last executing test programs: 15.184327528s ago: executing program 0 (id=105): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000300)="e0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, 0x0, &(0x7f0000000340)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1c0000004a008102e0", 0x9}, {&(0x7f00000001c0)="0c74c75350f4a590e15c61c7942348092734fe", 0x13}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x238300000000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) socket$netlink(0x10, 0x3, 0xb) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x5, @loopback, 0x4}, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}]}, &(0x7f0000000280)=0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="efe48cedbc77317467"], 0x9) write$tcp_congestion(r0, &(0x7f00000002c0)='cdg\x00', 0x4) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) syz_genetlink_get_family_id$l2tp(0x0, r3) 14.555829908s ago: executing program 0 (id=112): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) (async) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xc1000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c12f182534) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x1}) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x105) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xbd3ec5134c5539d5, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/133, 0x85}], 0x1}, 0x5}], 0x2, 0x40018020, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000640)="f4416eb4e859495d589fefa788a8", 0xe, 0x24004080, &(0x7f0000000680)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x5}}) 12.140709498s ago: executing program 0 (id=124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x560b, 0x0) sendto$inet6(r0, &(0x7f00000006c0)='X', 0x34000, 0xe0, &(0x7f0000000880)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002a9d7000fbdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="05003400020000001400490001ac0f000aac0f"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "07da1d3d10"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "257efca034"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, 0x0) write(r2, &(0x7f0000000a80)='7', 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xc, 0x6}, 0x9c) 10.955590137s ago: executing program 0 (id=128): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000023c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002440)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000045ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00", 0x2000, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004580)="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", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r3, 0x0, 0x460e, 0x3) syz_fuse_handle_req(r1, &(0x7f0000006680)="3a69d0358b8795b71fb19ffb73d1ed252afb0895807a7e94a0346b6f78500dfab89a799512e9adc53895c99770832097a86550119e85466c39ecc6b06924aff6f66ad59bf5de83fe35bdb59398cb9a4f137ff943ec8080303cb8f834c157491e1d0cd7811dafb3eda50dcd416d13e2d258a701caac54b98d5b6827ea423fcef9c0c7c9be478948cdbc81bec3f6ad71be0989815e48effa428e6b8d8cb7444d5a743e18da288fbf182535b931f5852f75f3fe6e69b95203532873f838a21233f4ee780bf1ea352b5f0551799711bc47c527c1489c964f5212d68a5a58978d5e40e7ba448d07c7560ea8102991cabdec6162dc359b2ea7f282ca8b208b1411b8b9e562069a47a32f85b7e788291f1dcd9237b8344b5adfca065afcb8eee0df35f7cb473cce75dd7798f94aaf705e743585d339570afa9e62e5db4f86c81b85a8c33bd2a4cd442ea30dc67f43c3cc36f14f3497eacb7e6952be9ba1a2c011e7278efaca5046528985f75511660e2902743c9a67b7830b1683ffb2031df8d03b9113f65c6b2bb38ba4c54d79158fff175a1e4893218bc12f75e115357d1a93afccd1ce4228b74931641e4d13e21f61c28b00f263fc656c6d3a3c4d7e91cba98c2b7ffeeda2ff00d836c6e7bf5b38906cc810ce71f270eebe8ebc8b60c9fbd084bf5163accec37293d2e79b679f1e58c2a853b34f5d4977d6db5c19d2c1cc0efcd5426b72f869d33b1b4403db0ca579d2d8e5c130d127134e6fca56d1bef8b101d56ba072070552a1e7a9f8a40ec07d7cebb0b563a0b94e474ffbbc8fc494c2d42ed3d1a1295c38e059539f3fe4fb1940145fee0ca451adafb7bb82bf1c345718ed2cb905cc76521320716f3a9c1592fe0d518a0360d1c1d01d252bc080df5e37fd2cd713fcc96db9dbbb957c9b8e7bf1d23978466d09b1f9f7deb213297fb3ae0d50881d2f176a442eab9fcac815e62dfee050c7861538c961a1d74648a376abe0a90cc9e519151f5bdf4a1bc0ffdf8b5e8427ffb74f54b965912e0faad0785f6589d7972f39fa378c4b3e4a24bfa84243c9dbe40b17b26dd6605229f35762a61c1c92cc2a86d837ee0092d203b7523d71c941dadbb1bcd78f44b7fb14aeb7acc6c75ecc22bb5c3fae741ccf68cfb4f8c6fd2ce80e9e55a5b4bd3452fca54ddbbcd26afaf1a780a556f70be6218f51ae3591b0073c58042b6323dec0caf80cd2f9fac1f4a7ecf4dd356ea20be93c5224ab24e4ed5127551d1a7b6d27297df5c7f5d999c7d2d5ae3869166fda30de5394bcd0662e1df668cf9eb60a1c44b61424b40e0c1c14b1375407be5df5d6f5b5a5fe42e873e8ad80bd03c94c418ad9fd0dbcf9aba10ed89ebdc1b6b23d5472a5eae77a11c44df02f981f0de36813903a719f54e0932b6adbf97fb20b449ea9e8d27eae1df823f0696f19a180bb65b86f7413110b039c5548178b247434485519eea60e808e3296f313743b7f239ead437dbd70b6e4dadb8af29d76044534a51b80bc9538503d107aeafb39d5e5ca395473492aaafaab8131278c5025d4715567f52f6f21c843697d5c026fcacdb32f8b27f1a104a87110941f6f66ffeb6543cbe5b8ba2a921bba3a63a88b4061039a3e28904b97ebf3a4c83dc712207ce8a6f9e077ab3d3981201dfe3426a6346ff3b282678e71908b56d7c1233ef5ef175df62883a21bb16dc261ef0f8a7e7a2a2e0ea3d1b748b5ea3bc1a12f7204e9571dd80b5f47fd0b72cfa9bbe2ed76321cb3a9a217be8e0e8dbaaa0b54b5897ef78e820caa179b4d9cdc64d3d731c634c45258f62307cb4c0f8e35971bb86c49d14be56e5464d99218d41ea9b8636abcd8bf00fa98b3d765a847b64ef2bf573f227d39a201e5706e332e94ef84cc85ae16ac058109942c6789374806363984f9a5727b973d250fb5115dee0888df79192bd4fb8412c13c4c4e1ca06b5d9442cd84056dfcf0327bdf5a2de82364266113991cf091ac16874d4d77f9e9d8c45aa830b8930425bc34a68948497cfbfb651d213682b5b3e2a62ee102c673f53f0cc7c3c1a1e8141895aee88f813ae501fec0e82430f0224496c29d61a0965eb29568b67c53b9c8b5a49adc3f58db1c9c9a2d664ce4cee4f90ecfe1210813d152c8a711704765727dedab05f58948c25ed1ce350bb2361bb734b0ffd4316b9235279d2a79f756380b7ab4f9904b386067f9f722ce58a2680006e76bb792e05f6ba0bf2f7da9e875a9772456d8e0d65cd6276acf5ceed8f7e1789bd90e2714a18f112458fe7f832f278c5058f3a761a8b6f5e9b114e78ea84929ac0a5a757a2cfc13c26e45c3a29292506ee3422f14a7dcb8e07bc8822b6da71756bbe41f869a686b95b9b59cad26e567c55ec762f522adaa25e1852cdd2fcfb7df27bb70d6cc20d0d772892cb225d4abe9975e5ec8e3c00cc0f74ee8938a18c007bf7caef0a1e4ec6403b30ae8ab4dd6b27cd8c548219e139903f4a4e3045fa1973ea47d1fee3d1983d35f2d5c7a21328ff0ff203c397886379ac4f2aff4e40d7802ddb7ad87b74ee82c2b3435d93668a27260c341f510af51cb381dc90d81c065efbb317aab65505114fbd9b8e9650b79b6157275cdd69dbd73d020c0a703b804df00e3348be5541ff9516999ef932f15783de2ff4567c3d576b0f4a38bfa739cde8e8ac2191400c63597823cf382db418129032ddd96b9ec816f405b556af7f9b5999122d3ff1bdb5eb46b8411dd154b854fd3a35320168142be36a641534df1fda6ce982fa7a74f985c1c69023e84c93d15c3f8b64639fbac6e0e3e746121f90537cabb5d268e91c5654bd9c605f71b34a79f131602f88681f445b7fe339a242a76c19e0d7c46445296f9c9a039052ae08821781b545a3bba5514e03f204f1491b673167b464049f83cac06c78a93f50883179cae8678360d5c1c567a70f8060312f722f38b7965cd1ef1e57fb21b9da448964e174692b79ef8c9bdb1f834ed9bbf2844c7957eaf2ebb3e933e94afbdfa6949a5935cb38a2aac88855124432eeaa9a974346c04ee4f6e072dae06af6d2d29c6eb2a130b23958d3aea3cfa6947f9130963987e56e8692a57b505cc8f4ed1966fedf8fb69eb384d8c62668979ef5aad64753264446e7fc24265cecea4a5e4a408774f249058637febc5b22beb8e24b390eff5ca08a8406f10a0d1c4cf043b354c72971507095a4890b880dd5cb2ff532e397b8198b13b1da26c9c66f8f8ec8d6be44cb7a128c97e73299958182ce5515fee98eb2cccc5e6083ab5ea0ae673f07f57d688063898e1d0361f88915372b673b9809beb7cea1744c8a3512275dfc95b18c007257c5a7201f645214a5a422167858b30ca6616cb5544dfe48825ecbbfb61bc4ecc1973206a33784c0db19ab116d15de145dfb65ee262bbbac6b68faeea9f84e3bdd0266d3814ae6f6b9e285ea372507b65201e6f45234f4873205c6b88d73a363cc9c18aebffb9bdd16e4eb5cafbd34d1a623da1e77cf5959ff12d3caca9ddf63aba1f7465cd60416b82336e67228c4febc5f0e6bcdf478e6d6cb827e06d86aeb6891880cb650bc9be859dcd572071b2f065bdc5cca1969628e102d3f781599203db7072c4e4bfe957f59fbb269a8bf4073985e6e876681d225642a94a1534d2e7d83bd3257c9bd6e30f1e3eabdc7d641acb9de3ba963c17a3c5fa11c98abb78226c702fce43fb3e764deba0686895074c7712543ca12f4a4b2be2639a83dae56b84bc2bab94642ef81adb60d177a8fc97c5561f2732bd0c421535b24dc557d518533cd2b55cd3b4c0cac986d0de2bfe498bee1852b7c7ca0d10e6bfadbab9e3320319e82df61c84360edf85af4f6cb9e56a84001e2a94697bccd7985a5d5787d7450fc62738a039c3899ad6b0e116e2e4892926a114d40fae98acfa5a9135987381532ad0f9d9b0d56680c18b79ecdc9720b47036d1329a17901b0dba4f1cdb9e28b34a28322b0f86828f66482ae59e01839db2d792b3638f3b9aa73275bf1c4d6ab971ab9aa153ac4609d3983fdf3d7b28484b74f6416bda1f456bb043f1846d74132e9c3b7499c9a319294b450c542a5e8a139b6ba9f33762da5785b520362f16f6867dd5fa4877317c4252336e06b2306bc465617f6e156b0a5ab7a700ae3430a6265647ba4e5fb4cca96bce614251026a809a59aef62a9f94249f90e5507aa4fdef0e97d812244f324e4438eb834a49ce6e2c0cdaa4a922c9dbe76c9e39d2588bef339676a11b167eed69b83f9c678da4f128e2f266ef5337857635c4d4b20bf7613b50843faed7f7506dab0d9ab891f0994e20414cd132d20898c5b028a659aaa06fef8e04086645e6088e9d363edbca9bc61ec7cb01b3be3b102621205920f7038038d41ee6c2aa01c9bfc5abe23d507650f3290fc0646eea411fee95c694a913b17fbffff078ec9c8c22f6e2e92a3ae0d033d29c7bcc7610aaa5d70f2f9ad04ef75b5400e9d71e00f210a9276fb5fcdefce6f31c9fbadac657870655dfee0490400138637e34a9b637340b1a7ad21360bd935e5e135ac59633274783afc23239c4959824431640fc8d349732c88df93a913ee2243d07b3ccd11f1e560706747a03913bd3bf85839b528f6935fe2978b321f0a2b8b750c8cbb3c18d57efa35f594efb97b330b8d90763a1330e60a0234919021b914f9596a40a268e3f9ed17a1e906aa4775bb1b78258057f96922a5ac9ca03580ad0e0fea0435f15747c4da1f1d367578b549c8a6e1d270805aa82479917544883b792bd0493ff57392c3667216f2aa4fe754026f9642dfc85b57b04dfe4e31ad7900c85a7eca8fd940b9d746212fc43581f0a33bf3a9043d992cd4da8e1aabfe33c837f5076b22df6922926a8789e39a062a98e730637c4817e27397887816c1282c3a05af928b8788f8e00b09c312c27012c8311dc3f7c71e139d5cea56e89cf871d6dc5b2ad6ac748be13770f8c865a56ba4a05ff4026d18773cbdadb82ff513fc9df3a42523e9d65a54fcffadc3f026c84f9349a1404df5a5a24fab3fcf1c152c4dd799849f2adb35e9032e1f21440e181e3dbddf6a9d9886c40a62b6b0f4e9a258c9eeef63e51ef1d1a8d5f40a573204fce675983fc7c01213ecad4c6ce47de8c2100a4e2fcba11a1e382e99b93f65aaee22aafa09a0fca1dd0b641b17775314748bfbf1555a2df601b74cf73e8223dd5f28e3589df3b70d6383b80dac7440bde4644e65cb09cfa89d0cde0b5c9a5a6e68448103c5d1033e39f779ba1adf904d094cf92f4cd8b16273beaf747815d8b6f5f2c7def0ba2a3c96ed1e36ecda7f4783c2db6b34eab0bb287cd29f96e72a6a51e60d65bd5da7c459c0f5d03a826143180a18d059605bf8b030bdb13e57e85e87f166e4d6db87079060c62583b525c321b2d5ce198b3a28d94e8904b2034d792c16aad307bba3aac982270c3175248944db5fafb4cb1e0fde74337663eced31ec0de2d572c3d7b67d13b7e02f95dc4e91b8128e6dbec1f617b8cc56c79ff00b89385a2d7f05c5b35eafd85052de38cf053ed503ee038e1443b6020e529d226e8c9a1c43e392ae577287eb9033b7636ee4afd5c8911c80ca3d7651ce1954d636bee615a1f4123e7222839813763ea184867758a469b040ea13fa022392bcaf8fc8e7a83061a0620ce111e116910164bd47a83163f182b81cd27c6edb1273877bdfa8de178585a6978e8ddabf625f6941203526704a3ed14ae96a30acfa2a487d95187142df8038b8d482668412543793f27c6fc47712aa23e8e803c7edf43f76cd8527aec785b39561a1aa7524558731818f7c4784e23a8aef71e6d0c929a4df520cdd424abd7c3c637b77d98b35802316cf592e2ca36cb18bd0565e2bd1db5952dc63647435c2e88b72dccc4dd312cce9485a4baeb67ccef9a450e6570cc30e3f91768a521eb66cc2f33c4f8b287b89803909a06e7c78a261d9b9e08d1a3cfb9ebc7ff7dc7dc9cd2711f44a80296f14568a973fb02c40d83b61f93301a8d9ab9e3773fa8165145c019b4d16a82eb890d523159e4228ed693b6345be75b9f4cd5b4b6f4ed7854ac5b946cd2cbf76c1ed36d97876b49263a1f418d84917b6e06d07013864aa31a88b65b90a7db6372377ba6dc9d3b68e3fbd20ea5b1d8a152c0684bc96ac5b6420e100c3575b5bb0dfaabbb835d2c74458433c58dc14c70a52ecfedf27409145e80ab561e329e8d3427528c268c5f28b7b2d6acb53d6618c9c7509e24650ce8d7982453106197fdeb79962de069c3dc2ced79a9ec055f8548de5c4a4ec050530dd89007ed8da3b225c62c30abf7668c6523cd0bfe07e2b891b510c4410b02d723458c1f7b60872353ccb695d7e661f853a1084c701ffc3c8739c836c404a8e6004912b199ab848308ded8991c5884e477722be9ecdbba3424b0c8b93afe920e0706fe116f38965d928d96d2103f06b584f783c1b04d68185bd80d35c8b6c88e31486358c3c5e87c93b76d46fb5a224fb2bcc8567dc9d3a55c6ec6f529e3b84288b10df0200ec2efed273bec620982f1370f35d7f9e79ded33cbf5389cfcb686ddbe6d117083e74205b8312255f617f6290c174e61edd543140d79daa0538563b344fbfd15f763aa9109ee179b6cd7368b1527a4908f41dbf45751e8a8cce11e15830794503f4ab7f960f7530ec60e73fbbcd0ae74f91f3d001be7f904cfa33d4f2b5b848996ba3abbc321055723d639a33b0392845d1ea5d8e8f97dcb1f2abd26dc59361834fd2e6856cd4dda7ff00fb2f0e457bffe1b50b3ebd8f002c17a704a43a25fade48e42ecbcb3595341e559982e249ab077093a2d4c785dd28d07e2515768a305594ffe0aa140b6a9c3b98c9bb4fe82ecf3e076164c9be486a370739472d57d28e84cbe2f69c1f84f0d0547191c67424c076a623bc2dbf2e04f82d69d93a4a1a9c5de090c07388cbf0745dcc1fd00fb9602fe5648d62845a8a09a317fdf67a7f63d50477b8fb35677dcbb685e8553a0afed99b56afa55b881612219449c215c19454b4ed6a013d546d44027a3494894569cb0f0e5c94ee9c817db6cf4a612eee11386536552a80d8564f75af026d811c1f0ae84020c62466b630cadd2c78e14f31c5b091f6f16d9e68efb57aaa085453b77ba460dc4a11c0d2ad3fee842f7d1e562b14117df1c83e7684edf93184ea0668f9d20f7fd81f4645618089f254d9ffa379a5c06e3e1504433855b845aa3d9c30295d737d2d705bb51a9b9d6ad65972e7076e854eee5b73d0b87e7e6c05bc158e31c706ef823fcf6e21b0d4d172dd77ae365fdefd295ec31e60406cd215455ee11de3ae1193d0142889577242455c3c07e7e910eb61c239fcaef4cee4736e571c9e3adb64185dd392f1f441a6c7673af72dc86dca5e6b7c203525a287a731b43b6337f19cbd9b0d2fd5b1ee5105ab9173edfb5a817eba3e0df0e04790bf574dbb6579b61de2d48600bc7aa9feb24ed08249a3f8ef123fdb3429a97c3f96c1fa335f850617158bfa5c7ad11dab234d685862eb4a60418afe31c9ecebab9f16ccb05a0b15cfed920528aa59e0bef9dd83720ca58e31902d9183b90bc44a3b7d2fd19dd7345ff61ac6f6ff1ac37dd90bc0dc130fd2e0520b285ac615ca9bb0525964ac12ad42cdee879b77bd22b881f09a6e725092d2251773ddc3bb33c72b2de4e831d92496730677938c9565d36c459ae3e10e8db21d0e6c4fb15312b23a741b6a1f494dea99ba2c7103e84bfc3c55fcdbd8812167739d5eb3f76386082aec27b19d41849b898c70744daf0edcc1c1de022c04086525799b718d91c1be50bf0bb1695288bd15c94447b118ee3e0b2ebb12cfdd22b1534a4251c742530f28bd3daa1da0439e3a9a45ed55cdf33e4568665ef83cef074469e93e6ee505a22468b723577147ef4eee0c7be889275cda7d28052580504040c5e8449e596c4e3005fc8e5a4cd65465f6e3c24e96283d3b8aaef5822fce25cd8473b6bc69b4cbd23cc33c8073dc1cf212edd58ab4a9fa18deb88478bd80af0afc650c8970fea7a29869843071d06af17b6cd56e4dbd88912ad15e9e023762ab8749aff944db0010f885b431648bbb3278c386eb5ecdf91bad6b22d894982c461d9ad4ef825441b851e42ea2ef70b8a7330b7064dc4508e5928a5e016c3eadfa4c9ae0b4aa81142210b2fbe5da159c4539a214d8ffe4171a9cc6f39a8a3dfa8f5fc5f34c8ffd61ac624b594d9b414b1f26ed445608e91a6663b46b728b6aa209b6ba8b1308459a7ff9a3d986e9d9ac924199cee04d461b4dc5ec952ea202b6a98cfbfd6c2029e6a418388d7edbae3314d6c6a4cf48481e9d00884622532be884312b1d7bcac5cf0f25cdfe7a8836d3a1b7e0fe97ca04e8193a853627cad41d97f054a7b276503900d58f028f9e8d7e3110251f666a2fe875260a6639ceb3609882ff15d12297f8f5c0fc6f35d2622d7d727e48caccb2a41bd1d498c40454ddb65ac3999ca5ea7e5b7512074585d7661acdb90292024ad64242b0568f45c1a5cb1b10cf3ba8937036ca7acc272602b1a461e027761a8ded69bcf4940a638c32aab1895377ebb21e9b35f6e64ce864d7a4abc0d9eb887c39b7993e13da7f02b4e86ddad4b7ec0104069e1551acf726f42e8a2af83a11e5176c4e0bcfdd8f5f0f162dc31750b20ba6da597745e7b76f188fedd4ad164a6e25156f2b086aa19cf18d57388de7125760dbcabaa5e675f15672da2e80db6ef91b276574b63b698f8b4d9af64fe3ad6c3940c06ddca77faa22fba47c3d30e9d33aa628eaa492efdede342964c368c2b85fee61b464b3001319678c554dac096fc383a4b68e8f03f82fb1e1292aa28f8894e0df1e550c902146f094205e4e36a0035d03f99ab4d624e2528fca328380a9ed7eabd6f0c86fa0b31137e07f1cf931249b082918ce5e88ae38fe11d96c512aaee5ef713608862ebebb6e3864a235e4cdcbf658df7ad514aaf53f80a06c3fda248b9bc7e1035b22a9f7e3de4fb0fcf4f69680fc16bdeb951130c97adfa2bb2607381f39e199f32ba448b842ac0744c91633a15d11d015a1ee7855e1112d03ac0a8750b878a3abecac186aab8e96d03ccdd480263d3151096914cb4f0b90150621dcd759d69d29b8b9ff3d558c8eaa2643bff7a1d86d5ad07742eeb669803112e3a50ace240ba0e1456076a7d6c7dee8a75a92a9c10871c87ee941a33106c5e7a9e792dfb0e4b767a1cf7615462fd0bdc947454be2c4ae6fa0e8dc068929324465f2879f30aca3792f13890200bf7bd04936005dc1a1a4e236e597775eeb208bf610b736dc962f054680ba78353a5d63d5197ef7d51a9cb43042ddfdae55523b2f78ae4212b2a7161c673be24726c4f0fdc508b309e8446d2bb1114d134cc0ad498310f0f0fa30a89fc43cb344552625c655c21bba97b953644c3a8799fa34fd569a493fcca9a93d53a3c56492e7b660d509f34f537aa7d4335bf9d1d3245845569538359f437e3865b7109b1c8aff142c5faffeba8898c0830366834d43edc2b6318494b822db8fe5d67df7210b1d22a04aed98a5465311cd102b2c9e5cc9356b7179238530018cffd46df7eeaa96512534dde2b35e50e0a8622d42bcb5da03b96dc3827cdc97d915d9c3809968f800888f574b080355035790c7fdc510d29537d58b4df9cb116875ebac15f662e3503de749e1e95c2eb3e6159f1f74d56ba4647939dd460bca9001343c78b2747a449daf32d0c5a35c9484c84e3cbab6d7780225a587dff329790833da3a1b71d56ee63794fa6d4224df8e7f4562bbca73d4d1349e36cdf07c872f5aa50a027f1eefe2962af99c0c73cdc8ef6ba677ee0a6068c8e832f0406f9e7ac448109fcec97986200017d85a79757084f102350fb6936ce4924bf5ff51bef43460885362e5dc4b0c2295c1cbcee607369ee69adcf7c93b1af67c2f758320f65d46585def74d442a8e6babca6496a91bb136997f3b0c82e0c8eb48fdd170aefe5c7b9c156ec2db3a11fabffc7ad1f2c04902d00da8bebb5934d7b46a8e49a63de38aeb5940979ffda7f5c566b938051b78edd2ccc4a8d47c0b70ad690b3c0735c3ae53f558324fbb9c52c91e47b6b78ed4ab591f4c8e037154e637d791c8ba80dda5eec368720be1273773974e5506e9fab39254c0dcb8fad6e71908c476b5048f78aad193e58fe503c63515aa4acd9fd58435f54ba3e5880d84dac3322903504d1b2dd3cef0825617be22b44bd8b4f9c116b5d506c02fca710f10208f30949ad3835575b358ce92ef05cd3bf42c5fb3ebbfa8298503c66844bff3f6b092289dcab21de514dccd33e5a49e6c759b67ce03f197cb634db698ade760e2aeebf21a2563ff48717dd17cdfb394d28adaa1e466904fdbf19a25f3845c7cecb4792f599fbb1282dfd2c36a32bf2b1a9cab1aa9efac6fb8ed974fb78fe049c57e88364bfbf7d77c31d7fb225b36a6927816c32a0aee7ab09694c92bf3c320939bd81454c6de41e99f5416f9e504666d27c741c600b9f6fcecbcef649607d42caed5b3c0aa5919c08ac3ba2d98f57ddbf403d80ff587c5008cd92d2282d726f1bfab5e106661ab7d9a957ed9b61ade108c7a76883318c69a4b4f13ddaf95be544bdb5cf29d62ced22cf423a91917e4336d881888f0ff40fdb3016b17765ce4d404662209038be79917832c2818dd7fbb338d211e583131fe8b1a685bb615a9a5665d48ac4f0ded8462fbafb7992a6c087a06f3412a48b4fab2a84c1ba09f128aed7a1de7edebc67e38b64be81de07938da15ec98480969e1ff738372d1f4b7844cab10ef0e758b670532c1de223aabad5c28a4e88294771388b4b8c40da334780326141fa6a704e87271ceda25b3c09a648d995d5697ebe9a85bad4bd19a6ff5b7ce052550eb1337948bb997595b6e8e5db4f02cae7d26dd695e40c69e465e8918fb399bbd487c1e33db94c9754cf66ea8773932bcc080f70b9d07d3c0eef270d847fb532d22db2e0c56303a15222d0caa51c456a62fb78eafe5eefa913220a8a9238ca7009bd0d3e242e76fdeab718f1ed106f78d3881323dfd0c3aacf2a0b1e537dd6e39850500ee0e71801ad8c9f47d1b5709c305e3f44492c521c7aa4bfc390ea0c7c580be6852803a3b206edb07b64c2d09a795144c81fe1e8fa710d72acb02b3b74b65ee7dbecca6691770612d20b47a14e0a640eeb4bcca6ec5831c59984e43c94b81dde9905a309878a175bf52a40b7baff582f68398645237a1a0751494e73819691acabc6bc6df0bfdb50ca1d277f4d2c0a401cee3424877a221ed169300ec2486f957b565809bfd44d8d6a0db26438937f913b2fc06888d95df9147bccb0010fea9204b2297ecd8275b1937190efb0c231ec8ebfcbac742e947dbe25d126fb0c0f041516a1287ef0f0e14ac8232812fc69b5cad10656a47049c313a7ce26d5938b61bc7bcd6c3558b032d2c5bbf10870020504f01eb2016d82d15d0da0df56c91d80fe9683bdf39abddb884519791c6057d726abe98b1970442e06ed85531948e2e2cd0ae27366c27cc0ab7ec210be97d647a00", 0x2000, &(0x7f0000008680)={&(0x7f0000008740)={0x50, 0x0, 0x4000003, {0x7, 0x2b, 0x4, 0x6a430200, 0x4, 0xb, 0x4f63, 0xa, 0x0, 0x0, 0x100, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) openat(0xffffffffffffff9c, &(0x7f00000087c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000008800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000008840)='./tracing\x00', &(0x7f0000008880)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000088c0)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000008940)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xfc}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000008a00)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000008b40)={0x0, {{0xa, 0x4e1f, 0x7, @mcast1, 0xabdf}}, 0x1}, 0x90) write(r4, &(0x7f0000008900)='r:s/p ./file0:0\f\\\"\"', 0x13) listen(r0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x5) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000180)="a51d484e240000000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e4475117000ba4294ecbb", 0x2f}, {&(0x7f00000001c0)="f2663698d8ab9661b11b5aada2ed772e2df40b277f5f4989c1c2797600ae4882d55d8b98ca7e2728fde7", 0x2a}], 0x3) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x313a, @local, 0x7}, 0x1c) 7.580974889s ago: executing program 0 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060088a800001000040000000000000a000191004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x6f8e1d96, 0x880) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) (async) modify_ldt$write(0x1, &(0x7f0000000140)={0x92, 0x20000000, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r3, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.015146343s ago: executing program 0 (id=151): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\b', 0x6f, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000001, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000f80)={{0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000001080)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0xffffffff, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 6.524183343s ago: executing program 32 (id=151): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\b', 0x6f, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x80, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000001, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000f80)={{0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000001080)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0xffffffff, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 5.554609993s ago: executing program 1 (id=154): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0xffffffff, 0x0, 0x0, 0x800, 0xffffffffffffffff, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1b, {0x1, 0x1}, 0x1, 0x2}) (fail_nth: 1) 5.088587849s ago: executing program 1 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)={0xd4, r1, 0x105, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xa4, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x1, @random=0xc9e, 0x3, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x2, 0x0, {0x7fffffff, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xe, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}, [{0xdd, 0x35, "ab8031bcc20890076dbb7e20f9635fedb5839c76e153cfd88392e51552182eaa4eb7d3f6e6bce10530b2b6f4f7b323259cbc04aa6d"}, {0xdd, 0x6, "545f405743b5"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xd4}}, 0x39db77225c63fa4c) 4.941443468s ago: executing program 1 (id=157): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x801, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000300)="dc", 0x1, 0x44004, &(0x7f0000000340)={0xa, 0x4e24, 0x7, @remote, 0xc5f}, 0x70) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x80000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1a0, 0x0, 0x7fffffff}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="86c45b8cb0a6cbd8e3574c47c03ba6074e4ea37447418dd15f97e8a129debc1dffd6155e8e3446a320f7238b74e0262c637a14d04f48dc79c6799e482f294593176e71fa5d3870baf712356b"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x82) 4.406527282s ago: executing program 1 (id=160): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x80840) syz_usb_disconnect(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000014c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001500)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001540)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x1, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) syz_usb_connect(0x4, 0x24, &(0x7f0000001440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000001480)=0x6) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000098c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x2220000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='N$') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) writev(r3, &(0x7f0000009900)=[{&(0x7f0000009940)='2', 0x1}], 0x1) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="a92f47234f8aa7f62037a4453dad806feda63cee50dcf7a488f9f58003e6fef9b5f01620c4ce94b53d89a2128aca278c27c64e1c7b3e2f13d3c8f4977c19c37f1150ff", 0x43}, {&(0x7f0000001100)="78a9144d0fa6973ad8d54cad5e38c581cb2f90b5c4970a2551", 0x19}, {&(0x7f0000001140)="3593ade062f23d3b38fb3029c3f9db0ceb33fc869c1078e2150fddea356fa4544e6a2539003b9a80da8f93cdede450dc4199a915abc7e016b50fb301996736279b20c20082250afc910518cefa78c2b47ff77a9e543f8af27cd58322d04d51d8e386ffb2a457dfe770a78b4cf0c18a09d12a897b56fb78c7444c3aad3891856a8ac056cbea002c7f2e7e90a2531f6e74f16dbe7e4282ff8c6e24a6be890652c5389bd2f2ae5ab96db6ea79ae9567a4353f820f9a5efd1fd733b052fd6a592d0b837bc0ccb0a1f396bc52f7788e56bd8acb1fd137a755cdb8c4e31a9a2140ddea795d3e08743373475abbabf3b0efda03dd255b6937d1", 0xf6}, {&(0x7f0000001240)="eca65c49032c9f647796891d0ad8ada33c9be7a72454b9710e88569acdd6b8240d00f38a87dbe97ebeea71fba18d3d344853e70893a3e7d030dce82dd41adeea9c43b2ae77e23d4aa2a2", 0x4a}, {&(0x7f00000012c0)="1ae4e534a892d8fa0bee29a8d8ac23a02be16fcf6dde540404ea4f643bb35fac56797f534db57c15f43660a2fa", 0x2d}, {&(0x7f0000001300)="85b8ff8a632adf319caa02f3ce059e86bf98a978f152cf5e9f4aab6b37f81235294bc7814d269a62388349579d1c3c91b1aeaa10eef5e7b4ad3328eb9a598fa7a8408712972f34722192560da5de988f31d82ecf44", 0x55}], 0x7) 3.18714617s ago: executing program 3 (id=168): r0 = socket$inet(0x2, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24a70e", 0x2c}], 0x1}, 0x30008b08) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) sendto$inet(r0, &(0x7f0000000200)="450000280001400040063ccd7f0000017f000001", 0x14, 0x0, &(0x7f0000000240)={0x2, 0x3039, @loopback}, 0x10) 2.670181891s ago: executing program 3 (id=170): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x600, 0x4) 2.468006333s ago: executing program 3 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 2.421871461s ago: executing program 2 (id=172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004540)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000300140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x6}, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000000c0)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x7fff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/16384, 0x4000) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x85, &(0x7f0000004180)="e5d23fab1adfe9d15fd79ceb73384d7d70e2ce69f74c45f487884e13fd7f93ef3e9cdc91b3ddeacc6f76b4759cc2eff470e2bd60a7653952a85e6f0b54e4982bda32553db2b330cd7d511b56a30caf3f7fc55a88c8f845a1291542770d7142a50e2ac06d9f98319a3507c9117c5b60655892fc4eae9e1a0a22a20825418a4c69606430f516", 0x80, 0x6, 0xe97, 0x4, 0x2, 0x3, 0x6, 'syz1\x00'}) bind$bt_l2cap(r2, &(0x7f000000b0c0)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_usb_connect(0x0, 0x47, &(0x7f0000004340)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102"], 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000004300)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000004640)={&(0x7f0000004380)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000043c0)=[{&(0x7f0000004400)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c001}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000004440)={0x0, 0xd8f}, &(0x7f0000004480)=0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000045c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000004600)="3b000300010001", 0x7) 2.314051186s ago: executing program 3 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)={0xd4, r1, 0x105, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xa4, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x1, @random=0xc9e, 0x3, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x2, 0x0, {0x7fffffff, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xe, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}, [{0xdd, 0x35, "ab8031bcc20890076dbb7e20f9635fedb5839c76e153cfd88392e51552182eaa4eb7d3f6e6bce10530b2b6f4f7b323259cbc04aa6d"}, {0xdd, 0x6, "545f405743b5"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xd4}}, 0x39db77225c63fa4c) 2.11203796s ago: executing program 3 (id=174): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x7, 0x1, &(0x7f0000000040)='\x00', 0xe, 0x0, 0x458, 0x58, 0x3, 0x3, 0x5, 'syz1\x00'}) (fail_nth: 2) 1.740072441s ago: executing program 3 (id=175): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_delete(r0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x802200, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000004c0)=0x91b) read$dsp(r2, &(0x7f0000000500)=""/4096, 0x1000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004020000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x72}], 0x1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write$dsp(r1, &(0x7f0000001500)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r2, &(0x7f00000017c0)=""/232, 0xe8) 787.582541ms ago: executing program 2 (id=176): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xff97, 0x0, &(0x7f0000000cc0)={0x2, 0x13c4, @loopback}, 0x10) 593.750585ms ago: executing program 1 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x1000000000000) 511.903778ms ago: executing program 2 (id=178): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 483.076621ms ago: executing program 1 (id=179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x5, 0x2000, 0x2, 0x4}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000fc0)=@req={0x40, 0x0, 0x7fff, 0x5}, 0x10) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x84200, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r4}, [@raid={0x0, 0x3088, 0x0, 0x88, 'raid\x00', {'raid5_ra', 0x20, '3 64 stripe_cache 256', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) openat$comedi(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/comedi5\x00', 0x404180, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x200010, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800003}, r6, 0xb}}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000cc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd978}, {0xa, 0x4e20, 0x7ff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, r6, 0x7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000c40)={{&(0x7f0000000ac0)=[{0x0, 0x5a4, 0xfffffffffffffffa, {0x3, 0xa284}, 0x8, 0x7, 0xb299}], 0x1, 0x40, 0x7fff, 0x8}, {&(0x7f0000000b00)=[{0x8000000000000001, 0x5}, {0x4, 0x604}, {0x3, 0x1}], 0x3, 0x10, 0xa, 0xb}, {&(0x7f0000000b40)=[0x7, 0xba, 0x2], 0x3, 0x8, 0x2, 0x10}, {&(0x7f0000000b80)=[{0x7, 0xb5de, 0x1000, 0x2, 0x2}, {0x9, 0x5, 0x3, 0x25, 0x7}], 0x2, 0x28, 0x7, 0x1}, {&(0x7f0000000c00)=[0xe62e, 0x1, 0x6, 0xbb], 0x4, 0x8, 0x4, 0x5}}) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1\x00', 0x1ff) syz_usb_connect$uac1(0x6, 0xef, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x40, 0x7, 0x6, 0xff, 0x2a}, 0x118, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x404}}]}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/nullb/nullb1/power\x00', 0x1, 0x18) write(r9, &(0x7f0000000880)='1', 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write$FUSE_IOCTL(r10, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r10, 0x80045005, &(0x7f0000000740)) 424.038604ms ago: executing program 2 (id=180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet6(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0x89e0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000003c0)}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcffffff1000000008000800040000001800018014000200776c616e300000000000000000000002080007"], 0x3c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000000040)=""/140, 0x8c) 55.801296ms ago: executing program 2 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)={0x148, r1, 0x105, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x115, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x1, @random=0xc9e, 0x3, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x2, 0x0, {0x7fffffff, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xe, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}, [{0xdd, 0x35, "ab8031bcc20890076dbb7e20f9635fedb5839c76e153cfd88392e51552182eaa4eb7d3f6e6bce10530b2b6f4f7b323259cbc04aa6d"}, {0xdd, 0x77, "545f405743b56f33005274e202d7b81e9bfccd9087e8c088c278e00164839c8a10834a0ada1220c90cd5c6c688abe18493c2d907b6f9e5721a5b9c9df90bc643e4c8be340e6fabd88d632523dece7d7d22db351c6e781ef6bd3cd8a62d3ead0c3218c3ece49c6238bdd7dcbc4fc3f962b3ca24511b6d68"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x148}}, 0x39db77225c63fa4c) 0s ago: executing program 2 (id=182): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc01, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000380)={0x4, 0x32, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x24400, 0x0, 0x0, @by_dev={r2}, [@multipath={0x0, 0x54d0, 0x0, 0x78, 'multipath\x00', {'1 retain_attached_hw_handler', 0x20, '1 rdac'}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9a4ee504b98d1bf2, 0x0, 0x0, @by_dev={r2}}) (fail_nth: 6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 74.058700][ T5630] cgroup: Unknown subsys name 'net' [ 74.217825][ T5630] cgroup: Unknown subsys name 'cpuset' [ 74.227896][ T5630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.814110][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.104419][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.122100][ T5652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.122475][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.127110][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.127738][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.135289][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.135711][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.136307][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.147686][ T4961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.153441][ T4961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.155702][ T4961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.162136][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.165586][ T4961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.166953][ T4961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.167527][ T4961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.172001][ T4961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.177681][ T4961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.194430][ T4961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.194640][ T4961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.207664][ T4961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.936373][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.941676][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.965361][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.053833][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.196714][ T5641] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.198629][ T5643] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.330089][ T5642] infiniband rxe0: set active [ 79.331788][ T5642] infiniband rxe0: added rxe_eth0 [ 79.348841][ T5648] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.364653][ T5642] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 79.364699][ T5642] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 79.364734][ T5642] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 79.444554][ T5642] RDS/IB: rxe0: added [ 79.444912][ T5642] smc: adding ib device rxe0 with port count 1 [ 79.445001][ T5642] smc: ib device rxe0 port 1 has no pnetid [ 79.473571][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.500563][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.821515][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.049472][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.049577][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.050031][ T5640] bridge_slave_0: entered allmulticast mode [ 80.053195][ T5640] bridge_slave_0: entered promiscuous mode [ 80.133736][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.133819][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.133899][ T5640] bridge_slave_1: entered allmulticast mode [ 80.136653][ T5640] bridge_slave_1: entered promiscuous mode [ 80.167373][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.184975][ T55] Bluetooth: hci3: command tx timeout [ 80.264579][ T55] Bluetooth: hci1: command tx timeout [ 80.268601][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.268724][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.268859][ T5643] bridge_slave_0: entered allmulticast mode [ 80.271359][ T5643] bridge_slave_0: entered promiscuous mode [ 80.278530][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.293268][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.293496][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.293612][ T5643] bridge_slave_1: entered allmulticast mode [ 80.296712][ T5643] bridge_slave_1: entered promiscuous mode [ 80.314963][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.344529][ T5656] Bluetooth: hci0: command tx timeout [ 80.344762][ T55] Bluetooth: hci2: command tx timeout [ 80.361342][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.361450][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.361564][ T5641] bridge_slave_0: entered allmulticast mode [ 80.363614][ T5641] bridge_slave_0: entered promiscuous mode [ 80.370383][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.398486][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.398698][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.398830][ T5641] bridge_slave_1: entered allmulticast mode [ 80.401165][ T5641] bridge_slave_1: entered promiscuous mode [ 80.409792][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.416391][ T5640] team0: Port device team_slave_0 added [ 80.423642][ T5640] team0: Port device team_slave_1 added [ 80.538200][ T5643] team0: Port device team_slave_0 added [ 80.541732][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.541749][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.541774][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.548143][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.551463][ T5643] team0: Port device team_slave_1 added [ 80.552129][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.552140][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.552162][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.567133][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.677637][ T5641] team0: Port device team_slave_0 added [ 80.700903][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.700921][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.700943][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.702639][ T5641] team0: Port device team_slave_1 added [ 80.752394][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.752411][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.752433][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.762552][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.780236][ T5640] hsr_slave_0: entered promiscuous mode [ 80.784621][ T5640] hsr_slave_1: entered promiscuous mode [ 80.824756][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.824774][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.824794][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.827496][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.827511][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.827535][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.976311][ T5643] hsr_slave_0: entered promiscuous mode [ 80.977873][ T5643] hsr_slave_1: entered promiscuous mode [ 80.980228][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 80.980303][ T5643] Cannot create hsr debugfs directory [ 81.070492][ T5641] hsr_slave_0: entered promiscuous mode [ 81.071427][ T5641] hsr_slave_1: entered promiscuous mode [ 81.071868][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 81.071888][ T5641] Cannot create hsr debugfs directory [ 81.488454][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.503883][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.512113][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.525248][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.527042][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.532103][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.563898][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.573711][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.652683][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.656605][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.657818][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.664574][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.685743][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.689058][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.690011][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.693393][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.790085][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.790260][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.790380][ T5642] bridge_slave_0: entered allmulticast mode [ 81.791390][ T5642] bridge_slave_0: entered promiscuous mode [ 81.794626][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.794745][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.794864][ T5642] bridge_slave_1: entered allmulticast mode [ 81.796547][ T5642] bridge_slave_1: entered promiscuous mode [ 81.867529][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.878378][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.919877][ T5642] team0: Port device team_slave_0 added [ 81.930284][ T5642] team0: Port device team_slave_1 added [ 81.997807][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.005522][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.006404][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.029089][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.038217][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.038233][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.038254][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.039499][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.083244][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.100425][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.100442][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.100466][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.102177][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.110250][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.219936][ T5642] hsr_slave_0: entered promiscuous mode [ 82.221203][ T5642] hsr_slave_1: entered promiscuous mode [ 82.222024][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 82.222043][ T5642] Cannot create hsr debugfs directory [ 82.265354][ T55] Bluetooth: hci3: command tx timeout [ 82.345384][ T55] Bluetooth: hci1: command tx timeout [ 82.400577][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.424436][ T5656] Bluetooth: hci0: command tx timeout [ 82.424529][ T55] Bluetooth: hci2: command tx timeout [ 82.528191][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.553377][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.580273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.580423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.612388][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.634342][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.634458][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.671262][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.671399][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.672800][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.672855][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.708556][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.713789][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.716589][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.727107][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.749252][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.752206][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.769708][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.775833][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.788477][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.840545][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.890899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.890963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.930151][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.930380][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.211354][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.248629][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.260786][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.260913][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.297605][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.297721][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.002072][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.048655][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.238917][ T5640] veth0_vlan: entered promiscuous mode [ 84.242064][ T5643] veth0_vlan: entered promiscuous mode [ 84.278574][ T5640] veth1_vlan: entered promiscuous mode [ 84.283803][ T5643] veth1_vlan: entered promiscuous mode [ 84.339734][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.344705][ T55] Bluetooth: hci3: command tx timeout [ 84.361612][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.414242][ T5640] veth0_macvtap: entered promiscuous mode [ 84.426718][ T55] Bluetooth: hci1: command tx timeout [ 84.455982][ T5643] veth0_macvtap: entered promiscuous mode [ 84.459779][ T5640] veth1_macvtap: entered promiscuous mode [ 84.491030][ T5642] veth0_vlan: entered promiscuous mode [ 84.495155][ T5643] veth1_macvtap: entered promiscuous mode [ 84.506795][ T5656] Bluetooth: hci0: command tx timeout [ 84.506884][ T55] Bluetooth: hci2: command tx timeout [ 84.510027][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.530854][ T5641] veth0_vlan: entered promiscuous mode [ 84.539429][ T5642] veth1_vlan: entered promiscuous mode [ 84.563037][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.577135][ T5641] veth1_vlan: entered promiscuous mode [ 84.582511][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.597012][ T1385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597351][ T1385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597522][ T1385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597664][ T1385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.616028][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.645502][ T5642] veth0_macvtap: entered promiscuous mode [ 84.652429][ T5642] veth1_macvtap: entered promiscuous mode [ 84.756036][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.792216][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.792239][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.807163][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.827842][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.827921][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.827979][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828045][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.862956][ T5641] veth0_macvtap: entered promiscuous mode [ 84.897934][ T5641] veth1_macvtap: entered promiscuous mode [ 84.912049][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.912070][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.924694][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925598][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925632][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925663][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.978132][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.978155][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.079195][ T5640] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.091392][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.096839][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.140591][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.140613][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.213846][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.213868][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.214759][ T1288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.284292][ T1102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.331601][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.331620][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.382627][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.382649][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.409373][ T5799] tipc: Started in network mode [ 85.409397][ T5799] tipc: Node identity 2000004, cluster identity 4711 [ 85.409408][ T5799] tipc: Node number set to 33554436 [ 85.539466][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.539489][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.571940][ T1288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586094][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.819174][ T5811] tipc: Started in network mode [ 85.819199][ T5811] tipc: Node identity 2000004, cluster identity 4711 [ 85.819212][ T5811] tipc: Node number set to 33554436 [ 86.014517][ T1224] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.164372][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 86.167579][ T1224] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 86.169164][ T1224] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.169188][ T1224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.172382][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.177681][ T1224] usb 4-1: Product: syz [ 86.177699][ T1224] usb 4-1: Manufacturer: syz [ 86.177712][ T1224] usb 4-1: SerialNumber: syz [ 86.243354][ T1224] usb 4-1: 0:2 : does not exist [ 86.294128][ T5736] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.314318][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.424783][ T55] Bluetooth: hci3: command tx timeout [ 86.424896][ T5736] usb 3-1: device descriptor read/64, error -71 [ 86.457458][ T1224] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 86.476632][ T27] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 86.481496][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.487830][ T27] usb 2-1: config 0 descriptor?? [ 86.507810][ T55] Bluetooth: hci1: command tx timeout [ 86.584763][ T5656] Bluetooth: hci0: command tx timeout [ 86.584818][ T55] Bluetooth: hci2: command tx timeout [ 86.650441][ T1224] usb 4-1: USB disconnect, device number 2 [ 86.664421][ T5736] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.700464][ T27] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 86.772072][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.794308][ T5736] usb 3-1: device descriptor read/64, error -71 [ 86.905379][ T5736] usb usb3-port1: attempt power cycle [ 86.955378][ T27] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 86.955404][ T27] [drm] Initialized udl on minor 1 [ 87.070460][ T3225] cfg80211: failed to load regulatory.db [ 87.244854][ T5736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.264848][ T5736] usb 3-1: device descriptor read/8, error -71 [ 87.504148][ T5736] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.526223][ T5736] usb 3-1: device descriptor read/8, error -71 [ 87.634398][ T5736] usb usb3-port1: unable to enumerate USB device [ 87.719501][ T5827] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!O�wëìØåë¶z�ª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 88.029617][ T5832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.274224][ T5820] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 88.434855][ T5820] usb 4-1: New USB device found: idVendor=11c0, idProduct=5506, bcdDevice=0.00 [ 88.436450][ T5820] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.436483][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.436529][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.439492][ T5820] usb 4-1: config 0 descriptor?? [ 88.564148][ T5801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.714122][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 88.714811][ T5801] usb 1-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 88.714867][ T5801] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 88.716389][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.716412][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.717446][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.717462][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.718428][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.718449][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.719608][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.719628][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.720633][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.720652][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.721616][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.721636][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.722920][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.722939][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.723985][ T5801] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.756105][ T5801] usb 1-1: config 0 has no interface number 0 [ 88.787161][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.787186][ T5801] usb 1-1: Product: syz [ 88.787199][ T5801] usb 1-1: Manufacturer: syz [ 88.787211][ T5801] usb 1-1: SerialNumber: syz [ 88.792551][ T5801] usb 1-1: config 0 descriptor?? [ 88.800072][ T5801] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 88.858963][ T5820] betop 0003:11C0:5506.0001: item fetching failed at offset 2/6 [ 88.859943][ T5820] betop 0003:11C0:5506.0001: parse failed [ 88.860051][ T5820] betop 0003:11C0:5506.0001: probe with driver betop failed with error -22 [ 89.084367][ T5820] usb 4-1: USB disconnect, device number 3 [ 89.481683][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.732717][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.930452][ T5736] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.154145][ T5851] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 90.176652][ T5736] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.334913][ T5736] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 90.340284][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.340312][ T5736] usb 4-1: Product: syz [ 90.340327][ T5736] usb 4-1: Manufacturer: syz [ 90.340340][ T5736] usb 4-1: SerialNumber: syz [ 90.734217][ T5751] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.801946][ T5736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 90.802018][ T5736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 90.884908][ T5751] usb 3-1: Using ep0 maxpacket: 16 [ 90.889581][ T5751] usb 3-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.893276][ T5751] usb 3-1: config index 0 descriptor too short (expected 61202, got 18) [ 90.893304][ T5751] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 90.893358][ T5751] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 90.898443][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.898468][ T5751] usb 3-1: Product: syz [ 90.898481][ T5751] usb 3-1: Manufacturer: syz [ 90.898493][ T5751] usb 3-1: SerialNumber: syz [ 90.913957][ T5751] r8152-cfgselector 3-1: Unknown version 0x0000 [ 90.913982][ T5751] r8152-cfgselector 3-1: config 0 descriptor?? [ 91.003652][ T5736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 91.003717][ T5736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 91.035245][ T5736] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.041925][ T5736] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 91.074787][ T5736] usb 4-1: USB disconnect, device number 4 [ 91.364294][ T5801] etas_es58x 1-1:0.2: could not retrieve the product info string [ 91.451571][ T5867] Zero length message leads to an empty skb [ 91.507677][ T5801] usb 1-1: USB disconnect, device number 2 [ 91.518494][ T5801] etas_es58x 1-1:0.2: Disconnecting syz syz [ 92.197907][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 92.211525][ T27] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 92.212751][ T5820] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 92.257972][ T27] usb 2-1: USB disconnect, device number 2 [ 92.261511][ T5820] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.261986][ T5820] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 92.264658][ T5801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.415367][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 92.422654][ T5801] usb 1-1: New USB device found: idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 92.431900][ T5801] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 92.431927][ T5801] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 92.431944][ T5801] usb 1-1: config 0 has no interface number 0 [ 92.431981][ T5801] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 92.432000][ T5801] usb 1-1: config 0 interface 200 has no altsetting 0 [ 92.446323][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.446350][ T5801] usb 1-1: Product: syz [ 92.446363][ T5801] usb 1-1: Manufacturer: syz [ 92.446375][ T5801] usb 1-1: SerialNumber: syz [ 92.478949][ T5801] usb 1-1: config 0 descriptor?? [ 92.660931][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 92.660958][ T5896] netlink: 22 bytes leftover after parsing attributes in process `syz.1.25'. [ 92.676782][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 92.676806][ T5896] netlink: 22 bytes leftover after parsing attributes in process `syz.1.25'. [ 92.676847][ T5896] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 92.757267][ T5801] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input5 [ 92.868033][ T5801] usb 1-1: USB disconnect, device number 3 [ 92.967291][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.532553][ T5911] syzkaller1: entered promiscuous mode [ 93.532577][ T5911] syzkaller1: entered allmulticast mode [ 93.699438][ T5801] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 93.882972][ T5923] random: crng reseeded on system resumption [ 94.196132][ T5928] 9p: Bad value for 'rfdno' [ 94.300867][ T55] Bluetooth: hci1: Unable to find connection for big 0x00 [ 94.715270][ T5801] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.864361][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 94.865675][ T5801] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.866870][ T5801] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.866894][ T5801] usb 4-1: config 0 has no interface number 0 [ 94.866937][ T5801] usb 4-1: config 0 interface 184 has no altsetting 0 [ 94.869507][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.869529][ T5801] usb 4-1: Product: syz [ 94.869543][ T5801] usb 4-1: Manufacturer: syz [ 94.869557][ T5801] usb 4-1: SerialNumber: syz [ 94.881024][ T5801] usb 4-1: config 0 descriptor?? [ 94.997545][ T11] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.145181][ T11] usb 3-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 95.150887][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.150916][ T11] usb 3-1: Product: syz [ 95.150930][ T11] usb 3-1: Manufacturer: syz [ 95.150943][ T11] usb 3-1: SerialNumber: syz [ 95.186425][ T11] usb 3-1: config 0 descriptor?? [ 95.191209][ T11] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 95.344503][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.374219][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.494103][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 95.494860][ T27] usb 2-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 95.496156][ T27] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.496232][ T27] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.496253][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.496301][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.496321][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.496343][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.496413][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.499984][ T27] usb 2-1: config 0 descriptor?? [ 95.534117][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 95.536616][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.536711][ T5820] usb 1-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 95.538379][ T5820] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 95.542642][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.542663][ T5820] usb 1-1: Product: syz [ 95.542675][ T5820] usb 1-1: Manufacturer: syz [ 95.542687][ T5820] usb 1-1: SerialNumber: syz [ 95.714810][ T27] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 95.741055][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 95.741117][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.742738][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.742764][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.742782][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 95.742798][ T5801] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 95.743336][ T5801] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 95.755811][ T5801] usb 4-1: USB disconnect, device number 5 [ 95.785539][ T5966] overlayfs: conflicting options: userxattr,redirect_dir=on [ 95.898579][ T5820] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 95.963721][ T5820] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.977852][ T5820] usb 1-1: USB disconnect, device number 4 [ 96.007477][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.033453][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.043741][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.113830][ T5971] netlink: 124 bytes leftover after parsing attributes in process `syz.2.41'. [ 96.235144][ C1] usblp0: nonzero read bulk status received: -71 [ 96.237014][ T5958] usblp0: error -71 reading from printer [ 96.237761][ C1] usblp0: nonzero read bulk status received: -71 [ 96.243216][ T194] usb 2-1: USB disconnect, device number 3 [ 96.253834][ T11] gspca_sunplus: reg_w_riv err -71 [ 96.253922][ T11] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 96.273114][ T11] usb 3-1: USB disconnect, device number 7 [ 96.290649][ T194] usblp0: removed [ 96.361086][ T5973] netlink: NAT attribute has 1 unknown bytes [ 96.361126][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.387068][ T5973] fuse: Bad value for 'fd' [ 96.442167][ T5975] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.724128][ T5820] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 96.876784][ T5820] usb 4-1: not running at top speed; connect to a high speed hub [ 96.876823][ T5820] usb 4-1: New USB device found: idVendor=3731, idProduct=0100, bcdDevice=9.0b [ 96.877864][ T5820] usb 4-1: config 5 has an invalid interface number: 55 but max is 0 [ 96.877889][ T5820] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 96.877905][ T5820] usb 4-1: config 5 has no interface number 0 [ 96.877949][ T5820] usb 4-1: config 5 interface 55 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 96.878044][ T5820] usb 4-1: config 5 interface 55 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 96.878066][ T5820] usb 4-1: config 5 interface 55 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 96.878078][ T5820] usb 4-1: config 5 interface 55 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 96.878090][ T5820] usb 4-1: config 5 interface 55 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 96.878103][ T5820] usb 4-1: config 5 interface 55 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 96.878114][ T5820] usb 4-1: config 5 interface 55 altsetting 4 endpoint 0xB has an invalid bInterval 64, changing to 4 [ 96.878128][ T5820] usb 4-1: config 5 interface 55 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 96.878143][ T5820] usb 4-1: config 5 interface 55 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 96.878157][ T5820] usb 4-1: config 5 interface 55 has no altsetting 0 [ 96.879983][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.879997][ T5820] usb 4-1: Product: 퉷뤣黹㰪⊃㓵ṹê­�蓗ﲉ燯侥暾ﭸ䭟⑓櫵畸ꉉ陸홻ظꆒ㨟㬿ᑅ㾼㊼䞬쵶젗蟲቟䋮輇ꥲ텒淎喘ズ럆먓듇â™�ç¨�漿쓓≎ᛘ騙꺾짫៙ [ 96.880008][ T5820] usb 4-1: Manufacturer: 쫦䒰骠똤䆕┣㖚îž�댚䡥鲪ꆲ렶僱ʡ蠆è�‰î»¼êšœì¨™à¡�ὸä€�嚿供Ӏ떧糷çŽ�ê·�摿ੑ꛸棆顯煽骖ì�œê‘¬ì­ƒêŒ�쎲ã�‚욖שׁⓀè–�娈령涀 [ 96.880018][ T5820] usb 4-1: SerialNumber: syz [ 96.883644][ T5975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.160131][ T5820] option 4-1:5.55: GSM modem (1-port) converter detected [ 97.177424][ T5820] usb 4-1: USB disconnect, device number 6 [ 97.191055][ T5820] option 4-1:5.55: device disconnected [ 97.234261][ T194] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 97.364150][ T194] usb 3-1: device descriptor read/64, error -71 [ 97.604113][ T194] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 97.734169][ T194] usb 3-1: device descriptor read/64, error -71 [ 97.844434][ T194] usb usb3-port1: attempt power cycle [ 98.184325][ T194] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 98.204613][ T194] usb 3-1: device descriptor read/8, error -71 [ 98.444261][ T194] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 98.464605][ T194] usb 3-1: device descriptor read/8, error -71 [ 98.574358][ T194] usb usb3-port1: unable to enumerate USB device [ 99.467061][ T5977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.479380][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 99.627025][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 99.627862][ T5994] FAULT_INJECTION: forcing a failure. [ 99.627862][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.627889][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 99.627911][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.627923][ T5994] Call Trace: [ 99.627931][ T5994] [ 99.627938][ T5994] dump_stack_lvl+0xe8/0x150 [ 99.627972][ T5994] should_fail_ex+0x3eb/0x540 [ 99.628004][ T5994] _copy_to_user+0x31/0xb0 [ 99.628034][ T5994] simple_read_from_buffer+0xe1/0x170 [ 99.628063][ T5994] proc_fail_nth_read+0x1bb/0x230 [ 99.628094][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.628124][ T5994] ? rw_verify_area+0x24a/0x4c0 [ 99.628149][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.628175][ T5994] vfs_read+0x213/0xa80 [ 99.628203][ T5994] ? __pfx___mutex_lock+0x10/0x10 [ 99.628230][ T5994] ? __pfx_vfs_read+0x10/0x10 [ 99.628254][ T5994] ? __fget_files+0x2a/0x420 [ 99.628272][ T5994] ? __fget_files+0x3a2/0x420 [ 99.628289][ T5994] ? __fget_files+0x2a/0x420 [ 99.628325][ T5994] ? fdget+0x1ac/0x250 [ 99.628354][ T5994] ksys_read+0x150/0x270 [ 99.628381][ T5994] ? __pfx_ksys_read+0x10/0x10 [ 99.628414][ T5994] do_syscall_64+0x166/0x520 [ 99.628439][ T5994] ? trace_irq_disable+0x3b/0x140 [ 99.628462][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.628480][ T5994] ? clear_bhb_loop+0x70/0xc0 [ 99.628504][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.628522][ T5994] RIP: 0033:0x7f479eb5fd8e [ 99.628541][ T5994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.628556][ T5994] RSP: 002b:00007f479fad9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.628589][ T5994] RAX: ffffffffffffffda RBX: 00007f479fada6c0 RCX: 00007f479eb5fd8e [ 99.628604][ T5994] RDX: 000000000000000f RSI: 00007f479fada0a0 RDI: 0000000000000004 [ 99.628623][ T5994] RBP: 00007f479fada090 R08: 0000000000000000 R09: 0000000000000000 [ 99.628635][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.628646][ T5994] R13: 00007f479ee26038 R14: 00007f479ee25fa0 R15: 00007ffdec9ed8b8 [ 99.628689][ T5994] [ 99.904126][ T194] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.060997][ T194] usb 2-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 100.064832][ T194] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 100.064899][ T194] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.064921][ T194] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.072804][ T194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.072828][ T194] usb 2-1: Product: syz [ 100.072841][ T194] usb 2-1: Manufacturer: syz [ 100.072853][ T194] usb 2-1: SerialNumber: syz [ 100.098142][ T194] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 100.288917][ T194] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 100.444687][ T11] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 100.458001][ T194] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 100.520922][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.1.54'. [ 100.547425][ T194] usb 2-1: USB disconnect, device number 4 [ 100.574894][ T11] usb 3-1: device descriptor read/64, error -71 [ 100.575378][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.693452][ T33] audit: type=1326 audit(1793143143.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.0.58" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f479eb9f559 code=0x0 [ 100.814589][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 100.954143][ T11] usb 3-1: device descriptor read/64, error -71 [ 101.014652][ T5736] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.077724][ T11] usb usb3-port1: attempt power cycle [ 101.164838][ T5736] usb 1-1: Using ep0 maxpacket: 32 [ 101.166246][ T5736] usb 1-1: New USB device found: idVendor=04da, idProduct=1800, bcdDevice=ad.c3 [ 101.167800][ T5736] usb 1-1: config 4 has an invalid interface number: 46 but max is 1 [ 101.167826][ T5736] usb 1-1: config 4 has an invalid interface number: 59 but max is 1 [ 101.167844][ T5736] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 101.167861][ T5736] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 101.167878][ T5736] usb 1-1: config 4 has no interface number 0 [ 101.167892][ T5736] usb 1-1: config 4 has no interface number 1 [ 101.167946][ T5736] usb 1-1: config 4 interface 46 altsetting 241 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 101.167970][ T5736] usb 1-1: config 4 interface 46 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 101.168003][ T5736] usb 1-1: config 4 interface 59 altsetting 3 endpoint 0x6 has invalid wMaxPacketSize 0 [ 101.168023][ T5736] usb 1-1: config 4 interface 59 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 0 [ 101.168043][ T5736] usb 1-1: config 4 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 101.168063][ T5736] usb 1-1: config 4 interface 59 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.168082][ T5736] usb 1-1: config 4 interface 59 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 101.168100][ T5736] usb 1-1: config 4 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 101.168118][ T5736] usb 1-1: config 4 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 101.168138][ T5736] usb 1-1: config 4 interface 59 altsetting 3 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 101.168160][ T5736] usb 1-1: config 4 interface 59 altsetting 3 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 101.168184][ T5736] usb 1-1: config 4 interface 46 has no altsetting 0 [ 101.168200][ T5736] usb 1-1: config 4 interface 59 has no altsetting 0 [ 101.170551][ T5736] usb 1-1: Dual-Role OTG device on HNP port [ 101.170865][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.170886][ T5736] usb 1-1: Product: syz [ 101.170900][ T5736] usb 1-1: Manufacturer: à ’ [ 101.170913][ T5736] usb 1-1: SerialNumber: syz [ 101.404136][ T5820] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 101.414271][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 101.439091][ T11] usb 3-1: device descriptor read/8, error -71 [ 101.555075][ T5820] usb 2-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 101.556444][ T5820] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 101.560533][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.560558][ T5820] usb 2-1: Product: syz [ 101.560572][ T5820] usb 2-1: Manufacturer: syz [ 101.560586][ T5820] usb 2-1: SerialNumber: syz [ 101.614616][ T5820] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 101.684524][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 101.717290][ T11] usb 3-1: device descriptor read/8, error -71 [ 101.836976][ T11] usb usb3-port1: unable to enumerate USB device [ 101.857497][ T5820] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 101.895446][ T5820] usb 2-1: USB disconnect, device number 5 [ 101.897142][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.088756][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.191576][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.224127][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.262124][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.315751][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.368373][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.382202][ T5820] usb 2-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 102.393545][ T5820] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 102.408300][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.408327][ T5820] usb 2-1: Product: syz [ 102.408341][ T5820] usb 2-1: Manufacturer: syz [ 102.408355][ T5820] usb 2-1: SerialNumber: syz [ 102.439798][ T5820] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 102.457723][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.532326][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.608536][ T6043] nvme nvme0: rdma connection establishment failed (-512) [ 102.629823][ T5820] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.632364][ T5820] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 102.632439][ T5820] usb 2-1: media controller created [ 102.680852][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.809314][ T6064] ALSA: seq fatal error: cannot create timer (-19) [ 102.831413][ T5820] usb 2-1: USB disconnect, device number 6 [ 103.350769][ T6084] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.373808][ T6084] loop5: detected capacity change from 0 to 7 [ 103.391145][ T6084] Dev loop5: unable to read RDB block 7 [ 103.391190][ T6084] loop5: unable to read partition table [ 103.391701][ T6084] loop5: partition table beyond EOD, truncated [ 103.391746][ T6084] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.504165][ T5820] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 103.551686][ T6088] overlay: Unknown parameter 'usrquota' [ 103.656911][ T5820] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 103.679770][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.679801][ T5820] usb 3-1: Product: syz [ 103.679816][ T5820] usb 3-1: Manufacturer: syz [ 103.679828][ T5820] usb 3-1: SerialNumber: syz [ 103.780987][ T27] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.108618][ T5736] usb 1-1: USB disconnect, device number 5 [ 104.244448][ T6076] ======================================================= [ 104.244448][ T6076] WARNING: The mand mount option has been deprecated and [ 104.244448][ T6076] and is ignored by this kernel. Remove the mand [ 104.244448][ T6076] option from the mount to silence this warning. [ 104.244448][ T6076] ======================================================= [ 104.317751][ T3225] usb 3-1: USB disconnect, device number 16 [ 104.583569][ T6124] kAFS: bad VL server IP address [ 104.583649][ T6124] FAULT_INJECTION: forcing a failure. [ 104.583649][ T6124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.583672][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 104.583694][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.583705][ T6124] Call Trace: [ 104.583714][ T6124] [ 104.583722][ T6124] dump_stack_lvl+0xe8/0x150 [ 104.583757][ T6124] should_fail_ex+0x3eb/0x540 [ 104.583792][ T6124] _copy_to_user+0x31/0xb0 [ 104.583823][ T6124] simple_read_from_buffer+0xe1/0x170 [ 104.583853][ T6124] proc_fail_nth_read+0x1bb/0x230 [ 104.583885][ T6124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.583916][ T6124] ? rw_verify_area+0x24a/0x4c0 [ 104.583942][ T6124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.583969][ T6124] vfs_read+0x213/0xa80 [ 104.584002][ T6124] ? __pfx___mutex_lock+0x10/0x10 [ 104.584028][ T6124] ? __pfx_vfs_read+0x10/0x10 [ 104.584052][ T6124] ? __fget_files+0x2a/0x420 [ 104.584073][ T6124] ? __fget_files+0x3a2/0x420 [ 104.584094][ T6124] ? __fget_files+0x2a/0x420 [ 104.584120][ T6124] ? fdget+0x1ac/0x250 [ 104.584158][ T6124] ksys_read+0x150/0x270 [ 104.584185][ T6124] ? __pfx_ksys_read+0x10/0x10 [ 104.584223][ T6124] do_syscall_64+0x166/0x520 [ 104.584246][ T6124] ? trace_irq_disable+0x3b/0x140 [ 104.584269][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.584289][ T6124] ? clear_bhb_loop+0x70/0xc0 [ 104.584314][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.584332][ T6124] RIP: 0033:0x7f90d3d5fd8e [ 104.584349][ T6124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.584363][ T6124] RSP: 002b:00007f90d4cf2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.584385][ T6124] RAX: ffffffffffffffda RBX: 00007f90d4cf36c0 RCX: 00007f90d3d5fd8e [ 104.584399][ T6124] RDX: 000000000000000f RSI: 00007f90d4cf30a0 RDI: 0000000000000005 [ 104.584411][ T6124] RBP: 00007f90d4cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.584423][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.584434][ T6124] R13: 00007f90d4026038 R14: 00007f90d4025fa0 R15: 00007fff48d4e0c8 [ 104.584468][ T6124] [ 104.829990][ T27] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 104.831167][ T27] ath9k_htc: Failed to initialize the device [ 104.837660][ T3225] usb 3-1: ath9k_htc: USB layer deinitialized [ 105.386110][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.386633][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.544686][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 105.614119][ T5820] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 105.696891][ T27] usb 3-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 105.697926][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.697950][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.698001][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.746447][ T5820] usb 1-1: device descriptor read/64, error -71 [ 105.759903][ T27] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 105.913592][ T6167] loop0: detected capacity change from 0 to 3904 [ 105.957936][ T27] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 105.984315][ T5820] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 105.989379][ T6167] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 105.989404][ T6167] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 105.989415][ T6167] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 105.989477][ T6167] loop0: [ 106.006743][ T6172] kAFS: bad VL server IP address [ 106.114122][ T5820] usb 1-1: device descriptor read/64, error -71 [ 106.231005][ T5820] usb usb1-port1: attempt power cycle [ 106.253250][ T6178] 9p: Bad value for 'port' [ 106.267965][ T6178] FAULT_INJECTION: forcing a failure. [ 106.267965][ T6178] name failslab, interval 1, probability 0, space 0, times 0 [ 106.267996][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 106.268019][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.268029][ T6178] Call Trace: [ 106.268038][ T6178] [ 106.268048][ T6178] dump_stack_lvl+0xe8/0x150 [ 106.268083][ T6178] should_fail_ex+0x3eb/0x540 [ 106.268122][ T6178] should_failslab+0xa8/0x100 [ 106.268153][ T6178] __kvmalloc_node_noprof+0x171/0x820 [ 106.268181][ T6178] ? seq_read_iter+0x1ea/0xca0 [ 106.268207][ T6178] ? seq_read_iter+0x1ea/0xca0 [ 106.268242][ T6178] seq_read_iter+0x1ea/0xca0 [ 106.268286][ T6178] seq_read+0x367/0x480 [ 106.268330][ T6178] ? __pfx_seq_read+0x10/0x10 [ 106.268354][ T6178] ? __mutex_trylock_common+0x15f/0x270 [ 106.268390][ T6178] ? apparmor_file_permission+0x1fb/0x2b0 [ 106.268421][ T6178] ? __pfx_seq_read+0x10/0x10 [ 106.268447][ T6178] proc_reg_read+0x1e9/0x2e0 [ 106.268472][ T6178] ? __pfx_proc_reg_read+0x10/0x10 [ 106.268491][ T6178] vfs_read+0x213/0xa80 [ 106.268518][ T6178] ? __pfx___mutex_lock+0x10/0x10 [ 106.268546][ T6178] ? __pfx_vfs_read+0x10/0x10 [ 106.268573][ T6178] ? __fget_files+0x2a/0x420 [ 106.268594][ T6178] ? __fget_files+0x3a2/0x420 [ 106.268615][ T6178] ? __fget_files+0x2a/0x420 [ 106.268643][ T6178] ? fdget+0x1ac/0x250 [ 106.268673][ T6178] ksys_read+0x150/0x270 [ 106.268701][ T6178] ? __pfx_ksys_read+0x10/0x10 [ 106.268748][ T6178] do_syscall_64+0x166/0x520 [ 106.268773][ T6178] ? trace_irq_disable+0x3b/0x140 [ 106.268796][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.268813][ T6178] ? clear_bhb_loop+0x70/0xc0 [ 106.268835][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.268854][ T6178] RIP: 0033:0x7f90d3d9f559 [ 106.268874][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.268889][ T6178] RSP: 002b:00007f90d4cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.268913][ T6178] RAX: ffffffffffffffda RBX: 00007f90d4026090 RCX: 00007f90d3d9f559 [ 106.268924][ T6178] RDX: 0000000000002020 RSI: 0000200000001280 RDI: 0000000000000009 [ 106.268937][ T6178] RBP: 00007f90d3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.268949][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.268960][ T6178] R13: 00007f90d4026128 R14: 00007f90d4026090 R15: 00007fff48d4e0c8 [ 106.268995][ T6178] [ 106.550770][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.551281][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.594155][ T5820] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 106.614897][ T5820] usb 1-1: device descriptor read/8, error -71 [ 106.854100][ T5820] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 106.914981][ T5820] usb 1-1: device descriptor read/8, error -71 [ 106.919897][ T6200] 9p: Bad value for 'port' [ 106.920807][ T6200] FAULT_INJECTION: forcing a failure. [ 106.920807][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 106.920834][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 106.920856][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.920868][ T6200] Call Trace: [ 106.920885][ T6200] [ 106.920893][ T6200] dump_stack_lvl+0xe8/0x150 [ 106.920936][ T6200] should_fail_ex+0x3eb/0x540 [ 106.920970][ T6200] should_failslab+0xa8/0x100 [ 106.920997][ T6200] ? perf_event_create_kernel_counter+0xe0/0x630 [ 106.921023][ T6200] __kmalloc_cache_noprof+0x9e/0x600 [ 106.921048][ T6200] ? find_get_pmu_context+0x7f/0x800 [ 106.921069][ T6200] ? find_get_pmu_context+0x7f/0x800 [ 106.921096][ T6200] ? perf_event_create_kernel_counter+0xe0/0x630 [ 106.921123][ T6200] find_get_pmu_context+0x7f/0x800 [ 106.921146][ T6200] ? find_get_context+0x5fd/0x860 [ 106.921176][ T6200] ? perf_event_create_kernel_counter+0xe0/0x630 [ 106.921202][ T6200] perf_event_create_kernel_counter+0x2b1/0x630 [ 106.921233][ T6200] ptrace_set_debugreg+0xaf0/0xdc0 [ 106.921276][ T6200] ? __pfx_ptrace_set_debugreg+0x10/0x10 [ 106.921314][ T6200] ? __lock_acquire+0x747/0x2de0 [ 106.921341][ T6200] ? __lock_acquire+0x747/0x2de0 [ 106.921394][ T6200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.921445][ T6200] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.921473][ T6200] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.921496][ T6200] ? wait_task_inactive+0x42f/0x800 [ 106.921539][ T6200] ? __pfx_wait_task_inactive+0x10/0x10 [ 106.921574][ T6200] arch_ptrace+0x361/0x410 [ 106.921596][ T6200] __se_sys_ptrace+0x150/0x3a0 [ 106.921627][ T6200] ? __pfx___se_sys_ptrace+0x10/0x10 [ 106.921668][ T6200] do_syscall_64+0x166/0x520 [ 106.921701][ T6200] ? trace_irq_disable+0x3b/0x140 [ 106.921732][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.921753][ T6200] ? clear_bhb_loop+0x70/0xc0 [ 106.921777][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.921797][ T6200] RIP: 0033:0x7fc3a119f559 [ 106.921816][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.921832][ T6200] RSP: 002b:00007fc3a20d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 106.921855][ T6200] RAX: ffffffffffffffda RBX: 00007fc3a1426180 RCX: 00007fc3a119f559 [ 106.921869][ T6200] RDX: 0000000000000388 RSI: 0000000000000031 RDI: 0000000000000006 [ 106.921882][ T6200] RBP: 00007fc3a20d6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.921903][ T6200] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 106.921915][ T6200] R13: 00007fc3a1426218 R14: 00007fc3a1426180 R15: 00007fff4b757ee8 [ 106.921950][ T6200] [ 107.068699][ T5820] usb usb1-port1: unable to enumerate USB device [ 107.567570][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 107.795655][ T6216] netlink: 'syz.3.94': attribute type 14 has an invalid length. [ 108.034133][ T3225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.191665][ T3225] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.191733][ T3225] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 108.192760][ T3225] usb 4-1: config 1 has an invalid interface number: 64 but max is 2 [ 108.192785][ T3225] usb 4-1: config 1 has no interface number 0 [ 108.192864][ T3225] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 108.201602][ T3225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.201628][ T3225] usb 4-1: Product: syz [ 108.201641][ T3225] usb 4-1: Manufacturer: syz [ 108.201653][ T3225] usb 4-1: SerialNumber: syz [ 108.311246][ T5820] usb 3-1: USB disconnect, device number 17 [ 108.427116][ T3225] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.430947][ T3225] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 108.430993][ T3225] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 108.431014][ T3225] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 108.431171][ T3225] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 108.431191][ T3225] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 108.431209][ T3225] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 108.495265][ T3225] usb 4-1: failed to enable PITCH for EP 0x82 [ 108.568777][ T6225] netlink: 'syz.0.96': attribute type 21 has an invalid length. [ 108.570197][ T3225] usb 4-1: USB disconnect, device number 7 [ 108.730182][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.64/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.117489][ T6244] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 109.220851][ T6249] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.785466][ T6266] FAULT_INJECTION: forcing a failure. [ 109.785466][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.785498][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.3.111 Not tainted syzkaller #0 PREEMPT(full) [ 109.785521][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.785532][ T6266] Call Trace: [ 109.785541][ T6266] [ 109.785549][ T6266] dump_stack_lvl+0xe8/0x150 [ 109.785584][ T6266] should_fail_ex+0x3eb/0x540 [ 109.785619][ T6266] _copy_from_iter+0x1d3/0x1680 [ 109.785645][ T6266] ? __alloc_skb+0x27a/0x7a0 [ 109.785670][ T6266] ? __alloc_skb+0x27a/0x7a0 [ 109.785692][ T6266] ? __alloc_skb+0x27a/0x7a0 [ 109.785714][ T6266] ? __pfx__copy_from_iter+0x10/0x10 [ 109.785738][ T6266] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 109.785757][ T6266] ? __alloc_skb+0x27a/0x7a0 [ 109.785775][ T6266] ? __alloc_skb+0x27a/0x7a0 [ 109.785801][ T6266] ? netlink_sendmsg+0x64f/0xb20 [ 109.785821][ T6266] ? skb_put+0x112/0x210 [ 109.785846][ T6266] netlink_sendmsg+0x6bb/0xb20 [ 109.785871][ T6266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.785894][ T6266] ? aa_sock_msg_perm+0x144/0x210 [ 109.785924][ T6266] ? apparmor_socket_sendmsg+0x98/0x360 [ 109.785950][ T6266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.785968][ T6266] sock_sendmsg_nosec+0x14e/0x190 [ 109.785999][ T6266] ____sys_sendmsg+0x54e/0x850 [ 109.786040][ T6266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.786078][ T6266] ? import_iovec+0x73/0xa0 [ 109.786109][ T6266] ___sys_sendmsg+0x2a6/0x360 [ 109.786130][ T6266] ? __lock_acquire+0x747/0x2de0 [ 109.786158][ T6266] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.786222][ T6266] ? __fget_files+0x3a2/0x420 [ 109.786243][ T6266] ? __fget_files+0x2a/0x420 [ 109.786275][ T6266] __x64_sys_sendmsg+0x1b1/0x290 [ 109.786302][ T6266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.786350][ T6266] do_syscall_64+0x166/0x520 [ 109.786377][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.786397][ T6266] ? clear_bhb_loop+0x70/0xc0 [ 109.786422][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.786441][ T6266] RIP: 0033:0x7f90d3d9f559 [ 109.786460][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.786476][ T6266] RSP: 002b:00007f90d4cf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.786498][ T6266] RAX: ffffffffffffffda RBX: 00007f90d4025fa0 RCX: 00007f90d3d9f559 [ 109.786512][ T6266] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 109.786524][ T6266] RBP: 00007f90d4cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 109.786536][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.786547][ T6266] R13: 00007f90d4026038 R14: 00007f90d4025fa0 R15: 00007fff48d4e0c8 [ 109.786581][ T6266] [ 110.246437][ T5801] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.362494][ T6277] process 'syz.3.114' launched './file2' with NULL argv: empty string added [ 110.394122][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 110.396273][ T5801] usb 2-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 110.401245][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.401269][ T5801] usb 2-1: Product: syz [ 110.401284][ T5801] usb 2-1: Manufacturer: syz [ 110.401298][ T5801] usb 2-1: SerialNumber: syz [ 110.444461][ T5801] usb 2-1: config 0 descriptor?? [ 110.671379][ T6284] FAULT_INJECTION: forcing a failure. [ 110.671379][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 110.671411][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 110.671433][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.671444][ T6284] Call Trace: [ 110.671453][ T6284] [ 110.671462][ T6284] dump_stack_lvl+0xe8/0x150 [ 110.671498][ T6284] should_fail_ex+0x3eb/0x540 [ 110.671533][ T6284] should_failslab+0xa8/0x100 [ 110.671560][ T6284] ? security_inode_alloc+0x39/0x310 [ 110.671588][ T6284] kmem_cache_alloc_noprof+0x9c/0x600 [ 110.671608][ T6284] ? make_kgid+0x1d1/0x6a0 [ 110.671630][ T6284] ? security_inode_alloc+0x39/0x310 [ 110.671665][ T6284] security_inode_alloc+0x39/0x310 [ 110.671695][ T6284] inode_init_always_gfp+0x97e/0xd30 [ 110.671722][ T6284] ? __pfx_proc_alloc_inode+0x10/0x10 [ 110.671741][ T6284] alloc_inode+0x82/0x1b0 [ 110.671765][ T6284] new_inode+0x1f/0x170 [ 110.671785][ T6284] ? proc_pid_make_inode+0x19/0x130 [ 110.671811][ T6284] proc_pid_make_inode+0x21/0x130 [ 110.671837][ T6284] proc_pident_instantiate+0x6d/0x2a0 [ 110.671869][ T6284] proc_pident_lookup+0x1b7/0x270 [ 110.671902][ T6284] lookup_open+0x94b/0x1970 [ 110.671960][ T6284] path_openat+0x70c/0x20f0 [ 110.672010][ T6284] do_file_open+0x23e/0x4a0 [ 110.672054][ T6284] ? __pfx_do_file_open+0x10/0x10 [ 110.672094][ T6284] ? __pfx_kfree_link+0x10/0x10 [ 110.672128][ T6284] ? _raw_spin_unlock+0x28/0x50 [ 110.672151][ T6284] ? alloc_fd+0x6af/0x760 [ 110.672189][ T6284] do_sys_openat2+0x115/0x200 [ 110.672210][ T6284] ? __se_sys_futex+0x3a8/0x450 [ 110.672241][ T6284] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.672267][ T6284] ? rcu_is_watching+0x16/0xb0 [ 110.672302][ T6284] __x64_sys_openat+0x138/0x170 [ 110.672330][ T6284] do_syscall_64+0x166/0x520 [ 110.672361][ T6284] ? trace_irq_disable+0x3b/0x140 [ 110.672385][ T6284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.672405][ T6284] ? clear_bhb_loop+0x70/0xc0 [ 110.672432][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.672452][ T6284] RIP: 0033:0x7f90d3d5fd8e [ 110.672472][ T6284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.672488][ T6284] RSP: 002b:00007f90d4cf2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.672510][ T6284] RAX: ffffffffffffffda RBX: 00007f90d4cf36c0 RCX: 00007f90d3d5fd8e [ 110.672525][ T6284] RDX: 0000000000000002 RSI: 00007f90d4cf2f90 RDI: ffffffffffffff9c [ 110.672537][ T6284] RBP: 00007f90d3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.672549][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.672562][ T6284] R13: 00007f90d4026038 R14: 00007f90d4025fa0 R15: 00007fff48d4e0c8 [ 110.672597][ T6284] [ 110.701698][ T6284] overlayfs: missing 'lowerdir' [ 111.598294][ T6301] faux_driver vgem: [drm] Unknown color mode 192; guessing buffer size. [ 111.714461][ T6300] kvm: user requested TSC rate below hardware speed [ 112.606246][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 112.624223][ T5820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.784577][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 112.785811][ T5820] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 112.789043][ T5820] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.789160][ T5820] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.789178][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.789226][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.789245][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.789266][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.789328][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.811378][ T5820] usb 4-1: config 0 descriptor?? [ 112.878027][ T5801] usb write operation failed. (-71) [ 112.878053][ T5801] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 112.909330][ T5801] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 112.909362][ T5801] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 113.120414][ T5820] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.142896][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.143417][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.225742][ T6307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.225804][ T6307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.269703][ T5820] usb 4-1: USB disconnect, device number 8 [ 113.297025][ T5820] usblp0: removed [ 113.421023][ T6320] FAULT_INJECTION: forcing a failure. [ 113.421023][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 113.421058][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.421085][ T6320] Tainted: [L]=SOFTLOCKUP [ 113.421092][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.421102][ T6320] Call Trace: [ 113.421110][ T6320] [ 113.421118][ T6320] dump_stack_lvl+0xe8/0x150 [ 113.421162][ T6320] should_fail_ex+0x3eb/0x540 [ 113.421194][ T6320] should_failslab+0xa8/0x100 [ 113.421222][ T6320] ? sctp_chunkify+0x5a/0x260 [ 113.421249][ T6320] kmem_cache_alloc_noprof+0x9c/0x600 [ 113.421268][ T6320] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 113.421286][ T6320] ? __alloc_skb+0x27a/0x7a0 [ 113.421307][ T6320] ? sctp_chunkify+0x5a/0x260 [ 113.421341][ T6320] sctp_chunkify+0x5a/0x260 [ 113.421370][ T6320] _sctp_make_chunk+0x122/0x290 [ 113.421400][ T6320] sctp_make_heartbeat+0xc4/0x500 [ 113.421424][ T6320] ? lock_acquire+0x115/0x350 [ 113.421451][ T6320] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 113.421480][ T6320] ? is_bpf_text_address+0x26/0x2b0 [ 113.421513][ T6320] ? is_bpf_text_address+0x292/0x2b0 [ 113.421540][ T6320] ? is_bpf_text_address+0x26/0x2b0 [ 113.421572][ T6320] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 113.421600][ T6320] sctp_do_sm+0x239/0x5dd0 [ 113.421619][ T6320] ? arch_stack_walk+0xfb/0x150 [ 113.421639][ T6320] ? __pfx_sctp_pname+0x10/0x10 [ 113.421673][ T6320] ? stack_trace_save+0xa9/0x100 [ 113.421696][ T6320] ? __pfx_sctp_do_sm+0x10/0x10 [ 113.421782][ T6320] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 113.421810][ T6320] sctp_apply_peer_addr_params+0xd4/0x1880 [ 113.421851][ T6320] sctp_setsockopt_peer_addr_params+0x6be/0x980 [ 113.421886][ T6320] sctp_setsockopt+0x759/0x12c0 [ 113.421914][ T6320] ? sock_common_setsockopt+0x36/0xc0 [ 113.421943][ T6320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 113.421974][ T6320] do_sock_setsockopt+0x17c/0x1b0 [ 113.422002][ T6320] __x64_sys_setsockopt+0x13d/0x1b0 [ 113.422030][ T6320] do_syscall_64+0x166/0x520 [ 113.422055][ T6320] ? trace_irq_disable+0x3b/0x140 [ 113.422078][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.422098][ T6320] ? clear_bhb_loop+0x70/0xc0 [ 113.422123][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.422142][ T6320] RIP: 0033:0x7f479eb9f559 [ 113.422173][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.422190][ T6320] RSP: 002b:00007f479fada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.422213][ T6320] RAX: ffffffffffffffda RBX: 00007f479ee25fa0 RCX: 00007f479eb9f559 [ 113.422228][ T6320] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 113.422241][ T6320] RBP: 00007f479ec36b20 R08: 000000000000009c R09: 0000000000000000 [ 113.422253][ T6320] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000000 [ 113.422266][ T6320] R13: 00007f479ee26038 R14: 00007f479ee25fa0 R15: 00007ffdec9ed8b8 [ 113.422300][ T6320] [ 114.212015][ T6346] FAULT_INJECTION: forcing a failure. [ 114.212015][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.212051][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.3.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.212086][ T6346] Tainted: [L]=SOFTLOCKUP [ 114.212097][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.212107][ T6346] Call Trace: [ 114.212116][ T6346] [ 114.212124][ T6346] dump_stack_lvl+0xe8/0x150 [ 114.212158][ T6346] should_fail_ex+0x3eb/0x540 [ 114.212190][ T6346] _copy_to_user+0x31/0xb0 [ 114.212218][ T6346] simple_read_from_buffer+0xe1/0x170 [ 114.212247][ T6346] proc_fail_nth_read+0x1bb/0x230 [ 114.212278][ T6346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.212311][ T6346] ? rw_verify_area+0x24a/0x4c0 [ 114.212336][ T6346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.212362][ T6346] vfs_read+0x213/0xa80 [ 114.212391][ T6346] ? __pfx___mutex_lock+0x10/0x10 [ 114.212417][ T6346] ? __pfx_vfs_read+0x10/0x10 [ 114.212440][ T6346] ? __fget_files+0x2a/0x420 [ 114.212461][ T6346] ? __fget_files+0x3a2/0x420 [ 114.212481][ T6346] ? __fget_files+0x2a/0x420 [ 114.212506][ T6346] ? fdget+0x1ac/0x250 [ 114.212537][ T6346] ksys_read+0x150/0x270 [ 114.212564][ T6346] ? __pfx_ksys_read+0x10/0x10 [ 114.212600][ T6346] do_syscall_64+0x166/0x520 [ 114.212624][ T6346] ? trace_irq_disable+0x3b/0x140 [ 114.212647][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.212666][ T6346] ? clear_bhb_loop+0x70/0xc0 [ 114.212691][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.212710][ T6346] RIP: 0033:0x7f90d3d5fd8e [ 114.212729][ T6346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.212745][ T6346] RSP: 002b:00007f90d4cf2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.212767][ T6346] RAX: ffffffffffffffda RBX: 00007f90d4cf36c0 RCX: 00007f90d3d5fd8e [ 114.212781][ T6346] RDX: 000000000000000f RSI: 00007f90d4cf30a0 RDI: 0000000000000003 [ 114.212793][ T6346] RBP: 00007f90d4cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.212805][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.212817][ T6346] R13: 00007f90d4026038 R14: 00007f90d4025fa0 R15: 00007fff48d4e0c8 [ 114.212851][ T6346] [ 114.386146][ T5820] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 114.546800][ T5820] usb 3-1: New USB device found: idVendor=045e, idProduct=00e1, bcdDevice=0.00 [ 114.548052][ T5820] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.548092][ T5820] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.548117][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.548151][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.551782][ T5820] usb 3-1: config 0 descriptor?? [ 114.768156][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.777080][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.989249][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 114.989379][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.008955][ T5820] usb 3-1: USB disconnect, device number 18 [ 115.625577][ T6376] FAULT_INJECTION: forcing a failure. [ 115.625577][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 115.625600][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.2.141 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.625618][ T6376] Tainted: [L]=SOFTLOCKUP [ 115.625625][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.625634][ T6376] Call Trace: [ 115.625642][ T6376] [ 115.625650][ T6376] dump_stack_lvl+0xe8/0x150 [ 115.625682][ T6376] should_fail_ex+0x3eb/0x540 [ 115.625720][ T6376] ? __alloc_skb+0x1db/0x7a0 [ 115.625733][ T6376] should_failslab+0xa8/0x100 [ 115.625748][ T6376] ? __alloc_skb+0x1db/0x7a0 [ 115.625758][ T6376] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 115.625770][ T6376] ? __alloc_skb+0x18d/0x7a0 [ 115.625782][ T6376] ? __alloc_skb+0x1db/0x7a0 [ 115.625796][ T6376] __alloc_skb+0x1db/0x7a0 [ 115.625810][ T6376] alloc_skb_with_frags+0xc6/0x760 [ 115.625829][ T6376] sock_alloc_send_pskb+0xc69/0xd90 [ 115.625853][ T6376] ? __lock_acquire+0x747/0x2de0 [ 115.625866][ T6376] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 115.625886][ T6376] ? iov_iter_advance+0x8b/0x1e0 [ 115.625902][ T6376] tun_get_user+0x9c8/0x4470 [ 115.625923][ T6376] ? aa_file_perm+0x18b/0x15f0 [ 115.625941][ T6376] ? aa_file_perm+0x4ed/0x15f0 [ 115.625955][ T6376] ? __pfx_tun_get_user+0x10/0x10 [ 115.625968][ T6376] ? __lock_acquire+0x747/0x2de0 [ 115.625981][ T6376] ? kstrtoull+0x137/0x1d0 [ 115.625998][ T6376] ? ref_tracker_alloc+0x172/0x530 [ 115.626014][ T6376] ? lock_acquire+0x115/0x350 [ 115.626026][ T6376] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 115.626043][ T6376] ? lock_acquire+0x115/0x350 [ 115.626054][ T6376] ? tun_get+0x1c/0x2f0 [ 115.626069][ T6376] ? tun_get+0x1c/0x2f0 [ 115.626080][ T6376] ? tun_get+0x1c/0x2f0 [ 115.626093][ T6376] tun_chr_write_iter+0x113/0x200 [ 115.626107][ T6376] vfs_write+0x612/0xba0 [ 115.626125][ T6376] ? __pfx_vfs_write+0x10/0x10 [ 115.626140][ T6376] ? __fget_files+0x3a2/0x420 [ 115.626151][ T6376] ? __fget_files+0x2a/0x420 [ 115.626165][ T6376] ? fdget+0x1ac/0x250 [ 115.626181][ T6376] ksys_write+0x150/0x270 [ 115.626198][ T6376] ? __pfx_ksys_write+0x10/0x10 [ 115.626219][ T6376] do_syscall_64+0x166/0x520 [ 115.626233][ T6376] ? trace_irq_disable+0x3b/0x140 [ 115.626246][ T6376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.626257][ T6376] ? clear_bhb_loop+0x70/0xc0 [ 115.626270][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.626281][ T6376] RIP: 0033:0x7f876af9f559 [ 115.626293][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.626302][ T6376] RSP: 002b:00007f876be1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.626316][ T6376] RAX: ffffffffffffffda RBX: 00007f876b225fa0 RCX: 00007f876af9f559 [ 115.626325][ T6376] RDX: 0000000000000033 RSI: 00002000000001c0 RDI: 0000000000000003 [ 115.626332][ T6376] RBP: 00007f876be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.626339][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.626346][ T6376] R13: 00007f876b226038 R14: 00007f876b225fa0 R15: 00007ffe8962be28 [ 115.626363][ T6376] [ 115.669050][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.923354][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 115.940679][ T5820] usb 4-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 115.958610][ T6390] FAULT_INJECTION: forcing a failure. [ 115.958610][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 115.958639][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.2.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.958663][ T6390] Tainted: [L]=SOFTLOCKUP [ 115.958669][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.958678][ T6390] Call Trace: [ 115.958686][ T6390] [ 115.958693][ T6390] dump_stack_lvl+0xe8/0x150 [ 115.958724][ T6390] should_fail_ex+0x3eb/0x540 [ 115.958754][ T6390] should_failslab+0xa8/0x100 [ 115.958778][ T6390] __kmalloc_noprof+0xf9/0x710 [ 115.958796][ T6390] ? rcu_is_watching+0x16/0xb0 [ 115.958818][ T6390] ? tomoyo_realpath_from_path+0xef/0x640 [ 115.958841][ T6390] ? tomoyo_realpath_from_path+0xef/0x640 [ 115.958875][ T6390] tomoyo_realpath_from_path+0xef/0x640 [ 115.958908][ T6390] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.958930][ T6390] tomoyo_path_number_perm+0x246/0x5f0 [ 115.958954][ T6390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.958973][ T6390] ? __lock_acquire+0x747/0x2de0 [ 115.959037][ T6390] ? __fget_files+0x2a/0x420 [ 115.959059][ T6390] ? __fget_files+0x2a/0x420 [ 115.959078][ T6390] ? __fget_files+0x2a/0x420 [ 115.959102][ T6390] security_file_ioctl+0xc3/0x2a0 [ 115.959124][ T6390] __se_sys_ioctl+0x47/0x170 [ 115.959149][ T6390] do_syscall_64+0x166/0x520 [ 115.959171][ T6390] ? trace_irq_disable+0x3b/0x140 [ 115.959191][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.959208][ T6390] ? clear_bhb_loop+0x70/0xc0 [ 115.959230][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.959247][ T6390] RIP: 0033:0x7f876af9f559 [ 115.959264][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.959278][ T6390] RSP: 002b:00007f876be1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.959297][ T6390] RAX: ffffffffffffffda RBX: 00007f876b225fa0 RCX: 00007f876af9f559 [ 115.959310][ T6390] RDX: 00002000000004c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 115.959321][ T6390] RBP: 00007f876be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.959332][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.959342][ T6390] R13: 00007f876b226038 R14: 00007f876b225fa0 R15: 00007ffe8962be28 [ 115.959371][ T6390] [ 115.959390][ T6390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.976325][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.976353][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.976398][ T5820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 115.976424][ T5820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 115.976466][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.311128][ T5820] hub 4-1:1.0: bad descriptor, ignoring hub [ 116.311158][ T5820] hub 4-1:1.0: probe with driver hub failed with error -5 [ 116.311766][ T5820] cdc_wdm 4-1:1.0: skipping garbage [ 116.311782][ T5820] cdc_wdm 4-1:1.0: skipping garbage [ 116.339676][ T5820] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 116.339699][ T5820] cdc_wdm 4-1:1.0: Unknown control protocol [ 116.618010][ T6413] FAULT_INJECTION: forcing a failure. [ 116.618010][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 116.618044][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.1.147 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.618072][ T6413] Tainted: [L]=SOFTLOCKUP [ 116.618080][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.618091][ T6413] Call Trace: [ 116.618099][ T6413] [ 116.618109][ T6413] dump_stack_lvl+0xe8/0x150 [ 116.618145][ T6413] should_fail_ex+0x3eb/0x540 [ 116.618181][ T6413] should_failslab+0xa8/0x100 [ 116.618209][ T6413] __kmalloc_noprof+0xf9/0x710 [ 116.618234][ T6413] ? sk_prot_alloc+0xe7/0x210 [ 116.618256][ T6413] ? sk_prot_alloc+0xe7/0x210 [ 116.618286][ T6413] sk_prot_alloc+0xe7/0x210 [ 116.618308][ T6413] ? sk_alloc+0x27/0x390 [ 116.618333][ T6413] sk_alloc+0x3a/0x390 [ 116.618360][ T6413] bt_sock_alloc+0x3b/0x330 [ 116.618395][ T6413] rfcomm_sock_alloc+0x4c/0x230 [ 116.618425][ T6413] rfcomm_sock_create+0xc2/0x320 [ 116.618456][ T6413] bt_sock_create+0x163/0x240 [ 116.618488][ T6413] __sock_create+0x4b5/0xac0 [ 116.618524][ T6413] __sys_socket+0xd6/0x1b0 [ 116.618560][ T6413] __x64_sys_socket+0x7a/0x90 [ 116.618590][ T6413] do_syscall_64+0x166/0x520 [ 116.618615][ T6413] ? trace_irq_disable+0x3b/0x140 [ 116.618639][ T6413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.618661][ T6413] ? clear_bhb_loop+0x70/0xc0 [ 116.618687][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.618706][ T6413] RIP: 0033:0x7fc3a119f559 [ 116.618726][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.618743][ T6413] RSP: 002b:00007fc3a2117fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.618766][ T6413] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fc3a119f559 [ 116.618780][ T6413] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f [ 116.618792][ T6413] RBP: 00007fc3a1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 116.618805][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.618817][ T6413] R13: 00007fc3a1426038 R14: 00007fc3a1425fa0 R15: 00007fff4b757ee8 [ 116.618851][ T6413] [ 116.623076][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.147'. [ 117.271635][ T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 117.271666][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.271702][ T55] Tainted: [L]=SOFTLOCKUP [ 117.271710][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.271724][ T55] Workqueue: hci2 hci_rx_work [ 117.271756][ T55] Call Trace: [ 117.271763][ T55] [ 117.271772][ T55] dump_stack_lvl+0xe8/0x150 [ 117.271800][ T55] sysfs_create_dir_ns+0x271/0x2a0 [ 117.271828][ T55] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 117.271856][ T55] ? do_raw_spin_unlock+0xf5/0x200 [ 117.271888][ T55] kobject_add_internal+0x622/0xcd0 [ 117.271914][ T55] kobject_add+0x163/0x240 [ 117.271939][ T55] ? __pfx_kobject_add+0x10/0x10 [ 117.271963][ T55] ? get_device_parent+0x366/0x3a0 [ 117.271990][ T55] device_add+0x3fa/0xb80 [ 117.272020][ T55] hci_conn_add_sysfs+0xd5/0x210 [ 117.272052][ T55] le_conn_complete_evt+0x1094/0x18d0 [ 117.272082][ T55] ? le_conn_complete_evt+0x210/0x18d0 [ 117.272108][ T55] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 117.272132][ T55] ? __mutex_unlock_slowpath+0x731/0x900 [ 117.272162][ T55] ? skb_pull_data+0xf0/0x200 [ 117.272194][ T55] hci_le_conn_complete_evt+0x187/0x470 [ 117.272224][ T55] hci_event_packet+0x67a/0xf10 [ 117.272261][ T55] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 117.272291][ T55] ? __pfx_hci_event_packet+0x10/0x10 [ 117.272325][ T55] ? kcov_remote_start+0x523/0x7e0 [ 117.272354][ T55] ? hci_send_to_monitor+0xdf/0x600 [ 117.272381][ T55] hci_rx_work+0x2b4/0x1110 [ 117.272415][ T55] ? process_scheduled_works+0x97a/0x1630 [ 117.272442][ T55] process_scheduled_works+0xc3d/0x1630 [ 117.272517][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.272553][ T55] ? assign_work+0x3cf/0x5d0 [ 117.272585][ T55] worker_thread+0xa47/0xfb0 [ 117.272647][ T55] kthread+0x38b/0x480 [ 117.272668][ T55] ? __pfx_worker_thread+0x10/0x10 [ 117.272692][ T55] ? __pfx_kthread+0x10/0x10 [ 117.272715][ T55] ret_from_fork+0x514/0xb70 [ 117.272741][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 117.272761][ T55] ? __switch_to+0xc78/0x1410 [ 117.272792][ T55] ? __pfx_kthread+0x10/0x10 [ 117.272815][ T55] ret_from_fork_asm+0x1a/0x30 [ 117.272862][ T55] [ 117.273822][ T55] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.273865][ T55] Bluetooth: hci2: failed to register connection device [ 117.563621][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.671299][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.899216][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.065595][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.454802][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.457364][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.458602][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.459708][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.460417][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.634254][ T65] bridge_slave_1: left allmulticast mode [ 118.634302][ T65] bridge_slave_1: left promiscuous mode [ 118.634906][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.668370][ T65] bridge_slave_0: left allmulticast mode [ 118.668397][ T65] bridge_slave_0: left promiscuous mode [ 118.670493][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.735219][ T6418] syz.1.149 (6418): drop_caches: 2 [ 119.078133][ T6457] FAULT_INJECTION: forcing a failure. [ 119.078133][ T6457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.078166][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.1.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.078193][ T6457] Tainted: [L]=SOFTLOCKUP [ 119.078199][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.078210][ T6457] Call Trace: [ 119.078217][ T6457] [ 119.078226][ T6457] dump_stack_lvl+0xe8/0x150 [ 119.078261][ T6457] should_fail_ex+0x3eb/0x540 [ 119.078293][ T6457] _copy_to_user+0x31/0xb0 [ 119.078330][ T6457] simple_read_from_buffer+0xe1/0x170 [ 119.078359][ T6457] proc_fail_nth_read+0x1bb/0x230 [ 119.078389][ T6457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.078418][ T6457] ? rw_verify_area+0x24a/0x4c0 [ 119.078443][ T6457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.078470][ T6457] vfs_read+0x213/0xa80 [ 119.078499][ T6457] ? __pfx___mutex_lock+0x10/0x10 [ 119.078523][ T6457] ? __pfx_vfs_read+0x10/0x10 [ 119.078546][ T6457] ? __fget_files+0x2a/0x420 [ 119.078566][ T6457] ? __fget_files+0x3a2/0x420 [ 119.078587][ T6457] ? __fget_files+0x2a/0x420 [ 119.078611][ T6457] ? fdget+0x1ac/0x250 [ 119.078639][ T6457] ksys_read+0x150/0x270 [ 119.078660][ T6457] ? __fget_files+0x3a2/0x420 [ 119.078682][ T6457] ? __pfx_ksys_read+0x10/0x10 [ 119.078719][ T6457] do_syscall_64+0x166/0x520 [ 119.078743][ T6457] ? trace_irq_disable+0x3b/0x140 [ 119.078764][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.078783][ T6457] ? clear_bhb_loop+0x70/0xc0 [ 119.078807][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.078826][ T6457] RIP: 0033:0x7fc3a115fd8e [ 119.078845][ T6457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.078861][ T6457] RSP: 002b:00007fc3a20f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.078883][ T6457] RAX: ffffffffffffffda RBX: 00007fc3a20f76c0 RCX: 00007fc3a115fd8e [ 119.078896][ T6457] RDX: 000000000000000f RSI: 00007fc3a20f70a0 RDI: 0000000000000004 [ 119.078908][ T6457] RBP: 00007fc3a20f7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.078920][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.078932][ T6457] R13: 00007fc3a1426128 R14: 00007fc3a1426090 R15: 00007fff4b757ee8 [ 119.078964][ T6457] [ 119.226448][ T6455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.226655][ T6455] block device autoloading is deprecated and will be removed. [ 119.305847][ T5656] Bluetooth: hci2: command 0x2016 tx timeout [ 119.337161][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.379166][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.393539][ T65] bond0 (unregistering): Released all slaves [ 119.662354][ T6467] loop5: detected capacity change from 0 to 7 [ 119.673413][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.673564][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.694496][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.694594][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.695997][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.696066][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.696257][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.696324][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.696512][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.696587][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.696773][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.696839][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.697375][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.697441][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.697479][ T6467] ldm_validate_partition_table(): Disk read failed. [ 119.697629][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.697704][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.698156][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.698225][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.698396][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 119.698461][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.698705][ T6467] Dev loop5: unable to read RDB block 0 [ 119.700374][ T6467] loop5: unable to read partition table [ 119.700615][ T6467] loop5: partition table beyond EOD, truncated [ 119.701701][ T6467] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 120.144963][ T3225] usb 4-1: USB disconnect, device number 9 [ 120.317321][ T6438] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.504640][ T5656] Bluetooth: hci3: command tx timeout [ 120.525504][ T6492] FAULT_INJECTION: forcing a failure. [ 120.525504][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 120.525538][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.2.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.525563][ T6492] Tainted: [L]=SOFTLOCKUP [ 120.525570][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.525582][ T6492] Call Trace: [ 120.525589][ T6492] [ 120.525597][ T6492] dump_stack_lvl+0xe8/0x150 [ 120.525632][ T6492] should_fail_ex+0x3eb/0x540 [ 120.525666][ T6492] should_failslab+0xa8/0x100 [ 120.525694][ T6492] __kmalloc_cache_noprof+0x9e/0x600 [ 120.525717][ T6492] ? nfnetlink_rcv+0x1021/0x28c0 [ 120.525744][ T6492] ? nfnetlink_rcv+0x1021/0x28c0 [ 120.525779][ T6492] nfnetlink_rcv+0x1021/0x28c0 [ 120.525846][ T6492] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.525924][ T6492] ? skb_clone+0x246/0x3a0 [ 120.525965][ T6492] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.525993][ T6492] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.526028][ T6492] netlink_unicast+0x8ef/0xa80 [ 120.526085][ T6492] netlink_sendmsg+0x7f0/0xb20 [ 120.526113][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.526136][ T6492] ? aa_sock_msg_perm+0x144/0x210 [ 120.526168][ T6492] ? apparmor_socket_sendmsg+0x98/0x360 [ 120.526194][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.526212][ T6492] sock_sendmsg_nosec+0x14e/0x190 [ 120.526244][ T6492] ____sys_sendmsg+0x54e/0x850 [ 120.526274][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.526313][ T6492] ? import_iovec+0x73/0xa0 [ 120.526345][ T6492] ___sys_sendmsg+0x2a6/0x360 [ 120.526365][ T6492] ? __lock_acquire+0x747/0x2de0 [ 120.526393][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.526459][ T6492] ? __fget_files+0x3a2/0x420 [ 120.526480][ T6492] ? __fget_files+0x2a/0x420 [ 120.526513][ T6492] __x64_sys_sendmsg+0x1b1/0x290 [ 120.526540][ T6492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.526588][ T6492] do_syscall_64+0x166/0x520 [ 120.526611][ T6492] ? trace_irq_disable+0x3b/0x140 [ 120.526631][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.526650][ T6492] ? clear_bhb_loop+0x70/0xc0 [ 120.526674][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.526693][ T6492] RIP: 0033:0x7f876af9f559 [ 120.526711][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.526725][ T6492] RSP: 002b:00007f876be1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.526748][ T6492] RAX: ffffffffffffffda RBX: 00007f876b225fa0 RCX: 00007f876af9f559 [ 120.526762][ T6492] RDX: 0000000000000802 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 120.526775][ T6492] RBP: 00007f876be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.526787][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.526798][ T6492] R13: 00007f876b226038 R14: 00007f876b225fa0 R15: 00007ffe8962be28 [ 120.526831][ T6492] [ 120.919126][ T65] hsr_slave_0: left promiscuous mode [ 120.934040][ T65] hsr_slave_1: left promiscuous mode [ 120.935121][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.935157][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.975434][ T6504] FAULT_INJECTION: forcing a failure. [ 120.975434][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 120.975468][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.2.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.975495][ T6504] Tainted: [L]=SOFTLOCKUP [ 120.975502][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.975513][ T6504] Call Trace: [ 120.975521][ T6504] [ 120.975530][ T6504] dump_stack_lvl+0xe8/0x150 [ 120.975564][ T6504] should_fail_ex+0x3eb/0x540 [ 120.975598][ T6504] should_failslab+0xa8/0x100 [ 120.975627][ T6504] __kmalloc_noprof+0xf9/0x710 [ 120.975649][ T6504] ? tomoyo_encode+0x2ad/0x570 [ 120.975674][ T6504] ? tomoyo_encode+0x2ad/0x570 [ 120.975706][ T6504] tomoyo_encode+0x2ad/0x570 [ 120.975740][ T6504] tomoyo_realpath_from_path+0x5fa/0x640 [ 120.975779][ T6504] ? tomoyo_path_number_perm+0x219/0x5f0 [ 120.975803][ T6504] tomoyo_path_number_perm+0x246/0x5f0 [ 120.975831][ T6504] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.975853][ T6504] ? __lock_acquire+0x747/0x2de0 [ 120.975918][ T6504] ? __fget_files+0x2a/0x420 [ 120.975944][ T6504] ? __fget_files+0x2a/0x420 [ 120.975966][ T6504] ? __fget_files+0x2a/0x420 [ 120.975993][ T6504] security_file_ioctl+0xc3/0x2a0 [ 120.976018][ T6504] __se_sys_ioctl+0x47/0x170 [ 120.976048][ T6504] do_syscall_64+0x166/0x520 [ 120.976073][ T6504] ? trace_irq_disable+0x3b/0x140 [ 120.976097][ T6504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.976116][ T6504] ? clear_bhb_loop+0x70/0xc0 [ 120.976141][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.976160][ T6504] RIP: 0033:0x7f876af9f559 [ 120.976188][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.976204][ T6504] RSP: 002b:00007f876be1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.976227][ T6504] RAX: ffffffffffffffda RBX: 00007f876b225fa0 RCX: 00007f876af9f559 [ 120.976240][ T6504] RDX: 00002000000007c0 RSI: 00000000c0745645 RDI: 0000000000000003 [ 120.976253][ T6504] RBP: 00007f876be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.976264][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.976280][ T6504] R13: 00007f876b226038 R14: 00007f876b225fa0 R15: 00007ffe8962be28 [ 120.976314][ T6504] [ 121.000668][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.000693][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.003951][ T6504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.169283][ T65] veth1_macvtap: left promiscuous mode [ 121.169338][ T65] veth0_macvtap: left promiscuous mode [ 121.169457][ T65] veth1_vlan: left promiscuous mode [ 121.169538][ T65] veth0_vlan: left promiscuous mode [ 121.386722][ T55] Bluetooth: hci2: command 0x2016 tx timeout [ 121.630115][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 122.176280][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.172'. [ 122.301280][ T65] team0 (unregistering): Port device team_slave_1 removed [ 122.332803][ T65] team0 (unregistering): Port device team_slave_0 removed [ 122.449999][ T6527] FAULT_INJECTION: forcing a failure. [ 122.449999][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 122.450033][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.3.174 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.450058][ T6527] Tainted: [L]=SOFTLOCKUP [ 122.450064][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.450076][ T6527] Call Trace: [ 122.450084][ T6527] [ 122.450092][ T6527] dump_stack_lvl+0xe8/0x150 [ 122.450125][ T6527] should_fail_ex+0x3eb/0x540 [ 122.450159][ T6527] should_failslab+0xa8/0x100 [ 122.450187][ T6527] __kmalloc_noprof+0xf9/0x710 [ 122.450210][ T6527] ? tomoyo_encode+0x2ad/0x570 [ 122.450235][ T6527] ? tomoyo_encode+0x2ad/0x570 [ 122.450269][ T6527] tomoyo_encode+0x2ad/0x570 [ 122.450303][ T6527] tomoyo_realpath_from_path+0x5fa/0x640 [ 122.450341][ T6527] ? tomoyo_path_number_perm+0x219/0x5f0 [ 122.450366][ T6527] tomoyo_path_number_perm+0x246/0x5f0 [ 122.450393][ T6527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.450415][ T6527] ? __lock_acquire+0x747/0x2de0 [ 122.450480][ T6527] ? __fget_files+0x2a/0x420 [ 122.450506][ T6527] ? __fget_files+0x2a/0x420 [ 122.450528][ T6527] ? __fget_files+0x2a/0x420 [ 122.450568][ T6527] security_file_ioctl+0xc3/0x2a0 [ 122.450593][ T6527] __se_sys_ioctl+0x47/0x170 [ 122.450622][ T6527] do_syscall_64+0x166/0x520 [ 122.450647][ T6527] ? trace_irq_disable+0x3b/0x140 [ 122.450670][ T6527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.450690][ T6527] ? clear_bhb_loop+0x70/0xc0 [ 122.450713][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.450731][ T6527] RIP: 0033:0x7f90d3d9f559 [ 122.450750][ T6527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.450764][ T6527] RSP: 002b:00007f90d4cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.450784][ T6527] RAX: ffffffffffffffda RBX: 00007f90d4025fa0 RCX: 00007f90d3d9f559 [ 122.450797][ T6527] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000004 [ 122.450810][ T6527] RBP: 00007f90d4cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.450822][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.450834][ T6527] R13: 00007f90d4026038 R14: 00007f90d4025fa0 R15: 00007fff48d4e0c8 [ 122.450867][ T6527] [ 122.450915][ T6527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.506178][ T3225] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 122.522759][ T6527] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 122.584126][ T5656] Bluetooth: hci3: command tx timeout [ 122.661148][ T3225] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 122.667623][ T3225] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 122.667674][ T3225] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.667693][ T3225] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.667712][ T3225] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 122.707606][ T3225] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 122.707671][ T3225] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.707693][ T3225] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.707715][ T3225] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 122.837191][ T3225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.837220][ T3225] usb 3-1: Product: syz [ 122.837234][ T3225] usb 3-1: Manufacturer: syz [ 122.837248][ T3225] usb 3-1: SerialNumber: syz [ 122.877354][ T3225] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 122.877756][ T3225] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 122.926318][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 122.966957][ T6481] syz.1.160 (6481): drop_caches: 2 [ 122.978136][ T5305] 8021q: adding VLAN 0 to HW filter on device eth1 [ 122.978543][ T6522] : renamed from veth1_vlan (while UP) [ 123.097277][ T6522] Bluetooth: MGMT ver 1.23 [ 123.112227][ T3225] usb 3-1: USB disconnect, device number 19 [ 123.521479][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.521676][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.521811][ T6438] bridge_slave_0: entered allmulticast mode [ 123.523795][ T6438] bridge_slave_0: entered promiscuous mode [ 123.527179][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.527346][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.527471][ T6438] bridge_slave_1: entered allmulticast mode [ 123.529226][ T6438] bridge_slave_1: entered promiscuous mode [ 123.566354][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.569741][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.604765][ T6438] team0: Port device team_slave_0 added [ 123.610001][ T6438] team0: Port device team_slave_1 added [ 123.654660][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.654679][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.654704][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.656863][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.656877][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.656900][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.905089][ T6438] hsr_slave_0: entered promiscuous mode [ 123.909790][ T6438] hsr_slave_1: entered promiscuous mode [ 123.912427][ T6438] debugfs: 'hsr0' already exists in 'hsr' [ 123.912451][ T6438] Cannot create hsr debugfs directory [ 124.102022][ T6562] device-mapper: raid: Choosing default region size of 4MiB [ 124.126848][ T6562] device-mapper: table: 248:1: raid: Component device(s) too small (-EINVAL) [ 124.126875][ T6562] device-mapper: ioctl: error adding target to table [ 124.127366][ T5305] 8021q: adding VLAN 0 to HW filter on device eth2 [ 124.206544][ T6565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.295910][ T6438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.300504][ T6562] null_blk: disk nullb1 created [ 124.315166][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.318521][ T6438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.341994][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.346685][ T6438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.363080][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.368848][ T6438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.381863][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.593470][ T6583] FAULT_INJECTION: forcing a failure. [ 124.593470][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 124.593503][ T6583] CPU: 1 UID: 0 PID: 6583 Comm: syz.2.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.593529][ T6583] Tainted: [L]=SOFTLOCKUP [ 124.593535][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.593546][ T6583] Call Trace: [ 124.593554][ T6583] [ 124.593567][ T6583] dump_stack_lvl+0xe8/0x150 [ 124.593600][ T6583] should_fail_ex+0x3eb/0x540 [ 124.593632][ T6583] should_failslab+0xa8/0x100 [ 124.593660][ T6583] __kmalloc_cache_noprof+0x9e/0x600 [ 124.593683][ T6583] ? dm_ima_alloc_context+0x97/0x150 [ 124.593702][ T6583] ? dm_ima_alloc_context+0x97/0x150 [ 124.593728][ T6583] dm_ima_alloc_context+0x97/0x150 [ 124.593749][ T6583] dev_remove+0x8e/0x4c0 [ 124.593778][ T6583] ? __pfx_dev_remove+0x10/0x10 [ 124.593805][ T6583] ? __might_fault+0xaf/0x130 [ 124.593840][ T6583] dm_ctl_ioctl+0x9ec/0xe10 [ 124.593876][ T6583] ? __pfx_dev_remove+0x10/0x10 [ 124.593903][ T6583] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 124.593962][ T6583] ? __fget_files+0x2a/0x420 [ 124.593988][ T6583] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.594021][ T6583] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 124.594047][ T6583] __se_sys_ioctl+0xfc/0x170 [ 124.594074][ T6583] do_syscall_64+0x166/0x520 [ 124.594098][ T6583] ? trace_ ** replaying previous printk message ** [ 124.594098][ T6583] ? trace_irq_disable+0x3b/0x140 [ 124.594118][ T6583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.594137][ T6583] ? clear_bhb_loop+0x70/0xc0 [ 124.594160][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.594176][ T6583] RIP: 0033:0x7f876af9f559 [ 124.594192][ T6583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.594204][ T6583] RSP: 002b:00007f876bdfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.594222][ T6583] RAX: ffffffffffffffda RBX: 00007f876b226090 RCX: 00007f876af9f559 [ 124.594233][ T6583] RDX: 0000200000000540 RSI: 00000000c138fd04 RDI: 0000000000000003 [ 124.594243][ T6583] RBP: 00007f876bdfc090 R08: 0000000000000000 R09: 0000000000000000 [ 124.594253][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.594262][ T6583] R13: 00007f876b226128 R14: 00007f876b226090 R15: 00007ffe8962be28 [ 124.594291][ T6583] [ 124.600583][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.633938][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.657427][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.657540][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.667570][ T5656] Bluetooth: hci3: command tx timeout [ 124.672046][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.672149][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.741147][ T6581] [ 124.891233][ T6581] ====================================================== [ 124.898275][ T6581] WARNING: possible circular locking dependency detected [ 124.905321][ T6581] syzkaller #0 Tainted: G L [ 124.911404][ T6581] ------------------------------------------------------ [ 124.918433][ T6581] syz.2.182/6581 is trying to acquire lock: [ 124.924331][ T6581] ffff8880288865c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: wbt_init_enable_default+0x146/0x220 [ 124.934545][ T6581] [ 124.934545][ T6581] but task is already holding lock: [ 124.942000][ T6581] ffff888028885d80 (&q->q_usage_counter(io)#73){++++}-{0:0}, at: rq_qos_add+0x15b/0x370 [ 124.951744][ T6581] [ 124.951744][ T6581] which lock already depends on the new lock. [ 124.951744][ T6581] [ 124.962151][ T6581] [ 124.962151][ T6581] the existing dependency chain (in reverse order) is: [ 124.971178][ T6581] [ 124.971178][ T6581] -> #3 (&q->q_usage_counter(io)#73){++++}-{0:0}: [ 124.979968][ T6581] blk_alloc_queue+0x544/0x690 [ 124.985279][ T6581] __blk_alloc_disk+0xe3/0x1d0 [ 124.990570][ T6581] dm_create+0x476/0xf70 [ 124.995419][ T6581] dev_create+0x1f7/0x400 [ 125.000284][ T6581] dm_ctl_ioctl+0x9ec/0xe10 [ 125.005318][ T6581] __se_sys_ioctl+0xfc/0x170 [ 125.010435][ T6581] do_syscall_64+0x166/0x520 [ 125.015575][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.021988][ T6581] [ 125.021988][ T6581] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 125.029195][ T6581] fs_reclaim_acquire+0x71/0x100 [ 125.034653][ T6581] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 125.040893][ T6581] __d_alloc+0x37/0x820 [ 125.045572][ T6581] d_alloc+0x4b/0x190 [ 125.050078][ T6581] lookup_one_qstr_excl+0xd8/0x360 [ 125.055707][ T6581] start_dirop+0x5c/0x90 [ 125.060469][ T6581] simple_start_creating+0xcc/0x110 [ 125.066186][ T6581] debugfs_start_creating+0xca/0x1b0 [ 125.071984][ T6581] debugfs_create_dir+0x24/0x350 [ 125.077436][ T6581] regulator_init+0x6c/0x110 [ 125.082557][ T6581] do_one_initcall+0x250/0x870 [ 125.087844][ T6581] do_initcall_level+0x10a/0x1a0 [ 125.093312][ T6581] do_initcalls+0x59/0xa0 [ 125.098181][ T6581] kernel_init_freeable+0x29d/0x3e0 [ 125.103901][ T6581] kernel_init+0x22/0x1d0 [ 125.108747][ T6581] ret_from_fork+0x514/0xb70 [ 125.113855][ T6581] ret_from_fork_asm+0x1a/0x30 [ 125.119151][ T6581] [ 125.119151][ T6581] -> #1 (&sb->s_type->i_mutex_key#3/1){+.+.}-{4:4}: [ 125.127928][ T6581] down_write_nested+0x98/0x200 [ 125.133301][ T6581] start_dirop+0x4f/0x90 [ 125.138076][ T6581] simple_start_creating+0xcc/0x110 [ 125.143794][ T6581] debugfs_start_creating+0xca/0x1b0 [ 125.149593][ T6581] debugfs_create_dir+0x24/0x350 [ 125.155049][ T6581] blk_register_queue+0x189/0x4f0 [ 125.160779][ T6581] __add_disk+0x6b8/0xdb0 [ 125.165620][ T6581] add_disk_fwnode+0x143/0x3a0 [ 125.170900][ T6581] brd_alloc+0x5a9/0x7c0 [ 125.175677][ T6581] brd_init+0xc1/0x120 [ 125.180352][ T6581] do_one_initcall+0x250/0x870 [ 125.185637][ T6581] do_initcall_level+0x10a/0x1a0 [ 125.191099][ T6581] do_initcalls+0x59/0xa0 [ 125.195954][ T6581] kernel_init_freeable+0x29d/0x3e0 [ 125.201680][ T6581] kernel_init+0x22/0x1d0 [ 125.206615][ T6581] ret_from_fork+0x514/0xb70 [ 125.211723][ T6581] ret_from_fork_asm+0x1a/0x30 [ 125.217010][ T6581] [ 125.217010][ T6581] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 125.224826][ T6581] __lock_acquire+0x164c/0x2de0 [ 125.230196][ T6581] lock_acquire+0x115/0x350 [ 125.235218][ T6581] __mutex_lock+0x197/0x15a0 [ 125.240331][ T6581] wbt_init_enable_default+0x146/0x220 [ 125.246306][ T6581] blk_register_queue+0x420/0x4f0 [ 125.251851][ T6581] __add_disk+0x6b8/0xdb0 [ 125.256695][ T6581] add_disk_fwnode+0x100/0x3a0 [ 125.261971][ T6581] dm_setup_md_queue+0x23d/0x4f0 [ 125.267445][ T6581] table_load+0x4fd/0x8a0 [ 125.272301][ T6581] dm_ctl_ioctl+0x9ec/0xe10 [ 125.277324][ T6581] __se_sys_ioctl+0xfc/0x170 [ 125.282435][ T6581] do_syscall_64+0x166/0x520 [ 125.287642][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.294053][ T6581] [ 125.294053][ T6581] other info that might help us debug this: [ 125.294053][ T6581] [ 125.304282][ T6581] Chain exists of: [ 125.304282][ T6581] &q->debugfs_mutex --> fs_reclaim --> &q->q_usage_counter(io)#73 [ 125.304282][ T6581] [ 125.318014][ T6581] Possible unsafe locking scenario: [ 125.318014][ T6581] [ 125.325563][ T6581] CPU0 CPU1 [ 125.330934][ T6581] ---- ---- [ 125.336291][ T6581] lock(&q->q_usage_counter(io)#73); [ 125.341665][ T6581] lock(fs_reclaim); [ 125.348158][ T6581] lock(&q->q_usage_counter(io)#73); [ 125.356050][ T6581] lock(&q->debugfs_mutex); [ 125.360636][ T6581] [ 125.360636][ T6581] *** DEADLOCK *** [ 125.360636][ T6581] [ 125.368787][ T6581] locks held by syz.2.182/6581: 6, last CPU#0: [ 125.375054][ T6581] #0: ffff88807ce11190 (&md->type_lock){+.+.}-{4:4}, at: table_load+0x1dd/0x8a0 [ 125.384227][ T6581] #1: ffff88807ce110e8 (&md->table_devices_lock){+.+.}-{4:4}, at: dm_setup_md_queue+0x20b/0x4f0 [ 125.394774][ T6581] #2: ffff888035d3ad78 (&set->update_nr_hwq_lock){.+.+}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 125.405134][ T6581] #3: ffff888028886330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 125.414967][ T6581] #4: ffff888028885d80 (&q->q_usage_counter(io)#73){++++}-{0:0}, at: rq_qos_add+0x15b/0x370 [ 125.425151][ T6581] #5: ffff888028885db8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: rq_qos_add+0x15b/0x370 [ 125.435603][ T6581] [ 125.435603][ T6581] stack backtrace: [ 125.441577][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.2.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.452422][ T6581] Tainted: [L]=SOFTLOCKUP [ 125.456744][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.466797][ T6581] Call Trace: [ 125.470082][ T6581] [ 125.473015][ T6581] dump_stack_lvl+0xe8/0x150 [ 125.477614][ T6581] print_circular_bug+0x2e2/0x300 [ 125.482645][ T6581] check_noncircular+0x12f/0x150 [ 125.487586][ T6581] __lock_acquire+0x164c/0x2de0 [ 125.492449][ T6581] lock_acquire+0x115/0x350 [ 125.496952][ T6581] ? wbt_init_enable_default+0x146/0x220 [ 125.502591][ T6581] __mutex_lock+0x197/0x15a0 [ 125.507186][ T6581] ? wbt_init_enable_default+0x146/0x220 [ 125.512835][ T6581] ? lockdep_hardirqs_on+0x7b/0x110 [ 125.518034][ T6581] ? irqentry_exit+0x2a0/0x9b0 [ 125.522798][ T6581] ? wbt_init_enable_default+0x146/0x220 [ 125.528450][ T6581] ? __pfx___mutex_lock+0x10/0x10 [ 125.533484][ T6581] ? wbt_init+0x329/0x450 [ 125.537822][ T6581] wbt_init_enable_default+0x146/0x220 [ 125.543280][ T6581] blk_register_queue+0x420/0x4f0 [ 125.548310][ T6581] __add_disk+0x6b8/0xdb0 [ 125.552656][ T6581] add_disk_fwnode+0x100/0x3a0 [ 125.557504][ T6581] dm_setup_md_queue+0x23d/0x4f0 [ 125.562450][ T6581] ? dm_table_complete+0x1d84/0x22d0 [ 125.567732][ T6581] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 125.573198][ T6581] ? __pfx_dm_table_complete+0x10/0x10 [ 125.578655][ T6581] table_load+0x4fd/0x8a0 [ 125.582993][ T6581] ? __pfx_table_load+0x10/0x10 [ 125.587847][ T6581] ? __might_fault+0xaf/0x130 [ 125.592527][ T6581] dm_ctl_ioctl+0x9ec/0xe10 [ 125.597038][ T6581] ? __pfx_table_load+0x10/0x10 [ 125.601891][ T6581] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 125.606931][ T6581] ? __fget_files+0x2a/0x420 [ 125.611960][ T6581] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.616902][ T6581] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 125.621930][ T6581] __se_sys_ioctl+0xfc/0x170 [ 125.626526][ T6581] do_syscall_64+0x166/0x520 [ 125.631134][ T6581] ? trace_irq_disable+0x3b/0x140 [ 125.636158][ T6581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.642224][ T6581] ? clear_bhb_loop+0x70/0xc0 [ 125.646905][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.652800][ T6581] RIP: 0033:0x7f876af9f559 [ 125.657216][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.676994][ T6581] RSP: 002b:00007f876be1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.685411][ T6581] RAX: ffffffffffffffda RBX: 00007f876b225fa0 RCX: 00007f876af9f559 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.693388][ T6581] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 125.701448][ T6581] RBP: 00007f876b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 125.709418][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.717395][ T6581] R13: 00007f876b226038 R14: 00007f876b225fa0 R15: 00007ffe8962be28 [ 125.725394][ T6581] [ 125.770195][ T6438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.770220][ T6438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.790233][ T6581] device-mapper: ioctl: device has been removed from the dev hash table. [ 126.202169][ T5305] 8021q: adding VLAN 0 to HW filter on device eth3 [ 126.225246][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.320774][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.356114][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.439653][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.572766][ T1102] bridge_slave_1: left allmulticast mode [ 126.572792][ T1102] bridge_slave_1: left promiscuous mode [ 126.572944][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.580226][ T1102] bridge_slave_0: left allmulticast mode [ 126.580246][ T1102] bridge_slave_0: left promiscuous mode [ 126.580374][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.699199][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.700888][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.701939][ T1102] bond0 (unregistering): Released all slaves [ 126.754629][ T1102] tipc: Left network mode [ 126.784084][ T5305] 8021q: adding VLAN 0 to HW filter on device eth4 [ 127.204631][ T5305] 8021q: adding VLAN 0 to HW filter on device eth5 [ 127.237210][ T1102] hsr_slave_0: left promiscuous mode [ 127.237662][ T1102] hsr_slave_1: left promiscuous mode [ 127.238204][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.238219][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.238766][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.238781][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.241910][ T1102] veth1_macvtap: left promiscuous mode [ 127.241937][ T1102] veth0_macvtap: left promiscuous mode [ 127.242024][ T1102] veth1_vlan: left promiscuous mode [ 127.242069][ T1102] veth0_vlan: left promiscuous mode [ 127.365558][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 127.368317][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 127.687899][ T5305] 8021q: adding VLAN 0 to HW filter on device eth6 [ 127.918952][ T5305] 8021q: adding VLAN 0 to HW filter on device eth7 [ 128.038926][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.090557][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.123735][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.189162][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.258332][ T5305] 8021q: adding VLAN 0 to HW filter on device eth8 [ 128.276482][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.330487][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.361142][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.433400][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.525312][ T1102] bridge_slave_1: left allmulticast mode [ 128.525338][ T1102] bridge_slave_1: left promiscuous mode [ 128.525484][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.528675][ T1102] bridge_slave_0: left allmulticast mode [ 128.528697][ T1102] bridge_slave_0: left promiscuous mode [ 128.528826][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.569820][ T1102] bridge_slave_1: left allmulticast mode [ 128.569844][ T1102] bridge_slave_1: left promiscuous mode [ 128.569957][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.570983][ T1102] bridge_slave_0: left allmulticast mode [ 128.570995][ T1102] bridge_slave_0: left promiscuous mode [ 128.571067][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.608282][ T1102] bridge_slave_1: left allmulticast mode [ 128.608298][ T1102] bridge_slave_1: left promiscuous mode [ 128.608392][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.609367][ T1102] bridge_slave_0: left allmulticast mode [ 128.609379][ T1102] bridge_slave_0: left promiscuous mode [ 128.609450][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.693969][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.703788][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.704812][ T1102] bond0 (unregistering): Released all slaves [ 128.751368][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.753385][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.754287][ T1102] bond0 (unregistering): Released all slaves [ 128.800347][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.801485][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.802174][ T1102] bond0 (unregistering): Released all slaves [ 128.810102][ T5305] 8021q: adding VLAN 0 to HW filter on device eth9 [ 128.891081][ T1102] tipc: Left network mode [ 129.150492][ T5305] 8021q: adding VLAN 0 to HW filter on device eth10 [ 129.398975][ T1102] hsr_slave_0: left promiscuous mode [ 129.399549][ T1102] hsr_slave_1: left promiscuous mode [ 129.400110][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.400524][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.403955][ T1102] hsr_slave_0: left promiscuous mode [ 129.432759][ T1102] hsr_slave_1: left promiscuous mode [ 129.440300][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.440318][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.463338][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.463358][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.481148][ T1102] hsr_slave_0: left promiscuous mode [ 129.481570][ T1102] hsr_slave_1: left promiscuous mode [ 129.482101][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.482118][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.482627][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.482642][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.530803][ T1102] veth1_macvtap: left promiscuous mode [ 129.530833][ T1102] veth0_macvtap: left promiscuous mode [ 129.530901][ T1102] : left promiscuous mode [ 129.530970][ T1102] veth0_vlan: left promiscuous mode [ 129.543361][ T1102] veth1_macvtap: left promiscuous mode [ 129.543390][ T1102] veth0_macvtap: left promiscuous mode [ 129.543460][ T1102] veth1_vlan: left promiscuous mode [ 129.543519][ T1102] veth0_vlan: left promiscuous mode [ 129.696724][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 129.699582][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 129.798046][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 129.800829][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 129.895796][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 129.900206][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 129.940460][ T5305] 8021q: adding VLAN 0 to HW filter on device eth11 [ 130.248281][ T5305] 8021q: adding VLAN 0 to HW filter on device eth12 [ 130.512861][ T5305] 8021q: adding VLAN 0 to HW filter on device eth13 [ 130.738392][ T5305] 8021q: adding VLAN 0 to HW filter on device eth14 [ 130.964036][ T5305] 8021q: adding VLAN 0 to HW filter on device eth15 [ 131.200299][ T5305] 8021q: adding VLAN 0 to HW filter on device eth16 [ 131.408553][ T5305] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.652024][ T5305] 8021q: adding VLAN 0 to HW filter on device eth18 [ 131.866628][ T5305] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.089361][ T5305] 8021q: adding VLAN 0 to HW filter on device eth20 [ 133.144869][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.144900][ T1316] ieee802154 phy1 wpan1: encryption failed: -22