xd00 [ 326.898454][ T7174] ? md_notify_reboot+0x330/0x330 [ 326.903514][ T7174] md_probe+0x53/0xc0 [ 326.907534][ T7174] blk_request_module+0x26e/0x290 [ 326.912600][ T7174] blkdev_get_no_open+0x33/0xc0 [ 326.917485][ T7174] blkdev_get_by_dev+0x77/0xa60 [ 326.922371][ T7174] ? __rwlock_init+0x140/0x140 [ 326.927181][ T7174] blkdev_open+0x119/0x2d0 [ 326.931633][ T7174] ? blkdev_mmap+0x1a0/0x1a0 [ 326.936257][ T7174] do_dentry_open+0x7dd/0x10b0 [ 326.941082][ T7174] path_openat+0x2674/0x2f10 [ 326.945740][ T7174] ? __schedule+0x1091/0x4140 [ 326.950473][ T7174] ? do_filp_open+0x420/0x420 [ 326.955210][ T7174] do_filp_open+0x1ee/0x420 [ 326.959753][ T7174] ? vfs_tmpfile+0x490/0x490 [ 326.964411][ T7174] ? _raw_spin_unlock+0x24/0x40 [ 326.969297][ T7174] ? alloc_fd+0x590/0x640 [ 326.973684][ T7174] do_sys_openat2+0x14b/0x4f0 [ 326.978407][ T7174] ? do_sys_open+0xe0/0xe0 [ 326.982862][ T7174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.988888][ T7174] ? lock_chain_count+0x20/0x20 [ 326.993790][ T7174] __x64_sys_openat+0x135/0x160 [ 326.998689][ T7174] do_syscall_64+0x4c/0xa0 [ 327.003146][ T7174] ? clear_bhb_loop+0x60/0xb0 [ 327.007863][ T7174] ? clear_bhb_loop+0x60/0xb0 [ 327.012583][ T7174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.018518][ T7174] RIP: 0033:0x7fb236f9fb19 [ 327.022976][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.042623][ T7174] RSP: 002b:00007fb237e9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.051074][ T7174] RAX: ffffffffffffffda RBX: 00007fb237226090 RCX: 00007fb236f9fb19 [ 327.059087][ T7174] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 327.067090][ T7174] RBP: 00007fb237037b70 R08: 0000000000000000 R09: 0000000000000000 [ 327.075089][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.083109][ T7174] R13: 00007fb237226128 R14: 00007fb237226090 R15: 00007ffc7da42a28 [ 327.091140][ T7174] [ 327.099892][ T7174] kobject_add_internal failed for queue (error: -12 parent: md4) [ 327.677398][ T7179] CIFS: Attempting to mount \\127.0.0.1\share [ 327.683524][ T7179] CIFS: VFS: No username specified [ 327.765273][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.771356][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.845199][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.074044][ T7185] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 329.721275][ T7194] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 329.834821][ T7195] hub 1-0:1.0: USB hub found [ 329.840222][ T7195] hub 1-0:1.0: 1 port detected [ 330.720854][ T7200] FAULT_INJECTION: forcing a failure. [ 330.720854][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 330.784072][ T7200] CPU: 0 PID: 7200 Comm: syz.5.783 Not tainted syzkaller #0 [ 330.791423][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 330.801535][ T7200] Call Trace: [ 330.804829][ T7200] [ 330.807764][ T7200] dump_stack_lvl+0x188/0x24e [ 330.812445][ T7200] ? show_regs_print_info+0x12/0x12 [ 330.817642][ T7200] ? load_image+0x410/0x410 [ 330.822150][ T7200] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.828140][ T7200] should_fail_ex+0x390/0x4c0 [ 330.832817][ T7200] should_failslab+0x5/0x20 [ 330.837314][ T7200] slab_pre_alloc_hook+0x59/0x300 [ 330.842332][ T7200] ? __local_bh_enable_ip+0x136/0x1c0 [ 330.847724][ T7200] kmem_cache_alloc+0x56/0x2f0 [ 330.852482][ T7200] ? dst_alloc+0x101/0x160 [ 330.856900][ T7200] dst_alloc+0x101/0x160 [ 330.861143][ T7200] ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 330.867209][ T7200] ? ip_route_output_key_hash+0x139/0x330 [ 330.872919][ T7200] ip_route_output_key_hash+0x1ef/0x330 [ 330.878459][ T7200] ? ip_route_input_rcu+0x3110/0x3110 [ 330.883826][ T7200] ? __lock_acquire+0x7ea0/0x7ea0 [ 330.888854][ T7200] ? __lock_acquire+0x142d/0x7ea0 [ 330.893884][ T7200] ip_route_output_flow+0x26/0x150 [ 330.898995][ T7200] ? security_sk_classify_flow+0x77/0x90 [ 330.904628][ T7200] udp_sendmsg+0x1637/0x23d0 [ 330.909223][ T7200] ? verify_lock_unused+0x110/0x140 [ 330.914418][ T7200] ? ip_skb_dst_mtu+0xb60/0xb60 [ 330.919267][ T7200] ? udp_cmsg_send+0x350/0x350 [ 330.924032][ T7200] ? mark_lock+0x94/0x320 [ 330.928363][ T7200] ? __lock_acquire+0x1359/0x7ea0 [ 330.933402][ T7200] ? aa_label_sk_perm+0x501/0x6b0 [ 330.938427][ T7200] ? lock_chain_count+0x20/0x20 [ 330.943280][ T7200] udpv6_sendmsg+0x7df/0x22c0 [ 330.947969][ T7200] ? udp_v6_early_demux+0xf00/0xf00 [ 330.953184][ T7200] ? aa_af_perm+0x340/0x340 [ 330.957690][ T7200] ? sock_rps_record_flow+0x19/0x3f0 [ 330.962979][ T7200] ? inet_send_prepare+0x57/0x250 [ 330.968006][ T7200] ? inet6_sendmsg+0x5b/0xd0 [ 330.972593][ T7200] sock_write_iter+0x2d5/0x3e0 [ 330.977359][ T7200] ? sock_read_iter+0x3a0/0x3a0 [ 330.982222][ T7200] ? common_file_perm+0x171/0x1c0 [ 330.987271][ T7200] vfs_write+0x482/0x9a0 [ 330.991556][ T7200] ? file_end_write+0x250/0x250 [ 330.996433][ T7200] ? __fget_files+0x3fc/0x460 [ 331.001124][ T7200] ? __fdget_pos+0x1d4/0x360 [ 331.005711][ T7200] ? ksys_write+0x70/0x260 [ 331.010125][ T7200] ksys_write+0x14d/0x260 [ 331.014459][ T7200] ? __ia32_sys_read+0x80/0x80 [ 331.019236][ T7200] ? lockdep_hardirqs_on+0x94/0x140 [ 331.024439][ T7200] do_syscall_64+0x4c/0xa0 [ 331.028862][ T7200] ? clear_bhb_loop+0x60/0xb0 [ 331.033538][ T7200] ? clear_bhb_loop+0x60/0xb0 [ 331.038212][ T7200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.044112][ T7200] RIP: 0033:0x7f916959fb19 [ 331.048524][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.068153][ T7200] RSP: 002b:00007f916a516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.076565][ T7200] RAX: ffffffffffffffda RBX: 00007f9169825fa0 RCX: 00007f916959fb19 [ 331.084544][ T7200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 331.092516][ T7200] RBP: 00007f9169637b70 R08: 0000000000000000 R09: 0000000000000000 [ 331.100483][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.108448][ T7200] R13: 00007f9169826038 R14: 00007f9169825fa0 R15: 00007fff1db51b58 [ 331.116427][ T7200] [ 331.490395][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 331.510757][ T4292] Bluetooth: hci3: unexpected event for opcode 0x200f [ 332.805329][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.805736][ T7197] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.629728][ T7197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.636988][ T7197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.643482][ T7197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.650815][ T7197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.853731][ T7222] CIFS: Attempting to mount \\127.0.0.1\share [ 333.860011][ T7222] CIFS: VFS: No username specified [ 334.885728][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 334.930765][ T7247] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 335.685244][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.691506][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.697649][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.292021][ T4293] Bluetooth: hci0: unexpected event for opcode 0x200f [ 337.465803][ T7264] CIFS: Attempting to mount \\127.0.0.1\share [ 337.471967][ T7264] CIFS: VFS: No username specified [ 338.552045][ T7275] FAULT_INJECTION: forcing a failure. [ 338.552045][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 338.564926][ T7275] CPU: 1 PID: 7275 Comm: syz.0.805 Not tainted syzkaller #0 [ 338.572248][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 338.582339][ T7275] Call Trace: [ 338.585654][ T7275] [ 338.588620][ T7275] dump_stack_lvl+0x188/0x24e [ 338.593355][ T7275] ? show_regs_print_info+0x12/0x12 [ 338.598593][ T7275] ? load_image+0x410/0x410 [ 338.603225][ T7275] ? __might_sleep+0xd0/0xd0 [ 338.607852][ T7275] ? __lock_acquire+0x7ea0/0x7ea0 [ 338.612927][ T7275] should_fail_ex+0x390/0x4c0 [ 338.617652][ T7275] should_failslab+0x5/0x20 [ 338.622189][ T7275] slab_pre_alloc_hook+0x59/0x300 [ 338.627255][ T7275] kmem_cache_alloc+0x56/0x2f0 [ 338.632054][ T7275] ? __kernfs_new_node+0xe1/0x7f0 [ 338.637123][ T7275] __kernfs_new_node+0xe1/0x7f0 [ 338.642035][ T7275] ? __lock_acquire+0x7ea0/0x7ea0 [ 338.647130][ T7275] ? kernfs_new_node+0x250/0x250 [ 338.652140][ T7275] kernfs_new_node+0x148/0x250 [ 338.656965][ T7275] __kernfs_create_file+0x47/0x2e0 [ 338.662144][ T7275] sysfs_add_file_mode_ns+0x233/0x2f0 [ 338.667577][ T7275] internal_create_group+0x490/0xce0 [ 338.672925][ T7275] ? sysfs_create_group+0x20/0x20 [ 338.677988][ T7275] ? sysfs_create_dir_ns+0x167/0x290 [ 338.683318][ T7275] ? sysfs_warn_dup+0xa0/0xa0 [ 338.688040][ T7275] sysfs_create_groups+0x55/0x120 [ 338.693110][ T7275] kobject_add_internal+0x65e/0xca0 [ 338.698355][ T7275] kobject_add+0x160/0x230 [ 338.702819][ T7275] ? kobject_init+0x1c0/0x1c0 [ 338.707549][ T7275] blk_register_queue+0x94/0x3d0 [ 338.712540][ T7275] device_add_disk+0x644/0x1020 [ 338.717442][ T7275] md_alloc+0x7f3/0xd00 [ 338.721644][ T7275] ? md_notify_reboot+0x330/0x330 [ 338.726705][ T7275] md_probe+0x53/0xc0 [ 338.730720][ T7275] blk_request_module+0x26e/0x290 [ 338.735800][ T7275] blkdev_get_no_open+0x33/0xc0 [ 338.740685][ T7275] blkdev_get_by_dev+0x77/0xa60 [ 338.745565][ T7275] ? __rwlock_init+0x140/0x140 [ 338.750372][ T7275] blkdev_open+0x119/0x2d0 [ 338.754817][ T7275] ? blkdev_mmap+0x1a0/0x1a0 [ 338.759440][ T7275] do_dentry_open+0x7dd/0x10b0 [ 338.764262][ T7275] path_openat+0x2674/0x2f10 [ 338.768911][ T7275] ? kasan_set_track+0x60/0x70 [ 338.773720][ T7275] ? verify_lock_unused+0x140/0x140 [ 338.778963][ T7275] ? do_sys_openat2+0xdd/0x4f0 [ 338.783779][ T7275] ? do_filp_open+0x420/0x420 [ 338.788516][ T7275] do_filp_open+0x1ee/0x420 [ 338.793060][ T7275] ? vfs_tmpfile+0x490/0x490 [ 338.797713][ T7275] ? _raw_spin_unlock+0x24/0x40 [ 338.802608][ T7275] ? alloc_fd+0x590/0x640 [ 338.807001][ T7275] do_sys_openat2+0x14b/0x4f0 [ 338.811723][ T7275] ? do_sys_open+0xe0/0xe0 [ 338.816184][ T7275] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 338.822208][ T7275] ? lock_chain_count+0x20/0x20 [ 338.827104][ T7275] __x64_sys_openat+0x135/0x160 [ 338.832002][ T7275] do_syscall_64+0x4c/0xa0 [ 338.836474][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 338.841217][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 338.845951][ T7275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.851907][ T7275] RIP: 0033:0x7fbeae39fb19 [ 338.856359][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.876003][ T7275] RSP: 002b:00007fbeaf1ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.884452][ T7275] RAX: ffffffffffffffda RBX: 00007fbeae626090 RCX: 00007fbeae39fb19 [ 338.892451][ T7275] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 338.900453][ T7275] RBP: 00007fbeae437b70 R08: 0000000000000000 R09: 0000000000000000 [ 338.908452][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.916455][ T7275] R13: 00007fbeae626128 R14: 00007fbeae626090 R15: 00007fff424241c8 [ 338.924478][ T7275] [ 338.930788][ T7275] kobject_add_internal failed for queue (error: -12 parent: md0) [ 339.183655][ T7261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.195730][ T7261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.208566][ T7261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.214757][ T7261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.216441][ T7278] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 339.224855][ T7261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.329554][ T7280] hub 1-0:1.0: USB hub found [ 339.334910][ T7280] hub 1-0:1.0: 1 port detected [ 340.507666][ T7283] siw: device registration error -23 [ 340.814368][ T7297] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 341.205436][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.285301][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.285357][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.298566][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 343.627786][ T7305] CIFS: Attempting to mount \\127.0.0.1\share [ 343.633939][ T7305] CIFS: VFS: No username specified [ 343.751382][ T7310] FAULT_INJECTION: forcing a failure. [ 343.751382][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 343.764276][ T7310] CPU: 1 PID: 7310 Comm: syz.1.817 Not tainted syzkaller #0 [ 343.771604][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 343.781692][ T7310] Call Trace: [ 343.784998][ T7310] [ 343.787960][ T7310] dump_stack_lvl+0x188/0x24e [ 343.792689][ T7310] ? show_regs_print_info+0x12/0x12 [ 343.797934][ T7310] ? load_image+0x410/0x410 [ 343.802477][ T7310] ? __might_sleep+0xd0/0xd0 [ 343.807100][ T7310] ? __lock_acquire+0x7ea0/0x7ea0 [ 343.812167][ T7310] should_fail_ex+0x390/0x4c0 [ 343.816895][ T7310] should_failslab+0x5/0x20 [ 343.821429][ T7310] slab_pre_alloc_hook+0x59/0x300 [ 343.826500][ T7310] kmem_cache_alloc+0x56/0x2f0 [ 343.831300][ T7310] ? __kernfs_new_node+0xe1/0x7f0 [ 343.836365][ T7310] __kernfs_new_node+0xe1/0x7f0 [ 343.841268][ T7310] ? __lock_acquire+0x7ea0/0x7ea0 [ 343.846338][ T7310] ? kernfs_new_node+0x250/0x250 [ 343.851354][ T7310] kernfs_new_node+0x148/0x250 [ 343.856161][ T7310] __kernfs_create_file+0x47/0x2e0 [ 343.861313][ T7310] sysfs_add_file_mode_ns+0x233/0x2f0 [ 343.866737][ T7310] internal_create_group+0x490/0xce0 [ 343.872073][ T7310] ? sysfs_create_group+0x20/0x20 [ 343.877220][ T7310] ? sysfs_create_dir_ns+0x167/0x290 [ 343.882556][ T7310] ? sysfs_warn_dup+0xa0/0xa0 [ 343.887286][ T7310] sysfs_create_groups+0x55/0x120 [ 343.892354][ T7310] kobject_add_internal+0x65e/0xca0 [ 343.897593][ T7310] kobject_add+0x160/0x230 [ 343.902053][ T7310] ? kobject_init+0x1c0/0x1c0 [ 343.906780][ T7310] blk_register_queue+0x94/0x3d0 [ 343.911764][ T7310] device_add_disk+0x644/0x1020 [ 343.916668][ T7310] md_alloc+0x7f3/0xd00 [ 343.920864][ T7310] ? md_notify_reboot+0x330/0x330 [ 343.925925][ T7310] md_probe+0x53/0xc0 [ 343.929955][ T7310] blk_request_module+0x26e/0x290 [ 343.935021][ T7310] blkdev_get_no_open+0x33/0xc0 [ 343.939899][ T7310] blkdev_get_by_dev+0x77/0xa60 [ 343.944778][ T7310] ? __rwlock_init+0x140/0x140 [ 343.949583][ T7310] blkdev_open+0x119/0x2d0 [ 343.954029][ T7310] ? blkdev_mmap+0x1a0/0x1a0 [ 343.958650][ T7310] do_dentry_open+0x7dd/0x10b0 [ 343.963472][ T7310] path_openat+0x2674/0x2f10 [ 343.968118][ T7310] ? kasan_set_track+0x60/0x70 [ 343.972923][ T7310] ? verify_lock_unused+0x140/0x140 [ 343.978160][ T7310] ? do_sys_openat2+0xdd/0x4f0 [ 343.982969][ T7310] ? do_filp_open+0x420/0x420 [ 343.987703][ T7310] do_filp_open+0x1ee/0x420 [ 343.992244][ T7310] ? vfs_tmpfile+0x490/0x490 [ 343.996912][ T7310] ? _raw_spin_unlock+0x24/0x40 [ 344.001799][ T7310] ? alloc_fd+0x590/0x640 [ 344.006177][ T7310] do_sys_openat2+0x14b/0x4f0 [ 344.010900][ T7310] ? do_sys_open+0xe0/0xe0 [ 344.015354][ T7310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.021374][ T7310] ? lock_chain_count+0x20/0x20 [ 344.026277][ T7310] __x64_sys_openat+0x135/0x160 [ 344.031176][ T7310] do_syscall_64+0x4c/0xa0 [ 344.035638][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 344.040352][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 344.045072][ T7310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.051007][ T7310] RIP: 0033:0x7f240ad9fb19 [ 344.055455][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.075092][ T7310] RSP: 002b:00007f240bcb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.083544][ T7310] RAX: ffffffffffffffda RBX: 00007f240b026090 RCX: 00007f240ad9fb19 [ 344.091554][ T7310] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 344.099556][ T7310] RBP: 00007f240ae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 344.107598][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.115599][ T7310] R13: 00007f240b026128 R14: 00007f240b026090 R15: 00007ffe9b5d7cd8 [ 344.123625][ T7310] [ 344.129103][ T7310] kobject_add_internal failed for queue (error: -12 parent: md1) [ 344.727930][ T4292] Bluetooth: hci2: unexpected event for opcode 0x200f [ 344.825144][ T7322] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 344.938784][ T7328] hub 1-0:1.0: USB hub found [ 344.943973][ T7328] hub 1-0:1.0: 1 port detected [ 346.780769][ T7314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.795781][ T7314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.830241][ T7314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.850776][ T7314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.869727][ T7314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.885287][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.993144][ T7348] CIFS: Attempting to mount \\127.0.0.1\share [ 346.999846][ T7348] CIFS: VFS: No username specified [ 348.654019][ T7358] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 348.805185][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.885207][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 348.891293][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.897408][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 350.618459][ T7364] FAULT_INJECTION: forcing a failure. [ 350.618459][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 350.663026][ T7364] CPU: 1 PID: 7364 Comm: syz.4.833 Not tainted syzkaller #0 [ 350.670397][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 350.680502][ T7364] Call Trace: [ 350.683816][ T7364] [ 350.686783][ T7364] dump_stack_lvl+0x188/0x24e [ 350.691528][ T7364] ? show_regs_print_info+0x12/0x12 [ 350.696789][ T7364] ? load_image+0x410/0x410 [ 350.701348][ T7364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 350.707389][ T7364] should_fail_ex+0x390/0x4c0 [ 350.712110][ T7364] should_failslab+0x5/0x20 [ 350.716613][ T7364] slab_pre_alloc_hook+0x59/0x300 [ 350.721640][ T7364] ? __local_bh_enable_ip+0x136/0x1c0 [ 350.727032][ T7364] kmem_cache_alloc+0x56/0x2f0 [ 350.731834][ T7364] ? dst_alloc+0x101/0x160 [ 350.736306][ T7364] dst_alloc+0x101/0x160 [ 350.740599][ T7364] ip_route_output_key_hash_rcu+0x14e4/0x2410 [ 350.746714][ T7364] ? ip_route_output_key_hash+0x139/0x330 [ 350.752472][ T7364] ip_route_output_key_hash+0x1ef/0x330 [ 350.758058][ T7364] ? ip_route_input_rcu+0x3110/0x3110 [ 350.763479][ T7364] ? __lock_acquire+0x7ea0/0x7ea0 [ 350.768557][ T7364] ? ip_rcv_core+0xb90/0xb90 [ 350.773199][ T7364] ? memset+0x1e/0x40 [ 350.777231][ T7364] ip_route_output_flow+0x26/0x150 [ 350.782395][ T7364] ? security_sk_classify_flow+0x77/0x90 [ 350.788072][ T7364] udp_sendmsg+0x1637/0x23d0 [ 350.792707][ T7364] ? ip_skb_dst_mtu+0xb60/0xb60 [ 350.797598][ T7364] ? udp_cmsg_send+0x350/0x350 [ 350.802417][ T7364] ? mark_lock+0x94/0x320 [ 350.806890][ T7364] ? __lock_acquire+0x1359/0x7ea0 [ 350.811993][ T7364] ? aa_label_sk_perm+0x501/0x6b0 [ 350.815162][ T5888] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.817093][ T7364] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 350.830940][ T7364] udpv6_sendmsg+0x7df/0x22c0 [ 350.835685][ T7364] ? udp_v6_early_demux+0xf00/0xf00 [ 350.840959][ T7364] ? aa_af_perm+0x340/0x340 [ 350.845505][ T7364] ? sock_rps_record_flow+0x19/0x3f0 [ 350.850818][ T7364] ? inet_send_prepare+0x57/0x250 [ 350.855897][ T7364] ? inet6_sendmsg+0x5b/0xd0 [ 350.860509][ T7364] sock_write_iter+0x2d5/0x3e0 [ 350.865301][ T7364] ? sock_read_iter+0x3a0/0x3a0 [ 350.870179][ T7364] ? common_file_perm+0x171/0x1c0 [ 350.875234][ T7364] vfs_write+0x482/0x9a0 [ 350.879489][ T7364] ? file_end_write+0x250/0x250 [ 350.884358][ T7364] ? __fget_files+0x3fc/0x460 [ 350.889055][ T7364] ? __fdget_pos+0x1d4/0x360 [ 350.893656][ T7364] ? ksys_write+0x70/0x260 [ 350.898082][ T7364] ksys_write+0x14d/0x260 [ 350.902420][ T7364] ? __ia32_sys_read+0x80/0x80 [ 350.907196][ T7364] ? lockdep_hardirqs_on+0x94/0x140 [ 350.912414][ T7364] do_syscall_64+0x4c/0xa0 [ 350.916842][ T7364] ? clear_bhb_loop+0x60/0xb0 [ 350.921553][ T7364] ? clear_bhb_loop+0x60/0xb0 [ 350.926246][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.932154][ T7364] RIP: 0033:0x7fb236f9fb19 [ 350.936585][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.956216][ T7364] RSP: 002b:00007fb237ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.964642][ T7364] RAX: ffffffffffffffda RBX: 00007fb237225fa0 RCX: 00007fb236f9fb19 [ 350.972625][ T7364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 350.980604][ T7364] RBP: 00007fb237037b70 R08: 0000000000000000 R09: 0000000000000000 [ 350.988580][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.996555][ T7364] R13: 00007fb237226038 R14: 00007fb237225fa0 R15: 00007ffc7da42a28 [ 351.004549][ T7364] [ 351.032138][ T7374] FAULT_INJECTION: forcing a failure. [ 351.032138][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 351.035844][ T4292] Bluetooth: hci0: unexpected event for opcode 0x200f [ 351.053250][ T7374] CPU: 1 PID: 7374 Comm: syz.0.838 Not tainted syzkaller #0 [ 351.060584][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 351.070657][ T7374] Call Trace: [ 351.073972][ T7374] [ 351.076935][ T7374] dump_stack_lvl+0x188/0x24e [ 351.081661][ T7374] ? show_regs_print_info+0x12/0x12 [ 351.086906][ T7374] ? load_image+0x410/0x410 [ 351.091449][ T7374] ? __might_sleep+0xd0/0xd0 [ 351.096079][ T7374] ? __lock_acquire+0x7ea0/0x7ea0 [ 351.101135][ T7374] ? finish_task_switch+0x262/0x8e0 [ 351.106325][ T7374] ? verify_lock_unused+0x140/0x140 [ 351.111515][ T7374] should_fail_ex+0x390/0x4c0 [ 351.116212][ T7374] should_failslab+0x5/0x20 [ 351.120748][ T7374] slab_pre_alloc_hook+0x59/0x300 [ 351.125785][ T7374] ? __lock_acquire+0x142d/0x7ea0 [ 351.130847][ T7374] ? snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 351.137376][ T7374] __kmem_cache_alloc_node+0x4f/0x270 [ 351.142760][ T7374] ? snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 351.149277][ T7374] kmalloc_trace+0x26/0xe0 [ 351.153729][ T7374] snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 351.160082][ T7374] ? __mutex_trylock_common+0x15c/0x260 [ 351.165637][ T7374] ? trace_raw_output_contention_end+0xd0/0xd0 [ 351.171793][ T7374] ? locks_remove_file+0x372/0xe80 [ 351.176920][ T7374] ? rcu_is_watching+0x11/0xa0 [ 351.181686][ T7374] ? trace_contention_end+0x5f/0x170 [ 351.186992][ T7374] ? __mutex_lock+0x1ab/0xb40 [ 351.191688][ T7374] ? locks_remove_posix+0x680/0x680 [ 351.196902][ T7374] ? fput+0xd9/0x1a0 [ 351.200828][ T7374] ? __x64_sys_close+0x34/0x70 [ 351.205200][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 351.205581][ T7374] ? do_syscall_64+0x4c/0xa0 [ 351.212549][ T5888] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 351.215291][ T7374] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.215326][ T7374] ? snd_pcm_oss_sync+0x2b5/0xb10 [ 351.215347][ T7374] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 351.215367][ T7374] ? mutex_lock_nested+0x10/0x10 [ 351.215388][ T7374] ? memset+0x1e/0x40 [ 351.228353][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.229604][ T7374] ? __fsnotify_parent+0x72a/0x820 [ 351.234622][ T5888] usb 2-1: config 0 has no interface number 0 [ 351.239732][ T7374] snd_pcm_oss_sync+0x370/0xb10 [ 351.239767][ T7374] snd_pcm_oss_release+0xfe/0x240 [ 351.239787][ T7374] ? snd_pcm_oss_open+0x1ec0/0x1ec0 [ 351.239806][ T7374] __fput+0x20a/0x8b0 [ 351.239835][ T7374] task_work_run+0x1d0/0x260 [ 351.239863][ T7374] ? task_work_cancel+0x220/0x220 [ 351.250034][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 351.258844][ T7374] ? exit_to_user_mode_loop+0x3b/0x110 [ 351.258886][ T7374] exit_to_user_mode_loop+0xe6/0x110 [ 351.258915][ T7374] exit_to_user_mode_prepare+0xee/0x180 [ 351.258941][ T7374] syscall_exit_to_user_mode+0x16/0x40 [ 351.264578][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.270106][ T7374] do_syscall_64+0x58/0xa0 [ 351.270139][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 351.270164][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 351.270190][ T7374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.270214][ T7374] RIP: 0033:0x7fbeae39fb19 [ 351.270235][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.275794][ T5888] usb 2-1: Product: syz [ 351.280097][ T7374] RSP: 002b:00007fbeaf1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 351.280127][ T7374] RAX: 0000000000000000 RBX: 00007fbeae625fa0 RCX: 00007fbeae39fb19 [ 351.286010][ T5888] usb 2-1: Manufacturer: syz [ 351.289293][ T7374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 351.289310][ T7374] RBP: 00007fbeae437b70 R08: 0000000000000000 R09: 0000000000000000 [ 351.289323][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.293967][ T5888] usb 2-1: SerialNumber: syz [ 351.298922][ T7374] R13: 00007fbeae626038 R14: 00007fbeae625fa0 R15: 00007fff424241c8 [ 351.298957][ T7374] [ 351.495853][ T5888] usb 2-1: config 0 descriptor?? [ 351.509824][ T5888] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 351.516595][ T5888] usb 2-1: No valid video chain found. [ 351.557129][ T7377] CIFS: Attempting to mount \\127.0.0.1\share [ 351.563306][ T7377] CIFS: VFS: No username specified [ 351.724854][ T4368] usb 2-1: USB disconnect, device number 4 [ 352.175380][ T7373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.189144][ T7373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.196481][ T7373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.321830][ T7373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.337984][ T7373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.525359][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.245166][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 354.245322][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 354.251635][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.264571][ T7417] CIFS: Attempting to mount \\127.0.0.1\share [ 354.271699][ T7417] CIFS: VFS: No username specified [ 354.405224][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 355.250335][ T7422] FAULT_INJECTION: forcing a failure. [ 355.250335][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 355.263614][ T7422] CPU: 1 PID: 7422 Comm: syz.3.858 Not tainted syzkaller #0 [ 355.270946][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 355.281024][ T7422] Call Trace: [ 355.284382][ T7422] [ 355.287428][ T7422] dump_stack_lvl+0x188/0x24e [ 355.292264][ T7422] ? show_regs_print_info+0x12/0x12 [ 355.297538][ T7422] ? load_image+0x410/0x410 [ 355.302073][ T7422] ? __might_sleep+0xd0/0xd0 [ 355.306712][ T7422] ? __lock_acquire+0x7ea0/0x7ea0 [ 355.311773][ T7422] should_fail_ex+0x390/0x4c0 [ 355.316494][ T7422] should_failslab+0x5/0x20 [ 355.321036][ T7422] slab_pre_alloc_hook+0x59/0x300 [ 355.326124][ T7422] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 355.332062][ T7422] ? kobject_set_name_vargs+0x5d/0x110 [ 355.337545][ T7422] __kmem_cache_alloc_node+0x4f/0x270 [ 355.342937][ T7422] ? kobject_set_name_vargs+0x5d/0x110 [ 355.348408][ T7422] __kmalloc_node_track_caller+0xa0/0x240 [ 355.354327][ T7422] kstrdup_const+0x56/0x90 [ 355.358799][ T7422] kobject_set_name_vargs+0x5d/0x110 [ 355.364212][ T7422] dev_set_name+0xdf/0x130 [ 355.368683][ T7422] ? get_device+0x30/0x30 [ 355.373036][ T7422] ib_register_device+0x16c/0x1350 [ 355.378188][ T7422] ? remove_all_compat_devs+0x260/0x260 [ 355.383751][ T7422] ? __kmem_cache_alloc_node+0x19d/0x270 [ 355.389403][ T7422] ? crypto_create_tfm_node+0x73/0x380 [ 355.394914][ T7422] ? rcu_is_watching+0x11/0xa0 [ 355.399742][ T7422] ? crypto_create_tfm_node+0x73/0x380 [ 355.405216][ T7422] ? __kmalloc_node+0xe3/0x240 [ 355.410016][ T7422] ? crypto_shash_init_tfm+0x1d5/0x310 [ 355.415515][ T7422] ? crc32_pclmul_cra_init+0x9/0x50 [ 355.420799][ T7422] ? crypto_create_tfm_node+0x2b9/0x380 [ 355.426404][ T7422] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 355.431882][ T7422] ? crypto_alloc_tfm_node+0x339/0x360 [ 355.437370][ T7422] rxe_register_device+0x256/0x380 [ 355.442558][ T7422] rxe_net_add+0x77/0xe0 [ 355.446913][ T7422] rxe_newlink+0x6b/0xf0 [ 355.451169][ T7422] nldev_newlink+0x59c/0x620 [ 355.455812][ T7422] ? nldev_set_doit+0x490/0x490 [ 355.460756][ T7422] ? aa_get_newest_label+0xf9/0x5b0 [ 355.466000][ T7422] ? end_current_label_crit_section+0x170/0x170 [ 355.472260][ T7422] ? end_current_label_crit_section+0x170/0x170 [ 355.478515][ T7422] ? __might_sleep+0xd0/0xd0 [ 355.483122][ T7422] ? apparmor_capable+0x12c/0x190 [ 355.488171][ T7422] ? nldev_set_doit+0x490/0x490 [ 355.493044][ T7422] rdma_nl_rcv+0x6e7/0xa20 [ 355.497485][ T7422] ? rdma_nl_net_init+0x190/0x190 [ 355.502534][ T7422] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.507792][ T7422] ? __netlink_deliver_tap+0x92/0x7e0 [ 355.513181][ T7422] ? net_generic+0x1e/0x240 [ 355.517704][ T7422] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.522930][ T7422] netlink_unicast+0x7ad/0x920 [ 355.527805][ T7422] netlink_sendmsg+0x8ad/0xbd0 [ 355.532595][ T7422] ? netlink_getsockopt+0x550/0x550 [ 355.537984][ T7422] ? apparmor_socket_sendmsg+0x8a/0x330 [ 355.543546][ T7422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 355.548887][ T7422] ? security_socket_sendmsg+0x7c/0xa0 [ 355.554386][ T7422] ? netlink_getsockopt+0x550/0x550 [ 355.559602][ T7422] ____sys_sendmsg+0x5ed/0x9a0 [ 355.564604][ T7422] ? __sys_sendmsg_sock+0x30/0x30 [ 355.569643][ T7422] ? __import_iovec+0x306/0x510 [ 355.574525][ T7422] ? import_iovec+0x6f/0xa0 [ 355.579043][ T7422] ___sys_sendmsg+0x2a2/0x360 [ 355.583912][ T7422] ? __sys_sendmsg+0x2a0/0x2a0 [ 355.588743][ T7422] __se_sys_sendmsg+0x1c3/0x2b0 [ 355.593610][ T7422] ? __x64_sys_sendmsg+0x80/0x80 [ 355.598577][ T7422] ? lockdep_hardirqs_on+0x94/0x140 [ 355.603879][ T7422] do_syscall_64+0x4c/0xa0 [ 355.608590][ T7422] ? clear_bhb_loop+0x60/0xb0 [ 355.613335][ T7422] ? clear_bhb_loop+0x60/0xb0 [ 355.618036][ T7422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.623946][ T7422] RIP: 0033:0x7f82db19fb19 [ 355.628413][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.648060][ T7422] RSP: 002b:00007f82dbf8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.656530][ T7422] RAX: ffffffffffffffda RBX: 00007f82db425fa0 RCX: 00007f82db19fb19 [ 355.664515][ T7422] RDX: 0000000000000010 RSI: 0000200000000980 RDI: 0000000000000005 [ 355.672502][ T7422] RBP: 00007f82db237b70 R08: 0000000000000000 R09: 0000000000000000 [ 355.680593][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.688599][ T7422] R13: 00007f82db426038 R14: 00007f82db425fa0 R15: 00007ffcb66c0708 [ 355.696606][ T7422] [ 355.850035][ T7422] rdma_rxe: rxe_register_device failed with error -12 [ 355.857347][ T7422] rdma_rxe: failed to add wg1 [ 356.087815][ T4292] Bluetooth: hci5: command 0x1003 tx timeout [ 356.088093][ T4293] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 356.117112][ T5888] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 356.158580][ T7413] can0: slcan on ptm1. [ 356.188426][ T7431] TC_ACT_REPEAT abuse ? [ 356.325151][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 356.332591][ T5888] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 356.347512][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.358269][ T5888] usb 5-1: config 0 has no interface number 0 [ 356.372981][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 356.390137][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.405940][ T7412] can0 (unregistered): slcan off ptm1. [ 356.415432][ T5888] usb 5-1: Product: syz [ 356.426839][ T5888] usb 5-1: Manufacturer: syz [ 356.437126][ T5888] usb 5-1: SerialNumber: syz [ 356.463136][ T5888] usb 5-1: config 0 descriptor?? [ 356.482564][ T5888] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 356.507233][ T5888] usb 5-1: No valid video chain found. [ 356.599066][ T7448] CIFS: Attempting to mount \\127.0.0.1\share [ 356.605620][ T7448] CIFS: VFS: No username specified [ 356.685282][ T5888] usb 5-1: USB disconnect, device number 8 [ 356.755567][ T6840] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 356.980531][ T6840] usb 6-1: not running at top speed; connect to a high speed hub [ 357.039679][ T6840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 357.169474][ T6840] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 357.302581][ T6840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.416651][ T7443] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 357.459939][ T6840] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 357.561234][ T6840] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 357.694779][ T7459] netlink: 14 bytes leftover after parsing attributes in process `syz.1.871'. [ 357.737815][ T6840] usb 6-1: USB disconnect, device number 2 [ 357.784955][ T6840] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 357.823338][ T6840] cyberjack 6-1:1.0: device disconnected [ 360.910305][ T4293] Bluetooth: hci3: unexpected event for opcode 0x200f [ 361.032328][ T7497] FAULT_INJECTION: forcing a failure. [ 361.032328][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 361.068623][ T7497] CPU: 1 PID: 7497 Comm: syz.0.880 Not tainted syzkaller #0 [ 361.076072][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 361.086169][ T7497] Call Trace: [ 361.089476][ T7497] [ 361.092423][ T7497] dump_stack_lvl+0x188/0x24e [ 361.097130][ T7497] ? show_regs_print_info+0x12/0x12 [ 361.102353][ T7497] ? load_image+0x410/0x410 [ 361.106878][ T7497] ? __might_sleep+0xd0/0xd0 [ 361.111479][ T7497] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.116528][ T7497] should_fail_ex+0x390/0x4c0 [ 361.121224][ T7497] should_failslab+0x5/0x20 [ 361.125736][ T7497] slab_pre_alloc_hook+0x59/0x300 [ 361.130772][ T7497] ? __kernfs_new_node+0xa6/0x7f0 [ 361.135884][ T7497] ? rcu_is_watching+0x11/0xa0 [ 361.140671][ T7497] kmem_cache_alloc+0x56/0x2f0 [ 361.145445][ T7497] ? __kernfs_new_node+0xe1/0x7f0 [ 361.150486][ T7497] __kernfs_new_node+0xe1/0x7f0 [ 361.155358][ T7497] ? kernfs_new_node+0x250/0x250 [ 361.160304][ T7497] ? arch_stack_walk+0xf2/0x140 [ 361.165235][ T7497] kernfs_new_node+0x148/0x250 [ 361.170018][ T7497] kernfs_create_dir_ns+0x40/0x120 [ 361.175161][ T7497] sysfs_create_dir_ns+0x12c/0x290 [ 361.180291][ T7497] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.185335][ T7497] ? sysfs_warn_dup+0xa0/0xa0 [ 361.190032][ T7497] ? do_raw_spin_unlock+0x11d/0x230 [ 361.195245][ T7497] kobject_add_internal+0x617/0xca0 [ 361.200462][ T7497] kobject_add+0x160/0x230 [ 361.204890][ T7497] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.209932][ T7497] ? kobject_init+0x1c0/0x1c0 [ 361.214622][ T7497] ? do_raw_spin_unlock+0x11d/0x230 [ 361.219838][ T7497] ? get_device_parent+0x288/0x3e0 [ 361.224969][ T7497] device_add+0x470/0x1050 [ 361.229399][ T7497] ? kfree+0x30/0x1a0 [ 361.233395][ T7497] device_create+0x266/0x300 [ 361.237999][ T7497] ? format_decode+0xb67/0x1330 [ 361.242868][ T7497] ? root_device_unregister+0xf0/0xf0 [ 361.248267][ T7497] bdi_register_va+0xa0/0x750 [ 361.252967][ T7497] super_setup_bdi_name+0xf5/0x200 [ 361.258156][ T7497] ? ceph_get_tree+0x9a4/0x1350 [ 361.263103][ T7497] ? vfs_get_tree+0x270/0x270 [ 361.267798][ T7497] ? sget_fc+0x6a8/0x750 [ 361.272051][ T7497] ? ceph_compare_super+0x740/0x740 [ 361.277267][ T7497] ceph_get_tree+0x9c4/0x1350 [ 361.281963][ T7497] ? bpf_lsm_capable+0x5/0x10 [ 361.286702][ T7497] vfs_get_tree+0x88/0x270 [ 361.291134][ T7497] do_new_mount+0x247/0xa50 [ 361.295691][ T7497] __se_sys_mount+0x2e3/0x3d0 [ 361.300384][ T7497] ? __x64_sys_mount+0xc0/0xc0 [ 361.305169][ T7497] ? __x64_sys_mount+0x1c/0xc0 [ 361.309958][ T7497] do_syscall_64+0x4c/0xa0 [ 361.314388][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 361.319079][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 361.323775][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.329680][ T7497] RIP: 0033:0x7fbeae39fb19 [ 361.334106][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.353734][ T7497] RSP: 002b:00007fbeaf1db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.362167][ T7497] RAX: ffffffffffffffda RBX: 00007fbeae625fa0 RCX: 00007fbeae39fb19 [ 361.370171][ T7497] RDX: 0000200000000a40 RSI: 0000200000000a00 RDI: 00002000000009c0 [ 361.378160][ T7497] RBP: 00007fbeae437b70 R08: 0000000000000000 R09: 0000000000000000 [ 361.386232][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.394211][ T7497] R13: 00007fbeae626038 R14: 00007fbeae625fa0 R15: 00007fff424241c8 [ 361.402207][ T7497] [ 361.436947][ T7497] kobject_add_internal failed for ceph-4 (error: -12 parent: bdi) [ 361.455885][ T7497] ceph: No mds server is up or the cluster is laggy [ 362.197688][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 362.253530][ T7535] : renamed from virt_wifi0 [ 365.285693][ T7568] jffs2: notice: (7568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.519068][ T7586] siw: device registration error -23 [ 368.170030][ T4293] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 371.675304][ T4283] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 371.715340][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 372.715144][ T4283] usb 5-1: Using ep0 maxpacket: 16 [ 372.720498][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 372.764584][ T4283] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 372.774158][ T27] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.273579][ T27] usb 1-1: config 0 has no interface number 0 [ 374.280430][ T4283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.302494][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.312542][ T4283] usb 5-1: config 0 has no interface number 0 [ 374.323630][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.333888][ T27] usb 1-1: Product: syz [ 374.343097][ T4283] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 374.359955][ T27] usb 1-1: Manufacturer: syz [ 374.364702][ T4283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.375721][ T27] usb 1-1: SerialNumber: syz [ 374.380561][ T4283] usb 5-1: Product: syz [ 374.473766][ T7638] siw: device registration error -23 [ 375.206936][ T27] usb 1-1: config 0 descriptor?? [ 375.215165][ T4283] usb 5-1: Manufacturer: syz [ 375.219873][ T4283] usb 5-1: SerialNumber: syz [ 375.230376][ T27] usb 1-1: can't set config #0, error -71 [ 375.239681][ T4283] usb 5-1: config 0 descriptor?? [ 375.245321][ T27] usb 1-1: USB disconnect, device number 4 [ 375.254756][ T4283] usb 5-1: can't set config #0, error -71 [ 375.264336][ T4283] usb 5-1: USB disconnect, device number 9 [ 375.534854][ T7653] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 375.649360][ T7657] hub 1-0:1.0: USB hub found [ 375.654835][ T7657] hub 1-0:1.0: 1 port detected [ 376.566528][ T7661] fuse: Bad value for 'fd' [ 376.918424][ T7640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 377.240350][ T7640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.266742][ T7640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.305401][ T7640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.313489][ T7640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.445302][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.705429][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 377.935242][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 377.951338][ T27] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 378.056172][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.118299][ T7678] siw: device registration error -23 [ 378.125635][ T27] usb 5-1: config 0 has no interface number 0 [ 378.519444][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530857][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.565511][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 378.620515][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.649211][ T27] usb 5-1: Product: syz [ 378.653446][ T27] usb 5-1: Manufacturer: syz [ 378.680925][ T27] usb 5-1: SerialNumber: syz [ 378.699928][ T27] usb 5-1: config 0 descriptor?? [ 378.727078][ T27] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 378.748742][ T27] usb 5-1: No valid video chain found. [ 378.920630][ T27] usb 5-1: USB disconnect, device number 10 [ 379.285132][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 379.285336][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 379.371742][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 379.371761][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.397082][ T7700] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 380.547549][ T7708] hub 1-0:1.0: USB hub found [ 380.555333][ T7708] hub 1-0:1.0: 1 port detected [ 380.725296][ T4372] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.935147][ T4372] usb 5-1: Using ep0 maxpacket: 32 [ 380.961993][ T4372] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 380.985211][ T4372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.015236][ T4372] usb 5-1: Product: syz [ 381.019482][ T4372] usb 5-1: Manufacturer: syz [ 381.027153][ T4372] usb 5-1: SerialNumber: syz [ 381.186191][ T4372] usb 5-1: config 0 descriptor?? [ 381.550969][ T7722] CIFS: Attempting to mount \\127.0.0.1\share [ 381.557647][ T7722] CIFS: VFS: No username specified [ 381.639139][ T4372] airspy 5-1:0.0: Board ID: 00 [ 381.644308][ T4372] airspy 5-1:0.0: Firmware version: [ 381.673474][ T7723] No source specified [ 382.604578][ T7730] FAULT_INJECTION: forcing a failure. [ 382.604578][ T7730] name fail_futex, interval 1, probability 0, space 0, times 0 [ 382.664944][ T4372] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 382.701528][ T7730] CPU: 1 PID: 7730 Comm: syz.3.952 Not tainted syzkaller #0 [ 382.708906][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 382.719008][ T7730] Call Trace: [ 382.722319][ T7730] [ 382.725276][ T7730] dump_stack_lvl+0x188/0x24e [ 382.730010][ T7730] ? show_regs_print_info+0x12/0x12 [ 382.735268][ T7730] ? load_image+0x410/0x410 [ 382.739835][ T7730] should_fail_ex+0x390/0x4c0 [ 382.744557][ T7730] get_futex_key+0x1a6/0xe70 [ 382.749259][ T7730] ? inet_send_prepare+0x1aa/0x250 [ 382.754492][ T7730] ? sock_write_iter+0x30b/0x3e0 [ 382.759487][ T7730] ? futex_setup_timer+0xc0/0xc0 [ 382.764479][ T7730] ? sock_write_iter+0x30b/0x3e0 [ 382.769474][ T7730] futex_wake+0x123/0x4f0 [ 382.773863][ T7730] ? futex_wake_mark+0x150/0x150 [ 382.778851][ T7730] ? file_end_write+0xd8/0x250 [ 382.783655][ T7730] ? vfs_write+0x777/0x9a0 [ 382.788114][ T7730] do_futex+0x2e2/0x320 [ 382.792308][ T7730] ? file_end_write+0x250/0x250 [ 382.797200][ T7730] ? __ia32_sys_get_robust_list+0x100/0x100 [ 382.803153][ T7730] __se_sys_futex+0x381/0x410 [ 382.807882][ T7730] ? __x64_sys_futex+0xf0/0xf0 [ 382.812730][ T7730] ? __x64_sys_futex+0x1d/0xf0 [ 382.817519][ T7730] do_syscall_64+0x4c/0xa0 [ 382.821966][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 382.826669][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 382.831391][ T7730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.837302][ T7730] RIP: 0033:0x7f82db19fb19 [ 382.841732][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.861356][ T7730] RSP: 002b:00007f82dbf8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 382.869785][ T7730] RAX: ffffffffffffffda RBX: 00007f82db425fa8 RCX: 00007f82db19fb19 [ 382.877788][ T7730] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f82db425fac [ 382.885776][ T7730] RBP: 00007f82db425fa0 R08: 002147374c204cae R09: 0000000000000000 [ 382.893770][ T7730] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 382.901753][ T7730] R13: 00007f82db426038 R14: 00007ffcb66c0620 R15: 00007ffcb66c0708 [ 382.909748][ T7730] [ 382.954360][ T4372] airspy 5-1:0.0: Registered as swradio24 [ 382.971583][ T4372] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 383.013903][ T4372] usb 5-1: USB disconnect, device number 11 [ 383.057345][ T4368] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 383.148285][ T7747] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 383.269623][ T7749] hub 1-0:1.0: USB hub found [ 383.275381][ T7749] hub 1-0:1.0: 1 port detected [ 383.295214][ T4368] usb 2-1: Using ep0 maxpacket: 16 [ 384.019016][ T4368] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 384.035269][ T4368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.045537][ T4368] usb 2-1: config 0 has no interface number 0 [ 384.064293][ T4368] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 384.083932][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.092390][ T4368] usb 2-1: Product: syz [ 384.096733][ T4368] usb 2-1: Manufacturer: syz [ 384.101367][ T4368] usb 2-1: SerialNumber: syz [ 384.108458][ T4368] usb 2-1: config 0 descriptor?? [ 384.120829][ T4368] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 384.127295][ T4368] usb 2-1: No valid video chain found. [ 384.411228][ T4368] usb 2-1: USB disconnect, device number 5 [ 385.165389][ T4368] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 385.396040][ T4368] usb 5-1: Using ep0 maxpacket: 8 [ 385.416618][ T4368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.548993][ T4368] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.664648][ T4368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.882049][ T4368] usb 5-1: config 0 descriptor?? [ 386.178462][ T4368] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 386.309333][ T7768] CIFS: Attempting to mount \\127.0.0.1\share [ 386.315827][ T7768] CIFS: VFS: No username specified [ 386.475133][ T4372] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 386.811651][ T4368] usb 5-1: USB disconnect, device number 12 [ 387.237243][ T4372] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 387.258530][ T4372] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 387.277464][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.290498][ T4372] usb 2-1: Product: syz [ 387.298855][ T4372] usb 2-1: Manufacturer: syz [ 387.303507][ T4372] usb 2-1: SerialNumber: syz [ 387.314431][ T7774] FAULT_INJECTION: forcing a failure. [ 387.314431][ T7774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 387.335609][ T7765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 387.415750][ T7774] CPU: 1 PID: 7774 Comm: syz.5.966 Not tainted syzkaller #0 [ 387.423116][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 387.433208][ T7774] Call Trace: [ 387.436518][ T7774] [ 387.439477][ T7774] dump_stack_lvl+0x188/0x24e [ 387.444206][ T7774] ? show_regs_print_info+0x12/0x12 [ 387.449449][ T7774] ? load_image+0x410/0x410 [ 387.454007][ T7774] should_fail_ex+0x390/0x4c0 [ 387.458729][ T7774] get_futex_key+0x1a6/0xe70 [ 387.463356][ T7774] ? inet_send_prepare+0x1aa/0x250 [ 387.468506][ T7774] ? sock_write_iter+0x30b/0x3e0 [ 387.473484][ T7774] ? futex_setup_timer+0xc0/0xc0 [ 387.478452][ T7774] ? sock_write_iter+0x30b/0x3e0 [ 387.483437][ T7774] futex_wake+0x123/0x4f0 [ 387.487804][ T7774] ? futex_wake_mark+0x150/0x150 [ 387.492780][ T7774] ? file_end_write+0xd8/0x250 [ 387.497577][ T7774] ? vfs_write+0x777/0x9a0 [ 387.502024][ T7774] do_futex+0x2e2/0x320 [ 387.506218][ T7774] ? file_end_write+0x250/0x250 [ 387.511106][ T7774] ? __ia32_sys_get_robust_list+0x100/0x100 [ 387.517032][ T7774] __se_sys_futex+0x381/0x410 [ 387.521750][ T7774] ? __x64_sys_futex+0xf0/0xf0 [ 387.526557][ T7774] ? __x64_sys_futex+0x1d/0xf0 [ 387.531360][ T7774] do_syscall_64+0x4c/0xa0 [ 387.535843][ T7774] ? clear_bhb_loop+0x60/0xb0 [ 387.540560][ T7774] ? clear_bhb_loop+0x60/0xb0 [ 387.545277][ T7774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.551207][ T7774] RIP: 0033:0x7f916959fb19 [ 387.555658][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.575302][ T7774] RSP: 002b:00007f916a5160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 387.583756][ T7774] RAX: ffffffffffffffda RBX: 00007f9169825fa8 RCX: 00007f916959fb19 [ 387.591755][ T7774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9169825fac [ 387.599753][ T7774] RBP: 00007f9169825fa0 R08: 000ffe2b2350ddf8 R09: 0000000000000000 [ 387.607751][ T7774] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 387.615752][ T7774] R13: 00007f9169826038 R14: 00007fff1db51a70 R15: 00007fff1db51b58 [ 387.623770][ T7774] [ 387.657031][ T7777] siw: device registration error -23 [ 388.118933][ T4372] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 388.377700][ T7782] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 388.560311][ T4372] usb 2-1: USB disconnect, device number 6 [ 389.341296][ T7788] hub 1-0:1.0: USB hub found [ 389.346921][ T7788] hub 1-0:1.0: 1 port detected [ 390.967899][ T5888] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 391.175313][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 391.183786][ T5888] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 391.202502][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.294485][ T5888] usb 4-1: config 0 has no interface number 0 [ 391.366604][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 391.464013][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.552933][ T5888] usb 4-1: Product: syz [ 391.596323][ T5888] usb 4-1: Manufacturer: syz [ 391.653704][ T5888] usb 4-1: SerialNumber: syz [ 391.782213][ T5888] usb 4-1: config 0 descriptor?? [ 391.906675][ T5888] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 391.959152][ T5888] usb 4-1: No valid video chain found. [ 392.097325][ T5888] usb 4-1: USB disconnect, device number 4 [ 394.232065][ T7834] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 394.328097][ T7836] hub 1-0:1.0: USB hub found [ 394.333384][ T7836] hub 1-0:1.0: 1 port detected [ 398.274315][ T7884] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 398.462482][ T7893] hub 1-0:1.0: USB hub found [ 398.467847][ T7893] hub 1-0:1.0: 1 port detected [ 399.135289][ T6840] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 399.336589][ T6840] usb 6-1: not running at top speed; connect to a high speed hub [ 400.056568][ T6840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 400.067435][ T6840] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 400.076876][ T6840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.103830][ T7908] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 402.121719][ T6840] usb 6-1: can't set config #1, error -71 [ 402.136360][ T6840] usb 6-1: USB disconnect, device number 3 [ 402.278526][ T4294] Bluetooth: hci0: unexpected event for opcode 0x200f [ 403.401875][ T7930] fuse: Bad value for 'fd' [ 403.667581][ T7914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.673645][ T7914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.680162][ T7914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.687497][ T7914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.693554][ T7914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.901692][ T7937] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 404.035635][ T7941] hub 1-0:1.0: USB hub found [ 404.041254][ T7941] hub 1-0:1.0: 1 port detected [ 404.335336][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.075201][ T4380] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 406.129196][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.135812][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 406.135862][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.141933][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.347118][ T7965] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 408.578977][ T7964] Bluetooth: hci0: unexpected event for opcode 0x200f [ 408.715239][ T4380] usb 4-1: device not accepting address 5, error -71 [ 410.788834][ T7966] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 410.805395][ T7966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.811470][ T7966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.845584][ T7966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.851964][ T7966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.228886][ T8014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 412.805319][ T7964] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.886100][ T4295] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.886977][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.898866][ T7964] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.788738][ T8044] siw: device registration error -23 [ 415.455500][ T8036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.280503][ T8036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.323841][ T8036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.360078][ T8036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.401064][ T8036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.506656][ T4292] Bluetooth: hci4: unexpected event for opcode 0x200f [ 416.725194][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.785178][ T4368] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 417.883534][ T8070] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 417.995358][ T4368] usb 5-1: unable to get BOS descriptor or descriptor too short [ 418.031522][ T4368] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.149497][ T4368] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.260583][ T4368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 418.325169][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 418.331869][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 418.382220][ T4368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.405101][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 418.569326][ T4368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 418.676431][ T4368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.803101][ T4368] usb 5-1: string descriptor 0 read error: -22 [ 418.867089][ T4368] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.526211][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.395417][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 420.505174][ T4368] cdc_ncm 5-1:1.0: bind() failure [ 420.644253][ T4368] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 420.653335][ T4368] cdc_ncm 5-1:1.1: bind() failure [ 420.659037][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 420.668920][ T5908] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 420.686546][ T4368] usb 5-1: USB disconnect, device number 13 [ 420.692587][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.706655][ T5908] usb 6-1: config 0 has no interface number 0 [ 420.729795][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 420.743764][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.762005][ T5908] usb 6-1: Product: syz [ 420.767759][ T5908] usb 6-1: Manufacturer: syz [ 420.772397][ T5908] usb 6-1: SerialNumber: syz [ 420.800257][ T5908] usb 6-1: config 0 descriptor?? [ 420.822083][ T5908] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 420.829507][ T5908] usb 6-1: No valid video chain found. [ 421.082935][ T4372] usb 6-1: USB disconnect, device number 4 [ 422.089307][ T8093] CIFS mount error: No usable UNC path provided in device string! [ 422.089307][ T8093] [ 422.099814][ T8093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 422.933789][ T4292] Bluetooth: hci3: unexpected event for opcode 0x200f [ 423.745792][ T8111] fuse: Bad value for 'fd' [ 424.896570][ T8106] sched: RT throttling activated [ 424.998701][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.006456][ T8095] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 425.234554][ T8095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 425.240987][ T8095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.248557][ T8095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.254696][ T8095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.449533][ T8117] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 425.537745][ T8121] hub 1-0:1.0: USB hub found [ 425.543972][ T8121] hub 1-0:1.0: 1 port detected [ 426.890235][ T8125] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 427.045174][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.285649][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.285768][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.285824][ T7964] Bluetooth: hci4: command 0x0c1a tx timeout [ 429.389232][ T8134] siw: device registration error -23 [ 430.711377][ T8150] fuse: Bad value for 'fd' [ 431.010598][ T8168] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 431.140916][ T8172] hub 1-0:1.0: USB hub found [ 431.146567][ T8172] hub 1-0:1.0: 1 port detected [ 431.968362][ T8179] siw: device registration error -23 [ 434.119720][ T8183] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 435.255620][ T4463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.966481][ T4463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.152865][ T4463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.316453][ T4463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.460010][ T8201] loop0: detected capacity change from 0 to 4096 [ 437.144542][ T8210] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.954159][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.968036][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.979026][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.014787][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.029457][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 438.041372][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.075160][ T6114] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 438.339775][ T6114] usb 1-1: Using ep0 maxpacket: 32 [ 438.360198][ T6114] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 438.445244][ T6114] usb 1-1: config 0 has no interface number 0 [ 438.479051][ T6114] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 438.535244][ T6114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.544320][ T6114] usb 1-1: Product: syz [ 438.575145][ T6114] usb 1-1: Manufacturer: syz [ 438.579944][ T6114] usb 1-1: SerialNumber: syz [ 438.595895][ T6114] usb 1-1: config 0 descriptor?? [ 438.612831][ T8210] lo speed is unknown, defaulting to 1000 [ 438.618371][ T6114] smsc95xx v2.0.0 [ 439.022668][ T6114] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 439.042414][ T6114] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 439.309692][ T8239] siw: device registration error -23 [ 439.463298][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.476767][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.485218][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.497293][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.505646][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 439.513657][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.563897][ T4463] device hsr_slave_0 left promiscuous mode [ 439.583427][ T4463] device hsr_slave_1 left promiscuous mode [ 439.606252][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.617768][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.709125][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.718729][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.754137][ T4463] device bridge_slave_1 left promiscuous mode [ 439.773654][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.802363][ T4463] device bridge_slave_0 left promiscuous mode [ 439.822610][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.912184][ T4463] device veth1_macvtap left promiscuous mode [ 439.920190][ T4463] device veth0_macvtap left promiscuous mode [ 439.930368][ T4463] device veth1_vlan left promiscuous mode [ 439.937906][ T4463] device veth0_vlan left promiscuous mode [ 439.939103][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.950575][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.460076][ T6114] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 440.481072][ T6114] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 440.510290][ T6114] usb 1-1: USB disconnect, device number 5 [ 440.725238][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.745301][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.753630][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.762493][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.771465][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 440.780241][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.101702][ T26] audit: type=1804 audit(1793833748.777:2): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.134443][ T26] audit: type=1804 audit(1793833748.807:3): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.163456][ T26] audit: type=1804 audit(1793833748.807:4): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.192054][ T26] audit: type=1804 audit(1793833748.807:5): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.223828][ T26] audit: type=1804 audit(1793833748.807:6): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.272589][ T26] audit: type=1804 audit(1793833748.807:7): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.345576][ T26] audit: type=1804 audit(1793833748.807:8): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.463377][ T26] audit: type=1804 audit(1793833748.807:9): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.585957][ T3642] udevd[3642]: could not touch /run/udev/queue: No such file or directory [ 441.600895][ T8259] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 441.645659][ T3642] udevd[3642]: could not touch /run/udev/queue: No such file or directory [ 441.693123][ T26] audit: type=1804 audit(1793833748.807:10): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 441.784919][ T3642] udevd[3642]: could not touch /run/udev/queue: No such file or directory [ 441.912997][ T3642] udevd[3642]: could not touch /run/udev/queue: No such file or directory [ 441.990122][ T26] audit: type=1804 audit(1793833748.807:11): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 443.276223][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 443.995244][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 444.462392][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.472126][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.487840][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.506039][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.715717][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 444.723188][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.105783][ T26] kauditd_printk_skb: 872 callbacks suppressed [ 446.105875][ T26] audit: type=1804 audit(1793833753.787:884): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.148868][ T26] audit: type=1804 audit(1793833753.787:885): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.172407][ T26] audit: type=1804 audit(1793833753.787:886): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.202635][ T26] audit: type=1804 audit(1793833753.787:887): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.226641][ T26] audit: type=1804 audit(1793833753.787:888): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.249701][ T26] audit: type=1804 audit(1793833753.787:889): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.273816][ T26] audit: type=1804 audit(1793833753.787:890): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.325331][ T26] audit: type=1804 audit(1793833753.787:891): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.350658][ T26] audit: type=1804 audit(1793833753.787:892): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.381772][ T26] audit: type=1804 audit(1793833753.787:893): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 446.866012][ T4380] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 447.032261][ T8288] CIFS: Attempting to mount \\127.0.0.1\share [ 447.041625][ T8288] CIFS: VFS: No username specified [ 447.055210][ T4380] usb 5-1: Using ep0 maxpacket: 32 [ 447.805654][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.816083][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.825089][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.835452][ T4380] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 447.847715][ T4380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.852949][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.855861][ T4380] usb 5-1: Product: syz [ 447.868733][ T4380] usb 5-1: Manufacturer: syz [ 447.873489][ T4380] usb 5-1: SerialNumber: syz [ 447.874366][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.886539][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.894450][ T4380] usb 5-1: config 0 descriptor?? [ 448.239899][ T8302] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 448.376461][ T4380] airspy 5-1:0.0: Board ID: 00 [ 448.383082][ T4380] airspy 5-1:0.0: Firmware version: [ 448.406362][ T8303] hub 1-0:1.0: USB hub found [ 448.411676][ T8303] hub 1-0:1.0: 1 port detected [ 449.197459][ T4380] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 449.220139][ T4380] airspy 5-1:0.0: Registered as swradio24 [ 449.246359][ T4380] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 449.260871][ T8305] udevd[8305]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/swradio24': No such file or directory [ 449.263250][ T4380] usb 5-1: USB disconnect, device number 14 [ 449.738473][ T8309] siw: device registration error -23 [ 451.115651][ T26] kauditd_printk_skb: 2035 callbacks suppressed [ 451.115667][ T26] audit: type=1804 audit(1793833758.797:2929): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.193352][ T26] audit: type=1804 audit(1793833758.797:2930): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.227346][ T8325] fuse: Bad value for 'fd' [ 451.250399][ T26] audit: type=1804 audit(1793833758.797:2931): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.281422][ T26] audit: type=1804 audit(1793833758.797:2932): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.365165][ T26] audit: type=1804 audit(1793833758.797:2933): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.408686][ T26] audit: type=1804 audit(1793833758.797:2934): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.444407][ T26] audit: type=1804 audit(1793833758.797:2935): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 451.527415][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.550041][ T8339] CIFS: Attempting to mount \\127.0.0.1\share [ 451.556429][ T8339] CIFS: VFS: No username specified [ 451.562267][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.574890][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.596540][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.641962][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 451.653822][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.866856][ T26] audit: type=1804 audit(1793833758.797:2936): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 452.092219][ T26] audit: type=1804 audit(1793833758.797:2937): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 452.354949][ T26] audit: type=1804 audit(1793833758.797:2938): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/219/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 452.943622][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.953179][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.961497][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.971217][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.978886][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 452.995298][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.342097][ T8357] FAULT_INJECTION: forcing a failure. [ 453.342097][ T8357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 453.385845][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.395995][ T8357] CPU: 1 PID: 8357 Comm: syz.5.1140 Not tainted syzkaller #0 [ 453.403878][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 453.413976][ T8357] Call Trace: [ 453.417290][ T8357] [ 453.420256][ T8357] dump_stack_lvl+0x188/0x24e [ 453.424995][ T8357] ? show_regs_print_info+0x12/0x12 [ 453.430241][ T8357] ? load_image+0x410/0x410 [ 453.434797][ T8357] ? kasan_save_stack+0x4c/0x60 [ 453.439692][ T8357] ? __kasan_record_aux_stack+0xb2/0xc0 [ 453.445269][ T8357] ? call_rcu+0x14f/0x950 [ 453.449619][ T8357] ? task_work_run+0x1d0/0x260 [ 453.454548][ T8357] ? exit_to_user_mode_loop+0xe6/0x110 [ 453.460046][ T8357] ? exit_to_user_mode_prepare+0xee/0x180 [ 453.465777][ T8357] ? syscall_exit_to_user_mode+0x16/0x40 [ 453.471431][ T8357] should_fail_ex+0x390/0x4c0 [ 453.476125][ T8357] get_futex_key+0x1a6/0xe70 [ 453.480733][ T8357] ? futex_setup_timer+0xc0/0xc0 [ 453.485689][ T8357] futex_wake+0x123/0x4f0 [ 453.490052][ T8357] ? lock_chain_count+0x20/0x20 [ 453.494928][ T8357] ? futex_wake_mark+0x150/0x150 [ 453.499916][ T8357] do_futex+0x2e2/0x320 [ 453.504085][ T8357] ? rcu_force_quiescent_state+0x220/0x220 [ 453.509911][ T8357] ? __ia32_sys_get_robust_list+0x100/0x100 [ 453.515812][ T8357] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 453.521948][ T8357] __se_sys_futex+0x381/0x410 [ 453.526634][ T8357] ? __x64_sys_futex+0xf0/0xf0 [ 453.531406][ T8357] ? __x64_sys_futex+0x1d/0xf0 [ 453.536186][ T8357] do_syscall_64+0x4c/0xa0 [ 453.540618][ T8357] ? clear_bhb_loop+0x60/0xb0 [ 453.545308][ T8357] ? clear_bhb_loop+0x60/0xb0 [ 453.549995][ T8357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.555898][ T8357] RIP: 0033:0x7f916959fb19 [ 453.560320][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.579933][ T8357] RSP: 002b:00007f916a5160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 453.588379][ T8357] RAX: ffffffffffffffda RBX: 00007f9169825fa8 RCX: 00007f916959fb19 [ 453.596370][ T8357] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9169825fac [ 453.604348][ T8357] RBP: 00007f9169825fa0 R08: 0011c7f369a351fa R09: 0000000000000000 [ 453.612330][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.620315][ T8357] R13: 00007f9169826038 R14: 00007fff1db51a70 R15: 00007fff1db51b58 [ 453.628306][ T8357] [ 454.588428][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.632092][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.642138][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.750765][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.764250][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.779840][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.802464][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.885130][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 454.914389][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.183846][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.199040][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.209868][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.224775][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.249340][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.258404][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.441964][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.585467][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 455.604837][ T7] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 455.665148][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.693751][ T7] usb 6-1: Product: syz [ 455.698344][ T7] usb 6-1: Manufacturer: syz [ 455.702968][ T7] usb 6-1: SerialNumber: syz [ 455.724562][ T7] usb 6-1: config 0 descriptor?? [ 456.150633][ T7] airspy 6-1:0.0: Board ID: 00 [ 456.156486][ T7] airspy 6-1:0.0: Firmware version: [ 456.956690][ T7] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 457.026478][ T7] airspy 6-1:0.0: Registered as swradio24 [ 457.087891][ T7] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 457.200055][ T7] usb 6-1: USB disconnect, device number 5 [ 457.470832][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.484900][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.523446][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.539517][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.553412][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 457.564608][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.089678][ T8423] udevd[8423]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/swradio24': No such file or directory [ 458.387692][ T9] IPVS: stopping master sync thread 5263 ... [ 459.246303][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.261059][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.269998][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.288020][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.296518][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 459.303821][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.545728][ T6114] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 459.706180][ T6114] usb 1-1: device descriptor read/64, error -71 [ 459.942278][ T9] device hsr_slave_0 left promiscuous mode [ 459.973178][ T9] device hsr_slave_1 left promiscuous mode [ 459.979254][ T6114] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 460.368774][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.465339][ T6114] usb 1-1: device descriptor read/64, error -71 [ 460.479642][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.605914][ T6114] usb usb1-port1: attempt power cycle [ 460.640229][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.835118][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.905838][ T9] device bridge_slave_1 left promiscuous mode [ 460.919981][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.946988][ T9] device bridge_slave_0 left promiscuous mode [ 460.953292][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.035165][ T9] device veth1_macvtap left promiscuous mode [ 461.058554][ T9] device veth0_macvtap left promiscuous mode [ 461.073515][ T9] device veth1_vlan left promiscuous mode [ 461.079828][ T9] device veth0_vlan left promiscuous mode [ 461.105191][ T6114] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 461.146106][ T6114] usb 1-1: device descriptor read/8, error -71 [ 461.283220][ T7964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.292769][ T7964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.302492][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.307028][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.320895][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.335753][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.344265][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.344274][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.360693][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.368515][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.425993][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 461.440872][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.477505][ T6114] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 461.537603][ T6114] usb 1-1: device descriptor read/8, error -71 [ 461.722514][ T6114] usb usb1-port1: unable to enumerate USB device [ 462.223100][ T9] team0 (unregistering): Port device team_slave_1 removed [ 462.268384][ T9] team0 (unregistering): Port device team_slave_0 removed [ 462.629613][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.641253][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.660485][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.670403][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.678663][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 462.686127][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.002717][ T7] infiniband syz2: ib_query_port failed (-19) [ 463.336678][ T4295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.347717][ T4295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.364431][ T4295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.373919][ T4295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.383223][ T4295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 463.390692][ T4295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.357628][ T8492] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.405618][ T4293] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 464.789109][ T8477] can0: slcan on ptm0. [ 464.995591][ T8476] can0 (unregistered): slcan off ptm0. [ 465.284267][ T8502] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 468.356022][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.366482][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.375535][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.384133][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.393261][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 468.650009][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.563203][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.585640][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.594221][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.604066][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.611849][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 469.619686][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.845649][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 470.018607][ T7] usb 6-1: device descriptor read/64, error -71 [ 470.285124][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 470.370097][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.379277][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.389204][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.399037][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.410264][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 470.421284][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.445135][ T7] usb 6-1: device descriptor read/64, error -71 [ 470.568310][ T7] usb usb6-port1: attempt power cycle [ 471.075187][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.016466][ T7] usb 6-1: device descriptor read/8, error -71 [ 473.238105][ T8565] FAULT_INJECTION: forcing a failure. [ 473.238105][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 473.353977][ T8565] CPU: 1 PID: 8565 Comm: syz.4.1172 Not tainted syzkaller #0 [ 473.361707][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 473.371803][ T8565] Call Trace: [ 473.375114][ T8565] [ 473.378066][ T8565] dump_stack_lvl+0x188/0x24e [ 473.382771][ T8565] ? show_regs_print_info+0x12/0x12 [ 473.387982][ T8565] ? load_image+0x410/0x410 [ 473.392499][ T8565] ? __might_sleep+0xd0/0xd0 [ 473.397101][ T8565] ? __lock_acquire+0x7ea0/0x7ea0 [ 473.402227][ T8565] should_fail_ex+0x390/0x4c0 [ 473.406917][ T8565] should_failslab+0x5/0x20 [ 473.411429][ T8565] slab_pre_alloc_hook+0x59/0x300 [ 473.416469][ T8565] kmem_cache_alloc+0x56/0x2f0 [ 473.421242][ T8565] ? __kernfs_new_node+0xe1/0x7f0 [ 473.426282][ T8565] __kernfs_new_node+0xe1/0x7f0 [ 473.431149][ T8565] ? __lock_acquire+0x7ea0/0x7ea0 [ 473.436191][ T8565] ? kernfs_new_node+0x250/0x250 [ 473.441157][ T8565] kernfs_new_node+0x148/0x250 [ 473.445933][ T8565] __kernfs_create_file+0x47/0x2e0 [ 473.451060][ T8565] sysfs_add_file_mode_ns+0x233/0x2f0 [ 473.456458][ T8565] internal_create_group+0x490/0xce0 [ 473.461776][ T8565] ? sysfs_create_group+0x20/0x20 [ 473.466845][ T8565] ? sysfs_create_dir_ns+0x167/0x290 [ 473.472236][ T8565] ? sysfs_warn_dup+0xa0/0xa0 [ 473.476934][ T8565] sysfs_create_groups+0x55/0x120 [ 473.481973][ T8565] kobject_add_internal+0x65e/0xca0 [ 473.487190][ T8565] kobject_add+0x160/0x230 [ 473.491654][ T8565] ? kobject_init+0x1c0/0x1c0 [ 473.496380][ T8565] blk_register_queue+0x94/0x3d0 [ 473.501422][ T8565] device_add_disk+0x644/0x1020 [ 473.506314][ T8565] md_alloc+0x7f3/0xd00 [ 473.510517][ T8565] ? md_notify_reboot+0x330/0x330 [ 473.515559][ T8565] md_probe+0x53/0xc0 [ 473.519552][ T8565] blk_request_module+0x26e/0x290 [ 473.524594][ T8565] blkdev_get_no_open+0x33/0xc0 [ 473.529454][ T8565] blkdev_get_by_dev+0x77/0xa60 [ 473.534310][ T8565] ? __rwlock_init+0x140/0x140 [ 473.539093][ T8565] blkdev_open+0x119/0x2d0 [ 473.543518][ T8565] ? blkdev_mmap+0x1a0/0x1a0 [ 473.548114][ T8565] do_dentry_open+0x7dd/0x10b0 [ 473.552946][ T8565] path_openat+0x2674/0x2f10 [ 473.557572][ T8565] ? kasan_set_track+0x60/0x70 [ 473.562376][ T8565] ? verify_lock_unused+0x140/0x140 [ 473.567589][ T8565] ? do_sys_openat2+0xdd/0x4f0 [ 473.572373][ T8565] ? do_filp_open+0x420/0x420 [ 473.577077][ T8565] do_filp_open+0x1ee/0x420 [ 473.581600][ T8565] ? vfs_tmpfile+0x490/0x490 [ 473.586222][ T8565] ? _raw_spin_unlock+0x24/0x40 [ 473.591081][ T8565] ? alloc_fd+0x590/0x640 [ 473.595432][ T8565] do_sys_openat2+0x14b/0x4f0 [ 473.600122][ T8565] ? do_sys_open+0xe0/0xe0 [ 473.604552][ T8565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 473.610638][ T8565] ? lock_chain_count+0x20/0x20 [ 473.615565][ T8565] __x64_sys_openat+0x135/0x160 [ 473.620439][ T8565] do_syscall_64+0x4c/0xa0 [ 473.624884][ T8565] ? clear_bhb_loop+0x60/0xb0 [ 473.629676][ T8565] ? clear_bhb_loop+0x60/0xb0 [ 473.634372][ T8565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.640454][ T8565] RIP: 0033:0x7fb236f9fb19 [ 473.644878][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.664497][ T8565] RSP: 002b:00007fb237ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.672922][ T8565] RAX: ffffffffffffffda RBX: 00007fb237225fa0 RCX: 00007fb236f9fb19 [ 473.680900][ T8565] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 473.688878][ T8565] RBP: 00007fb237037b70 R08: 0000000000000000 R09: 0000000000000000 [ 473.696857][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.704834][ T8565] R13: 00007fb237226038 R14: 00007fb237225fa0 R15: 00007ffc7da42a28 [ 473.712833][ T8565] [ 473.732764][ T8565] kobject_add_internal failed for queue (error: -12 parent: md4) [ 473.839608][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.865448][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.876484][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.885393][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.914693][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.918106][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.938957][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.949831][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.961459][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 473.978726][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.993195][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 474.001968][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.468779][ T8594] lo speed is unknown, defaulting to 1000 [ 474.477467][ T8594] lo speed is unknown, defaulting to 1000 [ 474.485366][ T8594] lo speed is unknown, defaulting to 1000 [ 474.523486][ T8594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 474.577826][ T8594] lo speed is unknown, defaulting to 1000 [ 474.590874][ T8594] lo speed is unknown, defaulting to 1000 [ 474.601656][ T8594] lo speed is unknown, defaulting to 1000 [ 475.560346][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.570868][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.578907][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.589083][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.597123][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 475.604350][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.685231][ T6114] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 475.879660][ T6114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.933730][ T6114] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 476.013474][ T6114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.111309][ T6114] usb 1-1: config 0 descriptor?? [ 476.508849][ T6114] usbhid 1-1:0.0: can't add hid device: -71 [ 476.557887][ T6114] usbhid: probe of 1-1:0.0 failed with error -71 [ 476.669262][ T6114] usb 1-1: USB disconnect, device number 10 [ 477.435437][ T6114] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 477.681850][ T6114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.777705][ T6114] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 477.901214][ T6114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.076063][ T6114] usb 1-1: config 0 descriptor?? [ 478.391478][ T8608] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 479.639077][ T6114] usbhid 1-1:0.0: can't add hid device: -71 [ 479.655264][ T6114] usbhid: probe of 1-1:0.0 failed with error -71 [ 479.725834][ T6114] usb 1-1: USB disconnect, device number 11 [ 479.799844][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.832324][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.841637][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.861264][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.869811][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 479.877480][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.343099][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.356704][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.365798][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.374620][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.382239][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 481.389652][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.883477][ T8631] FAULT_INJECTION: forcing a failure. [ 481.883477][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 481.900239][ T8631] CPU: 0 PID: 8631 Comm: syz.0.1188 Not tainted syzkaller #0 [ 481.907663][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 481.917765][ T8631] Call Trace: [ 481.921072][ T8631] [ 481.924044][ T8631] dump_stack_lvl+0x188/0x24e [ 481.928796][ T8631] ? show_regs_print_info+0x12/0x12 [ 481.934040][ T8631] ? load_image+0x410/0x410 [ 481.938590][ T8631] ? __might_sleep+0xd0/0xd0 [ 481.943225][ T8631] ? __lock_acquire+0x7ea0/0x7ea0 [ 481.948310][ T8631] should_fail_ex+0x390/0x4c0 [ 481.952189][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.953024][ T8631] should_failslab+0x5/0x20 [ 481.963448][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.964630][ T8631] slab_pre_alloc_hook+0x59/0x300 [ 481.973489][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.976592][ T8631] kmem_cache_alloc+0x56/0x2f0 [ 481.976619][ T8631] ? __kernfs_new_node+0xe1/0x7f0 [ 481.976647][ T8631] __kernfs_new_node+0xe1/0x7f0 [ 481.976672][ T8631] ? __lock_acquire+0x7ea0/0x7ea0 [ 481.976699][ T8631] ? kernfs_new_node+0x250/0x250 [ 481.984679][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.988427][ T8631] kernfs_new_node+0x148/0x250 [ 481.988468][ T8631] __kernfs_create_file+0x47/0x2e0 [ 481.995491][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 481.998368][ T8631] sysfs_add_file_mode_ns+0x233/0x2f0 [ 482.003769][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 482.008763][ T8631] internal_create_group+0x490/0xce0 [ 482.008812][ T8631] ? sysfs_create_group+0x20/0x20 [ 482.008836][ T8631] ? sysfs_create_dir_ns+0x167/0x290 [ 482.008865][ T8631] ? sysfs_warn_dup+0xa0/0xa0 [ 482.008896][ T8631] sysfs_create_groups+0x55/0x120 [ 482.008926][ T8631] kobject_add_internal+0x65e/0xca0 [ 482.075656][ T8631] kobject_add+0x160/0x230 [ 482.080081][ T8631] ? kobject_init+0x1c0/0x1c0 [ 482.084781][ T8631] blk_register_queue+0x94/0x3d0 [ 482.089750][ T8631] device_add_disk+0x644/0x1020 [ 482.094604][ T8631] md_alloc+0x7f3/0xd00 [ 482.098762][ T8631] ? md_notify_reboot+0x330/0x330 [ 482.103782][ T8631] md_probe+0x53/0xc0 [ 482.107763][ T8631] blk_request_module+0x26e/0x290 [ 482.112785][ T8631] blkdev_get_no_open+0x33/0xc0 [ 482.117631][ T8631] blkdev_get_by_dev+0x77/0xa60 [ 482.122490][ T8631] ? __rwlock_init+0x140/0x140 [ 482.127252][ T8631] blkdev_open+0x119/0x2d0 [ 482.131664][ T8631] ? blkdev_mmap+0x1a0/0x1a0 [ 482.136247][ T8631] do_dentry_open+0x7dd/0x10b0 [ 482.141035][ T8631] path_openat+0x2674/0x2f10 [ 482.145627][ T8631] ? kasan_set_track+0x60/0x70 [ 482.150385][ T8631] ? verify_lock_unused+0x140/0x140 [ 482.155582][ T8631] ? do_sys_openat2+0xdd/0x4f0 [ 482.160362][ T8631] ? do_filp_open+0x420/0x420 [ 482.165066][ T8631] do_filp_open+0x1ee/0x420 [ 482.169605][ T8631] ? vfs_tmpfile+0x490/0x490 [ 482.174271][ T8631] ? _raw_spin_unlock+0x24/0x40 [ 482.179158][ T8631] ? alloc_fd+0x590/0x640 [ 482.183503][ T8631] do_sys_openat2+0x14b/0x4f0 [ 482.188198][ T8631] ? do_sys_open+0xe0/0xe0 [ 482.192628][ T8631] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.198613][ T8631] ? lock_chain_count+0x20/0x20 [ 482.203465][ T8631] __x64_sys_openat+0x135/0x160 [ 482.208319][ T8631] do_syscall_64+0x4c/0xa0 [ 482.212749][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 482.217424][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 482.222101][ T8631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.227996][ T8631] RIP: 0033:0x7fbeae39fb19 [ 482.232410][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.252036][ T8631] RSP: 002b:00007fbeaf1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.260451][ T8631] RAX: ffffffffffffffda RBX: 00007fbeae625fa0 RCX: 00007fbeae39fb19 [ 482.268443][ T8631] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 482.276419][ T8631] RBP: 00007fbeae437b70 R08: 0000000000000000 R09: 0000000000000000 [ 482.284387][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.292355][ T8631] R13: 00007fbeae626038 R14: 00007fbeae625fa0 R15: 00007fff424241c8 [ 482.300337][ T8631] [ 482.313957][ T8631] kobject_add_internal failed for queue (error: -12 parent: md0) [ 482.757914][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.767651][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.777926][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.787148][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.794729][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 482.803540][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 483.144203][ T8652] siw: device registration error -23 [ 484.000935][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.011664][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.023594][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.032318][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.041622][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 484.049030][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.291841][ T4477] Bluetooth: hci0: Frame reassembly failed (-84) [ 484.412221][ T7964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.421326][ T7964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.429458][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.439239][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.447075][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.454352][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.525162][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 484.727633][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 484.746575][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.765083][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.786604][ T5888] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 484.805058][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.813105][ T5888] usb 1-1: Product: syz [ 484.817951][ T5888] usb 1-1: Manufacturer: syz [ 484.822564][ T5888] usb 1-1: SerialNumber: syz [ 484.850422][ T5888] usb 1-1: selecting invalid altsetting 1 [ 484.865593][ T5888] usb 1-1: unit 6 not found! [ 484.925289][ T7964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.934396][ T7964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.944230][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.952173][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.960041][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.968148][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.254853][ T5888] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 485.284459][ T5888] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 485.300853][ T5888] usb 1-1: USB disconnect, device number 12 [ 485.411550][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.422783][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.431074][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.439996][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.448764][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 485.458954][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.530354][ T8387] udevd[8387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.855394][ T7964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.863850][ T7964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.874582][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.882952][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.891396][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 485.900089][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.139035][ T8682] binder: 8681:8682 ioctl 400c620e 2000000008c0 returned -22 [ 486.263913][ T7964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.274875][ T7964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.283540][ T7964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.292151][ T7964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.299810][ T7964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 486.307164][ T7964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.325134][ T4294] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 487.717858][ T8692] CIFS: Attempting to mount \\127.0.0.1\share [ 487.724260][ T8692] CIFS: VFS: No username specified [ 488.095157][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.103476][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.111857][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.121025][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.128620][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 488.136970][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.712242][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.737891][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.747305][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.755327][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.764104][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 488.771743][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.588531][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.600419][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.611526][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.627687][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.637329][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.645387][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.305522][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.315345][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.324725][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.334117][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.343312][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 492.350725][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.565109][ T6840] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 492.771974][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.781911][ T6840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 492.792832][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.802296][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.811456][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.822306][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 492.830541][ T6840] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 492.838414][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.845658][ T6840] usb 6-1: can't read configurations, error -71 [ 492.946633][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 493.145156][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 493.163097][ T5888] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 493.172462][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.184603][ T5888] usb 1-1: Product: syz [ 493.189774][ T5888] usb 1-1: Manufacturer: syz [ 493.194416][ T5888] usb 1-1: SerialNumber: syz [ 493.221458][ T5888] usb 1-1: config 0 descriptor?? [ 493.348921][ T7964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.357671][ T7964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.367648][ T7964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.377894][ T7964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.386646][ T7964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 493.393979][ T7964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=1105 state=3 status=67 (errno 32: Broken pipe) [ 493.645726][ T5888] airspy 1-1:0.0: Board ID: 00 [ 493.650580][ T5888] airspy 1-1:0.0: Firmware version: [ 494.313673][ T5888] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 494.353795][ T5888] airspy 1-1:0.0: Registered as swradio24 [ 494.365448][ T5888] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 494.396226][ T8743] udevd[8743]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/swradio24': No such file or directory [ 494.479663][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.489980][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.503280][ T5888] usb 1-1: USB disconnect, device number 13 [ 494.508362][ T4471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.521445][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.530397][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.539515][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 494.553661][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.677005][ T4471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.753033][ T4471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.843490][ T4471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.625347][ T4471] IPVS: stopping master sync thread 5228 ... [ 495.864350][ T4471] device hsr_slave_0 left promiscuous mode [ 495.870944][ T4471] device hsr_slave_1 left promiscuous mode [ 495.877910][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.885954][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.893958][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.901423][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.909479][ T4471] device bridge_slave_1 left promiscuous mode [ 495.915928][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.924533][ T4471] device bridge_slave_0 left promiscuous mode [ 495.930890][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.950809][ T4471] device veth1_macvtap left promiscuous mode [ 495.956971][ T4471] device veth0_macvtap left promiscuous mode [ 495.963060][ T4471] device veth1_vlan left promiscuous mode [ 495.969005][ T4471] device veth0_vlan left promiscuous mode [ 496.517076][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 496.560544][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 496.973950][ T5908] infiniband syz2: ib_query_port failed (-19) [ 497.378600][ T4471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.450049][ T4471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.487713][ T4471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.548096][ T4471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.680205][ T4471] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.771647][ T4471] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.842009][ T4471] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.892853][ T4471] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.836272][ T4471] IPVS: stopping master sync thread 5194 ... [ 499.343981][ T4471] device hsr_slave_0 left promiscuous mode [ 499.350630][ T4471] device hsr_slave_1 left promiscuous mode [ 499.358398][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.365868][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.373402][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.380986][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.388982][ T4471] device bridge_slave_1 left promiscuous mode [ 499.395400][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.403401][ T4471] device bridge_slave_0 left promiscuous mode [ 499.410672][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.423590][ T4471] device hsr_slave_0 left promiscuous mode [ 499.430011][ T4471] device hsr_slave_1 left promiscuous mode [ 499.437642][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.445757][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.453338][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.460869][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.469185][ T4471] device bridge_slave_1 left promiscuous mode [ 499.475617][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.483586][ T4471] device bridge_slave_0 left promiscuous mode [ 499.489932][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.519962][ T4471] device veth1_macvtap left promiscuous mode [ 499.526224][ T4471] device veth0_macvtap left promiscuous mode [ 499.532394][ T4471] device veth1_vlan left promiscuous mode [ 499.538822][ T4471] device veth0_vlan left promiscuous mode [ 499.546204][ T4471] device veth1_macvtap left promiscuous mode [ 499.552226][ T4471] device veth0_macvtap left promiscuous mode [ 499.558525][ T4471] device veth1_vlan left promiscuous mode [ 499.564315][ T4471] device veth0_vlan left promiscuous mode [ 500.150645][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 500.202138][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 501.063757][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 501.105354][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 501.371162][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.377650][ T1281] ieee802154 phy1 wpan1: encryption failed: -22