last executing test programs: 2m34.237179664s ago: executing program 0 (id=500): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = landlock_create_ruleset(0x0, 0xfffffffffffffdc7, 0x2) landlock_restrict_self(r0, 0x8) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040f"], 0x7) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0xc4, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b3c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd71}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0)=0x1, 0x4) 2m32.567803627s ago: executing program 0 (id=502): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r2, 0x2004, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m31.021546137s ago: executing program 0 (id=507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='cdg', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9273f", 0x3, 0x4044880, 0x0, 0x0) 2m30.050576742s ago: executing program 0 (id=511): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) 2m29.957826544s ago: executing program 0 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b6197b5090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m29.889314316s ago: executing program 0 (id=514): socket$inet6(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 2m14.835057585s ago: executing program 32 (id=514): socket$inet6(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 16.205278122s ago: executing program 3 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe4) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, 0x0, 0x0, 0x200) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) 14.261014282s ago: executing program 3 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x200, 0x4, {0x77359400}, {0x4, 0x0, 0x81, 0x7, 0x9, 0x3, "b375da48"}, 0x0, 0x4, {}, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) dup2(r3, r2) io_setup(0x205, &(0x7f0000002500)) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000500)=@multiplanar_fd={0x3, 0x3, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0xc, 0x1, 0x48, 0x3, 0x1, "b6fe4b7d"}, 0x4, 0x4, {0x0}, 0x6, 0x0, r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12.974601545s ago: executing program 3 (id=1055): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fba000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000f13000/0x4000)=nil, 0x4000}, 0x1}) 6.246916879s ago: executing program 1 (id=1068): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x83d9f762074edbc7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0x35e5, 0x2, 0xac, 0x7}, 0x33, [0xf2dc4bb, 0x4, 0x9, 0x348, 0x2fb, 0x4, 0x80, 0x2b, 0xfffffff8, 0x1, 0x3, 0xea, 0x5, 0xe, 0xa, 0x80, 0x8, 0xc, 0x401, 0x4, 0xfffffffd, 0x7, 0x0, 0x3, 0x5d00, 0x0, 0x5, 0x7ff, 0x1ff, 0x0, 0x6, 0xffffffff, 0x0, 0x4, 0x400ff, 0x7, 0x3, 0x2ec, 0x5, 0x320b, 0x7, 0x8, 0x34f42322, 0x10000, 0xf7d3, 0x5, 0x100, 0x9, 0x10000, 0xa, 0x2e70, 0x1, 0xfffffffe, 0x7, 0x8, 0x2, 0x6, 0xa72, 0x3, 0x6, 0x6, 0xb, 0xfffffffe, 0xb], [0x0, 0x0, 0x0, 0x3, 0x9, 0x6c6, 0x9, 0x0, 0xbd, 0x103, 0x1000, 0x8, 0x2, 0x6, 0x9, 0x4, 0x0, 0x1, 0x0, 0xd8, 0x5, 0x1, 0x338a76b2, 0xd9b, 0x3, 0xd, 0x56, 0xfffff609, 0x6, 0x0, 0x9, 0x5, 0x5, 0x5, 0xfffffff2, 0x7, 0x7, 0x1000, 0x10000, 0x8001, 0x612, 0xffffffff, 0x10, 0x401, 0x8000, 0x7fff, 0x3, 0x3, 0x5a83, 0x7, 0x1, 0xffffffff, 0x9, 0x1, 0x9cbb, 0x69, 0xff, 0xfffffffa, 0x3, 0xfffffac3, 0x8e800000, 0x8, 0x3, 0x4], [0x1ff, 0x7, 0x800, 0x3, 0x9, 0x1000, 0xfffffffb, 0xc0000000, 0x2, 0x9, 0x40, 0x5, 0x26, 0xc2e2, 0xfffffffd, 0x101002, 0x275, 0x2, 0x5, 0x200, 0x3, 0x10000, 0x4, 0x5287, 0xe, 0x32, 0xdfb2, 0x8, 0x1, 0x80000000, 0x4, 0xb, 0x3, 0x6, 0x1, 0xa, 0x5290, 0x4, 0x4, 0x1ff, 0x8000009a, 0x5, 0x1000, 0x8, 0xc, 0x5, 0x1ae3, 0xb, 0x4, 0xa8, 0x1, 0x9, 0xd5, 0x10000, 0x7, 0x6, 0xd2, 0x4, 0x8000, 0x7, 0xbb, 0x2429, 0x753, 0x5], [0x8, 0x3e, 0x9, 0xffffffff, 0x2, 0x4b, 0x20000, 0x3, 0xfffffffb, 0x6, 0x200000e4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x8000, 0xfffffffc, 0x1, 0x4, 0x10, 0x4, 0x3, 0xffff, 0xc37, 0xfffffffd, 0x2, 0x5, 0x7, 0x8, 0x3, 0x7, 0x4, 0x1, 0x6, 0x3, 0x7, 0x1ff, 0x7, 0x6, 0x10008, 0x1ff, 0xfc, 0x5, 0x9, 0x0, 0x7, 0x20, 0x7fff, 0x8, 0x5, 0x100, 0x8, 0x6, 0x2, 0xfffffff2, 0x6, 0x10, 0x80, 0x7, 0xffff, 0x3, 0x800014f, 0xfffffffb]}, 0x45c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val={0x1, 0x1, [{0x24, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x140a, 0x1, 0x8000, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000014) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x5204) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x100200004, 0xffffff3e}, {0x81, 0x3ff}, 0xfffffe29, 0x5}) 6.056410944s ago: executing program 4 (id=1069): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x200, 0x4, {0x77359400}, {0x4, 0x0, 0x81, 0x7, 0x9, 0x3, "b375da48"}, 0x0, 0x4, {}, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r4 = dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, 0x0}]) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000500)=@multiplanar_fd={0x3, 0x3, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0xc, 0x1, 0x48, 0x3, 0x1, "b6fe4b7d"}, 0x4, 0x4, {0x0}, 0x6, 0x0, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.777348911s ago: executing program 1 (id=1070): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) 4.958212083s ago: executing program 3 (id=1071): socket$kcm(0x23, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x78) 4.894766434s ago: executing program 1 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 4.861557995s ago: executing program 3 (id=1073): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) socket$inet(0xa, 0x801, 0x84) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 4.694631899s ago: executing program 4 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x200, 0x4, {0x77359400}, {0x4, 0x0, 0x81, 0x7, 0x9, 0x3, "b375da48"}, 0x0, 0x4, {}, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r4 = dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, 0x0}]) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000500)=@multiplanar_fd={0x3, 0x3, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0xc, 0x1, 0x48, 0x3, 0x1, "b6fe4b7d"}, 0x4, 0x4, {0x0}, 0x6, 0x0, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.543010009s ago: executing program 4 (id=1075): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0xc, 0x47, {0x47, 0x1, "443d4dd5c93abbe41a2ea3fd8a993ddda165ff5be3cd3d42096c1eea7cae0a576dec3360db1eac3ef4a7f0683110f633f63911d407c173d0806b5312934bd8aaf7c9fd3093"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x40, 0x17, 0xfc, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x1, "9f"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, '\'='}, &(0x7f0000000600)=ANY=[@ANYBLOB="20985d75bd1366"], &(0x7f0000000640)={0x20, 0x84, 0x3, "910db0"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "fad4d9"}}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 3.542712299s ago: executing program 1 (id=1076): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB="08000a005485226f54a9c1c8a71e52e3ec78cde8aefd0a8399d9cdfde2d91ad58c713950b0f102a19663c17e7d55b092ae30d79649e9c6624bd8fe2a8556d0ae28c2dfdf393a801b7f174cdc5639cdd96ef4ca9a26fa88d46d1fe735d8cd80ca8c71637b81ce252f271b6c89c625b41e2d56a6e7c740d28f99b09e9a2cdfe734b03aeb1e0abfac522895eabef0f86c953656af72a658745c50ca15b3b1f77260dbb9a3e2cd01aa2e8c362493180057512f3eaa2c2b5fac80ccafa4b93c0ccbcbd903ab49647e133ccfdcd3d0aecb1102166034083aee03a52c881f770c14253c94c080ec228bbdf8f28c0963a61ef6a0436d3160ba30aeda", @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x5}], 0x1, 0x0, 0x0) 2.966875814s ago: executing program 3 (id=1079): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fba000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000f13000/0x4000)=nil, 0x4000}, 0x1}) 2.829241947s ago: executing program 2 (id=1080): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) 2.70506195s ago: executing program 2 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x78) 2.542454305s ago: executing program 2 (id=1082): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x200, 0x4, {0x77359400}, {0x4, 0x0, 0x81, 0x7, 0x9, 0x3, "b375da48"}, 0x0, 0x4, {}, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r4 = dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, 0x0}]) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000500)=@multiplanar_fd={0x3, 0x3, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0xc, 0x1, 0x48, 0x3, 0x1, "b6fe4b7d"}, 0x4, 0x4, {0x0}, 0x6, 0x0, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.528489695s ago: executing program 1 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x40, 0x2, 0x2, 0x6, 0x36ad, 0x100000001, 0x152}, &(0x7f0000000140)={0xa, 0x6, 0x212, 0x5, 0xfffffffffffff801, 0xfffffffffffffffe, 0x1ff, 0x1}, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x18, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bd7000fedbbc4700000000", @ANYRES32=0x0, @ANYBLOB="23da0000000004001400350076657468305f766c616e000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x80000) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/1024, 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000800)={0x8, {0x8, 0x0, 0xe, 0x9}}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f00000001c0)=@multiplanar_userptr={0x2, 0x8, 0x4, 0x20, 0x2, {}, {0x0, 0x8, 0x9, 0x2, 0x1, 0xe, "86962c62"}, 0x5a, 0x2, {&(0x7f0000000140)=[{0x7, 0x8a75, {&(0x7f00000000c0)}, 0x753}, {0xffff41b7, 0x3, {&(0x7f0000000100)}, 0x5}]}, 0x9, 0x0, r4}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) io_uring_enter(0xffffffffffffffff, 0x2000, 0xa3ad, 0xa8, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) 1.533396551s ago: executing program 2 (id=1084): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x200, 0x4, {0x77359400}, {0x4, 0x0, 0x81, 0x7, 0x9, 0x3, "b375da48"}, 0x0, 0x4, {}, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r4 = dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, 0x0}]) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000500)=@multiplanar_fd={0x3, 0x3, 0x4, 0x20, 0x1, {0x77359400}, {0x2, 0xc, 0x1, 0x48, 0x3, 0x1, "b6fe4b7d"}, 0x4, 0x4, {0x0}, 0x6, 0x0, r5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.473781033s ago: executing program 4 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe4) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, 0x0, 0x0, 0x200) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) 475.412748ms ago: executing program 2 (id=1086): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$9p(r2, &(0x7f0000000340)="50ccbde162d465", 0x7) close(r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0x40000008}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) timer_create(0x1, 0x0, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, 0x0, &(0x7f0000000380)) r8 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4040800) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x10) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000180)) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 294.984053ms ago: executing program 4 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f}}) mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='mqueue\x00', 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) writev(r1, &(0x7f0000004280)=[{&(0x7f0000000500)="f2b8c1b2a618a5eb9a50cd166383d738d30c732249ac794c85de2c17084457440356780d2980297969b2f930b7e382d3df7dec", 0x33}, {&(0x7f0000000540)="9949be5660c96887d804a95169cc319e41a675d5f05a6ec126a9eaea93ae305520d3a00a560905b64350a252a0b38c20a31fad9318de644992ec16dcb3a8b709013e925a8e575c9d5cdd126ad7b9f4e35fe2598490b458c6898704e7fcc80a", 0x5f}, {&(0x7f0000003280)="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", 0x1000}], 0x3) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000cf0a00000a00000001000000882000005ec5744c7078c376f3d9dd916d96f2e24105bf2c8d21194775f1d1ae5f75e8b9d16336d70e71ec73325a6b10202cab877b0ef4bfd9683fb379318bafe658f7d7f094d9e20d2e0d1d882a4ca9a5af73700bc75aa6", @ANYRES32, @ANYBLOB="59ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000040000000c00"/28], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0xffffffffffffffff], 0x2c}}, 0x4008030) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="0000000000040000200012800b00010067656e657665000010000280050003000500000004000600"], 0x40}}, 0x0) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423d, 0x5, 0x8, 0x9, 0x0, 0x2, 0x6, 0x5, 0x100, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc4582, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b07672380d6d635f", @ANYRES32=r6, @ANYBLOB="24000300"/23], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20000800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing/uprobe_events\x00', 0x214c03, 0x0) write$char_usb(r9, &(0x7f0000000440)="392dc471baa4a2cb3d26862a65e6b3b9d320ecb083e6e5ee235263ee66cef1fdeb668831d1702b9a50f2d0b0ccf5421aca5a8b8c482a23d35361022df404996741cadb41a29434fb5b06dd7fefec33114f674e9370ec4007d075210a7a04f26587c4adc7f85311dd9f55dccc3450b43c44bf90f238ebec5270b7b8f780f5f129", 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000001340)={{r8}, r10, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f00000006c0)={"bdab2c256ba2b64de505a77290c97ab4", r7, r10, {0x6}, {0xc, 0x1}, 0x6, [0x80000001, 0x40, 0x4, 0x80, 0x8, 0xff, 0xa73f, 0x7, 0xabba, 0x4, 0x7fffffff, 0x3, 0x800, 0xfffffffffffffffc, 0x2, 0x400]}) 221.474785ms ago: executing program 4 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)='#o\x00W', 0x4}], 0x3) 16.46456ms ago: executing program 2 (id=1089): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) socket$inet(0xa, 0x801, 0x84) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 0s ago: executing program 1 (id=1097): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r0}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0x0, 0x3) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc11, 0x534c8, 0x5, 0x2ee}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered blocking state [ 77.739672][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.767383][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.774473][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.851851][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.876469][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.914326][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.943638][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.962750][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.969984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.005526][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.012695][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.030473][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.038236][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.053810][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.061000][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.343644][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.415202][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.467222][ T5775] veth0_vlan: entered promiscuous mode [ 78.507248][ T5775] veth1_vlan: entered promiscuous mode [ 78.584396][ T5774] veth0_vlan: entered promiscuous mode [ 78.600817][ T5775] veth0_macvtap: entered promiscuous mode [ 78.613862][ T5775] veth1_macvtap: entered promiscuous mode [ 78.636781][ T5774] veth1_vlan: entered promiscuous mode [ 78.650968][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.662753][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.686600][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.720708][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730768][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.740178][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.751096][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.764400][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.796968][ T5774] veth0_macvtap: entered promiscuous mode [ 78.835634][ T5774] veth1_macvtap: entered promiscuous mode [ 78.849430][ T5773] veth0_vlan: entered promiscuous mode [ 78.908938][ T5773] veth1_vlan: entered promiscuous mode [ 78.927232][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.939370][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.948152][ T51] Bluetooth: hci0: command tx timeout [ 78.961443][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.982973][ T5772] veth0_vlan: entered promiscuous mode [ 79.006760][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.028323][ T5777] Bluetooth: hci3: command tx timeout [ 79.031557][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.033722][ T5777] Bluetooth: hci1: command tx timeout [ 79.044854][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.046797][ T51] Bluetooth: hci2: command tx timeout [ 79.072631][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.084325][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.098538][ T5772] veth1_vlan: entered promiscuous mode [ 79.125658][ T5773] veth0_macvtap: entered promiscuous mode [ 79.141501][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.153069][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.162357][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.173532][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.194378][ T5773] veth1_macvtap: entered promiscuous mode [ 79.224199][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.233483][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.252319][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.263517][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.275560][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.290430][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.301470][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.310255][ T5772] veth0_macvtap: entered promiscuous mode [ 79.322675][ T5772] veth1_macvtap: entered promiscuous mode [ 79.355082][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.380044][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.389945][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.400431][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.412778][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.452092][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.464462][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.474597][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.485362][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.495241][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.505740][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.519904][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.544617][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.554979][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.578730][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.591286][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.626242][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.636857][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.647594][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.658459][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.668982][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.679509][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.699554][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.709474][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.709488][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.733530][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.748429][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.757141][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.767869][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.947344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.980133][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.057475][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.083078][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.140148][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.160320][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.298273][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.331180][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.405092][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.048822][ T51] Bluetooth: hci0: command tx timeout [ 81.110144][ T5781] Bluetooth: hci3: command tx timeout [ 81.116196][ T5777] Bluetooth: hci2: command tx timeout [ 81.128391][ T51] Bluetooth: hci1: command tx timeout [ 81.451430][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.535606][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.767452][ T28] audit: type=1800 audit(1788305612.049:2): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6" name="zoned" dev="configfs" ino=7309 res=0 errno=0 [ 82.058326][ T28] audit: type=1800 audit(1788305612.359:3): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6" name="zoned" dev="configfs" ino=7323 res=0 errno=0 [ 82.092523][ T28] audit: type=1800 audit(1788305612.389:4): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6" name="power" dev="configfs" ino=7324 res=0 errno=0 [ 82.253412][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 83.108766][ T51] Bluetooth: hci0: command tx timeout [ 83.188487][ T51] Bluetooth: hci1: command tx timeout [ 83.193929][ T51] Bluetooth: hci2: command tx timeout [ 83.199941][ T5777] Bluetooth: hci3: command tx timeout [ 83.556970][ T5885] syzkaller0: entered promiscuous mode [ 83.568391][ T5885] syzkaller0: entered allmulticast mode [ 83.882633][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.910581][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 84.367911][ T5901] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 84.463976][ T5905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.623295][ T5907] Zero length message leads to an empty skb [ 84.860609][ T5910] jffs2: notice: (5910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.262211][ T5919] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 86.755731][ T5923] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET) [ 87.041357][ T9] cfg80211: failed to load regulatory.db [ 88.524843][ T5923] netlink: 'syz.1.21': attribute type 2 has an invalid length. [ 89.242952][ T5941] jffs2: notice: (5941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.591976][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.600809][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.033553][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.075895][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.579347][ T5938] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.590137][ T5938] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.599218][ T5938] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.608242][ T5938] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.765388][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 90.793345][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 90.839199][ T5938] syz.1.25 (5938) used greatest stack depth: 20392 bytes left [ 90.919841][ T5966] netlink: 'syz.3.33': attribute type 2 has an invalid length. [ 91.056150][ T5976] jffs2: notice: (5976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.435900][ T28] audit: type=1800 audit(1788305621.729:5): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="zoned" dev="configfs" ino=8448 res=0 errno=0 [ 91.583826][ T28] audit: type=1800 audit(1788305621.879:6): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="zoned" dev="configfs" ino=8452 res=0 errno=0 [ 91.664289][ T28] audit: type=1800 audit(1788305621.879:7): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="power" dev="configfs" ino=8453 res=0 errno=0 [ 92.255894][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.264082][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.849083][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.894371][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.324939][ T5996] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.334129][ T5996] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.351556][ T5996] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.364034][ T5996] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.504503][ T6027] macvlan0: entered promiscuous mode [ 93.706837][ T6035] netlink: 'syz.0.54': attribute type 2 has an invalid length. [ 94.858763][ T6058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.018127][ T6062] jffs2: notice: (6062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.097013][ T6062] ======================================================= [ 95.097013][ T6062] WARNING: The mand mount option has been deprecated and [ 95.097013][ T6062] and is ignored by this kernel. Remove the mand [ 95.097013][ T6062] option from the mount to silence this warning. [ 95.097013][ T6062] ======================================================= [ 95.146523][ T6062] overlayfs: failed to resolve '/éø•²_¬âw”T–zë ‰ªê„¨¶“‚&yPâ½7òUÍÊ!6 }n®ˆm5´%ëfÂÒΟ9Bº[/Îf³nÎzdh]sg6wéDOp·k%ÌÒ›@’Îì@á@ [ 95.146523][ T6062] é»ëBHF…€¥ÁüÇÖ’(ÛÞ) »<ûvwZà†¥Õ'¼ ': -2 [ 97.194519][ T6112] jffs2: notice: (6112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.734231][ T6178] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.787096][ T6180] fuse: Unknown parameter 'grou00000000000000000000' [ 104.306997][ T6206] fuse: Unknown parameter 'grou00000000000000000000' [ 106.052397][ T6235] fuse: Bad value for 'fd' [ 106.815777][ T6231] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.822568][ T6231] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.834733][ T6231] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.842201][ T6231] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.848286][ T6231] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.855186][ T6231] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.864301][ T6231] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.870456][ T6231] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.877652][ T6231] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.887574][ T6231] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.894038][ T6231] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.903150][ T6231] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.044001][ T6250] xt_l2tp: missing protocol rule (udp|l2tpip) [ 107.073906][ T6254] jffs2: notice: (6254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.067827][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.867823][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.874186][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.962797][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.487520][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 109.550980][ T6277] fuse: Bad value for 'fd' [ 110.248616][ T6273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.256345][ T6273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.267600][ T6273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.274886][ T6273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.522134][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 112.230549][ T6312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.346628][ T6312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.394825][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.408790][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.452701][ T6312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.521022][ T6312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.514166][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.554856][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.554865][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.251016][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 116.020326][ T6349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.026826][ T6349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.033133][ T6349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.039572][ T6349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.406873][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.433521][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.272708][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.353236][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 117.794126][ T6403] fuse: Bad value for 'fd' [ 118.068299][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.068312][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.122936][ T6389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.129372][ T6389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.135443][ T6389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.143840][ T6389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.488225][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 118.705621][ T27] usb 4-1: config index 0 descriptor too short (expected 255, got 27) [ 118.720212][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.733420][ T27] usb 4-1: config 0 has no interfaces? [ 118.741744][ T27] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 118.750975][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.759243][ T27] usb 4-1: Product: syz [ 118.763482][ T27] usb 4-1: Manufacturer: syz [ 118.768202][ T27] usb 4-1: SerialNumber: syz [ 118.777134][ T27] usb 4-1: config 0 descriptor?? [ 119.010305][ T790] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.040728][ T27] usb 4-1: USB disconnect, device number 2 [ 119.127358][ T6427] capability: warning: `syz.1.191' uses 32-bit capabilities (legacy support in use) [ 119.219943][ T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.238017][ T790] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.257828][ T790] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 119.266964][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.275143][ T790] usb 3-1: Product: syz [ 119.279528][ T790] usb 3-1: Manufacturer: syz [ 119.284134][ T790] usb 3-1: SerialNumber: syz [ 119.292060][ T790] usb 3-1: config 0 descriptor?? [ 119.303135][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 119.474594][ T6433] fuse: Bad value for 'fd' [ 119.509526][ T790] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.516452][ T790] hub: probe of 3-1:0.0 failed with error -5 [ 119.550104][ T790] usb 3-1: USB disconnect, device number 2 [ 120.077640][ T6429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.084083][ T6429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.090847][ T6429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.097096][ T6429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.352891][ T6446] jffs2: notice: (6446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.360844][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.432443][ T6464] fuse: Bad value for 'user_id' [ 121.497944][ T790] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 121.651613][ T6475] jffs2: notice: (6475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.699639][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.718464][ T790] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.771403][ T790] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 121.796027][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.817925][ T790] usb 1-1: Product: syz [ 121.822181][ T790] usb 1-1: Manufacturer: syz [ 121.826879][ T790] usb 1-1: SerialNumber: syz [ 121.834900][ T790] usb 1-1: config 0 descriptor?? [ 122.058042][ T790] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.075836][ T790] hub: probe of 1-1:0.0 failed with error -5 [ 122.128674][ T790] usb 1-1: USB disconnect, device number 2 [ 122.148764][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.154812][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.160912][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.169185][ T6490] fuse: Bad value for 'fd' [ 122.349083][ T6470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.355260][ T6470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.362016][ T6470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.368280][ T6470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.514681][ T6498] jffs2: notice: (6498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.035328][ T6515] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 123.044296][ T6515] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 123.052074][ T6515] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 123.206992][ T6521] jffs2: notice: (6521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.788624][ T6512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.803901][ T6512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.818317][ T6512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.824618][ T6512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.973424][ T6542] jffs2: notice: (6542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.076158][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 124.117817][ T790] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.304193][ T6554] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 124.319940][ T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.331591][ T790] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.350652][ T790] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 124.360119][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.380361][ T790] usb 3-1: Product: syz [ 124.390443][ T790] usb 3-1: Manufacturer: syz [ 124.395070][ T790] usb 3-1: SerialNumber: syz [ 124.431034][ T790] usb 3-1: config 0 descriptor?? [ 124.649032][ T790] hub 3-1:0.0: bad descriptor, ignoring hub [ 124.788084][ T6569] jffs2: notice: (6569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.014373][ T790] hub: probe of 3-1:0.0 failed with error -5 [ 125.028029][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.051345][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 125.060603][ T790] usb 3-1: USB disconnect, device number 3 [ 125.828112][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.834169][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.841255][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.846573][ T6597] jffs2: notice: (6597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.687882][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 127.633833][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 127.758363][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.796476][ T27] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 127.812672][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.823677][ T6616] jffs2: notice: (6616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.826286][ T27] usb 1-1: Product: syz [ 127.850602][ T27] usb 1-1: Manufacturer: syz [ 127.855564][ T27] usb 1-1: SerialNumber: syz [ 127.863285][ T27] usb 1-1: config 0 descriptor?? [ 127.887163][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 127.897807][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 128.261892][ T27] usb 1-1: USB disconnect, device number 3 [ 128.833458][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 129.596524][ T6649] capability: warning: `syz.1.278' uses deprecated v2 capabilities in a way that may be insecure [ 129.977826][ T27] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 131.551693][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.579056][ T27] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 131.596337][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.614626][ T27] usb 1-1: Product: syz [ 131.627993][ T27] usb 1-1: Manufacturer: syz [ 131.632620][ T27] usb 1-1: SerialNumber: syz [ 131.655250][ T27] usb 1-1: config 0 descriptor?? [ 131.663145][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.670531][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 131.721570][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 132.008670][ T27] usb 1-1: USB disconnect, device number 4 [ 132.873508][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873822][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.492325][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 134.379198][ T6699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.386945][ T6699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.400118][ T6699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.406346][ T6699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.700839][ T790] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 134.872657][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 134.903454][ T790] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.925083][ T790] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 134.934393][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.947431][ T790] usb 2-1: Product: syz [ 134.951956][ T790] usb 2-1: Manufacturer: syz [ 134.956786][ T790] usb 2-1: SerialNumber: syz [ 134.969045][ T790] usb 2-1: config 0 descriptor?? [ 134.985396][ T790] hub 2-1:0.0: bad descriptor, ignoring hub [ 134.996161][ T790] hub: probe of 2-1:0.0 failed with error -5 [ 135.016451][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 135.309217][ T790] usb 2-1: USB disconnect, device number 2 [ 135.668627][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.750413][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.017283][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.039241][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 136.049025][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.057018][ T9] usb 3-1: Product: syz [ 136.061200][ T9] usb 3-1: Manufacturer: syz [ 136.067212][ T9] usb 3-1: SerialNumber: syz [ 136.075145][ T9] usb 3-1: config 0 descriptor?? [ 136.293036][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 136.306265][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 136.359105][ T9] usb 3-1: USB disconnect, device number 4 [ 136.387855][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.467851][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.473992][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.987185][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 137.010845][ T6752] fuse: Bad value for 'fd' [ 137.142383][ T6735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.149444][ T6735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.155670][ T6735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.163365][ T6735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.808037][ T5842] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 138.080116][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.370972][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.397928][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.481295][ T5842] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 138.506600][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.543099][ T5842] usb 3-1: Product: syz [ 138.564616][ T5842] usb 3-1: Manufacturer: syz [ 138.582496][ T5842] usb 3-1: SerialNumber: syz [ 138.597603][ T5842] usb 3-1: config 0 descriptor?? [ 138.622697][ T6783] fuse: Invalid rootmode [ 138.651492][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 138.853599][ T5842] hub 3-1:0.0: bad descriptor, ignoring hub [ 138.853648][ T5842] hub: probe of 3-1:0.0 failed with error -5 [ 138.889525][ T5842] usb 3-1: USB disconnect, device number 5 [ 139.187821][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.193951][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.193981][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.485966][ T6807] fuse: Invalid rootmode [ 141.047834][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 141.230469][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.241028][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.267963][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 141.277839][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.285851][ T9] usb 4-1: Product: syz [ 141.290124][ T9] usb 4-1: Manufacturer: syz [ 141.294735][ T9] usb 4-1: SerialNumber: syz [ 141.303031][ T9] usb 4-1: config 0 descriptor?? [ 141.524439][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 141.531209][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 141.579273][ T9] usb 4-1: USB disconnect, device number 3 [ 141.654677][ T6817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.661264][ T6817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.667579][ T6817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.676850][ T6817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.701244][ T6830] fuse: Invalid rootmode [ 142.155380][ T28] audit: type=1326 audit(1788305672.449:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 142.180392][ T28] audit: type=1326 audit(1788305672.449:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 142.205878][ T28] audit: type=1326 audit(1788305672.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 142.237980][ T28] audit: type=1326 audit(1788305672.449:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 142.263178][ T28] audit: type=1326 audit(1788305672.449:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 142.868269][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.893457][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 142.905481][ T6858] fuse: Bad value for 'fd' [ 143.667907][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.673967][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.689009][ T6854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.695048][ T6854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.711059][ T6854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.717356][ T6854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.815011][ T6886] No source specified [ 144.958122][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.757848][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.763929][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.792675][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.002645][ T6899] fuse: Bad value for 'rootmode' [ 146.196467][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 146.969689][ T6904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.975867][ T6904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.982637][ T6904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.989102][ T6904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.167166][ T6918] No source specified [ 147.372961][ T6925] fuse: Bad value for 'rootmode' [ 148.229282][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.456137][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 148.465161][ T6934] bridge_slave_1: left allmulticast mode [ 148.471302][ T6934] bridge_slave_1: left promiscuous mode [ 148.477177][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.524950][ T6934] bridge_slave_0: left allmulticast mode [ 148.557910][ T6934] bridge_slave_0: left promiscuous mode [ 148.567331][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.584705][ T51] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 148.702631][ T6943] No source specified [ 149.028777][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.034831][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.035747][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.357149][ T6936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.364196][ T6936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.370482][ T6936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.376666][ T6936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.706604][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 151.428220][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.428231][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.480770][ T6981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.487064][ T6981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.493870][ T6981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.500378][ T6981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.777904][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.687920][ T27] usb 4-1: device descriptor read/64, error -71 [ 152.718041][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.967995][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.128896][ T27] usb 4-1: device descriptor read/64, error -71 [ 153.248032][ T27] usb usb4-port1: attempt power cycle [ 153.505905][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 153.517857][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.523981][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.667910][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.756080][ T27] usb 4-1: device descriptor read/8, error -71 [ 154.306777][ T7023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.397354][ T7023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.474304][ T7023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.539599][ T7023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.935677][ T7047] FAULT_INJECTION: forcing a failure. [ 154.935677][ T7047] name failslab, interval 1, probability 0, space 0, times 1 [ 154.967964][ T7047] CPU: 0 PID: 7047 Comm: syz.1.423 Not tainted syzkaller #0 [ 154.975292][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.985374][ T7047] Call Trace: [ 154.988672][ T7047] [ 154.991619][ T7047] dump_stack_lvl+0x18c/0x250 [ 154.996340][ T7047] ? show_regs_print_info+0x20/0x20 [ 155.001565][ T7047] ? load_image+0x420/0x420 [ 155.006096][ T7047] ? __lock_acquire+0x7d80/0x7d80 [ 155.011159][ T7047] should_fail_ex+0x394/0x4c0 [ 155.015870][ T7047] should_failslab+0x9/0x20 [ 155.020397][ T7047] slab_pre_alloc_hook+0x59/0x300 [ 155.025431][ T7047] ? lookup_mnt+0x580/0x580 [ 155.029932][ T7047] ? get_mountpoint+0x205/0x440 [ 155.034780][ T7047] __kmem_cache_alloc_node+0x53/0x250 [ 155.040170][ T7047] ? get_mountpoint+0x205/0x440 [ 155.045033][ T7047] kmalloc_trace+0x2a/0xe0 [ 155.049460][ T7047] get_mountpoint+0x205/0x440 [ 155.054140][ T7047] do_lock_mount+0x441/0x530 [ 155.058737][ T7047] ? mnt_warn_timestamp_expiry+0x2c0/0x2c0 [ 155.064541][ T7047] ? do_raw_spin_unlock+0x121/0x230 [ 155.069742][ T7047] ? ktime_get_real_seconds+0x9/0x20 [ 155.075028][ T7047] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 155.080840][ T7047] do_new_mount+0x385/0xa40 [ 155.085351][ T7047] __se_sys_mount+0x2e7/0x3d0 [ 155.090031][ T7047] ? __x64_sys_mount+0xc0/0xc0 [ 155.094796][ T7047] ? lockdep_hardirqs_on+0x98/0x150 [ 155.100004][ T7047] ? __x64_sys_mount+0x20/0xc0 [ 155.104765][ T7047] do_syscall_64+0x55/0xb0 [ 155.109189][ T7047] ? clear_bhb_loop+0x40/0x90 [ 155.113862][ T7047] ? clear_bhb_loop+0x40/0x90 [ 155.118567][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.124471][ T7047] RIP: 0033:0x7f17ffd9e159 [ 155.128885][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.148486][ T7047] RSP: 002b:00007f1800ced028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.156895][ T7047] RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e159 [ 155.164862][ T7047] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 155.172834][ T7047] RBP: 00007f17ffe35024 R08: 0000200000000200 R09: 0000000000000000 [ 155.180797][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.188759][ T7047] R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007fff7c77b688 [ 155.196738][ T7047] [ 155.513006][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.736341][ T51] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 156.468001][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.488600][ T7063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.494631][ T7063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.515434][ T7063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.523029][ T7063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.691019][ T7073] FAULT_INJECTION: forcing a failure. [ 156.691019][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 156.733907][ T7073] CPU: 1 PID: 7073 Comm: syz.3.433 Not tainted syzkaller #0 [ 156.741238][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.751318][ T7073] Call Trace: [ 156.754621][ T7073] [ 156.757568][ T7073] dump_stack_lvl+0x18c/0x250 [ 156.762275][ T7073] ? show_regs_print_info+0x20/0x20 [ 156.767501][ T7073] ? load_image+0x420/0x420 [ 156.772024][ T7073] ? __kasan_slab_alloc+0x6c/0x80 [ 156.777087][ T7073] should_fail_ex+0x394/0x4c0 [ 156.781803][ T7073] should_failslab+0x9/0x20 [ 156.786336][ T7073] slab_pre_alloc_hook+0x59/0x300 [ 156.791397][ T7073] kmem_cache_alloc+0x5a/0x2c0 [ 156.796198][ T7073] ? _sctp_make_chunk+0x14b/0x430 [ 156.801254][ T7073] _sctp_make_chunk+0x14b/0x430 [ 156.806137][ T7073] sctp_make_init+0x5e7/0xf80 [ 156.810856][ T7073] ? sctp_addto_chunk+0x220/0x220 [ 156.815928][ T7073] ? sctp_hash_transport+0x187/0x1990 [ 156.821327][ T7073] ? __lock_acquire+0x7d80/0x7d80 [ 156.826383][ T7073] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 156.831436][ T7073] sctp_do_sm+0x23b/0x5af0 [ 156.835877][ T7073] ? sctp_cname+0x110/0x110 [ 156.840422][ T7073] ? sctp_ulpevent_notify_peer_addr_change+0x119/0xb20 [ 156.847279][ T7073] ? sctp_hash_transport+0x187/0x1990 [ 156.852658][ T7073] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 156.858572][ T7073] ? sctp_connect_new_asoc+0x404/0x6a0 [ 156.864031][ T7073] ? __sctp_connect+0xd80/0xd80 [ 156.868885][ T7073] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 156.874696][ T7073] __sctp_connect+0x94f/0xd80 [ 156.879390][ T7073] ? sctp_send_asconf+0x170/0x170 [ 156.884415][ T7073] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 156.889966][ T7073] ? sctp_setsockopt_connectx_old+0xbc/0x150 [ 156.895946][ T7073] sctp_setsockopt+0x458/0x11e0 [ 156.900799][ T7073] ? sock_common_recvmsg+0x190/0x190 [ 156.906082][ T7073] do_sock_setsockopt+0x175/0x1a0 [ 156.911129][ T7073] ? __fdget+0x180/0x210 [ 156.915372][ T7073] __x64_sys_setsockopt+0x182/0x200 [ 156.920569][ T7073] do_syscall_64+0x55/0xb0 [ 156.924979][ T7073] ? clear_bhb_loop+0x40/0x90 [ 156.929651][ T7073] ? clear_bhb_loop+0x40/0x90 [ 156.934325][ T7073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.940219][ T7073] RIP: 0033:0x7f859459e159 [ 156.944633][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.964233][ T7073] RSP: 002b:00007f85954e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.972643][ T7073] RAX: ffffffffffffffda RBX: 00007f8594825fa0 RCX: 00007f859459e159 [ 156.980607][ T7073] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 156.988573][ T7073] RBP: 00007f8594635024 R08: 000000000000001c R09: 0000000000000000 [ 156.996539][ T7073] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.004501][ T7073] R13: 00007f8594826038 R14: 00007f8594825fa0 R15: 00007ffcc5921488 [ 157.012477][ T7073] [ 157.191698][ T7082] FAULT_INJECTION: forcing a failure. [ 157.191698][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 157.211725][ T7082] CPU: 1 PID: 7082 Comm: syz.1.438 Not tainted syzkaller #0 [ 157.219053][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.229126][ T7082] Call Trace: [ 157.232420][ T7082] [ 157.235359][ T7082] dump_stack_lvl+0x18c/0x250 [ 157.240064][ T7082] ? show_regs_print_info+0x20/0x20 [ 157.245296][ T7082] ? load_image+0x420/0x420 [ 157.249831][ T7082] ? __lock_acquire+0x7d80/0x7d80 [ 157.254894][ T7082] should_fail_ex+0x394/0x4c0 [ 157.259607][ T7082] should_failslab+0x9/0x20 [ 157.264140][ T7082] slab_pre_alloc_hook+0x59/0x300 [ 157.269199][ T7082] ? ceph_alloc_options+0xb2/0x1d0 [ 157.274355][ T7082] __kmem_cache_alloc_node+0x53/0x250 [ 157.279761][ T7082] ? ceph_alloc_options+0xb2/0x1d0 [ 157.284900][ T7082] kmalloc_trace+0x2a/0xe0 [ 157.289347][ T7082] ceph_alloc_options+0xb2/0x1d0 [ 157.294315][ T7082] ceph_init_fs_context+0x68/0x4a0 [ 157.299448][ T7082] ? destroy_caches+0x80/0x80 [ 157.304149][ T7082] alloc_fs_context+0x618/0x7a0 [ 157.309035][ T7082] __se_sys_fsopen+0xa0/0x2c0 [ 157.313749][ T7082] do_syscall_64+0x55/0xb0 [ 157.318190][ T7082] ? clear_bhb_loop+0x40/0x90 [ 157.322893][ T7082] ? clear_bhb_loop+0x40/0x90 [ 157.327592][ T7082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.333508][ T7082] RIP: 0033:0x7f17ffd9e159 [ 157.337946][ T7082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.357568][ T7082] RSP: 002b:00007f1800ced028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 157.366005][ T7082] RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e159 [ 157.373994][ T7082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 157.382002][ T7082] RBP: 00007f17ffe35024 R08: 0000000000000000 R09: 0000000000000000 [ 157.389990][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.397979][ T7082] R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007fff7c77b688 [ 157.405991][ T7082] [ 157.685780][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 158.451876][ T7096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.458054][ T7096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.464084][ T7096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.477458][ T7096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.892833][ T7125] jffs2: notice: (7125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.186420][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 159.957505][ T7134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.975006][ T7134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.981459][ T7134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.991602][ T7134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.108921][ T7153] jffs2: notice: (7153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.833386][ T7168] syz.0.467[7168]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 161.457840][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.649275][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.827960][ T27] usb 1-1: device descriptor read/64, error -71 [ 161.989168][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.989183][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.070411][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.127942][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.288107][ T27] usb 1-1: device descriptor read/64, error -71 [ 162.423043][ T27] usb usb1-port1: attempt power cycle [ 162.659256][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 162.678165][ T7189] jffs2: notice: (7189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.847852][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.631417][ T27] usb 1-1: device descriptor read/8, error -71 [ 163.674977][ T7183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.691712][ T7183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.712630][ T7183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.749171][ T7183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.720683][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.124562][ T7222] jffs2: notice: (7222) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.827956][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.834182][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.840334][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.891840][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 165.948108][ T176] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.014495][ T7224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.042077][ T7224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.064946][ T7224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.084099][ T7224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.152839][ T176] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 166.170595][ T176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.180100][ T176] usb 1-1: Product: syz [ 166.184351][ T176] usb 1-1: Manufacturer: syz [ 166.212482][ T176] usb 1-1: SerialNumber: syz [ 166.484696][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.158257][ T27] usb 3-1: device descriptor read/64, error -71 [ 167.296086][ T176] rtl8150 1-1:1.0: couldn't reset the device [ 167.303772][ T176] rtl8150: probe of 1-1:1.0 failed with error -5 [ 167.325525][ T176] usb 1-1: USB disconnect, device number 9 [ 167.447866][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.598064][ T27] usb 3-1: device descriptor read/64, error -71 [ 167.764581][ T27] usb usb3-port1: attempt power cycle [ 167.908007][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.068509][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.068587][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.148846][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.218266][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 168.239047][ T7255] jffs2: notice: (7255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.619538][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 168.843571][ T7264] jffs2: notice: (7264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.326985][ T7261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.397090][ T7261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.489854][ T7261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.559594][ T7261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.635627][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.277828][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.427886][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.467884][ T27] usb 4-1: device descriptor read/64, error -71 [ 171.517897][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.588014][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.794182][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 171.837897][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.957454][ T7290] jffs2: notice: (7290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.997852][ T27] usb 4-1: device descriptor read/64, error -71 [ 172.125097][ T27] usb usb4-port1: attempt power cycle [ 172.158745][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 172.260391][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 172.468016][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 172.577905][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.608961][ T27] usb 4-1: device descriptor read/8, error -71 [ 172.784964][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 172.819878][ T7300] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 172.878441][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.242705][ T7295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.302171][ T7295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.366704][ T7295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.429351][ T7295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.911088][ T7313] jffs2: notice: (7313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 173.927855][ T27] usb 4-1: device not accepting address 11, error -71 [ 173.928098][ T27] usb usb4-port1: unable to enumerate USB device [ 174.467953][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.392085][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.417341][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 175.427856][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.508004][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.558739][ T176] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.808111][ T176] usb 4-1: device descriptor read/64, error -71 [ 176.085384][ T7340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.102762][ T7340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.117957][ T176] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.127165][ T7340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.133427][ T7340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.277816][ T176] usb 4-1: device descriptor read/64, error -71 [ 176.405238][ T176] usb usb4-port1: attempt power cycle [ 176.827951][ T176] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.869715][ T176] usb 4-1: device descriptor read/8, error -71 [ 177.157853][ T176] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 177.188519][ T176] usb 4-1: device descriptor read/8, error -71 [ 177.318018][ T176] usb usb4-port1: unable to enumerate USB device [ 177.507822][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.147898][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.148035][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.153991][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.595070][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 179.337322][ T7369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.377268][ T7369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.403451][ T7369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.425995][ T7369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.628147][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.732761][ T7389] jffs2: notice: (7389) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.431162][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.431186][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.437322][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.540428][ T51] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 183.307095][ T7414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.314580][ T7414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.320884][ T7414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.327088][ T7414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.334138][ T7421] fuse: Bad value for 'fd' [ 184.557823][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.352181][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.352196][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.352229][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.284448][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 187.029012][ T7452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.035189][ T7452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.043298][ T7452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.051540][ T7452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.301467][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 187.417348][ T7466] FAULT_INJECTION: forcing a failure. [ 187.417348][ T7466] name fail_futex, interval 1, probability 0, space 0, times 1 [ 187.430796][ T7466] CPU: 1 PID: 7466 Comm: syz.1.561 Not tainted syzkaller #0 [ 187.438113][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.448264][ T7466] Call Trace: [ 187.451553][ T7466] [ 187.454496][ T7466] dump_stack_lvl+0x18c/0x250 [ 187.459197][ T7466] ? show_regs_print_info+0x20/0x20 [ 187.464412][ T7466] ? load_image+0x420/0x420 [ 187.468931][ T7466] ? __lock_acquire+0x1336/0x7d80 [ 187.473973][ T7466] should_fail_ex+0x394/0x4c0 [ 187.478668][ T7466] get_futex_key+0x136/0x1030 [ 187.478685][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 187.492125][ T7466] ? futex_setup_timer+0xc0/0xc0 [ 187.497073][ T7466] futex_wake+0x127/0x4f0 [ 187.501400][ T7466] ? futex_wake_mark+0x150/0x150 [ 187.506343][ T7466] do_futex+0x35d/0x3e0 [ 187.510491][ T7466] ? __might_fault+0xaa/0x120 [ 187.515164][ T7466] ? __ia32_sys_get_robust_list+0x110/0x110 [ 187.521052][ T7466] ? __might_fault+0xc6/0x120 [ 187.525731][ T7466] mm_release+0x184/0x3a0 [ 187.530055][ T7466] ? exit_mm_release+0x30/0x30 [ 187.534809][ T7466] ? lockdep_hardirqs_on+0x98/0x150 [ 187.540012][ T7466] exit_mm+0xa4/0x340 [ 187.543992][ T7466] ? sysctl_delayacct+0x220/0x220 [ 187.549008][ T7466] ? do_exit+0x2530/0x2530 [ 187.553433][ T7466] do_exit+0x909/0x2530 [ 187.557604][ T7466] ? put_task_struct+0xc0/0xc0 [ 187.562372][ T7466] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 187.568345][ T7466] ? get_signal+0x100e/0x1390 [ 187.573021][ T7466] ? lock_chain_count+0x20/0x20 [ 187.577866][ T7466] ? _raw_spin_lock_irq+0xbb/0xf0 [ 187.582883][ T7466] do_group_exit+0x22d/0x2f0 [ 187.587472][ T7466] ? lockdep_hardirqs_on+0x98/0x150 [ 187.592676][ T7466] get_signal+0x12a6/0x1390 [ 187.597185][ T7466] arch_do_signal_or_restart+0xc2/0x7b0 [ 187.602732][ T7466] ? __ia32_sys_get_robust_list+0x110/0x110 [ 187.608619][ T7466] ? get_sigframe_size+0x20/0x20 [ 187.613572][ T7466] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.619029][ T7466] exit_to_user_mode_loop+0x70/0x110 [ 187.624314][ T7466] exit_to_user_mode_prepare+0xee/0x180 [ 187.629855][ T7466] syscall_exit_to_user_mode+0x1a/0x50 [ 187.635312][ T7466] do_syscall_64+0x61/0xb0 [ 187.639725][ T7466] ? clear_bhb_loop+0x40/0x90 [ 187.644398][ T7466] ? clear_bhb_loop+0x40/0x90 [ 187.649070][ T7466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.654964][ T7466] RIP: 0033:0x7f17ffd9e159 [ 187.659377][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.678982][ T7466] RSP: 002b:00007f1800ced0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.687396][ T7466] RAX: fffffffffffffe00 RBX: 00007f1800025fa8 RCX: 00007f17ffd9e159 [ 187.695363][ T7466] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1800025fa8 [ 187.703328][ T7466] RBP: 00007f1800025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 187.711295][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.719257][ T7466] R13: 00007f1800026038 R14: 00007fff7c77b5a0 R15: 00007fff7c77b688 [ 187.727235][ T7466] [ 188.307881][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.532423][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.548127][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.566845][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.575436][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.588825][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 188.596147][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.047873][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.053967][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.060215][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.220680][ T7477] chnl_net:caif_netlink_parms(): no params data found [ 190.278003][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 190.372944][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.381430][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.392520][ T7477] bridge_slave_0: entered allmulticast mode [ 190.400916][ T7477] bridge_slave_0: entered promiscuous mode [ 190.411121][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.423233][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.430905][ T7477] bridge_slave_1: entered allmulticast mode [ 190.438413][ T7477] bridge_slave_1: entered promiscuous mode [ 190.484024][ T7477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.503177][ T7477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.546696][ T7477] team0: Port device team_slave_0 added [ 190.555469][ T7477] team0: Port device team_slave_1 added [ 190.577346][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.584439][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.610570][ T7477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.623592][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.631052][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.637985][ T51] Bluetooth: hci4: command tx timeout [ 190.665007][ T7477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.703862][ T7477] hsr_slave_0: entered promiscuous mode [ 190.710423][ T7477] hsr_slave_1: entered promiscuous mode [ 190.716588][ T7477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.724470][ T7477] Cannot create hsr debugfs directory [ 190.853835][ T7477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.862931][ T7477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.872876][ T7477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.883333][ T7477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.907192][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.914330][ T7477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.922132][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.929310][ T7477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.981846][ T7477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.998973][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.007158][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.015860][ T7492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.027058][ T7492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.033357][ T7492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.041953][ T7492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.047346][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.054920][ T7492] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.065221][ T7492] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.072914][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.080263][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.095978][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.103084][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.152310][ T7477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.197801][ T7477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.282433][ T7510] nvme_fabrics: missing parameter 'transport=%s' [ 192.289361][ T7510] nvme_fabrics: missing parameter 'nqn=%s' [ 192.387884][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.664038][ T7477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.107909][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 193.108190][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.120095][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.318723][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326688][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.705745][ T7477] veth0_vlan: entered promiscuous mode [ 194.717432][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 194.717592][ T7477] veth1_vlan: entered promiscuous mode [ 194.753947][ T7548] fuse: Bad value for 'fd' [ 194.760064][ T7477] veth0_macvtap: entered promiscuous mode [ 194.771067][ T7477] veth1_macvtap: entered promiscuous mode [ 194.786346][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.797545][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.807672][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.819374][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.830602][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.845239][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.855747][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.865697][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.876271][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.887169][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.898887][ T7477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.907582][ T7477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.932754][ T7477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.941644][ T7477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.188042][ T5781] Bluetooth: hci4: command 0x040f tx timeout [ 195.493677][ T7544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.500176][ T7544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.506186][ T7544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.513629][ T7544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.629389][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.637211][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.192509][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.221483][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.990123][ T5777] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 197.354508][ T7590] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 197.523155][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.523173][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.589788][ T5781] Bluetooth: hci4: command 0x040f tx timeout [ 197.763537][ T7582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.782915][ T7582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.790611][ T7582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.810209][ T7582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.026171][ T7599] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 199.632848][ T7611] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 199.828036][ T5781] Bluetooth: hci4: command 0x040f tx timeout [ 199.834111][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.837821][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.262870][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 200.347229][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 200.460350][ T7631] syz.2.608 (7631) used greatest stack depth: 17896 bytes left [ 201.027055][ T7625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.038097][ T7625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.047436][ T7625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.066452][ T7625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.703481][ T7649] file system registered [ 201.939675][ T7657] read descriptors [ 202.308066][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.629384][ T7477] ffs_data_put(): freeing [ 202.763538][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 202.999645][ T7679] fuse: Bad value for 'fd' [ 203.108177][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 203.108216][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.533627][ T7671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.539883][ T7671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.545973][ T7671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.552091][ T7671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.238241][ T7688] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 204.247255][ T7688] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 204.788877][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.590034][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 205.596203][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.602376][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.159773][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 206.169992][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.633'. [ 206.210337][ T7715] fuse: Bad value for 'fd' [ 206.253667][ T7717] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 206.916327][ T7729] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 206.924501][ T7729] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 206.973610][ T7711] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.003025][ T7711] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.035592][ T7711] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.061788][ T7711] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.766803][ T7744] read descriptors [ 208.541382][ T5773] ffs_data_put(): freeing [ 208.687489][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 208.751261][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 208.765474][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.647'. [ 209.028733][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.037655][ T7768] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 209.108092][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 209.515242][ T7760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.521616][ T7760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.527685][ T7760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.535348][ T7760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.680127][ T7775] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 209.991703][ T7788] 9pnet_virtio: no channels available for device syz [ 210.787901][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.934388][ T5773] ffs_data_put(): freeing [ 211.089899][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 211.128197][ T5777] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 211.137016][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.659'. [ 211.486500][ T7807] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 211.587848][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.593903][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 211.605443][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.611905][ T7811] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 211.852546][ T7795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.863865][ T7818] read descriptors [ 211.868831][ T7795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.874914][ T7795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.881286][ T7795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.946920][ T7477] ffs_data_put(): freeing [ 212.110505][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 212.743700][ T7834] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 213.115230][ T7838] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 213.215552][ T51] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 213.227539][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 213.908005][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.914105][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.992272][ T7844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.999572][ T7844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.005914][ T7844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.012229][ T7844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.156670][ T5775] ffs_data_put(): freeing [ 215.270035][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.093518][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 216.113138][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.119288][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.819563][ T51] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 217.821614][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 218.605776][ T7888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.612323][ T7888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.619775][ T7888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.625873][ T7888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.941125][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.647146][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 220.657407][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.663494][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.551568][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 222.553359][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 222.717983][ T5781] Bluetooth: hci4: command 0x040f tx timeout [ 223.326005][ T7921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.335721][ T7921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.343013][ T7921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.349648][ T7921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.716479][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.701508][ T27] usb 3-1: device descriptor read/64, error -71 [ 224.778388][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 224.987869][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.157872][ T27] usb 3-1: device descriptor read/64, error -71 [ 225.281656][ T27] usb usb3-port1: attempt power cycle [ 225.347953][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.427796][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 225.555834][ T7957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.563036][ T7957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.569580][ T7957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.575909][ T7957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.583662][ T7963] read descriptors [ 225.629144][ T7477] ffs_data_put(): freeing [ 225.687816][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.738503][ T27] usb 3-1: device descriptor read/8, error -71 [ 225.765763][ T7967] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 225.974609][ T7974] 9pnet_virtio: no channels available for device syz [ 226.012357][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 226.049987][ T27] usb 3-1: device descriptor read/8, error -71 [ 226.787775][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.588960][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 227.589081][ T27] usb usb3-port1: unable to enumerate USB device [ 227.596123][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.607995][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.770196][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 227.955787][ T7998] read descriptors [ 228.480844][ T8001] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 228.510266][ T7990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.524628][ T7990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.531014][ T7990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.537124][ T7990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.645142][ T5775] ffs_data_put(): freeing [ 228.699884][ T8005] 9pnet_virtio: no channels available for device syz [ 228.957888][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.797890][ T27] usb 4-1: device descriptor read/64, error -71 [ 229.827821][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.107948][ T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.277969][ T27] usb 4-1: device descriptor read/64, error -71 [ 230.378367][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 230.397972][ T27] usb usb4-port1: attempt power cycle [ 230.548381][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 230.548407][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.827811][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.858391][ T27] usb 4-1: device descriptor read/8, error -71 [ 231.046124][ T8037] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 231.126972][ T8029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.133131][ T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 231.136610][ T8029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.153311][ T8029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.160305][ T8029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.179490][ T27] usb 4-1: device descriptor read/8, error -71 [ 231.293659][ T8048] read descriptors [ 231.308238][ T27] usb usb4-port1: unable to enumerate USB device [ 231.541987][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.549872][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.387834][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.719708][ T7477] ffs_data_put(): freeing [ 233.207977][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 233.208034][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.214089][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.385041][ T28] audit: type=1326 audit(1788305763.679:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 233.606644][ T28] audit: type=1326 audit(1788305763.709:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 233.843896][ T28] audit: type=1326 audit(1788305763.709:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.094103][ T28] audit: type=1326 audit(1788305763.709:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.187856][ T28] audit: type=1326 audit(1788305763.709:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.215908][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.257051][ T28] audit: type=1326 audit(1788305764.049:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.328935][ T28] audit: type=1326 audit(1788305764.059:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.333917][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.394513][ T28] audit: type=1326 audit(1788305764.059:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3dc7f9dec2 code=0x7ffc0000 [ 234.442457][ T28] audit: type=1326 audit(1788305764.069:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 234.577362][ T28] audit: type=1326 audit(1788305764.069:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.4.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3dc7f9df57 code=0x7ffc0000 [ 234.767134][ T8072] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 235.049521][ T8047] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.072345][ T8047] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.091522][ T8047] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.107757][ T8047] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.268013][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 235.356119][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 235.802029][ T8091] read descriptors [ 236.117171][ T8077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.123436][ T8077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.139287][ T8077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.145316][ T8077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.221433][ T5775] ffs_data_put(): freeing [ 236.381284][ T8098] 9pnet_virtio: no channels available for device syz [ 237.140047][ T5762] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 237.619478][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.308108][ T5762] usb 5-1: device descriptor read/64, error -71 [ 238.329092][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 238.335320][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.343416][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.152376][ T8113] syzkaller0: entered promiscuous mode [ 240.170971][ T8113] syzkaller0: entered allmulticast mode [ 240.657503][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 240.919274][ T8118] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 241.044365][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 241.801453][ T8124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.864832][ T8124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.909896][ T8124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.959330][ T8124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.494731][ T8144] 9pnet_virtio: no channels available for device syz [ 243.377287][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 243.377300][ T28] audit: type=1326 audit(1788305773.669:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.442636][ T28] audit: type=1326 audit(1788305773.669:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.540093][ T28] audit: type=1326 audit(1788305773.669:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.647458][ T28] audit: type=1326 audit(1788305773.669:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.696994][ T8155] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 243.770634][ T28] audit: type=1326 audit(1788305773.669:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.821198][ T28] audit: type=1326 audit(1788305773.729:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.845650][ T28] audit: type=1326 audit(1788305773.729:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.870815][ T28] audit: type=1326 audit(1788305773.789:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.896105][ T28] audit: type=1326 audit(1788305773.789:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.920607][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.931622][ T28] audit: type=1326 audit(1788305773.819:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.3.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f859459e159 code=0x7ffc0000 [ 243.964228][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 243.987837][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 243.987900][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.756314][ T8164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.857426][ T8164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.917348][ T8164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.975115][ T8164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.329424][ T8180] read descriptors [ 245.405665][ T8184] 9pnet_virtio: no channels available for device syz [ 245.784418][ T5775] ffs_data_put(): freeing [ 245.987844][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.574434][ T8194] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 246.867993][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.906667][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 246.947815][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.953038][ T8216] read descriptors [ 247.027817][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 247.663948][ T8210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.678142][ T7477] ffs_data_put(): freeing [ 247.694890][ T8210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.708567][ T8210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.717951][ T8210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.009329][ T8225] 9pnet_virtio: no channels available for device syz [ 249.218241][ T8243] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 249.411546][ T51] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 249.439839][ T8253] read descriptors [ 249.749594][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.755671][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 249.989044][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 249.989058][ T28] audit: type=1326 audit(1788305780.289:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.053361][ T28] audit: type=1326 audit(1788305780.289:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.095970][ T28] audit: type=1326 audit(1788305780.289:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.121360][ T28] audit: type=1326 audit(1788305780.289:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.150136][ T28] audit: type=1326 audit(1788305780.309:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.180798][ T8248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.234908][ T8248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.241942][ T8261] 9pnet_virtio: no channels available for device syz [ 250.308586][ T8248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.332940][ T28] audit: type=1326 audit(1788305780.319:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.386532][ T8248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.583637][ T28] audit: type=1326 audit(1788305780.329:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 250.751876][ T5775] ffs_data_put(): freeing [ 250.830401][ T28] audit: type=1326 audit(1788305780.329:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 251.011960][ T28] audit: type=1326 audit(1788305780.349:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 251.150282][ T8273] 9pnet_virtio: no channels available for device syz [ 251.280554][ T28] audit: type=1326 audit(1788305780.349:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 251.448659][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.077808][ T8280] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 252.308185][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.387836][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.394006][ T5088] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 252.451301][ T8299] read descriptors [ 252.467876][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 252.650241][ T8303] 9pnet_virtio: no channels available for device syz [ 253.160666][ T8294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.207047][ T8294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.265858][ T8294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.323400][ T8294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.484480][ T7477] ffs_data_put(): freeing [ 253.736724][ T8307] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 253.783570][ T8307] CIFS mount error: No usable UNC path provided in device string! [ 253.783570][ T8307] [ 253.829224][ T8307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.922906][ T8318] 9pnet_virtio: no channels available for device syz [ 254.387845][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.912179][ T8322] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 255.269304][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.275496][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.281764][ T5777] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 255.323889][ T8345] 9pnet_virtio: no channels available for device syz [ 255.751577][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.762369][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043393][ T8336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.105687][ T8336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.131891][ T8336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.152440][ T5775] ffs_data_put(): freeing [ 256.185956][ T8336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.545459][ T8360] 9pnet_virtio: no channels available for device syz [ 257.267946][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.321979][ T8356] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 257.887603][ T8381] 9pnet_virtio: no channels available for device syz [ 258.157784][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.157797][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.227775][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 258.738322][ T5775] ffs_data_put(): freeing [ 259.541520][ T5088] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 259.873526][ T8391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.908112][ T8391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.914234][ T8391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.003219][ T8400] 9pnet: Could not find request transport: fd0rfäno=0x0000000000000003 [ 260.067533][ T8391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.133753][ T8408] 9pnet_virtio: no channels available for device syz [ 261.107817][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.386629][ T8427] 9pnet_virtio: no channels available for device syz [ 261.422860][ T8427] overlayfs: failed to resolve './file1': -2 [ 261.952426][ T8431] FAULT_INJECTION: forcing a failure. [ 261.952426][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 261.987810][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.993978][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.069688][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 262.191971][ T8431] CPU: 1 PID: 8431 Comm: syz.1.850 Not tainted syzkaller #0 [ 262.199305][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.209366][ T8431] Call Trace: [ 262.212646][ T8431] [ 262.215571][ T8431] dump_stack_lvl+0x18c/0x250 [ 262.220255][ T8431] ? show_regs_print_info+0x20/0x20 [ 262.225448][ T8431] ? load_image+0x420/0x420 [ 262.229946][ T8431] ? __lock_acquire+0x7d80/0x7d80 [ 262.234974][ T8431] should_fail_ex+0x394/0x4c0 [ 262.239651][ T8431] should_failslab+0x9/0x20 [ 262.244154][ T8431] slab_pre_alloc_hook+0x59/0x300 [ 262.249190][ T8431] kmem_cache_alloc_lru+0x4d/0x2b0 [ 262.254308][ T8431] ? sock_alloc_inode+0x28/0xc0 [ 262.259164][ T8431] sock_alloc_inode+0x28/0xc0 [ 262.263835][ T8431] ? sockfs_init_fs_context+0xb0/0xb0 [ 262.269204][ T8431] new_inode_pseudo+0x63/0x1d0 [ 262.273964][ T8431] __sock_create+0x12d/0x940 [ 262.278547][ T8431] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 262.284528][ T8431] __sys_socket+0xd7/0x1b0 [ 262.288941][ T8431] __x64_sys_socket+0x7a/0x90 [ 262.293616][ T8431] do_syscall_64+0x55/0xb0 [ 262.298028][ T8431] ? clear_bhb_loop+0x40/0x90 [ 262.302701][ T8431] ? clear_bhb_loop+0x40/0x90 [ 262.307378][ T8431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.313269][ T8431] RIP: 0033:0x7f17ffd9e159 [ 262.317680][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.337284][ T8431] RSP: 002b:00007f1800ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.345695][ T8431] RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e159 [ 262.353663][ T8431] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 262.361628][ T8431] RBP: 00007f17ffe35024 R08: 0000000000000000 R09: 0000000000000000 [ 262.369594][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.377557][ T8431] R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007fff7c77b688 [ 262.385534][ T8431] [ 262.398813][ T8431] socket: no more sockets [ 262.417363][ T5772] ffs_data_put(): freeing [ 262.595985][ T5088] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 262.714034][ T8447] 9pnet_virtio: no channels available for device syz [ 263.377140][ T8436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.439451][ T8436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.483639][ T8436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.520485][ T8436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.879266][ T8458] read descriptors [ 264.054163][ T8467] FAULT_INJECTION: forcing a failure. [ 264.054163][ T8467] name failslab, interval 1, probability 0, space 0, times 0 [ 264.070263][ T8467] CPU: 0 PID: 8467 Comm: syz.2.864 Not tainted syzkaller #0 [ 264.077591][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.087673][ T8467] Call Trace: [ 264.090968][ T8467] [ 264.093913][ T8467] dump_stack_lvl+0x18c/0x250 [ 264.098625][ T8467] ? show_regs_print_info+0x20/0x20 [ 264.103855][ T8467] ? load_image+0x420/0x420 [ 264.108399][ T8467] ? __might_sleep+0xe0/0xe0 [ 264.113020][ T8467] ? __lock_acquire+0x7d80/0x7d80 [ 264.118164][ T8467] should_fail_ex+0x394/0x4c0 [ 264.122879][ T8467] should_failslab+0x9/0x20 [ 264.127409][ T8467] slab_pre_alloc_hook+0x59/0x300 [ 264.132469][ T8467] kmem_cache_alloc+0x5a/0x2c0 [ 264.137258][ T8467] ? security_inode_alloc+0x34/0x110 [ 264.142574][ T8467] security_inode_alloc+0x34/0x110 [ 264.147713][ T8467] inode_init_always+0x914/0xc90 [ 264.152663][ T8467] new_inode_pseudo+0x95/0x1d0 [ 264.157421][ T8467] __sock_create+0x12d/0x940 [ 264.162002][ T8467] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 264.167993][ T8467] __sys_socket+0xd7/0x1b0 [ 264.172425][ T8467] __x64_sys_socket+0x7a/0x90 [ 264.177090][ T8467] do_syscall_64+0x55/0xb0 [ 264.181493][ T8467] ? clear_bhb_loop+0x40/0x90 [ 264.186157][ T8467] ? clear_bhb_loop+0x40/0x90 [ 264.190819][ T8467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.196702][ T8467] RIP: 0033:0x7fd96c39e159 [ 264.201111][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.220718][ T8467] RSP: 002b:00007fd96d229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 264.229151][ T8467] RAX: ffffffffffffffda RBX: 00007fd96c625fa0 RCX: 00007fd96c39e159 [ 264.237142][ T8467] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 264.245130][ T8467] RBP: 00007fd96c435024 R08: 0000000000000000 R09: 0000000000000000 [ 264.253119][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.261104][ T8467] R13: 00007fd96c626038 R14: 00007fd96c625fa0 R15: 00007fff17ea55c8 [ 264.269110][ T8467] [ 264.275821][ T8467] socket: no more sockets [ 264.626186][ T7477] ffs_data_put(): freeing [ 264.630977][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.677621][ T8482] 9pnet_virtio: no channels available for device syz [ 264.807288][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 265.458178][ T8481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.479661][ T8481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.507050][ T8481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.518032][ T8481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.547953][ T8497] FAULT_INJECTION: forcing a failure. [ 266.547953][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 266.626434][ T8497] CPU: 1 PID: 8497 Comm: syz.4.874 Not tainted syzkaller #0 [ 266.633790][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.643867][ T8497] Call Trace: [ 266.647171][ T8497] [ 266.650120][ T8497] dump_stack_lvl+0x18c/0x250 [ 266.654834][ T8497] ? show_regs_print_info+0x20/0x20 [ 266.660067][ T8497] ? load_image+0x420/0x420 [ 266.664603][ T8497] ? __lock_acquire+0x7d80/0x7d80 [ 266.669667][ T8497] should_fail_ex+0x394/0x4c0 [ 266.674375][ T8497] should_failslab+0x9/0x20 [ 266.678886][ T8497] slab_pre_alloc_hook+0x59/0x300 [ 266.683936][ T8497] kmem_cache_alloc_lru+0x4d/0x2b0 [ 266.689068][ T8497] ? sock_alloc_inode+0x28/0xc0 [ 266.693943][ T8497] sock_alloc_inode+0x28/0xc0 [ 266.698630][ T8497] ? sockfs_init_fs_context+0xb0/0xb0 [ 266.704002][ T8497] new_inode_pseudo+0x63/0x1d0 [ 266.708776][ T8497] __sock_create+0x12d/0x940 [ 266.713375][ T8497] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 266.719367][ T8497] __sys_socket+0xd7/0x1b0 [ 266.723782][ T8497] __x64_sys_socket+0x7a/0x90 [ 266.728459][ T8497] do_syscall_64+0x55/0xb0 [ 266.732879][ T8497] ? clear_bhb_loop+0x40/0x90 [ 266.737552][ T8497] ? clear_bhb_loop+0x40/0x90 [ 266.742227][ T8497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.748119][ T8497] RIP: 0033:0x7f3dc7f9e159 [ 266.752529][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.772158][ T8497] RSP: 002b:00007f3dc8ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 266.780572][ T8497] RAX: ffffffffffffffda RBX: 00007f3dc8225fa0 RCX: 00007f3dc7f9e159 [ 266.788542][ T8497] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 266.796506][ T8497] RBP: 00007f3dc8035024 R08: 0000000000000000 R09: 0000000000000000 [ 266.804467][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.812436][ T8497] R13: 00007f3dc8226038 R14: 00007f3dc8225fa0 R15: 00007fff59616dc8 [ 266.820420][ T8497] [ 266.829060][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.892334][ T8497] socket: no more sockets [ 267.117344][ T8515] read descriptors [ 267.188159][ T5088] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 267.312954][ T8522] 9pnet_virtio: no channels available for device syz [ 267.507940][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.587777][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 267.972995][ T8517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.039517][ T8517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.117889][ T8517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.124023][ T8517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.179806][ T5775] ffs_data_put(): freeing [ 268.932621][ T5088] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 268.964292][ T8548] read descriptors [ 269.281479][ T8551] 9pnet_virtio: no channels available for device syz [ 269.709968][ T8543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.758644][ T8543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.821619][ T8543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.861787][ T8543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.097316][ T5773] ffs_data_put(): freeing [ 270.183910][ T8553] CIFS mount error: No usable UNC path provided in device string! [ 270.183910][ T8553] [ 270.194463][ T8553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 270.313656][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 271.066544][ T8558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.073266][ T8558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.079694][ T8558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.085790][ T8558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.436853][ T8587] read descriptors [ 271.545852][ T8590] 9pnet_virtio: no channels available for device syz [ 272.307778][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.375544][ T5773] ffs_data_put(): freeing [ 272.665984][ T5088] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 273.108004][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.108045][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.441998][ T8600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.448469][ T8600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.454495][ T8600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.461837][ T8600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.584156][ T8616] read descriptors [ 273.747933][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 273.942647][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 273.953230][ T23] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 273.964293][ T23] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.978128][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.988297][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.014203][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 274.109953][ T23] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 274.707819][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.078939][ T7477] ffs_data_put(): freeing [ 275.519948][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 275.519977][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.525968][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.625881][ T5762] usb 3-1: USB disconnect, device number 13 [ 275.719019][ T8631] 9pnet_virtio: no channels available for device syz [ 275.756696][ T8631] overlayfs: failed to resolve './file1': -2 [ 276.496653][ T5777] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 276.755935][ T8650] read descriptors [ 277.129569][ T8633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.135677][ T8633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.144955][ T8633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.151697][ T8633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 277.219590][ T7477] ffs_data_put(): freeing [ 277.538610][ T5762] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 277.771380][ T5762] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 277.798605][ T5762] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 277.815268][ T5762] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.836340][ T5762] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.845737][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.880778][ T5762] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 277.953683][ T5762] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 277.983322][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 278.767351][ T8670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.825578][ T8670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.875805][ T8670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.934182][ T8670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.046761][ T8679] read descriptors [ 279.988093][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.313371][ T5775] ffs_data_put(): freeing [ 280.328452][ T5762] usb 2-1: USB disconnect, device number 3 [ 280.727293][ T5088] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 280.867909][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.947855][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 281.495069][ T8700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.501637][ T8700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.508934][ T8700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.515244][ T8700] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.797874][ T8069] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 282.009516][ T8069] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 282.019830][ T8069] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 282.030578][ T8069] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.043529][ T8069] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.052693][ T8069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.087376][ T8069] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 282.133838][ T8069] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 282.707929][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.507859][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.588085][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 283.594233][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.067834][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 285.425961][ T8737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.504418][ T8737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.512612][ T23] usb 5-1: USB disconnect, device number 4 [ 285.531309][ T8737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.572922][ T8737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.700504][ T8751] fuse: Bad value for 'fd' [ 286.005722][ T8764] comedi comedi3: comedi_config --init_data is deprecated [ 286.077862][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.256329][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 287.256344][ T28] audit: type=1326 audit(1788305817.549:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.287052][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 287.315889][ T8776] fuse: Bad value for 'fd' [ 287.316118][ T28] audit: type=1326 audit(1788305817.549:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.344609][ T28] audit: type=1326 audit(1788305817.549:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.368680][ T28] audit: type=1326 audit(1788305817.549:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.392866][ T28] audit: type=1326 audit(1788305817.549:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.427596][ T28] audit: type=1326 audit(1788305817.569:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.468926][ T28] audit: type=1326 audit(1788305817.569:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.508163][ T28] audit: type=1326 audit(1788305817.569:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.553421][ T28] audit: type=1326 audit(1788305817.569:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 287.598144][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 287.604751][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.611295][ T28] audit: type=1326 audit(1788305817.569:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.4.977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 288.030287][ T8772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.036348][ T8772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.042492][ T8772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.057971][ T8772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.260260][ T8795] comedi comedi3: comedi_config --init_data is deprecated [ 289.352227][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 289.408628][ T8808] read descriptors [ 289.528015][ T7477] ffs_data_put(): freeing [ 290.067927][ T5777] Bluetooth: hci4: command 0x040f tx timeout [ 290.067944][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.067971][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.560003][ T8836] read descriptors [ 291.533982][ T8840] ffs_data_put(): freeing [ 291.617464][ T7477] ffs_data_put(): freeing [ 292.158089][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 294.125973][ T8872] read descriptors [ 294.287857][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 294.452445][ T7477] ffs_data_put(): freeing [ 294.563577][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 294.563590][ T28] audit: type=1326 audit(1788305824.859:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 294.651215][ T8880] read descriptors [ 294.702457][ T28] audit: type=1326 audit(1788305824.899:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 294.825106][ T28] audit: type=1326 audit(1788305824.899:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 294.933265][ T28] audit: type=1326 audit(1788305824.899:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 294.999880][ T28] audit: type=1326 audit(1788305824.899:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.055221][ T28] audit: type=1326 audit(1788305824.899:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.144519][ T28] audit: type=1326 audit(1788305824.899:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.219833][ T28] audit: type=1326 audit(1788305824.909:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.295023][ T28] audit: type=1326 audit(1788305824.909:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.367846][ T28] audit: type=1326 audit(1788305824.909:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.4.1011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 295.458110][ T5772] ffs_data_put(): freeing [ 296.308036][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 296.449254][ T8906] read descriptors [ 296.568233][ T5773] ffs_data_put(): freeing [ 297.205007][ T5775] ffs_data_put(): freeing [ 298.033931][ T8927] read descriptors [ 300.888294][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 302.790305][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 302.790319][ T28] audit: type=1326 audit(1788305833.049:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 302.857427][ T28] audit: type=1326 audit(1788305833.049:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 302.904028][ T5773] ffs_data_put(): freeing [ 302.923197][ T28] audit: type=1326 audit(1788305833.049:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 302.948896][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 302.955719][ T28] audit: type=1326 audit(1788305833.049:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 302.983433][ T28] audit: type=1326 audit(1788305833.049:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 303.037654][ T28] audit: type=1326 audit(1788305833.049:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 303.082458][ T28] audit: type=1326 audit(1788305833.049:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 303.146027][ T28] audit: type=1326 audit(1788305833.049:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 303.183808][ T7477] ffs_data_put(): freeing [ 303.185615][ T28] audit: type=1326 audit(1788305833.049:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 303.235350][ T28] audit: type=1326 audit(1788305833.059:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.4.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc7f9e159 code=0x7ffc0000 [ 304.267828][ T8964] 9pnet_virtio: no channels available for device syz [ 305.306857][ T8967] read descriptors [ 305.388117][ T5772] ffs_data_put(): freeing [ 308.356051][ T8997] read descriptors [ 308.488620][ T7477] ffs_data_put(): freeing [ 308.679417][ T9005] 9pnet_virtio: no channels available for device syz [ 308.897819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 309.957808][ T176] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 310.192655][ T176] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 310.219953][ T176] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 310.247806][ T176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.277795][ T176] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 310.316316][ T176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.328450][ T9011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.336620][ T9011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.381260][ T176] pl2303 2-1:1.0: pl2303 converter detected [ 310.422663][ T176] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 310.838040][ T9011] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 310.858814][ T9011] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 310.869252][ T9011] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 310.894065][ T9011] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 311.360161][ T9011] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 311.377437][ T9011] pl2303 ttyUSB0: error sending break = -32 [ 311.395525][ T9052] read descriptors [ 311.427042][ T23] usb 2-1: USB disconnect, device number 4 [ 311.478990][ T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 311.546228][ T23] pl2303 2-1:1.0: device disconnected [ 311.672307][ T7477] ffs_data_put(): freeing [ 311.852528][ T9066] 9pnet_virtio: no channels available for device syz [ 312.307513][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1063'. [ 317.026987][ T9095] 9pnet_virtio: no channels available for device syz [ 317.371692][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.393292][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.791539][ T9098] read descriptors [ 317.858067][ T5772] ffs_data_put(): freeing [ 318.078992][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 318.079007][ T28] audit: type=1804 audit(1788305848.369:338): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1073" name="bus" dev="ramfs" ino=22076 res=1 errno=0 [ 318.155133][ T28] audit: type=1804 audit(1788305848.379:339): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1073" name="bus" dev="ramfs" ino=22076 res=1 errno=0 [ 318.251391][ T9107] 9pnet_virtio: no channels available for device syz [ 319.658322][ T8069] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 319.849870][ T8069] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 319.882595][ T8069] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 319.898111][ T8069] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 319.918232][ T8069] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 319.932790][ T8069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.960530][ T9114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.003565][ T9114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.038967][ T8069] pl2303 5-1:1.0: pl2303 converter detected [ 320.051770][ T9126] read descriptors [ 320.068555][ T8069] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 320.153619][ T5775] ffs_data_put(): freeing [ 320.346109][ T9132] 9pnet_virtio: no channels available for device syz [ 320.488490][ T9114] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 320.665058][ T176] usb 5-1: USB disconnect, device number 5 [ 320.671865][ T9114] pl2303 ttyUSB0: pl2303_get_line_request - failed: -71 [ 320.764862][ T9114] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 320.974714][ T9114] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 321.071620][ T9114] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 321.154184][ T176] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 321.201582][ T176] pl2303 5-1:1.0: device disconnected [ 321.353866][ T9140] 9pnet_virtio: no channels available for device syz [ 321.697776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 322.768267][ T28] audit: type=1804 audit(1788305853.069:340): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1089" name="bus" dev="ramfs" ino=22161 res=1 errno=0 [ 322.792827][ T28] audit: type=1804 audit(1788305853.089:341): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1089" name="bus" dev="ramfs" ino=22161 res=1 errno=0 [ 322.879903][ T9160] ================================================================== [ 322.879914][ T9160] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x2114/0x25d0 [ 322.879930][ T9160] Write of size 4 at addr ffffc90003f01fe8 by task syz.1.1097/9160 [ 322.879940][ T9160] [ 322.879944][ T9160] CPU: 0 PID: 9160 Comm: syz.1.1097 Not tainted syzkaller #0 [ 322.879955][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.879965][ T9160] Call Trace: [ 322.879970][ T9160] [ 322.879975][ T9160] dump_stack_lvl+0x18c/0x250 [ 322.879988][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.879999][ T9160] ? show_regs_print_info+0x20/0x20 [ 322.880010][ T9160] ? load_image+0x420/0x420 [ 322.880024][ T9160] print_report+0xa8/0x210 [ 322.880035][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.880044][ T9160] kasan_report+0x117/0x150 [ 322.880057][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.880068][ T9160] sys_imageblit+0x2114/0x25d0 [ 322.880081][ T9160] ? sys_copyarea+0x2530/0x2530 [ 322.880092][ T9160] ? __lock_acquire+0x7d80/0x7d80 [ 322.880103][ T9160] ? rcu_is_watching+0x15/0xb0 [ 322.880118][ T9160] ? trace_contention_end+0x39/0xe0 [ 322.880129][ T9160] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 322.880143][ T9160] cw_putcs+0x15f3/0x18a0 [ 322.880168][ T9160] ? cw_clear+0x250/0x250 [ 322.880193][ T9160] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 322.880216][ T9160] ? fb_get_color_depth+0x162/0x280 [ 322.880234][ T9160] fbcon_putcs+0x35c/0x520 [ 322.880251][ T9160] ? cw_clear+0x250/0x250 [ 322.880264][ T9160] do_update_region+0x4e9/0x640 [ 322.880276][ T9160] ? __asan_memcpy+0x40/0x70 [ 322.880292][ T9160] ? hide_cursor+0x320/0x320 [ 322.880305][ T9160] redraw_screen+0xa30/0x1000 [ 322.880316][ T9160] ? _raw_spin_unlock+0x40/0x40 [ 322.880328][ T9160] ? clear_buffer_attributes+0x320/0x320 [ 322.880341][ T9160] ? tty_do_resize+0xe1/0x120 [ 322.880354][ T9160] vc_do_resize+0x1256/0x17f0 [ 322.880372][ T9160] ? vc_resize+0x50/0x50 [ 322.880382][ T9160] ? __mod_lruvec_page_state+0xa5/0x410 [ 322.880394][ T9160] ? __kasan_kmalloc_large+0x8b/0xa0 [ 322.880407][ T9160] fbcon_do_set_font+0xb5c/0x1ae0 [ 322.880425][ T9160] ? fbcon_blank+0xb40/0xb40 [ 322.880437][ T9160] con_font_op+0xc3c/0xf60 [ 322.880451][ T9160] ? reset_palette+0xdd0/0xdd0 [ 322.880464][ T9160] ? __might_fault+0xaa/0x120 [ 322.880475][ T9160] ? __lock_acquire+0x7d80/0x7d80 [ 322.880486][ T9160] ? apparmor_capable+0x137/0x1a0 [ 322.880496][ T9160] ? __might_fault+0xaa/0x120 [ 322.880507][ T9160] ? __might_fault+0xc6/0x120 [ 322.880516][ T9160] ? __might_fault+0xaa/0x120 [ 322.880527][ T9160] vt_ioctl+0x1a21/0x1f20 [ 322.880541][ T9160] ? __vt_event_wait+0x260/0x260 [ 322.880557][ T9160] ? __fget_files+0x28/0x460 [ 322.880573][ T9160] ? tty_jobctrl_ioctl+0x378/0xba0 [ 322.880585][ T9160] tty_ioctl+0x91e/0xdc0 [ 322.880597][ T9160] ? tty_get_icount+0xb0/0xb0 [ 322.880608][ T9160] __se_sys_ioctl+0xfd/0x170 [ 322.880622][ T9160] do_syscall_64+0x55/0xb0 [ 322.880633][ T9160] ? clear_bhb_loop+0x40/0x90 [ 322.880644][ T9160] ? clear_bhb_loop+0x40/0x90 [ 322.880656][ T9160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.880668][ T9160] RIP: 0033:0x7f17ffd9e159 [ 322.880678][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.880688][ T9160] RSP: 002b:00007f1800cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.880700][ T9160] RAX: ffffffffffffffda RBX: 00007f1800026090 RCX: 00007f17ffd9e159 [ 322.880709][ T9160] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000004 [ 322.880716][ T9160] RBP: 00007f17ffe35024 R08: 0000000000000000 R09: 0000000000000000 [ 322.880723][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.880730][ T9160] R13: 00007f1800026128 R14: 00007f1800026090 R15: 00007fff7c77b688 [ 322.880748][ T9160] [ 322.880752][ T9160] [ 322.880754][ T9160] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003f02000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 322.880776][ T9160] Memory state around the buggy address: [ 322.880782][ T9160] ffffc90003f01e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.880789][ T9160] ffffc90003f01f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.880796][ T9160] >ffffc90003f01f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.880801][ T9160] ^ [ 322.880808][ T9160] ffffc90003f02000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.880815][ T9160] ffffc90003f02080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.880820][ T9160] ================================================================== [ 322.880831][ T9160] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 322.880836][ T9160] CPU: 0 PID: 9160 Comm: syz.1.1097 Not tainted syzkaller #0 [ 322.880847][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.880853][ T9160] Call Trace: [ 322.880857][ T9160] [ 322.880860][ T9160] dump_stack_lvl+0x18c/0x250 [ 322.880873][ T9160] ? show_regs_print_info+0x20/0x20 [ 322.880885][ T9160] ? load_image+0x420/0x420 [ 322.880897][ T9160] panic+0x2ca/0x720 [ 322.880912][ T9160] ? lock_chain_count+0x20/0x20 [ 322.880924][ T9160] ? bpf_jit_dump+0xd0/0xd0 [ 322.880937][ T9160] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 322.880952][ T9160] ? lockdep_hardirqs_on+0x98/0x150 [ 322.880965][ T9160] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 322.880974][ T9160] ? _raw_spin_unlock+0x40/0x40 [ 322.880983][ T9160] ? print_memory_metadata+0x314/0x400 [ 322.880994][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.881003][ T9160] check_panic_on_warn+0x84/0xa0 [ 322.881017][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.881025][ T9160] end_report+0x6f/0x130 [ 322.881036][ T9160] kasan_report+0x128/0x150 [ 322.881048][ T9160] ? sys_imageblit+0x2114/0x25d0 [ 322.881059][ T9160] sys_imageblit+0x2114/0x25d0 [ 322.881071][ T9160] ? sys_copyarea+0x2530/0x2530 [ 322.881081][ T9160] ? __lock_acquire+0x7d80/0x7d80 [ 322.881091][ T9160] ? rcu_is_watching+0x15/0xb0 [ 322.881104][ T9160] ? trace_contention_end+0x39/0xe0 [ 322.881114][ T9160] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 322.881128][ T9160] cw_putcs+0x15f3/0x18a0 [ 322.881149][ T9160] ? cw_clear+0x250/0x250 [ 322.881165][ T9160] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 322.881186][ T9160] ? fb_get_color_depth+0x162/0x280 [ 322.881208][ T9160] fbcon_putcs+0x35c/0x520 [ 322.881227][ T9160] ? cw_clear+0x250/0x250 [ 322.881241][ T9160] do_update_region+0x4e9/0x640 [ 322.881254][ T9160] ? __asan_memcpy+0x40/0x70 [ 322.881269][ T9160] ? hide_cursor+0x320/0x320 [ 322.881281][ T9160] redraw_screen+0xa30/0x1000 [ 322.881292][ T9160] ? _raw_spin_unlock+0x40/0x40 [ 322.881303][ T9160] ? clear_buffer_attributes+0x320/0x320 [ 322.881315][ T9160] ? tty_do_resize+0xe1/0x120 [ 322.881327][ T9160] vc_do_resize+0x1256/0x17f0 [ 322.881343][ T9160] ? vc_resize+0x50/0x50 [ 322.881353][ T9160] ? __mod_lruvec_page_state+0xa5/0x410 [ 322.881365][ T9160] ? __kasan_kmalloc_large+0x8b/0xa0 [ 322.881377][ T9160] fbcon_do_set_font+0xb5c/0x1ae0 [ 322.881395][ T9160] ? fbcon_blank+0xb40/0xb40 [ 322.881407][ T9160] con_font_op+0xc3c/0xf60 [ 322.881420][ T9160] ? reset_palette+0xdd0/0xdd0 [ 322.881433][ T9160] ? __might_fault+0xaa/0x120 [ 322.881458][ T9160] ? __lock_acquire+0x7d80/0x7d80 [ 322.881470][ T9160] ? apparmor_capable+0x137/0x1a0 [ 322.881480][ T9160] ? __might_fault+0xaa/0x120 [ 322.881490][ T9160] ? __might_fault+0xc6/0x120 [ 322.881499][ T9160] ? __might_fault+0xaa/0x120 [ 322.881511][ T9160] vt_ioctl+0x1a21/0x1f20 [ 322.881527][ T9160] ? __vt_event_wait+0x260/0x260 [ 322.881543][ T9160] ? __fget_files+0x28/0x460 [ 322.881557][ T9160] ? tty_jobctrl_ioctl+0x378/0xba0 [ 322.881569][ T9160] tty_ioctl+0x91e/0xdc0 [ 322.881580][ T9160] ? tty_get_icount+0xb0/0xb0 [ 322.881592][ T9160] __se_sys_ioctl+0xfd/0x170 [ 322.881604][ T9160] do_syscall_64+0x55/0xb0 [ 322.881615][ T9160] ? clear_bhb_loop+0x40/0x90 [ 322.881627][ T9160] ? clear_bhb_loop+0x40/0x90 [ 322.881638][ T9160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.881649][ T9160] RIP: 0033:0x7f17ffd9e159 [ 322.881658][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.881667][ T9160] RSP: 002b:00007f1800cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.881678][ T9160] RAX: ffffffffffffffda RBX: 00007f1800026090 RCX: 00007f17ffd9e159 [ 322.881685][ T9160] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000004 [ 322.881692][ T9160] RBP: 00007f17ffe35024 R08: 0000000000000000 R09: 0000000000000000 [ 322.881698][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.881704][ T9160] R13: 00007f1800026128 R14: 00007f1800026090 R15: 00007fff7c77b688 [ 322.881715][ T9160] [ 322.881960][ T9160] Kernel Offset: disabled