last executing test programs: 1m4.225844162s ago: executing program 3 (id=1503): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0xfe, 0x2000, @vifc_lcl_ifindex, @dev}, 0x10) setsockopt$MRT_FLUSH(r0, 0xa4ff, 0xd4, &(0x7f0000000140)=0x8, 0x4) 1m3.789520245s ago: executing program 3 (id=1506): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 9) 1m3.147123867s ago: executing program 3 (id=1510): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)={0xe000200b}) (fail_nth: 9) 1m2.487936301s ago: executing program 3 (id=1512): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fchmodat(r1, &(0x7f0000000040)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d049cc20018000000010902240001000000400904000001030001f308210500000122a000090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 1m2.120296545s ago: executing program 0 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='usrqumit=8,\x00'/28]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000150001002cbd7000fbdbdf25ffffffff000000000000000000000000fc0200000000000000000000000000004e240a874e210009020020802f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c4050000700000000c00080016"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x5}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r8, 0x0, {0x2, 0xfe, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', r9, 0x2f, 0xf9, 0x3, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8000, 0x2, 0x5}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched_retired(r12, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xfff1}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xea, 0x1b, 0x4, 0x18, @dev={0xfe, 0x80, '\x00', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x2, 0x602, 0x10, @loopback, @mcast1, 0x20, 0x1, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7f80, 0x7800, 0x4, 0x80000000, {{0x2f, 0x4, 0x3, 0x38, 0xbc, 0x66, 0x0, 0xd1, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp={0x44, 0x28, 0x28, 0x0, 0x4, [0x8, 0x8, 0x100, 0x1000, 0x7, 0x0, 0x8, 0x2, 0x4]}, @timestamp={0x44, 0x1c, 0xcf, 0x0, 0x9, [0x3ff, 0x6, 0xbe8, 0x9, 0x10001, 0x2]}, @cipso={0x86, 0x27, 0x1, [{0x1, 0xe, "ccaa2e1c7df7b68fc1921aa2"}, {0x6, 0x4, "f772"}, {0x5, 0xf, "86baf223c771c088ad2a8c0354"}]}, @noop, @lsrr={0x83, 0x13, 0x39, [@local, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x27, 0xed, [@local, @broadcast, @multicast2, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x7800, 0x80, 0x0, 0xffff, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x8f, [@multicast1, @multicast2, @empty, @broadcast, @remote, @multicast2, @local]}, @generic={0x88, 0xa, "92723e744d6dfb47"}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x8, [{@broadcast, 0xffff}, {@private=0xa010102}, {@loopback, 0x4}, {@multicast2, 0x4}, {@private=0xa010100, 0x6}, {@local}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@multicast2, 0x40}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ac0)={0x5c0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x35, 0x4, 0xbc57}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a18ae42}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x6cc, 0x9}, 0x8) 1m1.927872845s ago: executing program 0 (id=1517): syz_open_dev$evdev(&(0x7f0000000000), 0x8004, 0xc0202) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x3, 0xaf}, &(0x7f00000000c0)=0x8) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000580)={&(0x7f0000002200)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x24}}], 0x30, 0x40000}, 0x0) syz_usb_disconnect(r3) 1m1.009410617s ago: executing program 3 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x28000000) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0xb00, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x78}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x628, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x624, 0x4, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x61, 0x2, "d1fa9d2c6270780f23c5c771bb2e5fd00ea06a13fd600222808d466917d6116cd6304a7263d35d40abec4077c5d9a027ad9e6051785b7e3633a6c628810ceb52db2c91d760655d2e92f6d2ad4a3c4b74be8830c2c395e3cd7d6e5312ea"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "9d4f8cf1336ba2eae03799f65d07a0e9d120819e2e229cc3ab2f0a34ac042ca781de87"}, @NL80211_PKTPAT_PATTERN={0xa, 0x2, "736850fa17d4"}, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "6659709902b6d225e2b06045a1a1c9224ffc209c81cea830c8770b1144ba9b452de55a93cc9fc318fad8e9d79ca1f368d3c7b37f0a2d830245c7c55c00dd3fb483c947c2a96298f2b7070753bbe275fa9f244201b67cb8e9e0ee5ff76e2112fd27c7f63214628259f927b37e6f23f977d4a253bb3156da2b758339c4b85d9b648921b2faff9f9cb75c963350fc559c027df57f3bbaa308d464f58ac76bd4426a4994db3574bc32615c5a5e36b231f4a258cd4dcb4c6863f9abd6c7a1198132a06f9e10"}, @NL80211_PKTPAT_PATTERN={0x80, 0x2, "71d052ef2fed981f0fee7aad0cb39e4cf224d55c2010ca143b5e7b0531d9821e860760a808d6e6cb95f8fa96d13ad10a9c76a034e901810b10bbd28766e3f164e329da78b7114e24e3dc797a9ba0640dfb9bdfdb18c690854961c0486f2db5eec1a966dcdd382e07fbeb3e4de9b312a49f6cac4e2fc90a905ccf8a85"}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd33}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "08ca9a6ebedff9828119b4415ff0eab1a81b0832c4a8a335510344b6117944d374aed61873a3b94163a2de7d5375576b73195d14c4e77a6fc659aa7b2fe59a7dbdd9cbd6ed4a5d50f327216dbc36e7dfc996f212311465e7c03da6eccb552623cc196512010342c2e04b2b4e8be486f140de782aed09d0b91074104d9376cebde8952b90579b377f6067d52c42e745131aa6e14773ecf6a612bfe162606c78f134519df4"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x70, 0x2, "d135e7c26ac22d24f6f95f6fb346073199eb6bcc4b32326f29995a3fcc3555d892c9e87a0b5bcacaa71a488295b83e4b204b34d0f69b96296343f3d6245afc546655a678aa4a3ef8a336815d5c772238e9aa6b64900ddb1a1e03e75d712768f5c3edd5a478f28efdc91ea307"}, @NL80211_PKTPAT_MASK={0x15, 0x1, "4fca80466b6dc16dd06280983c1cc773f6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xff}, @NL80211_PKTPAT_PATTERN={0xbf, 0x2, "41d08d6ea051a9a4d9569c2447d737b7051059db5b19d5a02846c57dd9a23b3c5e89d5a5967d12a106790067bfb6f93b138f772b83b41013ad05f00d010de4ebc893d491b6bb1b0add01a7dccfdb867a24b2bd80d2db867b13c3bcc6d728e7829296d562bbc7a425f3724a8e06ffc8e2948f8e2ef32a4b42695c95da6bbfc065d55a89d11c9fa405130d00382c06f50c7b975f6d91eb2fca34c1ebbb5c383ad2be60d6f0c3c53deb8353a054b5ec5534365202ac52fceaa9d6c788"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8827}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0x7d, 0x1, "3b1707571973abbedbfa4119d411a23af74796138a8a5b42edd75bdb825051e48dbca651b3458bf66c6ae67920ca0ff0b905eb03ca404ecd62df697cadb38f2d5f5d8bb1a28a98f2887854af02431709385b90f47bd06bdbd9130dfffa09e7f1dc5e8b42929f6dcadad9bad813f02484dddd88c614e887a565"}, @NL80211_PKTPAT_MASK={0xa8, 0x1, "410f82734669eae093f08ef98495d8984307f3f2b0d7f93bcfe577f3d09d5f473e673a98d5e02a52c301eb51bd709109328374d048fa521353d2e83c80678e058050cc922ba03adcefaed62e4f53ced2488055b7893b93fe03164d4453c634ef08419a65c24063f50f5c15a1787af5f42414d08c8668c99b0ca982910d63268680d636a63f4967387bda4419d5699d4a959384999d0f58becc0910ca37b46b3b057eea1e"}, @NL80211_PKTPAT_MASK={0x9c, 0x1, "94500626c048f51b0f1902c8d57d75a0d7ce7787fce52ef4a1625c2b323611ba3784e16e3cb0594b03645abef3b94304d842d4f66db0d97708bd108db8ed334ed0b0d647aacb196098a1f92980423e43961a8b658291762e81b6df62382f5edd1dd2a9061473be17afabb90be7c382ce2ded835a3b6f1556a8f96bb13fb9f2c8208b8248c8e3fb4f7ae79dc6ed2c60a8edb3e4910147c54d"}, @NL80211_PKTPAT_MASK={0x26, 0x1, "eeda4d0cef3de860e107cbdf55e7671105d73168c425b68a99eca5492ad3ca9afdcb"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x300, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2e0, 0x4, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa5, 0x1, "6a682a05c471b5ac027aac59610fd27e07ed3e640dab213d461c3a61bd37f027c1e643abad0da0a64c17d554dcb913ee31dc6c3c9394396209c38ede39c09567b675bd144492b0844656615cb5ec70535a7ece69b1943d45f117e699a8a7200e1c489be8fbda0aa9ac3326998f59d506ea553eb576aea82a0f3b5675724b7b19858120b106923e4799805c9542d21ba3614d44a4d94bfb22ddefc67144a871e79d"}, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "d520858b2f"}, @NL80211_PKTPAT_PATTERN={0x7e, 0x2, "3d33b8073963c5c7d5b58624a2d65466ba777d87bc73fa4506e22970647a12483fc7fa0293d0b5fd9dbdfa918cde5620230f997f75bec97f3229338e53ec59e4ecaadfd09f217f5c8c0c7e95089963deed99f4c8893f3566b87251083d41cc0ba207f57248e4fc56487ea2e1658a0843803c6724f865910c5129"}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, 'I'}, @NL80211_PKTPAT_MASK={0x22, 0x1, "c70cc979f08aa0749aa507493c17cb6f6dea145e10f73ba600dcf5901fd6"}, @NL80211_PKTPAT_PATTERN={0xf6, 0x2, "497009f06ad68c36baa4087da682219f26923ec989cf7aaa936e5aafd2f46e8fab69ef09b32bbb2a168677a297373ba366ecde76b1b456c2c0cac32808bc0dee8dd680fe1f40fde8de243ef7d45d764bbbb12ff82a2d2a506963b6ac683057481a59fbd3e7fb7f71fc9d54ef2b49662cb4a659b6b79fead65aa58e1c005a79a1411f0f331e2f0349c92f80530f390dd35039854a0760dc0162a000401148162482093b8a1fd1190a87bd5306105dd4d1cc245a6b53b60f88cf15962e734e185458d31d97b373b40ccca4b0a9220cd3188e86aeb4dc0d1b3a331eda3872017942bd81d618421d18ed8bcd0e3d21131e5d420b"}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x84}, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "a16746ccd9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0x57, 0x2, "240c357d874a3abb728526d028a2999acb76efbe5064798f3a307571fc39cea25333c6f8e8724510198a6571fa5fe030fecc89f29226241555de6d051e6cc9cd77931328055b130fead201c0b11d204350119c"}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0xf9}}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x188, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x40, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7fffffff, 0x0, 0xd2}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2a, 0x6, "ca339744420fdc34567888b8d2e666d77b6eb6a09d59ae47df0764a46dddcfd7eba69aaff2e7"}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x130, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x122, 0x2a, [@perr={0x84, 0xe8, {0xc0, 0xe, [{{0x0, 0x1}, @broadcast, 0x200, @value=@broadcast, 0xc}, {{}, @device_a, 0x4, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x26}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_b, 0x8001, @value, 0xe}, {{}, @device_a, 0x5, @void, 0x2f}, {{}, @device_a, 0xdee, @void, 0x23}, {{0x0, 0x1}, @device_a, 0x9, @value, 0xb}, {{}, @device_b, 0x80000000, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x21}, {{}, @broadcast, 0x1, @void, 0x29}, {{}, @device_b, 0x1, @void, 0x1c}]}}, @ibss={0x6, 0x2, 0x1}, @ssid={0x0, 0xc, @random="32e1fae5c7b860d4ea3c609e"}, @supported_rates={0x1, 0x5, [{0x0, 0x1}, {0x60}, {0x48, 0x1}, {0x5, 0x1}, {0x3}]}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x3, 0x7f, @device_b, 0x9, 0x5, 0x3}}, @ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0xb00}, 0x1, 0x0, 0x0, 0x20}, 0x24000010) 1m0.191349881s ago: executing program 3 (id=1526): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1400, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 59.906379218s ago: executing program 32 (id=1526): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1400, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 59.790053512s ago: executing program 0 (id=1530): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="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", 0xfe}, {&(0x7f0000000140)="dfbf57e4e8678e3d6c2421fb8c467f56e862dcf55ed8c17b1b9c04a1ec2d33547c6dcc6f79402955f5c60aca5002e916c1dafb44c99e6298c7bbfaf6a62d0e9c5af627c6bd870205cfa9defa5552e7812b3175adb3d0142249821c0ae4bb8ac2ce81793e7f82edcd5eb23f40068940455f9131d21ae2d5720c04d145899023b950a27195b7ec18c1ccc5cbf46924ecbe6e69094d232fd9b802e03ad3ee7156171d9ba5f738d67a144b451e1a8b128ba8697cc5821696f166082627676756b717d08a1261a7f738d1", 0xc8}], 0x2, 0x0, 0x0, 0x5865}, 0x4) 59.684414529s ago: executing program 0 (id=1531): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fchmodat(r1, &(0x7f0000000040)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d049cc20018000000010902240001000000400904000001030001f308210500000122a000090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 58.291405797s ago: executing program 0 (id=1534): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = socket$inet6(0xa, 0x3, 0x371) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x20) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) 56.768203813s ago: executing program 0 (id=1540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) io_setup(0x9, &(0x7f0000001e80)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) 56.272315085s ago: executing program 33 (id=1540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) io_setup(0x9, &(0x7f0000001e80)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) 44.346435695s ago: executing program 5 (id=1541): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fchmodat(r1, &(0x7f0000000040)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d049cc20018000000010902240001000000400904000001030001f308210500000122a000090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 43.013779926s ago: executing program 5 (id=1566): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x800, 0x4) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1b278ab8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f00000039c0)=0x11, 0x4) listen(r4, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xf4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = fcntl$getown(r3, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 42.681646031s ago: executing program 5 (id=1567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x2000000) 42.397336596s ago: executing program 34 (id=1567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x2000000) 42.387431198s ago: executing program 2 (id=1569): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 42.156164082s ago: executing program 2 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7065726d686174201d", @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x44) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000afa000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000691000/0x1000)=nil, 0x1000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 41.154608926s ago: executing program 2 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', '\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020083040000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 40.991851893s ago: executing program 2 (id=1574): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fchmodat(r1, &(0x7f0000000040)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d049cc20018000000010902240001000000400904000001030001f308210500000122a000090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 40.947573644s ago: executing program 1 (id=1575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x1f00, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x6, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x804) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 40.06551681s ago: executing program 1 (id=1576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4) 39.955527969s ago: executing program 1 (id=1577): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000001980)="2cf5bb944b8b8bb27e29e115adbd2c1c695fa28b7fffc9e0036c914abb574b439996e0c5825e88ca8ef5e5b5b0153419d9e7e938f77b9e581c35aa4e2511e8a03184deee464a430efbf8518200142f86e6c706b570a625f013f88bb83cde42f8635cac7d04909e583c6398b7e49b7eec0a2ded964e160c2092da9bf75f87a32db94691e8ed4ae16a998f5b7f5b7b8f9b520401b6abf6119e0f64f915e94d0406eb59730ad684413c47bdc23dab7f7ccfe423f7efb7bc84818b6a283c0576a2810853862283906b6571cc67a184a4b0f7e7a628c66bf2bb285db4f94ff37dd46c751cd325f24ce90a9226cd154c4431d8b193f2a9d285b10f3578db19726ee08329e4030daa424d64cf274419f9db81a00194753aea93000333d9e2fd01af2f457cb93bd2a7902edd89fa5f2f0a82d2c1352747041414eabcc38c5e66d3019167a9e941b3e390499ba710c1c15f6a5f7098b4629f0950084759bf745fe4588f595d579115905ef0d3e613c3341a5e83bc2292ed9d3033e20fd309beda73e48abf0e6aa9ac640bbe73498f1cc37df36f6aec48e2bf0a91680a69b30b255b1084c618e36884eebcf571530f10f360ca0a5fd303539f620dd187e094735b09785e32cb55b759f48b52e6d1a9ce3d5fcf60d41dac40581a347baba051e6c4236800a1ab4cdb4888b0230abf30acfc2eded12b494aab22f153b379a911342918601a1e1c3b5034a5da6cf68bf4eb99fe84b8f09e6db99ed0d258860c2f6c3a65a8a3aecf4332dc50add83621b42b50a6dd368c367cb52f0fbafcd23d372c82fec56c5c575e3f39ecf2f725ad26e754acd05dabb2ebe0e40b9dceb81b031d4846bc3c8b665349ad2a950386703ad4221c1074f9b800e310145a3ef33f785e7f8c65a11d53035770fcb8fd7105b9be6eefa7fe63a7f7a2a1270364dba9f4de42d46694a0efca36280a4e9f6302ba350b398a966a8e1f99d92a14ad086adfc84dd1a3c36dbc7f80582f01650eea794b58f78864695fb8ec066f00ace5c16da02dc502fc1a1baf942da3fc9f143bfcd1413fb30353a6ad03873f994f326eb845964932e5bc84bc5582a73390fb366b4fdfa89430fe41132a07f0295cf760b430f110a005c044248f3c2e3c38ca5274d0f0df15a08a54f7099ecf0bd636ea1b031fcd7a49aca809a1a77bf8c48ff90b4d78c7309e1eef490711bf9e022d9e894059c38d53878fb6f98a2658019edf5f1c1624c75c3e1fdb8e33412b98375f5338d5d14c55f1b3f4d28ba04338c7ed9ea868015f27d7449b076c85e675c1fe631f9170810ea74ce8ab8631719e0bec6ab63dad33d72c55516940791295f922771a1964c9e4f4c11f342a371be7941c2d13e3ab5560e5ffaa1cb18c11103918a854bf3c814872d3086451112e74f674de301e21356de862fd6e9fbf0b0608c846212c52c37a1c360e31f243340ba2427faca6605492b8c0d75bb78f79ba7190aac7595707c7fb54f96d1f9343102ea02ef28fc07075236c857da971aae8d81b3838f458e0b74bd73040924ef2169566971731fd9ea592f6532c93fb2f716ea02d3465d8e24fba5a3f7eadeb2b948d2189223ede7b7ef1f44854c95d7ede0ecd4b9a82bfc8762c8152b8dee01a61baec8ba3deb308d98b6d6823e1459c1675fe1921a62e6ebb7e3583d5f35e7c0b23e7e5b8cc62ce2cc1922dccb6230029ba0e09b3fcf9e9bf3d809eff94d67d990634f79a362ad9c39df4a42f4984750e270c7aaca0494d73b4e8571a186a8a8315f2d61744673be4ef6a76a98c5476091dea52200584b5d65cb3992679ee5e6e09c3fd525bb6e82d083bd0e75c06f03c75820bcc7d4a24c14e37412f8bb9f487a5eadc02bee1bb7126b340ffdc1f3f28d19b415cb892bc8b91d200b321a610be23d4ec7a78a75c335ef9dbb77f2c9d25854eac2e6064e25b294f4bd6d3c68b2ba8d9ef0cddfa08e090ce85476ed64823f542527a32dfe43bc31683858306954831829e3c79975f53ca248af087eab7504cd5f0aa7159fcb481950e109fda092b0f804c91e9d7cc8cabc83d94949260aaaaac283f7b5ab555bb778cb8f20f259f081a2b20d7c45627df190ed140bf6eb5f8596ccd6c8380ca7691c72fcf8cbc3dfcc6b4e3aeff7024b74ff0c4a0fee04b8179126887c576e231d815fddbfdf381f588a090ce385ce22bae1ddaa08c83589081dd17b6249bddef276ffa1f77ee8458a395ee78d3aa09c1f854f2bc9dca2da04d3f9b3f402a2e452f1891110a94359dafcc5f7dedffa5ee8f41a0722cad19876af619cc3b22786a6c2bcdfab337406804fa538eb5f79a1c01ab03654d80fdbb53a14864e5c104348a3ba4dbb1e776c42434e23ba35407a849942df62dee6e6469bb9295594fab2afb641d3e79004cb6e4ec22a710fe8fabd5c1a20bce4c77cc3cb5b16acb2686e7eb46ea80bf26eecb33ce661df7d9a74a04cb551571ee336d54b4addfa03a83a831d1edb25a2129a183fd4b80745c0c37deb5a9746ca2323c15e85b111cbaee5a3b24e4221c0a03336631deca55f137755ea4cc21dc26ad90fe3c9d89b7f79963c9adb1b01d258a8c881b14428fe738d29456b97e94861691d34f3537c5465ef219136d5d4620df20776583027a251999bcd9a5e68714b220f0d0d1e433c35b5887b5bb8ed19ab6dc84bc51d0b5692ab33a5487d4ebefadc273d1779db37745d25d3136bc5ad526e897565f2a2056e8b7758917c31bdab8120581ec74f82ee6daa9fcb5d407ec124351e4333af18dada406b2e349dc9f869a63124d868a6b28def6ab956897f9f451bb4992ac73acb7556c33b4c1c9e21c301dae014601339cbece8a4e5cabba1fb60b912e453ef304a7332158d769aa6efe912e6ea47c29dea146ee54847e98b1b388a7d133dda966b698d0b97683c7b4af5ba5ad3980abadae011797db467c2fc7bc1e1361e0dfd7b3729bed701fd21ee4f9558897c25a5ec99ac326453bd282dc45b6fd35a8e9feaee2ddb36b3d91a25932dfec49785d56f1afbab5a3d909093ac1809e0a4016ee0a7662564712292b38b99c73766b925951233473ffc36f48505761494b48bc383e2650edd486887574273395a0544f9c17d0079a2258517768de64ffda749d1c751b496fe18120737c396ab06f5c6af81acfd4ad97811c078a94b6a1027d24872989fa11e2e994b548f204ae786e77e14190100e66a940a6416500eaa49b08dbe652fc807c4a1a1f89719e268794e91eff0b5160d2d8b66152ebb3d57ea30bd4b363e8fa23d0f664ee693a129d59649051fd8351799d7192e87ec2c2a41327f6b279572d09ca79e9837c6afeb49b638808845f4e47914874a1e144d5fcf3ce923c7f433892e76e0e97c4a1c81af0964339d3c600d07641c5088a11aa423bb0d2b5967bdb91c9879908765f0a5602da7ab8b72712736d9cb6b353cdde025da365eda8dcb30885d9001ba08d990e91a6af525293ad33f566a8ecd9ab3610c66ee859f075ed22360a726739b049339ecff6a42ad7d7417c37fdf8388b3a65d9871d336f57a898872fde7a5c0c535479c3f7e55bc0b66bb70f7c4c9e522fcfcf562f56caa8d429416152acc25274e2d381e384e308d088685c5e706da5d91815418d24b2ef9a3c715e50c465393a5feacbeacb5ff851911dc4472037fbe6854910b9fc84b1441a5bb9a2b0977f08c4d8b0e5c43cc8b3d8c3ea30f514aaaf3ca7a00abb2adc37b8f1ff4705cf50e95125d26fd92bd4c8b72a9921963f96d4a6c3564ddc0a8c3c83972bf120ae384a2beee85ed4cd2d57210ef94f55278ac0ea35d98dec54a49832468b80af08db65a05dbc6dffb1ce21efda07b646d29ec341f89055912f05ffebc597bfdaccc5f4af6d1d609713a618c62b404533e8d7bb89498dda6c06801ee96ba870b694ab01a6f732d94068e3566c08cf8036dca5579b11b2011e3648953df32c83a48033f3841e6b6dff5d65cb2c7ab8ca3110c12ce87feff6fece53ea51a8dcd998db1d1436820d5c5df85f861c5878e9e57a063cb88472f573c571da3a25d20c3a25e67454fd2b524a0c9318ee5b02fb07b08124a3ccb49638c1bd45fef3e273a1943b324425c5a0160d8aaf0f6e535233b9a5ce8c5dfa86d2c225f798ad8f878ad151342d0a54a84a5f5b05d9f52a146fe371dd5d53e49bd82cfa37219bf77ccbbf253e5c4ebee2114ba2ec2a7aba2d62f4ddd8596feff9ec43e961095ee99f7ae79ab8b3d83cca285830d6762c8aa04aeb77082f5f40d2f613ee37e24ec448bc92f22ebd64c345919419f48c86215cc38473ae5f495d1f811d1cebdc4509eb20c375b4e942c00454b2e37c8aa49b195c4fb644b9f306c55e754b870236ec2003e25af4cab8769421d6a5946789a5d411231683eebda041cbb4a1f80e4c36f345f2ce5bb67b7c5750347cdc9249a21fab8c54b543ab2c821df2e0bd594fadaebd592563f724b03879409145ae5a5153e1466d544786b3e95305a7c7206ebf17b76cf305b95847c5e5cb13b7145df5afbf86b7d77d3ec4512dfca476619398dbabefec35b50d39a9d7a1dfd2fa0bcbec91756f61e6fd597a0cee825bde29c2c0fdb2dd2ffe2bdfc924c00ba18ca2807fde11bb407c0a2618d4b495b46ea11dab4f8336a2f618bd159f246a1045db9d1a704653dd6397f1af9a362c4b3b1806d1659fea140c1bb65cd1503e0bc6e4fb4fbdbe87b7ac7a9752345ab2cf41226476e5224366b2d6539ed8048e11b2427c2008db9de33e5792e39aa1f58f000ff95c69bd24bc7a2097e1a9ae0b0d00ddcc6ccfeb4a696c687d9a8d98cabad0bfcc469fdf80d9d3ae182ce082bd0d38121adfbf7f860de3e71baf06cc2be3ee8a33ea2eff5ba4d655e211e2b38cc4209957a592bea8ac8a2b4dbb8a57a64ddde66930d4a6fa0cd4a9910e5dc01592d1648e9f8b2c13900269a4716a95e6ddc6dd7f6d80cca7b387ab9e7087979e92ca317cf579a3806a8df8b1b18b4ab8a34f1b2a0a513045e94bd0b2707730ba6fa998b68d8ec16094f5dbb396419a5b8cac3d5868da9585af2c227903fb3d2257c6f64568c543784383fc14a39fbbb2486aaf83763757773a90e844bfab643028fcccc2af615c2a73c5f3a94ab1c73c715f778b38b3fb095b47029d2478b3968115226cbde1dd6c8305d74018fec59ae85309c9ec30459f34ac2d6dd14c7115545e6cd82995562339ccda7477a22b09c04425331dc1197351c65a7b3c85ac61926c945f450d448249617796adc583ab9a10568c9d97601a5e2706839df0063338977f0615bd285b3eb7002bae013e7e6ee27f134cf9b1900bb5b2a21db2fbdb9538183061b4ee20ef393b95f1762f5ebe008a4934626da839c3d4bd977d9f01cd0045caea910807c3280f22e06d1ba71c034173617d7bf716a22e848b37216c5698772ae9dd49f76bad859c85f27e98008188b6431aa372766e62c53864ab5c3eebea2f6288f398f344b600197440189eca1a77123298ff208c8308496f1cd8824dfd91fb7f06d86df239b2375aa5fed2991cf3d15dcbf1789fbc3411693dd160cc4f5986abb8fd4bae447fa12bfe415677c2e2bd4bd9bcd50f1f794c7c303dbc02c0453cf85efdb1a8593d15de7a3c62a266f1c9023200fd6af958405cd191ac78dcc35c88e2ca87c7a5a11136bac104f764c6a5f43d022fecd02d0b30bf4bb681fc5ed3cb80bf73f2d061a9eadddec9206c025e600f92f7451c4c77a402f37e58582fdbf30a1a3365109048ee23eddeb46a759f908c15db6cb91e7fa1", 0x1000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x1, 0x2400000}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8141) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0x9, {0x2, 0xce7, 0x8a0, 0x8000}, {0x2, 0x5, 0x3}, {0x0, 0x801e}}) syz_usb_connect(0x3, 0x86, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x87, 0x80, 0x5b, 0x8, 0x557, 0x2008, 0xa708, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8e, 0x4, 0x3, 0x49, 0xa6, 0xdf, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0x70, 0x1, 0x3, 0xa7, 0x8c, 0x67, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}]}}]}}]}}, 0x0) 39.713193347s ago: executing program 2 (id=1578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x26, 0xe5, 0x40, 0x45e, 0x723, 0x6bbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5562}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0xb, 0x4}, [@mdlm_detail={0x5, 0x24, 0x13, 0x3, "c3"}]}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, 0x0, 0x0, 0x0}, 0x0) 37.48006501s ago: executing program 2 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36.989875918s ago: executing program 35 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36.863030394s ago: executing program 1 (id=1585): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fchmodat(r1, &(0x7f0000000040)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d049cc20018000000010902240001000000400904000001030001f308210500000122a000090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 35.280405856s ago: executing program 1 (id=1588): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0x7, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x60, r6, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x4800) (async) dup3(r1, r1, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 34.767598395s ago: executing program 1 (id=1591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x88a2}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3, 0x0, 0x1c, {[@fastopen={0x22, 0x10, "50012c822982e5534aafeb1d3fdd"}, @nop, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4e) (fail_nth: 4) 34.151943444s ago: executing program 36 (id=1591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x88a2}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3, 0x0, 0x1c, {[@fastopen={0x22, 0x10, "50012c822982e5534aafeb1d3fdd"}, @nop, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4e) (fail_nth: 4) 17.845995783s ago: executing program 8 (id=1633): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0) capset(&(0x7f00000002c0)={0x20080522, r0}, &(0x7f0000000140)={0xc, 0x6, 0x9d, 0x187b, 0xfffffff9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xc2800, 0x0) r3 = syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f00000000c0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000004c0)={r6, @in6={{0xa, 0x4e22, 0x2, @local, 0x6}}}, &(0x7f0000000440)=0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x20de6846f75620cc, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r9], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x801) 16.727641733s ago: executing program 8 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) (async) ftruncate(0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f00003b6000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000006c0)=0x7fffffff, 0x7f, 0x0) (async) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @mss={0x2, 0x4, 0x7ff}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x46) 16.026437158s ago: executing program 8 (id=1640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000640)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x5, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x6c, 0x1, @local, @local}}}}, 0x3e) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) 15.562100979s ago: executing program 8 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0003000009000000800e0001006574683a6361696630cc339c000000000000000000"], 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008810) 15.177843587s ago: executing program 8 (id=1644): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r0, 0xfffffffffffffff9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'team0\x00', @ifru_names='dvmrp0\x00'}) ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="80004bc4d79be79d14fc2a0020", @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf2501000000040003000000028000000180000001000400000000000100040000000000018000000100010000000000010002000000000001800000010004000000000001000200000023ff010003000000000001800000018000000100010000000000010007000000000001000800000000000100010000000000010004000000000001000000000000000100070000000000010000000000"], 0xffffffcc}, 0x1, 0x0, 0x0, 0x20008494}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1010, r1, 0x0) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f0000000200)="3f051c000302140006001e0809e9aaa911f10000000000000000ea8f9ff97d119a990e8a0cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0xfe, 0x6, @broadcast}, 0x14) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x37) fchdir(r8) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) syz_clone(0xa5264c80, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x400000000001, &(0x7f0000000100)=0x2) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000001180), &(0x7f0000000140)) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) socket$kcm(0x10, 0x2, 0x0) 12.849565768s ago: executing program 8 (id=1652): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x1405, 0x20, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xb3257243cd7d20c}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0xfffffffffffffe5d) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3, 0x1bc}, 0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x4601, 0x20000000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @local, 0x8, 0x3, 0x4, 0x4, 0x2, 0x1, 0xd}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x101000) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x7) io_submit(0x0, 0x0, 0x0) 11.974991932s ago: executing program 37 (id=1652): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x1405, 0x20, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xb3257243cd7d20c}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0xfffffffffffffe5d) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3, 0x1bc}, 0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x4601, 0x20000000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @local, 0x8, 0x3, 0x4, 0x4, 0x2, 0x1, 0xd}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x101000) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x7) io_submit(0x0, 0x0, 0x0) 6.196044779s ago: executing program 6 (id=1676): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (fail_nth: 9) 5.979728104s ago: executing program 6 (id=1677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f00002e5000/0x4000)=nil) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) syz_open_dev$evdev(0x0, 0x6, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004079004618000000000001090224000100000064090400000103000d000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000010"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.751786851s ago: executing program 6 (id=1679): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) 5.467838162s ago: executing program 6 (id=1681): r0 = socket$alg(0x26, 0x5, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000075000/0x4000)=nil, 0x1) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {0x2, 0x1, 0x1}, 0xff}, 0x18) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0xffff) sendmsg$nl_route_sched_retired(r6, 0x0, 0x80008d4) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000004100070100000000fcdbdf25047c0000040000000800018004"], 0x20}, 0x1, 0x0, 0x0, 0x20008881}, 0x4010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0x20, 0x8}) 4.003772254s ago: executing program 7 (id=1685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_names='veth1_to_team\x00'}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) 3.780559602s ago: executing program 7 (id=1686): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0xfffffffffffff3f7}) 3.523273916s ago: executing program 7 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) (fail_nth: 9) 3.371962725s ago: executing program 6 (id=1688): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (fail_nth: 9) 3.091293938s ago: executing program 7 (id=1689): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 2.766439262s ago: executing program 4 (id=1690): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x40, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}}, 0x0) (async) poll(&(0x7f00000000c0)=[{r1, 0x2}], 0x1, 0x9) 2.519694501s ago: executing program 6 (id=1691): getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="0400"], 0x1c}], 0x1}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f00004d5000/0x4000)=nil, 0x4000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 2.476307401s ago: executing program 7 (id=1692): r0 = semget$private(0x0, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000200)=[{0x3, 0x6, 0x1000}, {0x2, 0x5, 0x1800}, {0x0, 0x5}, {0x0, 0x3, 0x1000}], 0x4, &(0x7f0000000300)={r1, r2+10000000}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f0000000280)=[{}], 0x1) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x20, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x80002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_clone(0x4000000, &(0x7f0000001300)="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", 0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="1923d647107205201997abe242d8d5e0a9cbf860b353ec73a46f96510fd33dfe25184fa20633e81658612bcf7fe23c3c1759c384b1551567128567894cd22eaeab6f0f77fab5ec89e515cea803afa33078ab585f7c6e8140e936ea6dc9ac73132106e828be6af867905bfdb1b41be5113012e79b5d3143eba5595e1bcb784b8c9874889c747631f60e38cfaab38a6e08a3176af1561527e5f269b521a2a62b040c5b1bc2fd1092c2fd92d490133e54f18ae14bc586ffaabe5576a6b6ca47dfde4778f2") sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001200)={0x28, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0x7, 0x8, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x110, 0x0, 0x0, @pid=r10}]}, 0x28}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) 2.38279878s ago: executing program 4 (id=1693): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f0000000140)) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil) 1.831751254s ago: executing program 4 (id=1694): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@host}, @local, 0x8, 0x0, 0xa, 0x80, 0xfffffffffffffff3, 0x1000, 0x800}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000b80)='./file0\x00', 0xd6) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0020000000']) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000017c0000801300018006002d2cb73fb7cea5bf1c00800a0000040040d43dbea4"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 1.719625355s ago: executing program 4 (id=1695): openat$autofs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 1.596874002s ago: executing program 7 (id=1696): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000015c0)) (async) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x8292c03614d6f6d5) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001540)={0x53, 0xffffffffffffffff, 0xba, 0xc, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000200)=""/33, 0x21}]}, &(0x7f0000000280)="12b66cd65c049b442d3a8b2c6d4bda35c09231f22528cc74378f9a16141392ee0f85adc741406ac8120405f6056b15a5cad2d91fc1bae61037c5a8f0bc25a912020c8bb0a625cdad95dc5ccbabfad097c96c64a61d3e9c95bd70c177b5362edaacfed99f410779fd552dd1fe7a093f6a3a17a831b4e15e818f6b2d88c986295598f00f9fc145a71b34189f029261365d10ba8d6f0fca7c452f5d08faea8c01d826c71d7a584133f3210cf69caf05fafca06ccca7249c252291fe", &(0x7f0000000540)=""/4096, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000340)}) (async) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) (async) bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES8=r1, @ANYBLOB="feb0a894ef56aee287389422d371d46e4eb9a777d383f92e9444593d6e1b2ae764e1e67573c66465e03e6d80a14a9e9981d89c31870fb310599487d62aee55d854d78106be0cc551f400baad6775aaf509d425f951aa5e06cdd8dad4045eb54d53904638cadfc31e426e9190b139084035a02b74a3c9fdd270c6a63f6c664ff82d9455ffe55c71f842e7dd88cb45e5ac3c8c8eeea0ecb799103a4fbc1d9592f36d5a1163eefcf43cc0c783f5d7944d135aa2287240cf00b59e590607b71f255379d7d0", @ANYBLOB="0030a7ae7355c007354aae517bfb3236787580789fdbb711f916865f0f6a44388cbfd5c3f0df366264d9b7a71437c00791d3bebc3a29f8746620d9d22314d84fd381f4891c5372c6beaaf0b98da7450aa16b7371d90e086fa7c9090edf3cad7c507ec81a9a1f867621a03fcd914fdb0bac46004c4b303bcbcad581c1a89a60bc3a0c13f861a7ca9443a88ee53d3693407b852207c041de1385ab1a62b200b8157803c57380c257032e2c5eca195c1896ca089e4b670f64df6b018e74ee942c1dbf20f49bc46fc7da7f604724c47b4191ba0f7d48fc331c"], 0x0) 1.493269747s ago: executing program 9 (id=1654): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000900)=ANY=[@ANYBLOB="12010200000000106b1d010140000102030109029f0003010000000904000000010100000a24010600000308000000"], 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @empty, 0x7da8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c884) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 725.562441ms ago: executing program 4 (id=1697): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = socket$inet(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x64, 0xd, 0x1, 0x0, "ce495b3c13bb69df70d2938759b4ba95ab69d7d514fb6149dd40d91a323854dec9e27bcefd87f25b61a1dd7093dddc994ac361d310a49034390ad6bf831091cc48b2100c3d24070fb3a40d41c34f0df8101285888d0f51f91c80324623a5b4ca"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYRESOCT=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x206c) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r8, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 642.176415ms ago: executing program 4 (id=1698): newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000000c0)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_UNLOCK(r1, 0x6406) poll(&(0x7f0000000180)=[{r1, 0x402}, {r1, 0x200}, {r1, 0x6}, {0xffffffffffffffff, 0x2507}, {r1, 0x8181}, {0xffffffffffffffff, 0x414a}, {0xffffffffffffffff, 0x4008}, {r1, 0x400}], 0x8, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff", @ANYRESDEC=0x0], 0x0) 104.666906ms ago: executing program 9 (id=1699): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2281894, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 0s ago: executing program 9 (id=1700): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) (fail_nth: 9) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fc38ebe9 code=0x7fc00000 [ 361.678914][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.710507][ T44] usb 3-1: USB disconnect, device number 101 [ 362.076857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.086391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.210548][ T5926] IPVS: starting estimator thread 0... [ 362.282727][T10592] FAULT_INJECTION: forcing a failure. [ 362.282727][T10592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.306531][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(full) [ 362.306561][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.306575][T10592] Call Trace: [ 362.306584][T10592] [ 362.306593][T10592] dump_stack_lvl+0x189/0x250 [ 362.306618][T10592] ? __pfx____ratelimit+0x10/0x10 [ 362.306649][T10592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.306669][T10592] ? __pfx__printk+0x10/0x10 [ 362.306700][T10592] ? fs_reclaim_acquire+0x7d/0x100 [ 362.306734][T10592] should_fail_ex+0x414/0x560 [ 362.306763][T10592] prepare_alloc_pages+0x213/0x610 [ 362.306796][T10592] __alloc_frozen_pages_noprof+0x123/0x370 [ 362.306826][T10592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.306863][T10592] ? policy_nodemask+0x27c/0x720 [ 362.306892][T10592] alloc_pages_mpol+0x232/0x4a0 [ 362.306922][T10592] alloc_pages_noprof+0xa9/0x190 [ 362.306948][T10592] alloc_pages_exact_noprof+0x3b/0xc0 [ 362.306977][T10592] snd_pcm_attach_substream+0x5cf/0xb20 [ 362.307020][T10592] snd_pcm_open_substream+0xb9/0x23a0 [ 362.307044][T10592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.307085][T10592] ? __pfx___mutex_lock+0x10/0x10 [ 362.307104][T10592] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 362.307133][T10592] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.307155][T10592] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 362.307190][T10592] snd_pcm_open+0x1f6/0x670 [ 362.307224][T10592] ? __pfx_snd_pcm_open+0x10/0x10 [ 362.307244][T10592] ? __pfx_default_wake_function+0x10/0x10 [ 362.307279][T10592] snd_pcm_capture_open+0x72/0xe0 [ 362.307306][T10592] chrdev_open+0x4cc/0x5e0 [ 362.307337][T10592] ? __pfx_chrdev_open+0x10/0x10 [ 362.307367][T10592] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 362.307402][T10592] ? __pfx_chrdev_open+0x10/0x10 [ 362.307439][T10592] do_dentry_open+0x950/0x13f0 [ 362.307485][T10592] vfs_open+0x3b/0x340 [ 362.307513][T10592] ? path_openat+0x2ecd/0x3830 [ 362.307538][T10592] path_openat+0x2ee5/0x3830 [ 362.307594][T10592] ? __pfx_path_openat+0x10/0x10 [ 362.307636][T10592] do_filp_open+0x1fa/0x410 [ 362.307655][T10592] ? __lock_acquire+0xab9/0xd20 [ 362.307680][T10592] ? __pfx_do_filp_open+0x10/0x10 [ 362.307725][T10592] ? _raw_spin_unlock+0x28/0x50 [ 362.307753][T10592] ? alloc_fd+0x64c/0x6c0 [ 362.307791][T10592] do_sys_openat2+0x121/0x1c0 [ 362.307813][T10592] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.307835][T10592] ? exc_page_fault+0x82/0x100 [ 362.307870][T10592] ? do_user_addr_fault+0xc8a/0x1390 [ 362.307897][T10592] __x64_sys_openat+0x138/0x170 [ 362.307922][T10592] do_syscall_64+0xfa/0xfa0 [ 362.307940][T10592] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.307959][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.307979][T10592] ? clear_bhb_loop+0x60/0xb0 [ 362.308004][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.308024][T10592] RIP: 0033:0x7fcae378d550 [ 362.308045][T10592] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 362.308063][T10592] RSP: 002b:00007fcae46deb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 362.308085][T10592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcae378d550 [ 362.308100][T10592] RDX: 0000000000000000 RSI: 00007fcae46dec10 RDI: 00000000ffffff9c [ 362.308113][T10592] RBP: 00007fcae46dec10 R08: 0000000000000000 R09: 0000000000000000 [ 362.308126][T10592] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 362.308140][T10592] R13: 00007fcae39c6038 R14: 00007fcae39c5fa0 R15: 00007ffcc850e268 [ 362.308174][T10592] [ 362.316730][T10590] IPVS: using max 27 ests per chain, 64800 per kthread [ 362.434342][T10594] overlayfs: missing 'lowerdir' [ 362.579894][T10595] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 362.690796][T10595] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 362.698294][T10595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 362.707447][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.717169][T10595] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 362.724308][T10595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 362.731110][T10595] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 362.742150][T10595] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 362.749780][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.758688][T10595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 362.768006][T10595] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 362.769679][ T5181] Bluetooth: hci3: command tx timeout [ 362.774531][T10595] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 362.787446][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 362.800515][ T12] bond0 (unregistering): Released all slaves [ 362.823426][T10595] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 362.830136][T10595] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 362.836904][T10595] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 362.856392][T10595] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 362.866568][T10595] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 362.889898][T10595] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 362.905078][T10595] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 362.951660][T10595] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 362.961005][T10595] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 363.060315][ T12] tipc: Disabling bearer [ 363.073542][ T12] tipc: Left network mode [ 363.281881][T10073] bond0: (slave syz_tun): Releasing backup interface [ 363.345984][ T5873] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 363.515680][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 363.524002][ T5873] usb 2-1: config 0 has an invalid interface number: 250 but max is 2 [ 363.532729][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.546283][ T5873] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 363.555662][ T5873] usb 2-1: config 0 has no interface number 0 [ 363.564979][ T5873] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 363.585383][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.596511][ T5873] usb 2-1: Product: syz [ 363.600987][ T5873] usb 2-1: Manufacturer: syz [ 363.605724][ T5873] usb 2-1: SerialNumber: syz [ 363.623244][ T5873] usb 2-1: config 0 descriptor?? [ 363.653771][ T5873] uvcvideo 2-1:0.250: probe with driver uvcvideo failed with error -22 [ 363.699228][ T12] hsr_slave_0: left promiscuous mode [ 363.710161][ T12] hsr_slave_1: left promiscuous mode [ 363.726730][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.736249][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.755650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.768325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.823519][ T12] veth1_macvtap: left promiscuous mode [ 363.848674][ T12] veth0_macvtap: left promiscuous mode [ 363.854480][ T12] veth1_vlan: left promiscuous mode [ 364.138727][ T12] pimreg (unregistering): left allmulticast mode [ 364.446207][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.470386][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.486474][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.501013][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.510562][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.780296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 364.831245][ T12] team0 (unregistering): Port device team_slave_0 removed [ 364.858717][ T5872] Bluetooth: hci3: command tx timeout [ 365.396000][ T9] usb 2-1: USB disconnect, device number 96 [ 365.638902][T10563] chnl_net:caif_netlink_parms(): no params data found [ 365.949380][T10630] vxcan1: entered allmulticast mode [ 366.068471][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.094349][T10563] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.110701][T10563] bridge_slave_0: entered allmulticast mode [ 366.138753][T10563] bridge_slave_0: entered promiscuous mode [ 366.179609][T10643] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1544'. [ 366.183912][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.200522][T10563] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.208815][T10563] bridge_slave_1: entered allmulticast mode [ 366.228922][T10563] bridge_slave_1: entered promiscuous mode [ 366.348205][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.446927][T10651] support for the xor transformation has been removed. [ 366.452587][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.456228][ T5873] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 366.559761][T10563] team0: Port device team_slave_0 added [ 366.617073][ T5872] Bluetooth: hci1: command tx timeout [ 366.635931][T10563] team0: Port device team_slave_1 added [ 366.644528][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 366.657963][ T5873] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.676772][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.683554][ T5873] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 366.693361][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.713011][ T5873] usb 2-1: config 0 descriptor?? [ 366.725592][ T5231] Dev loop6: unable to read RDB block 1 [ 366.731360][ T5231] loop6: unable to read partition table [ 366.738048][ T5231] loop6: partition table beyond EOD, truncated [ 366.759457][T10620] chnl_net:caif_netlink_parms(): no params data found [ 366.839240][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.851618][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.877959][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.923979][ T5872] Bluetooth: hci3: command tx timeout [ 366.933522][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 366.939159][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.943082][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 366.957021][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.960190][ T5873] usb 2-1: USB disconnect, device number 97 [ 366.995539][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.213021][T10563] hsr_slave_0: entered promiscuous mode [ 367.233491][T10563] hsr_slave_1: entered promiscuous mode [ 367.251187][T10563] debugfs: 'hsr0' already exists in 'hsr' [ 367.257715][T10563] Cannot create hsr debugfs directory [ 367.441758][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.461875][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.480505][T10620] bridge_slave_0: entered allmulticast mode [ 367.493169][T10620] bridge_slave_0: entered promiscuous mode [ 367.502365][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.520219][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.530766][T10620] bridge_slave_1: entered allmulticast mode [ 367.542095][T10620] bridge_slave_1: entered promiscuous mode [ 367.689955][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.705436][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.793744][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 367.829562][ T12] bridge0: port 3(batadv0) entered disabled state [ 367.839806][ T12] bridge_slave_1: left allmulticast mode [ 367.846230][ T12] bridge_slave_1: left promiscuous mode [ 367.852340][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.863076][ T12] bridge_slave_0: left allmulticast mode [ 367.869348][ T12] bridge_slave_0: left promiscuous mode [ 367.876505][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.963612][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 367.975922][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.984276][ T9] usb 2-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 367.997087][ T9] usb 2-1: config 0 has no interface number 0 [ 368.004211][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.019730][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 368.029307][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.037611][ T9] usb 2-1: Product: syz [ 368.041968][ T9] usb 2-1: Manufacturer: syz [ 368.047301][ T9] usb 2-1: SerialNumber: syz [ 368.062526][ T9] usb 2-1: config 0 descriptor?? [ 368.075235][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.116203][ T9] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 368.160582][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.185861][ T12] dvmrp0 (unregistering): left allmulticast mode [ 368.272358][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 368.406946][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.418697][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.431860][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 368.447740][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 368.462926][ T12] bond0 (unregistering): Released all slaves [ 368.480161][T10620] team0: Port device team_slave_0 added [ 368.501842][ T9] usb 2-1: USB disconnect, device number 98 [ 368.510796][T10620] team0: Port device team_slave_1 added [ 368.583787][ T12] tipc: Disabling bearer [ 368.602472][ T12] tipc: Left network mode [ 368.629571][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.637037][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.671172][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.683974][ T5872] Bluetooth: hci1: command tx timeout [ 368.689969][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.697350][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.724360][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.902388][T10620] hsr_slave_0: entered promiscuous mode [ 368.913996][T10620] hsr_slave_1: entered promiscuous mode [ 368.920692][T10620] debugfs: 'hsr0' already exists in 'hsr' [ 368.931087][T10620] Cannot create hsr debugfs directory [ 368.981102][ T12] hsr_slave_0: left promiscuous mode [ 368.988517][ T12] hsr_slave_1: left promiscuous mode [ 368.999084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.003550][ T5872] Bluetooth: hci3: command tx timeout [ 369.019173][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.061432][ T12] veth1_vlan: left allmulticast mode [ 369.096260][ T12] pimreg (unregistering): left allmulticast mode [ 369.334978][ T12] team0 (unregistering): Port device macvlan1 removed [ 369.971191][ T12] team0 (unregistering): Port device team_slave_1 removed [ 370.089716][ T12] team0 (unregistering): Port device team_slave_0 removed [ 370.672051][ T44] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 370.778116][ T5872] Bluetooth: hci1: command tx timeout [ 370.835603][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 370.859436][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.879674][ T44] usb 3-1: config 0 has no interface number 0 [ 370.886041][ T44] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.901176][ T44] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.911237][ T44] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 370.926675][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.952518][ T44] usb 3-1: config 0 descriptor?? [ 371.149329][T10563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.167578][T10563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.260882][T10563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.293397][T10563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.589718][ T44] uclogic 0003:28BD:0071.0021: failed retrieving string descriptor #100: -71 [ 371.603258][ T44] uclogic 0003:28BD:0071.0021: failed retrieving pen parameters: -71 [ 371.611407][ T44] uclogic 0003:28BD:0071.0021: pen probing failed: -71 [ 371.625290][ T44] uclogic 0003:28BD:0071.0021: failed probing parameters: -71 [ 371.638707][ T44] uclogic 0003:28BD:0071.0021: probe with driver uclogic failed with error -71 [ 371.683646][ T44] usb 3-1: USB disconnect, device number 102 [ 371.951986][T10563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.017342][T10620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.050997][T10620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.091101][T10620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.189859][T10620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.228950][T10563] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.300274][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.307523][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.365476][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.372748][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.729274][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.790370][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.827335][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.834600][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.842623][ T5872] Bluetooth: hci1: command tx timeout [ 372.861125][ T5926] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 372.880612][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.887896][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.034019][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.052095][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 373.064519][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 373.085712][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 373.118969][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.143337][ T5926] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 373.157745][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.180746][ T5926] usb 3-1: Product: syz [ 373.184992][ T5926] usb 3-1: Manufacturer: syz [ 373.189641][ T5926] usb 3-1: SerialNumber: syz [ 373.235686][ T5926] usb 3-1: config 0 descriptor?? [ 373.250733][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 373.257874][T10739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.270678][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.292983][ T5926] option 3-1:0.0: GSM modem (1-port) converter detected [ 373.308431][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.339774][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 373.380825][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 373.389946][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.432709][ T10] usb 2-1: config 0 descriptor?? [ 373.502464][ T5926] usb 3-1: USB disconnect, device number 103 [ 373.533221][ T5926] option 3-1:0.0: device disconnected [ 373.650277][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.671080][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.711371][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.808394][T10563] veth0_vlan: entered promiscuous mode [ 373.829628][T10563] veth1_vlan: entered promiscuous mode [ 373.907474][T10563] veth0_macvtap: entered promiscuous mode [ 373.911224][ T10] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 373.927205][T10563] veth1_macvtap: entered promiscuous mode [ 373.940498][ T10] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 373.947571][ T10] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 373.958933][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.980406][ T10] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 373.987056][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.013097][ T10] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 374.037157][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.062698][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input50 [ 374.072427][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.148565][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.195717][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.215082][ T10] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 374.230582][ T10] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 374.252772][T10747] syzkaller1: entered promiscuous mode [ 374.265064][T10778] cgroup: none used incorrectly [ 374.272461][T10747] syzkaller1: entered allmulticast mode [ 374.512699][ T9] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 374.534131][ T5926] usb 2-1: USB disconnect, device number 99 [ 374.562079][ T9] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 374.627677][ T9] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 374.657324][ T9] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 374.709159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.725783][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.775123][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.790644][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.829532][T10620] veth0_vlan: entered promiscuous mode [ 374.859216][T10620] veth1_vlan: entered promiscuous mode [ 374.983440][T10620] veth0_macvtap: entered promiscuous mode [ 375.019546][T10620] veth1_macvtap: entered promiscuous mode [ 375.079683][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.141738][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.181104][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.206889][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.233855][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.252128][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1561'. [ 375.267622][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.505703][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.516091][T10804] netlink: 'syz.1.1563': attribute type 12 has an invalid length. [ 375.534284][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.551932][T10804] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1563'. [ 375.665268][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.685970][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.781585][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.816002][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.019512][T10785] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 376.112712][ T5927] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 376.179113][T10785] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 376.188683][T10785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.207283][T10785] usb 2-1: Product: syz [ 376.215259][T10785] usb 2-1: Manufacturer: syz [ 376.225142][T10785] usb 2-1: SerialNumber: syz [ 376.290899][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 376.300579][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.316111][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.334979][ T5927] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice=18.00 [ 376.346131][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.374234][ T5927] usb 6-1: config 0 descriptor?? [ 376.595071][ T5927] usb 6-1: string descriptor 0 read error: -71 [ 376.606432][ T5927] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 376.623517][ T5927] usb 6-1: USB disconnect, device number 2 [ 377.469877][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.584995][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.716419][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.782817][T10837] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 377.794826][T10837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1569'. [ 377.807709][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.830964][T10837] batadv0: entered promiscuous mode [ 377.836648][T10837] batadv0: entered allmulticast mode [ 377.847817][T10837] bridge0: port 3(batadv0) entered blocking state [ 377.855786][T10837] bridge0: port 3(batadv0) entered disabled state [ 377.876747][T10837] bridge0: port 3(batadv0) entered blocking state [ 377.883440][T10837] bridge0: port 3(batadv0) entered forwarding state [ 378.047402][T10840] AppArmor: change_hat: Invalid input '' [ 378.091810][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 378.107104][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 378.179439][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.189061][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.197939][ T5181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.211739][ T5181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.220517][ T5181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.477267][T10842] chnl_net:caif_netlink_parms(): no params data found [ 378.675810][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.684906][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.695103][T10842] bridge_slave_0: entered allmulticast mode [ 378.705199][T10842] bridge_slave_0: entered promiscuous mode [ 378.715709][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.723418][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.731383][T10842] bridge_slave_1: entered allmulticast mode [ 378.739965][T10842] bridge_slave_1: entered promiscuous mode [ 378.791756][T10785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 378.821592][T10785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 378.832757][T10785] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 378.861889][T10785] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 378.899035][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.917503][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.942310][T10785] usb 2-1: USB disconnect, device number 100 [ 379.112699][T10842] team0: Port device team_slave_0 added [ 379.156887][T10842] team0: Port device team_slave_1 added [ 379.244635][ T37] bridge_slave_1: left allmulticast mode [ 379.251986][ T37] bridge_slave_1: left promiscuous mode [ 379.264667][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.277257][ T37] bridge_slave_0: left allmulticast mode [ 379.289388][ T37] bridge_slave_0: left promiscuous mode [ 379.295239][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.408077][ T5905] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 379.568011][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 379.579076][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.590096][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.604973][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice=18.00 [ 379.614818][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.634539][ T5905] usb 3-1: config 0 descriptor?? [ 379.869758][ T5905] usb 3-1: string descriptor 0 read error: -71 [ 379.888676][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 379.903622][ T5905] usb 3-1: USB disconnect, device number 104 [ 380.060641][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.076070][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.094450][ T37] bond0 (unregistering): Released all slaves [ 380.121331][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.132047][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.159702][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.198731][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.205759][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.232320][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.287581][ T5872] Bluetooth: hci1: command tx timeout [ 380.378448][T10842] hsr_slave_0: entered promiscuous mode [ 380.385323][T10842] hsr_slave_1: entered promiscuous mode [ 380.393695][T10842] debugfs: 'hsr0' already exists in 'hsr' [ 380.399887][T10842] Cannot create hsr debugfs directory [ 380.457149][T10785] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 380.597839][T10785] usb 2-1: device descriptor read/64, error -71 [ 380.802301][ T37] hsr_slave_0: left promiscuous mode [ 380.809008][ T37] hsr_slave_1: left promiscuous mode [ 380.815293][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.823612][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.832370][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.842535][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.873653][ T37] veth1_macvtap: left promiscuous mode [ 380.880658][ T37] veth0_macvtap: left promiscuous mode [ 380.886361][ T37] veth1_vlan: left promiscuous mode [ 380.887051][T10785] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 380.892659][ T37] veth0_vlan: left promiscuous mode [ 381.036919][T10785] usb 2-1: device descriptor read/64, error -71 [ 381.157244][T10785] usb usb2-port1: attempt power cycle [ 381.532366][T10785] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 381.565824][ T37] team0 (unregistering): Port device team_slave_1 removed [ 381.574463][T10785] usb 2-1: device descriptor read/8, error -71 [ 381.619338][ T37] team0 (unregistering): Port device team_slave_0 removed [ 381.836686][T10785] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 381.872107][T10785] usb 2-1: device descriptor read/8, error -71 [ 381.986777][T10785] usb usb2-port1: unable to enumerate USB device [ 382.228805][ T6734] syz_tun (unregistering): left allmulticast mode [ 382.358330][ T5872] Bluetooth: hci1: command tx timeout [ 382.711679][T10911] trusted_key: encrypted_key: master key parameter 'defa]lt' is invalid [ 382.769664][T10911] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 382.777632][T10911] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1581'. [ 382.853937][T10842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.924410][T10842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.969381][T10842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.025614][T10842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.113305][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.223387][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.413501][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.575112][T10842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.590943][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.671754][ T5905] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 383.691358][T10842] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.716801][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.724034][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.777160][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.784405][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.869172][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 383.894887][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.928104][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.961421][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.975650][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.995469][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice=18.00 [ 384.004600][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.054033][ T5905] usb 2-1: config 0 descriptor?? [ 384.064341][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.077928][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.087926][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.100353][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.113214][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.236382][ T37] bridge0: port 3(batadv0) entered disabled state [ 384.271388][ T37] bridge_slave_1: left allmulticast mode [ 384.296748][ T37] bridge_slave_1: left promiscuous mode [ 384.304642][ T5905] usb 2-1: string descriptor 0 read error: -71 [ 384.313253][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.339200][ T5905] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 384.366782][ T37] bridge_slave_0: left allmulticast mode [ 384.372735][ T37] bridge_slave_0: left promiscuous mode [ 384.381470][ T5905] usb 2-1: USB disconnect, device number 105 [ 384.398993][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.446430][ T5181] Bluetooth: hci1: command tx timeout [ 384.743981][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 384.978832][ T8366] vivid-003: reconnect [ 385.002266][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.031183][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.045646][ T37] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 385.059072][ T37] bond0 (unregistering): Released all slaves [ 385.252187][ T9662] bond0: (slave syz_tun): Releasing backup interface [ 385.275219][ T9662] syz_tun (unregistering): left promiscuous mode [ 385.281840][ T9662] syz_tun (unregistering): left allmulticast mode [ 385.302771][ T37] tipc: Disabling bearer [ 385.310534][ T37] tipc: Left network mode [ 385.411221][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.170770][ T37] hsr_slave_0: left promiscuous mode [ 386.205725][ T5181] Bluetooth: hci0: command tx timeout [ 386.237496][ T37] hsr_slave_1: left promiscuous mode [ 386.243859][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.273030][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.328782][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.337571][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.384294][ T37] veth1_macvtap: left promiscuous mode [ 386.389902][ T37] veth0_macvtap: left promiscuous mode [ 386.414368][ T37] veth1_vlan: left allmulticast mode [ 386.419852][ T37] veth1_vlan: left promiscuous mode [ 386.434588][ T37] veth0_vlan: left promiscuous mode [ 386.516126][ T5181] Bluetooth: hci1: command tx timeout [ 386.660346][ T37] pimreg (unregistering): left allmulticast mode [ 386.660367][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.691810][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.701559][ T5181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.713068][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.729039][ T5181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.869786][ T37] team0 (unregistering): Port device macvlan1 removed [ 387.201596][ T37] team0 (unregistering): Port device team_slave_1 removed [ 387.249490][ T37] team0 (unregistering): Port device team_slave_0 removed [ 388.033080][T10842] veth0_vlan: entered promiscuous mode [ 388.079127][T10941] chnl_net:caif_netlink_parms(): no params data found [ 388.132501][T10842] veth1_vlan: entered promiscuous mode [ 388.275647][ T5181] Bluetooth: hci0: command tx timeout [ 388.390514][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.413807][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.421116][T10941] bridge_slave_0: entered allmulticast mode [ 388.445115][T10941] bridge_slave_0: entered promiscuous mode [ 388.469447][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.479324][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.496124][T10941] bridge_slave_1: entered allmulticast mode [ 388.507758][T10941] bridge_slave_1: entered promiscuous mode [ 388.606577][T10984] chnl_net:caif_netlink_parms(): no params data found [ 388.632776][T10941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.649649][T10941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.788736][T10941] team0: Port device team_slave_0 added [ 388.796566][T10842] veth0_macvtap: entered promiscuous mode [ 388.821447][T10941] team0: Port device team_slave_1 added [ 388.835490][ T5181] Bluetooth: hci2: command tx timeout [ 388.864086][T10941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.871185][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.899714][T10941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.943664][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.950881][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.958713][T10984] bridge_slave_0: entered allmulticast mode [ 388.967482][T10984] bridge_slave_0: entered promiscuous mode [ 388.977551][T10842] veth1_macvtap: entered promiscuous mode [ 388.987546][T10941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.994922][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.021446][T10941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.043685][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.050936][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.058776][T10984] bridge_slave_1: entered allmulticast mode [ 389.066833][T10984] bridge_slave_1: entered promiscuous mode [ 389.146545][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.161650][T10941] hsr_slave_0: entered promiscuous mode [ 389.168996][T10941] hsr_slave_1: entered promiscuous mode [ 389.207212][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.278877][T10984] team0: Port device team_slave_0 added [ 389.319060][T10984] team0: Port device team_slave_1 added [ 389.395292][T10842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.410720][T10842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.421302][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.429159][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.455679][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.468719][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.476767][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.503718][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.558298][T11016] FAULT_INJECTION: forcing a failure. [ 389.558298][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 389.572285][T11016] CPU: 0 UID: 0 PID: 11016 Comm: syz.4.1596 Not tainted syzkaller #0 PREEMPT(full) [ 389.572315][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.572331][T11016] Call Trace: [ 389.572339][T11016] [ 389.572350][T11016] dump_stack_lvl+0x189/0x250 [ 389.572378][T11016] ? __pfx____ratelimit+0x10/0x10 [ 389.572413][T11016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.572434][T11016] ? __pfx__printk+0x10/0x10 [ 389.572486][T11016] should_fail_ex+0x414/0x560 [ 389.572520][T11016] should_failslab+0xa8/0x100 [ 389.572550][T11016] __kmalloc_cache_noprof+0x6f/0x6f0 [ 389.572575][T11016] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 389.572608][T11016] ? sctp_add_bind_addr+0x8c/0x370 [ 389.572648][T11016] sctp_add_bind_addr+0x8c/0x370 [ 389.572688][T11016] sctp_copy_local_addr_list+0x30b/0x4e0 [ 389.572726][T11016] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 389.572758][T11016] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 389.572789][T11016] ? sctp_v6_is_any+0x64/0x80 [ 389.572810][T11016] ? sctp_copy_one_addr+0x93/0x360 [ 389.572849][T11016] sctp_bind_addr_copy+0xb3/0x3c0 [ 389.572883][T11016] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 389.572940][T11016] sctp_connect_new_asoc+0x2e0/0x690 [ 389.572970][T11016] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 389.573026][T11016] ? sctp_get_af_specific+0x29/0x80 [ 389.573059][T11016] ? sctp_inet6_send_verify+0x80/0x300 [ 389.573092][T11016] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 389.573119][T11016] __sctp_connect+0x5ba/0xd50 [ 389.573155][T11016] ? __pfx___sctp_connect+0x10/0x10 [ 389.573193][T11016] sctp_inet_connect+0x12e/0x1e0 [ 389.573220][T11016] __sys_connect+0x313/0x440 [ 389.573241][T11016] ? __fget_files+0x3a0/0x420 [ 389.573272][T11016] ? __pfx___sys_connect+0x10/0x10 [ 389.573321][T11016] ? __pfx_ksys_write+0x10/0x10 [ 389.573355][T11016] __x64_sys_connect+0x7a/0x90 [ 389.573378][T11016] do_syscall_64+0xfa/0xfa0 [ 389.573399][T11016] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.573420][T11016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.573443][T11016] ? clear_bhb_loop+0x60/0xb0 [ 389.573470][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.573491][T11016] RIP: 0033:0x7f58e138ebe9 [ 389.573512][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.573532][T11016] RSP: 002b:00007f58e225d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 389.573556][T11016] RAX: ffffffffffffffda RBX: 00007f58e15c5fa0 RCX: 00007f58e138ebe9 [ 389.573574][T11016] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 0000000000000003 [ 389.573588][T11016] RBP: 00007f58e225d090 R08: 0000000000000000 R09: 0000000000000000 [ 389.573603][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.573617][T11016] R13: 00007f58e15c6038 R14: 00007f58e15c5fa0 R15: 00007fff35481128 [ 389.573653][T11016] [ 389.587821][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.927514][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.937960][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.000667][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.057299][T10984] hsr_slave_0: entered promiscuous mode [ 390.066181][T10984] hsr_slave_1: entered promiscuous mode [ 390.076781][T10984] debugfs: 'hsr0' already exists in 'hsr' [ 390.083211][T10984] Cannot create hsr debugfs directory [ 390.352498][ T5181] Bluetooth: hci0: command tx timeout [ 390.355545][ T6947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.377388][ T6947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.551613][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.571922][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.572570][T10941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.619798][T10941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.659804][T10941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.695580][T10941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.860617][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 390.888588][T10984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 390.907275][T10984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 390.922833][ T5181] Bluetooth: hci2: command tx timeout [ 390.930862][T10984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 390.967303][T10984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 391.071938][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 391.221079][T10941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.236031][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 391.247791][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.268940][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.294039][T10941] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.295014][ T5905] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 391.331813][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.337325][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.347126][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.365019][ T5905] usb 7-1: config 0 descriptor?? [ 391.399353][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.406649][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.439737][T10984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.490189][T10984] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.545019][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.552284][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.594023][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.601246][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.651243][T11040] sp0: Synchronizing with TNC [ 391.739381][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.755922][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.058700][ T5905] hid-multitouch 0003:1FD2:6007.0023: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 392.253206][T10941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.285689][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.401757][T11037] [U] è [ 392.431729][ T5181] Bluetooth: hci0: command tx timeout [ 392.490036][ T5927] usb 7-1: USB disconnect, device number 2 [ 392.986817][T10941] veth0_vlan: entered promiscuous mode [ 392.992864][ T5181] Bluetooth: hci2: command tx timeout [ 393.039111][T10941] veth1_vlan: entered promiscuous mode [ 393.105512][T10984] veth0_vlan: entered promiscuous mode [ 393.150170][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 393.180515][T10941] veth0_macvtap: entered promiscuous mode [ 393.227727][T10984] veth1_vlan: entered promiscuous mode [ 393.286594][T10941] veth1_macvtap: entered promiscuous mode [ 393.401629][T10984] veth0_macvtap: entered promiscuous mode [ 393.419450][T10941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.441784][T10984] veth1_macvtap: entered promiscuous mode [ 393.493583][T10941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.564591][T10984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.607602][ T6947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.635660][ T6947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.639351][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 393.677476][ T6949] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.728228][ T6949] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.747890][T10984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.815644][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 393.928932][ T6947] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.954933][ T6947] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.028133][ T6949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.039243][ T6947] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.080328][ T6949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.117534][ T6947] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.218185][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.264634][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.383105][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.440642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.561894][ T6949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.584881][ T6949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.902928][ T5926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 394.954935][T11137] tmpfs: Bad value for 'mpol' [ 395.070057][ T5181] Bluetooth: hci2: command tx timeout [ 395.366653][T11148] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1604'. [ 395.644800][T11155] FAULT_INJECTION: forcing a failure. [ 395.644800][T11155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.665454][T11155] CPU: 1 UID: 0 PID: 11155 Comm: syz.6.1607 Not tainted syzkaller #0 PREEMPT(full) [ 395.665487][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.665502][T11155] Call Trace: [ 395.665512][T11155] [ 395.665522][T11155] dump_stack_lvl+0x189/0x250 [ 395.665550][T11155] ? __pfx____ratelimit+0x10/0x10 [ 395.665584][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.665606][T11155] ? __pfx__printk+0x10/0x10 [ 395.665642][T11155] ? fs_reclaim_acquire+0x7d/0x100 [ 395.665680][T11155] should_fail_ex+0x414/0x560 [ 395.665714][T11155] prepare_alloc_pages+0x213/0x610 [ 395.665751][T11155] __alloc_frozen_pages_noprof+0x123/0x370 [ 395.665785][T11155] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.665826][T11155] ? policy_nodemask+0x27c/0x720 [ 395.665860][T11155] alloc_pages_mpol+0x232/0x4a0 [ 395.665893][T11155] vma_alloc_folio_noprof+0xe4/0x200 [ 395.665930][T11155] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 395.665973][T11155] folio_prealloc+0x30/0x180 [ 395.666001][T11155] do_wp_page+0x1231/0x5800 [ 395.666049][T11155] ? __pfx_do_wp_page+0x10/0x10 [ 395.666068][T11155] ? do_raw_spin_lock+0x121/0x290 [ 395.666106][T11155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.666151][T11155] __handle_mm_fault+0x1033/0x5400 [ 395.666193][T11155] ? __pfx___handle_mm_fault+0x10/0x10 [ 395.666232][T11155] ? follow_page_pte+0xd03/0x13e0 [ 395.666268][T11155] handle_mm_fault+0x40a/0x8e0 [ 395.666303][T11155] __get_user_pages+0x1699/0x2ce0 [ 395.666336][T11155] ? __lock_acquire+0xab9/0xd20 [ 395.666408][T11155] __gup_longterm_locked+0xde9/0x1660 [ 395.666446][T11155] ? sanity_check_pinned_pages+0x123a/0x1300 [ 395.666491][T11155] gup_fast_fallback+0x1cef/0x2240 [ 395.666511][T11155] ? is_bpf_text_address+0x26/0x2b0 [ 395.666577][T11155] ? __pfx_gup_fast_fallback+0x10/0x10 [ 395.666597][T11155] ? stack_trace_save+0x9c/0xe0 [ 395.666634][T11155] ? stack_depot_save_flags+0x40/0x860 [ 395.666670][T11155] ? pin_user_pages_fast+0x4d/0xb0 [ 395.666696][T11155] iov_iter_extract_pages+0x35f/0x5e0 [ 395.666730][T11155] extract_iter_to_sg+0xe46/0x24e0 [ 395.666780][T11155] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 395.666833][T11155] ? __asan_memset+0x22/0x50 [ 395.666870][T11155] af_alg_get_rsgl+0x436/0x810 [ 395.666921][T11155] skcipher_recvmsg+0x3c0/0x11c0 [ 395.666956][T11155] ? aa_sk_perm+0x81e/0x950 [ 395.667001][T11155] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 395.667037][T11155] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 395.667067][T11155] ? security_socket_recvmsg+0x7e/0x2e0 [ 395.667092][T11155] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 395.667123][T11155] sock_recvmsg+0x229/0x270 [ 395.667161][T11155] ____sys_recvmsg+0x1c9/0x460 [ 395.667198][T11155] ? __pfx_____sys_recvmsg+0x10/0x10 [ 395.667243][T11155] ? import_iovec+0x74/0xa0 [ 395.667269][T11155] ___sys_recvmsg+0x1b5/0x510 [ 395.667303][T11155] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.667358][T11155] ? __fget_files+0x3a0/0x420 [ 395.667412][T11155] __x64_sys_recvmsg+0x198/0x260 [ 395.667442][T11155] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 395.667480][T11155] ? __pfx_ksys_write+0x10/0x10 [ 395.667512][T11155] ? do_syscall_64+0xbe/0xfa0 [ 395.667538][T11155] do_syscall_64+0xfa/0xfa0 [ 395.667558][T11155] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.667580][T11155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.667602][T11155] ? clear_bhb_loop+0x60/0xb0 [ 395.667630][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.667652][T11155] RIP: 0033:0x7fa6beb8ebe9 [ 395.667673][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.667693][T11155] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 395.667718][T11155] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 395.667735][T11155] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 395.667750][T11155] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 395.667765][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.667779][T11155] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 395.667817][T11155] [ 395.674578][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 396.064735][T11161] FAULT_INJECTION: forcing a failure. [ 396.064735][T11161] name failslab, interval 1, probability 0, space 0, times 0 [ 396.202428][T11161] CPU: 1 UID: 0 PID: 11161 Comm: syz.6.1608 Not tainted syzkaller #0 PREEMPT(full) [ 396.202461][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.202476][T11161] Call Trace: [ 396.202486][T11161] [ 396.202496][T11161] dump_stack_lvl+0x189/0x250 [ 396.202524][T11161] ? __pfx____ratelimit+0x10/0x10 [ 396.202560][T11161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.202582][T11161] ? __pfx__printk+0x10/0x10 [ 396.202621][T11161] ? __pfx___might_resched+0x10/0x10 [ 396.202649][T11161] ? fs_reclaim_acquire+0x7d/0x100 [ 396.202682][T11161] should_fail_ex+0x414/0x560 [ 396.202715][T11161] should_failslab+0xa8/0x100 [ 396.202745][T11161] __kmalloc_cache_noprof+0x6f/0x6f0 [ 396.202771][T11161] ? __kthread_create_on_node+0xef/0x3e0 [ 396.202802][T11161] ? __init_swait_queue_head+0xa9/0x150 [ 396.202834][T11161] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 396.202861][T11161] __kthread_create_on_node+0xef/0x3e0 [ 396.202897][T11161] ? __pfx___kthread_create_on_node+0x10/0x10 [ 396.202938][T11161] ? __lock_acquire+0xab9/0xd20 [ 396.202966][T11161] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 396.202989][T11161] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 396.203015][T11161] kthread_create_on_node+0xdd/0x130 [ 396.203053][T11161] ? __pfx_kthread_create_on_node+0x10/0x10 [ 396.203092][T11161] ? do_raw_spin_unlock+0x122/0x240 [ 396.203131][T11161] rxrpc_lookup_local+0xe70/0x1410 [ 396.203170][T11161] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 396.203197][T11161] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 396.203219][T11161] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 396.203250][T11161] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.203284][T11161] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.203316][T11161] ? do_raw_spin_unlock+0x122/0x240 [ 396.203364][T11161] rxrpc_sendmsg+0x399/0x710 [ 396.203391][T11161] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 396.203415][T11161] __sock_sendmsg+0x219/0x270 [ 396.203451][T11161] ____sys_sendmsg+0x505/0x830 [ 396.203484][T11161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.203520][T11161] ? import_iovec+0x74/0xa0 [ 396.203548][T11161] ___sys_sendmsg+0x21f/0x2a0 [ 396.203576][T11161] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.203643][T11161] ? __fget_files+0x2a/0x420 [ 396.203673][T11161] ? __fget_files+0x3a0/0x420 [ 396.203716][T11161] __x64_sys_sendmsg+0x19b/0x260 [ 396.203745][T11161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.203782][T11161] ? __pfx_ksys_write+0x10/0x10 [ 396.203814][T11161] ? do_syscall_64+0xbe/0xfa0 [ 396.203840][T11161] do_syscall_64+0xfa/0xfa0 [ 396.203860][T11161] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.203881][T11161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.203904][T11161] ? clear_bhb_loop+0x60/0xb0 [ 396.203939][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.203961][T11161] RIP: 0033:0x7fa6beb8ebe9 [ 396.203982][T11161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.204002][T11161] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.204026][T11161] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 396.204044][T11161] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 396.204059][T11161] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 396.204073][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.204087][T11161] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 396.204124][T11161] [ 396.569956][T11163] FAULT_INJECTION: forcing a failure. [ 396.569956][T11163] name failslab, interval 1, probability 0, space 0, times 0 [ 396.585105][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.7.1609 Not tainted syzkaller #0 PREEMPT(full) [ 396.585139][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.585154][T11163] Call Trace: [ 396.585164][T11163] [ 396.585174][T11163] dump_stack_lvl+0x189/0x250 [ 396.585203][T11163] ? __pfx____ratelimit+0x10/0x10 [ 396.585239][T11163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.585262][T11163] ? __pfx__printk+0x10/0x10 [ 396.585313][T11163] should_fail_ex+0x414/0x560 [ 396.585353][T11163] should_failslab+0xa8/0x100 [ 396.585384][T11163] __kmalloc_cache_noprof+0x6f/0x6f0 [ 396.585410][T11163] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 396.585433][T11163] ? sctp_add_bind_addr+0x8c/0x370 [ 396.585476][T11163] sctp_add_bind_addr+0x8c/0x370 [ 396.585517][T11163] sctp_copy_local_addr_list+0x30b/0x4e0 [ 396.585567][T11163] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 396.585603][T11163] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 396.585642][T11163] ? sctp_v6_is_any+0x64/0x80 [ 396.585667][T11163] ? sctp_copy_one_addr+0x93/0x360 [ 396.585708][T11163] sctp_bind_addr_copy+0xb3/0x3c0 [ 396.585745][T11163] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 396.585782][T11163] sctp_connect_new_asoc+0x2e0/0x690 [ 396.585813][T11163] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 396.585839][T11163] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.585878][T11163] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 396.585914][T11163] ? security_sctp_bind_connect+0x7e/0x2e0 [ 396.585947][T11163] sctp_sendmsg+0x155c/0x2810 [ 396.585988][T11163] ? __pfx_sctp_sendmsg+0x10/0x10 [ 396.586019][T11163] ? aa_sk_perm+0x81e/0x950 [ 396.586059][T11163] ? __pfx_aa_sk_perm+0x10/0x10 [ 396.586096][T11163] ? sock_rps_record_flow+0x19/0x410 [ 396.586132][T11163] ? inet_sendmsg+0x2f4/0x370 [ 396.586170][T11163] __sock_sendmsg+0x19c/0x270 [ 396.586208][T11163] ____sys_sendmsg+0x52d/0x830 [ 396.586256][T11163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.586295][T11163] ? import_iovec+0x74/0xa0 [ 396.586325][T11163] ___sys_sendmsg+0x21f/0x2a0 [ 396.586356][T11163] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.586446][T11163] ? __fget_files+0x2a/0x420 [ 396.586479][T11163] ? __fget_files+0x3a0/0x420 [ 396.586526][T11163] __sys_sendmmsg+0x227/0x430 [ 396.586568][T11163] ? __pfx___sys_sendmmsg+0x10/0x10 [ 396.586608][T11163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.586658][T11163] ? ksys_write+0x22a/0x250 [ 396.586690][T11163] ? __pfx_ksys_write+0x10/0x10 [ 396.586726][T11163] __x64_sys_sendmmsg+0xa0/0xc0 [ 396.586755][T11163] do_syscall_64+0xfa/0xfa0 [ 396.586777][T11163] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.586799][T11163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.586823][T11163] ? clear_bhb_loop+0x60/0xb0 [ 396.586853][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.586877][T11163] RIP: 0033:0x7fe66fd8ebe9 [ 396.586897][T11163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.586917][T11163] RSP: 002b:00007fe670b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 396.586943][T11163] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 396.586959][T11163] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 396.586974][T11163] RBP: 00007fe670b26090 R08: 0000000000000000 R09: 0000000000000000 [ 396.586988][T11163] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 396.587002][T11163] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffef974eb98 [ 396.587040][T11163] [ 397.016811][ T6442] udevd[6442]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 397.146688][T11166] FAULT_INJECTION: forcing a failure. [ 397.146688][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 397.202780][T11166] CPU: 0 UID: 0 PID: 11166 Comm: syz.6.1610 Not tainted syzkaller #0 PREEMPT(full) [ 397.202811][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.202825][T11166] Call Trace: [ 397.202834][T11166] [ 397.202844][T11166] dump_stack_lvl+0x189/0x250 [ 397.202871][T11166] ? __pfx____ratelimit+0x10/0x10 [ 397.202906][T11166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.202927][T11166] ? __pfx__printk+0x10/0x10 [ 397.202967][T11166] ? __pfx___might_resched+0x10/0x10 [ 397.202993][T11166] ? fs_reclaim_acquire+0x7d/0x100 [ 397.203032][T11166] should_fail_ex+0x414/0x560 [ 397.203064][T11166] should_failslab+0xa8/0x100 [ 397.203094][T11166] __kmalloc_cache_noprof+0x6f/0x6f0 [ 397.203120][T11166] ? call_usermodehelper_setup+0x8e/0x270 [ 397.203152][T11166] ? trace_kmalloc+0x1f/0xd0 [ 397.203172][T11166] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 397.203208][T11166] call_usermodehelper_setup+0x8e/0x270 [ 397.203233][T11166] ? __pfx_free_modprobe_argv+0x10/0x10 [ 397.203272][T11166] __request_module+0x39f/0x5e0 [ 397.203306][T11166] ? __pfx___request_module+0x10/0x10 [ 397.203348][T11166] ? security_capable+0x7e/0x2e0 [ 397.203385][T11166] ? dev_load+0x21/0x1f0 [ 397.203418][T11166] dev_load+0x190/0x1f0 [ 397.203453][T11166] dev_ioctl+0x837/0x1150 [ 397.203491][T11166] sock_ioctl+0x719/0x790 [ 397.203523][T11166] ? __pfx_sock_ioctl+0x10/0x10 [ 397.203556][T11166] ? __fget_files+0x3a0/0x420 [ 397.203586][T11166] ? __fget_files+0x2a/0x420 [ 397.203621][T11166] ? bpf_lsm_file_ioctl+0x9/0x20 [ 397.203642][T11166] ? __pfx_sock_ioctl+0x10/0x10 [ 397.203671][T11166] __se_sys_ioctl+0xf9/0x170 [ 397.203698][T11166] do_syscall_64+0xfa/0xfa0 [ 397.203718][T11166] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.203739][T11166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.203762][T11166] ? clear_bhb_loop+0x60/0xb0 [ 397.203790][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.203813][T11166] RIP: 0033:0x7fa6beb8ebe9 [ 397.203833][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.203853][T11166] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.203878][T11166] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 397.203896][T11166] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 397.203912][T11166] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 397.203927][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.203941][T11166] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 397.203983][T11166] [ 397.781459][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 398.098363][ T5905] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 398.247664][ T30] audit: type=1326 audit(1757122566.074:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.292143][ T5905] usb 7-1: not running at top speed; connect to a high speed hub [ 398.317813][ T5905] usb 7-1: config index 0 descriptor too short (expected 2322, got 18) [ 398.339113][ T5905] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 398.347385][ T30] audit: type=1326 audit(1757122566.074:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.393770][ T5905] usb 7-1: config 95 has no interface number 0 [ 398.416455][ T5905] usb 7-1: config 95 interface 1 has no altsetting 0 [ 398.421748][ T5926] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 398.424679][ T30] audit: type=1326 audit(1757122566.074:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.467572][T11203] Bluetooth: MGMT ver 1.23 [ 398.477001][ T5905] usb 7-1: string descriptor 0 read error: -22 [ 398.484289][ T5905] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 398.501897][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.533867][ T30] audit: type=1326 audit(1757122566.084:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.611578][ T30] audit: type=1326 audit(1757122566.084:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.618252][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 398.672836][ T30] audit: type=1326 audit(1757122566.084:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.682106][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 398.724669][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 398.748538][ T30] audit: type=1326 audit(1757122566.084:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.782582][ T5926] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 398.792538][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.804777][ T5926] usb 8-1: Product: syz [ 398.812721][ T5926] usb 8-1: Manufacturer: syz [ 398.828237][ T30] audit: type=1326 audit(1757122566.084:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.841466][ T5926] usb 8-1: SerialNumber: syz [ 398.894080][ T5926] usb 8-1: config 0 descriptor?? [ 398.907885][ T30] audit: type=1326 audit(1757122566.084:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.952531][ T30] audit: type=1326 audit(1757122566.084:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.4.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x7ffc0000 [ 398.994546][ T5905] usb 7-1: USB disconnect, device number 3 [ 399.051631][ T5926] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 399.114741][T11195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.145229][T11195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.184928][ T5926] usb 8-1: USB disconnect, device number 3 [ 399.191287][ T37] usb 8-1: Failed to submit usb control message: -71 [ 399.226436][ T37] usb 8-1: unable to send the bmi data to the device: -71 [ 399.237160][ T37] usb 8-1: unable to get target info from device [ 399.251421][ T37] usb 8-1: could not get target info (-71) [ 399.257539][ T37] usb 8-1: could not probe fw (-71) [ 399.594851][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 399.659383][T11223] pimreg: entered allmulticast mode [ 399.762128][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 400.108625][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 400.287272][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 400.294786][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.316297][ T5905] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.329736][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.349768][ T5905] usb 7-1: config 0 descriptor?? [ 400.531782][T11253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 400.543375][T11253] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 400.580730][ T5905] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 400.593416][ T5873] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 400.739575][ T5873] usb 8-1: device descriptor read/64, error -71 [ 400.786085][T11228] netlink: 'syz.6.1622': attribute type 2 has an invalid length. [ 400.799724][T11228] netlink: 'syz.6.1622': attribute type 4 has an invalid length. [ 400.809573][T11228] netlink: 'syz.6.1622': attribute type 8 has an invalid length. [ 400.819042][T11228] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1622'. [ 400.843589][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.854523][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.870762][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.880009][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.894777][ T5905] usb 7-1: USB disconnect, device number 4 [ 400.947718][ T5926] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 400.978173][ T5873] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 401.116811][ T5926] usb 9-1: Using ep0 maxpacket: 32 [ 401.124603][ T5926] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 401.132793][ T5873] usb 8-1: device descriptor read/64, error -71 [ 401.151161][ T5926] usb 9-1: config 0 has no interface number 0 [ 401.166855][ T5926] usb 9-1: config 0 interface 12 has no altsetting 0 [ 401.181088][ T5926] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 401.193094][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.206114][ T5926] usb 9-1: Product: syz [ 401.213203][ T5926] usb 9-1: Manufacturer: syz [ 401.218101][ T5926] usb 9-1: SerialNumber: syz [ 401.239041][ T5926] usb 9-1: config 0 descriptor?? [ 401.245428][ T5873] usb usb8-port1: attempt power cycle [ 401.529413][ T5926] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 401.558970][ T5926] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 401.578396][ T5926] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 401.586127][ T5926] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 401.600964][ T5873] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 401.643371][ T5864] udevd[5864]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 401.650119][ T5926] usb 9-1: USB disconnect, device number 2 [ 401.668750][ T5873] usb 8-1: device descriptor read/8, error -71 [ 401.827380][T11286] FAULT_INJECTION: forcing a failure. [ 401.827380][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 401.889572][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.4.1632 Not tainted syzkaller #0 PREEMPT(full) [ 401.889606][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.889621][T11286] Call Trace: [ 401.889632][T11286] [ 401.889642][T11286] dump_stack_lvl+0x189/0x250 [ 401.889670][T11286] ? __pfx____ratelimit+0x10/0x10 [ 401.889704][T11286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.889723][T11286] ? __pfx__printk+0x10/0x10 [ 401.889760][T11286] ? __pfx___might_resched+0x10/0x10 [ 401.889789][T11286] ? fs_reclaim_acquire+0x7d/0x100 [ 401.889820][T11286] should_fail_ex+0x414/0x560 [ 401.889853][T11286] ? __pfx_proc_alloc_inode+0x10/0x10 [ 401.889876][T11286] should_failslab+0xa8/0x100 [ 401.889906][T11286] ? __pfx_proc_alloc_inode+0x10/0x10 [ 401.889928][T11286] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 401.889954][T11286] ? proc_alloc_inode+0x2a/0xc0 [ 401.889982][T11286] ? __pfx_proc_alloc_inode+0x10/0x10 [ 401.890004][T11286] proc_alloc_inode+0x2a/0xc0 [ 401.890028][T11286] alloc_inode+0x67/0x1b0 [ 401.890059][T11286] new_inode+0x22/0x170 [ 401.890103][T11286] proc_sys_make_inode+0x4c/0x500 [ 401.890128][T11286] ? do_raw_spin_unlock+0x122/0x240 [ 401.890169][T11286] proc_sys_lookup+0x342/0x5e0 [ 401.890202][T11286] __lookup_slow+0x294/0x3d0 [ 401.890228][T11286] ? __pfx___lookup_slow+0x10/0x10 [ 401.890263][T11286] ? down_read+0x1ad/0x2e0 [ 401.890287][T11286] lookup_slow+0x53/0x70 [ 401.890308][T11286] link_path_walk+0x935/0xea0 [ 401.890357][T11286] path_openat+0x28c/0x3830 [ 401.890418][T11286] ? __pfx_path_openat+0x10/0x10 [ 401.890460][T11286] do_filp_open+0x1fa/0x410 [ 401.890481][T11286] ? __lock_acquire+0xab9/0xd20 [ 401.890508][T11286] ? __pfx_do_filp_open+0x10/0x10 [ 401.890558][T11286] ? _raw_spin_unlock+0x28/0x50 [ 401.890589][T11286] ? alloc_fd+0x64c/0x6c0 [ 401.890631][T11286] do_sys_openat2+0x121/0x1c0 [ 401.890656][T11286] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.890681][T11286] ? ksys_write+0x22a/0x250 [ 401.890710][T11286] ? __pfx_ksys_write+0x10/0x10 [ 401.890739][T11286] __x64_sys_openat+0x138/0x170 [ 401.890768][T11286] do_syscall_64+0xfa/0xfa0 [ 401.890788][T11286] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.890810][T11286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.890833][T11286] ? clear_bhb_loop+0x60/0xb0 [ 401.890860][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.890880][T11286] RIP: 0033:0x7f58e138ebe9 [ 401.890901][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.890922][T11286] RSP: 002b:00007f58e225d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.890947][T11286] RAX: ffffffffffffffda RBX: 00007f58e15c5fa0 RCX: 00007f58e138ebe9 [ 401.890964][T11286] RDX: 0000000000000002 RSI: 0000200000007400 RDI: ffffffffffffff9c [ 401.890981][T11286] RBP: 00007f58e225d090 R08: 0000000000000000 R09: 0000000000000000 [ 401.890996][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.891010][T11286] R13: 00007f58e15c6038 R14: 00007f58e15c5fa0 R15: 00007fff35481128 [ 401.891049][T11286] [ 402.198705][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.331183][ T5873] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 402.379037][ T5873] usb 8-1: device descriptor read/8, error -71 [ 402.494197][ T5873] usb usb8-port1: unable to enumerate USB device [ 402.567351][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 402.592075][T11295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1634'. [ 403.493397][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 403.493418][ T30] audit: type=1326 audit(1757122571.327:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.4.1635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58e138ebe9 code=0x0 [ 403.725741][ T5926] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 403.755138][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 403.927473][ T5926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.949403][ T5926] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 403.964492][T11325] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1638'. [ 403.984841][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.012542][ T5926] usb 8-1: config 0 descriptor?? [ 404.039627][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 404.080823][T11327] tipc: Started in network mode [ 404.098042][T11327] tipc: Node identity , cluster identity 4711 [ 404.140959][T11327] tipc: Failed to obtain node identity [ 404.169900][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 404.242704][T11330] syzkaller1: entered promiscuous mode [ 404.253587][T11330] syzkaller1: entered allmulticast mode [ 404.548647][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 404.556361][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 404.804329][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 404.812067][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 404.829845][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 404.839230][ T5998] udevd[5998]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 404.867023][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 404.884984][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 404.912007][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 404.952268][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 404.969446][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 404.989840][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 405.012075][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 405.032427][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 405.061473][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 405.089103][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 405.109251][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 405.131816][ T5926] pwc: Registered as video103. [ 405.158383][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input51 [ 405.225801][ T5926] usb 8-1: USB disconnect, device number 8 [ 405.520302][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 405.627152][ T5864] udevd[5864]: setting mode of /dev/input/event4 to 020660 failed: Read-only file system [ 405.671226][ T5864] udevd[5864]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: Read-only file system [ 405.998641][ T1326] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.006357][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 406.065465][ T5926] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 406.206948][ T1326] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.225457][ T5926] usb 8-1: device descriptor read/64, error -71 [ 406.421362][ T1326] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.441526][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 406.484249][ T5926] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 406.593471][ T1326] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.644435][ T5926] usb 8-1: device descriptor read/64, error -71 [ 406.700280][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 406.761064][T11375] FAULT_INJECTION: forcing a failure. [ 406.761064][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 406.784461][ T5926] usb usb8-port1: attempt power cycle [ 406.797063][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.6.1651 Not tainted syzkaller #0 PREEMPT(full) [ 406.797098][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.797114][T11375] Call Trace: [ 406.797123][T11375] [ 406.797134][T11375] dump_stack_lvl+0x189/0x250 [ 406.797163][T11375] ? __pfx____ratelimit+0x10/0x10 [ 406.797198][T11375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.797219][T11375] ? __pfx__printk+0x10/0x10 [ 406.797249][T11375] ? netlink_sendmsg+0x805/0xb30 [ 406.797272][T11375] ? __x64_sys_sendmsg+0x19b/0x260 [ 406.797297][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.797339][T11375] should_fail_ex+0x414/0x560 [ 406.797370][T11375] should_failslab+0xa8/0x100 [ 406.797398][T11375] kmem_cache_alloc_noprof+0x74/0x6e0 [ 406.797421][T11375] ? skb_clone+0x212/0x3a0 [ 406.797450][T11375] skb_clone+0x212/0x3a0 [ 406.797487][T11375] __netlink_deliver_tap+0x404/0x850 [ 406.797520][T11375] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.797542][T11375] netlink_deliver_tap+0x19c/0x1b0 [ 406.797564][T11375] netlink_sendskb+0x68/0x140 [ 406.797614][T11375] netlink_unicast+0x397/0x9e0 [ 406.797644][T11375] ? __asan_memcpy+0x40/0x70 [ 406.797672][T11375] ? __pfx_netlink_unicast+0x10/0x10 [ 406.797714][T11375] netlink_rcv_skb+0x28c/0x470 [ 406.797747][T11375] ? __lock_acquire+0xab9/0xd20 [ 406.797772][T11375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.797800][T11375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.797856][T11375] ? down_read+0x1ad/0x2e0 [ 406.797883][T11375] genl_rcv+0x28/0x40 [ 406.797908][T11375] netlink_unicast+0x82c/0x9e0 [ 406.797959][T11375] ? __pfx_netlink_unicast+0x10/0x10 [ 406.797992][T11375] ? netlink_sendmsg+0x642/0xb30 [ 406.798011][T11375] ? skb_put+0x11b/0x210 [ 406.798037][T11375] netlink_sendmsg+0x805/0xb30 [ 406.798069][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.798096][T11375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.798132][T11375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.798163][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.798194][T11375] __sock_sendmsg+0x219/0x270 [ 406.798228][T11375] ____sys_sendmsg+0x505/0x830 [ 406.798259][T11375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.798295][T11375] ? import_iovec+0x74/0xa0 [ 406.798321][T11375] ___sys_sendmsg+0x21f/0x2a0 [ 406.798349][T11375] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.798414][T11375] ? __fget_files+0x2a/0x420 [ 406.798443][T11375] ? __fget_files+0x3a0/0x420 [ 406.798490][T11375] __x64_sys_sendmsg+0x19b/0x260 [ 406.798519][T11375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.798555][T11375] ? __pfx_ksys_write+0x10/0x10 [ 406.798586][T11375] ? do_syscall_64+0xbe/0xfa0 [ 406.798617][T11375] do_syscall_64+0xfa/0xfa0 [ 406.798636][T11375] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.798676][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.798698][T11375] ? clear_bhb_loop+0x60/0xb0 [ 406.798727][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.798750][T11375] RIP: 0033:0x7fa6beb8ebe9 [ 406.798771][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.798792][T11375] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.798817][T11375] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 406.798835][T11375] RDX: 0000000004008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 406.798850][T11375] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 406.798865][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.798880][T11375] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 406.798918][T11375] [ 407.600010][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 407.651052][ T1326] bridge_slave_1: left allmulticast mode [ 407.679651][ T1326] bridge_slave_1: left promiscuous mode [ 407.696581][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.754706][ T1326] bridge_slave_0: left allmulticast mode [ 407.781872][ T1326] bridge_slave_0: left promiscuous mode [ 407.792699][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.833667][ T5926] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 407.892659][ T5926] usb 8-1: device descriptor read/8, error -71 [ 408.133331][ T5926] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 408.200184][ T5926] usb 8-1: device descriptor read/8, error -71 [ 408.314044][ T5926] usb usb8-port1: unable to enumerate USB device [ 408.818293][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.831831][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.849934][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.881461][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.893739][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.115598][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.128393][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.139153][ T1326] bond0 (unregistering): Released all slaves [ 409.158402][T11380] syzkaller1: entered promiscuous mode [ 409.165475][T11380] syzkaller1: entered allmulticast mode [ 409.429186][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 409.499595][T11415] ÿ: renamed from ip6gretap0 (while UP) [ 409.523229][T11415] FAULT_INJECTION: forcing a failure. [ 409.523229][T11415] name failslab, interval 1, probability 0, space 0, times 0 [ 409.542245][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.7.1659 Not tainted syzkaller #0 PREEMPT(full) [ 409.542279][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.542295][T11415] Call Trace: [ 409.542305][T11415] [ 409.542316][T11415] dump_stack_lvl+0x189/0x250 [ 409.542348][T11415] ? __pfx____ratelimit+0x10/0x10 [ 409.542387][T11415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.542410][T11415] ? __pfx__printk+0x10/0x10 [ 409.542454][T11415] ? __pfx___might_resched+0x10/0x10 [ 409.542483][T11415] ? fs_reclaim_acquire+0x7d/0x100 [ 409.542516][T11415] should_fail_ex+0x414/0x560 [ 409.542558][T11415] should_failslab+0xa8/0x100 [ 409.542590][T11415] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 409.542618][T11415] ? kernfs_rename_ns+0x3ea/0x7a0 [ 409.542646][T11415] ? kernfs_name_compare+0x6f/0x1c0 [ 409.542680][T11415] kstrdup+0x42/0x100 [ 409.542715][T11415] kernfs_rename_ns+0x3ea/0x7a0 [ 409.542756][T11415] sysfs_rename_dir_ns+0x6d/0x90 [ 409.542797][T11415] kobject_rename+0x326/0x420 [ 409.542829][T11415] ? __pfx_kobject_rename+0x10/0x10 [ 409.542858][T11415] ? sysfs_rename_link_ns+0x178/0x1b0 [ 409.542886][T11415] device_rename+0x15d/0x1f0 [ 409.542920][T11415] netif_change_name+0x28c/0x960 [ 409.542961][T11415] ? __mutex_lock+0x5bb/0x1350 [ 409.542986][T11415] ? dev_change_name+0x125/0x260 [ 409.543012][T11415] ? dev_ioctl+0x5dc/0x1150 [ 409.543048][T11415] ? __pfx_netif_change_name+0x10/0x10 [ 409.543086][T11415] ? netdev_name_node_lookup+0xdf/0x120 [ 409.543137][T11415] dev_change_name+0x125/0x260 [ 409.543166][T11415] dev_ioctl+0x5ec/0x1150 [ 409.543206][T11415] sock_do_ioctl+0x22c/0x300 [ 409.543243][T11415] ? __pfx_sock_do_ioctl+0x10/0x10 [ 409.543294][T11415] sock_ioctl+0x576/0x790 [ 409.543326][T11415] ? __pfx_sock_ioctl+0x10/0x10 [ 409.543359][T11415] ? __fget_files+0x3a0/0x420 [ 409.543392][T11415] ? __fget_files+0x2a/0x420 [ 409.543427][T11415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 409.543449][T11415] ? __pfx_sock_ioctl+0x10/0x10 [ 409.543478][T11415] __se_sys_ioctl+0xf9/0x170 [ 409.543507][T11415] do_syscall_64+0xfa/0xfa0 [ 409.543528][T11415] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.543550][T11415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.543575][T11415] ? clear_bhb_loop+0x60/0xb0 [ 409.543605][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.543627][T11415] RIP: 0033:0x7fe66fd8ebe9 [ 409.543648][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.543670][T11415] RSP: 002b:00007fe670b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.543695][T11415] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 409.543712][T11415] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 409.543728][T11415] RBP: 00007fe670b26090 R08: 0000000000000000 R09: 0000000000000000 [ 409.543743][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.543758][T11415] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffef974eb98 [ 409.543796][T11415] [ 409.982464][ T5905] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 410.147778][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 410.174975][ T5905] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 410.209328][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.225829][ T5905] usb 7-1: config 0 descriptor?? [ 410.240058][ T5905] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 410.503811][ T5905] gspca_nw80x: reg_w err -71 [ 410.508639][ T5905] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 410.543139][ T1326] hsr_slave_0: left promiscuous mode [ 410.572260][ T5905] usb 7-1: USB disconnect, device number 5 [ 410.582949][ T1326] hsr_slave_1: left promiscuous mode [ 410.589260][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.625583][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.642835][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.654399][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.723321][ T1326] veth1_macvtap: left promiscuous mode [ 410.739270][ T1326] veth0_macvtap: left promiscuous mode [ 410.753410][ T1326] veth1_vlan: left promiscuous mode [ 410.758831][ T1326] veth0_vlan: left promiscuous mode [ 410.986168][ T5181] Bluetooth: hci2: command tx timeout [ 411.110369][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 411.111430][T11446] FAULT_INJECTION: forcing a failure. [ 411.111430][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 411.138929][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.6.1666 Not tainted syzkaller #0 PREEMPT(full) [ 411.138960][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.138975][T11446] Call Trace: [ 411.138984][T11446] [ 411.138994][T11446] dump_stack_lvl+0x189/0x250 [ 411.139021][T11446] ? __pfx____ratelimit+0x10/0x10 [ 411.139055][T11446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.139076][T11446] ? __pfx__printk+0x10/0x10 [ 411.139114][T11446] ? __pfx___might_resched+0x10/0x10 [ 411.139141][T11446] ? fs_reclaim_acquire+0x7d/0x100 [ 411.139173][T11446] should_fail_ex+0x414/0x560 [ 411.139205][T11446] should_failslab+0xa8/0x100 [ 411.139241][T11446] kmem_cache_alloc_node_noprof+0x77/0x710 [ 411.139265][T11446] ? __alloc_skb+0x112/0x2d0 [ 411.139293][T11446] __alloc_skb+0x112/0x2d0 [ 411.139318][T11446] netlink_dump+0x1b7/0xe90 [ 411.139359][T11446] ? rcu_is_watching+0x15/0xb0 [ 411.139388][T11446] ? __kmalloc_noprof+0x432/0x7f0 [ 411.139410][T11446] ? security_capable+0x7e/0x2e0 [ 411.139441][T11446] ? __pfx_netlink_dump+0x10/0x10 [ 411.139493][T11446] ? netlink_lookup+0x30/0x200 [ 411.139523][T11446] ? netlink_lookup+0x30/0x200 [ 411.139562][T11446] __netlink_dump_start+0x5cb/0x7e0 [ 411.139605][T11446] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 411.139635][T11446] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 411.139669][T11446] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 411.139693][T11446] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 411.139715][T11446] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 411.139744][T11446] ? sock_diag_rcv_msg+0x188/0x600 [ 411.139782][T11446] sock_diag_rcv_msg+0x4cc/0x600 [ 411.139820][T11446] netlink_rcv_skb+0x208/0x470 [ 411.139855][T11446] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 411.139904][T11446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.139954][T11446] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.139986][T11446] netlink_unicast+0x82c/0x9e0 [ 411.140028][T11446] ? __pfx_netlink_unicast+0x10/0x10 [ 411.140063][T11446] ? netlink_sendmsg+0x642/0xb30 [ 411.140083][T11446] ? skb_put+0x11b/0x210 [ 411.140109][T11446] netlink_sendmsg+0x805/0xb30 [ 411.140142][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.140168][T11446] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.140205][T11446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.140243][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.140266][T11446] __sock_sendmsg+0x219/0x270 [ 411.140302][T11446] ____sys_sendmsg+0x505/0x830 [ 411.140334][T11446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.140370][T11446] ? import_iovec+0x74/0xa0 [ 411.140398][T11446] ___sys_sendmsg+0x21f/0x2a0 [ 411.140426][T11446] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.140492][T11446] ? __fget_files+0x2a/0x420 [ 411.140522][T11446] ? __fget_files+0x3a0/0x420 [ 411.140565][T11446] __x64_sys_sendmsg+0x19b/0x260 [ 411.140594][T11446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.140631][T11446] ? __pfx_ksys_write+0x10/0x10 [ 411.140663][T11446] ? do_syscall_64+0xbe/0xfa0 [ 411.140690][T11446] do_syscall_64+0xfa/0xfa0 [ 411.140709][T11446] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.140730][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.140754][T11446] ? clear_bhb_loop+0x60/0xb0 [ 411.140781][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.140803][T11446] RIP: 0033:0x7fa6beb8ebe9 [ 411.140823][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.140844][T11446] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.140867][T11446] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 411.140884][T11446] RDX: 0000000000004080 RSI: 0000200000000180 RDI: 0000000000000003 [ 411.140900][T11446] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 411.140914][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.140928][T11446] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 411.140965][T11446] [ 411.601869][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 411.664386][ T5905] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 411.805751][ T5905] usb 8-1: device descriptor read/64, error -71 [ 411.999469][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 412.045373][ T5905] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 412.056844][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 412.181300][ T5905] usb 8-1: device descriptor read/64, error -71 [ 412.291684][ T5905] usb usb8-port1: attempt power cycle [ 412.631302][ T5905] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 412.669289][ T5905] usb 8-1: device descriptor read/8, error -71 [ 412.686818][T11399] chnl_net:caif_netlink_parms(): no params data found [ 412.808871][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 412.930922][ T5905] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 412.948245][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 412.974800][ T5905] usb 8-1: device descriptor read/8, error -71 [ 413.044478][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.065006][ T5181] Bluetooth: hci2: command tx timeout [ 413.082847][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.090186][T11399] bridge_slave_0: entered allmulticast mode [ 413.099081][T11399] bridge_slave_0: entered promiscuous mode [ 413.104855][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 413.106246][ T5905] usb usb8-port1: unable to enumerate USB device [ 413.133522][T11467] syzkaller1: entered promiscuous mode [ 413.141948][T11467] syzkaller1: entered allmulticast mode [ 413.161380][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.168698][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.178672][T11399] bridge_slave_1: entered allmulticast mode [ 413.199330][T11399] bridge_slave_1: entered promiscuous mode [ 413.287165][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.307368][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.437662][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 413.450092][T11399] team0: Port device team_slave_0 added [ 413.474781][T11399] team0: Port device team_slave_1 added [ 413.552198][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 413.589939][T11477] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1674'. [ 413.622910][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.651837][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.678015][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.708429][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.746966][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 413.791332][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.818850][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.844913][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.852947][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.929157][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 413.979571][T11488] FAULT_INJECTION: forcing a failure. [ 413.979571][T11488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.995361][T11488] CPU: 1 UID: 0 PID: 11488 Comm: syz.6.1676 Not tainted syzkaller #0 PREEMPT(full) [ 413.995394][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.995410][T11488] Call Trace: [ 413.995419][T11488] [ 413.995429][T11488] dump_stack_lvl+0x189/0x250 [ 413.995457][T11488] ? __pfx____ratelimit+0x10/0x10 [ 413.995491][T11488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.995513][T11488] ? __pfx__printk+0x10/0x10 [ 413.995561][T11488] should_fail_ex+0x414/0x560 [ 413.995606][T11488] _copy_to_user+0x31/0xb0 [ 413.995632][T11488] simple_read_from_buffer+0xe1/0x170 [ 413.995670][T11488] proc_fail_nth_read+0x1b3/0x220 [ 413.995696][T11488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.995723][T11488] ? rw_verify_area+0x2a6/0x4d0 [ 413.995760][T11488] ? __lock_acquire+0xab9/0xd20 [ 413.995786][T11488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.995811][T11488] vfs_read+0x200/0xa30 [ 413.995837][T11488] ? fdget_pos+0x247/0x320 [ 413.995874][T11488] ? __pfx___mutex_lock+0x10/0x10 [ 413.995899][T11488] ? __pfx_vfs_read+0x10/0x10 [ 413.995928][T11488] ? __fget_files+0x2a/0x420 [ 413.995965][T11488] ? __fget_files+0x3a0/0x420 [ 413.996000][T11488] ? __fget_files+0x2a/0x420 [ 413.996043][T11488] ksys_read+0x145/0x250 [ 413.996073][T11488] ? __pfx_ksys_read+0x10/0x10 [ 413.996105][T11488] ? do_syscall_64+0xbe/0xfa0 [ 413.996132][T11488] do_syscall_64+0xfa/0xfa0 [ 413.996152][T11488] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.996173][T11488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.996197][T11488] ? clear_bhb_loop+0x60/0xb0 [ 413.996224][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.996245][T11488] RIP: 0033:0x7fa6beb8d5fc [ 413.996266][T11488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.996287][T11488] RSP: 002b:00007fa6bf926030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.996312][T11488] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8d5fc [ 413.996329][T11488] RDX: 000000000000000f RSI: 00007fa6bf9260a0 RDI: 0000000000000004 [ 413.996345][T11488] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 413.996360][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.996374][T11488] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 413.996413][T11488] [ 414.005508][T11399] hsr_slave_0: entered promiscuous mode [ 414.266605][T11399] hsr_slave_1: entered promiscuous mode [ 414.273189][T11399] debugfs: 'hsr0' already exists in 'hsr' [ 414.278960][T11399] Cannot create hsr debugfs directory [ 414.718275][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 414.929276][T11399] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 414.962389][T11399] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 414.971678][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 414.994649][T11399] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 415.006716][T11399] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 415.140288][ T5181] Bluetooth: hci2: command tx timeout [ 415.157299][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.182144][ T5905] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.206587][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.207000][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.248313][ T5905] usb 7-1: config 0 descriptor?? [ 415.278894][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 415.283114][T11399] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.314774][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.322064][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.348716][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.356000][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.675699][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 415.695462][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 415.708715][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 415.721292][T11529] JFS: charset not found [ 415.727782][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 415.770428][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 415.795283][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 415.822857][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 415.907630][T11538] netlink: 'syz.7.1683': attribute type 10 has an invalid length. [ 415.947718][T11538] macvlan1: entered allmulticast mode [ 415.990159][T11538] veth1_vlan: entered allmulticast mode [ 416.003260][T11538] team0: Port device macvlan1 added [ 416.054683][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.135801][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 416.149507][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 416.180809][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 416.181397][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 416.181865][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 416.182390][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 416.183056][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 416.183603][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 416.185574][ T5905] pwc: Registered as video103. [ 416.191628][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input52 [ 416.221118][ T5905] usb 7-1: USB disconnect, device number 6 [ 416.293088][ T6102] udevd[6102]: setting mode of /dev/input/event4 to 020660 failed: Read-only file system [ 416.293187][ T6102] udevd[6102]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: Read-only file system [ 416.561850][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.781529][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 416.841092][T11560] FAULT_INJECTION: forcing a failure. [ 416.841092][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 416.855293][T11565] FAULT_INJECTION: forcing a failure. [ 416.855293][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 416.888641][T11560] CPU: 1 UID: 0 PID: 11560 Comm: syz.7.1687 Not tainted syzkaller #0 PREEMPT(full) [ 416.888675][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.888691][T11560] Call Trace: [ 416.888701][T11560] [ 416.888710][T11560] dump_stack_lvl+0x189/0x250 [ 416.888748][T11560] ? __pfx____ratelimit+0x10/0x10 [ 416.888789][T11560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.888809][T11560] ? __pfx__printk+0x10/0x10 [ 416.888857][T11560] should_fail_ex+0x414/0x560 [ 416.888890][T11560] should_failslab+0xa8/0x100 [ 416.888919][T11560] kmem_cache_alloc_noprof+0x74/0x6e0 [ 416.888945][T11560] ? skb_clone+0x212/0x3a0 [ 416.888979][T11560] skb_clone+0x212/0x3a0 [ 416.889011][T11560] __netlink_deliver_tap+0x404/0x850 [ 416.889049][T11560] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.889073][T11560] netlink_deliver_tap+0x19c/0x1b0 [ 416.889098][T11560] netlink_dump+0x92b/0xe90 [ 416.889146][T11560] ? __pfx_netlink_dump+0x10/0x10 [ 416.889215][T11560] ? netlink_lookup+0x30/0x200 [ 416.889247][T11560] ? netlink_lookup+0x30/0x200 [ 416.889287][T11560] __netlink_dump_start+0x5cb/0x7e0 [ 416.889328][T11560] inet_diag_handler_cmd+0x1bf/0x290 [ 416.889358][T11560] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 416.889381][T11560] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 416.889402][T11560] ? __pfx_inet_diag_dump+0x10/0x10 [ 416.889423][T11560] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 416.889449][T11560] ? sock_diag_lock_handler+0x19/0x290 [ 416.889482][T11560] ? sock_diag_lock_handler+0x19/0x290 [ 416.889522][T11560] sock_diag_rcv_msg+0x4cc/0x600 [ 416.889560][T11560] netlink_rcv_skb+0x208/0x470 [ 416.889597][T11560] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 416.889633][T11560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.889682][T11560] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.889712][T11560] netlink_unicast+0x82c/0x9e0 [ 416.889771][T11560] ? __pfx_netlink_unicast+0x10/0x10 [ 416.889806][T11560] ? netlink_sendmsg+0x642/0xb30 [ 416.889826][T11560] ? skb_put+0x11b/0x210 [ 416.889854][T11560] netlink_sendmsg+0x805/0xb30 [ 416.889887][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.889913][T11560] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.889951][T11560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.889982][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.890005][T11560] __sock_sendmsg+0x219/0x270 [ 416.890040][T11560] sock_write_iter+0x258/0x330 [ 416.890072][T11560] ? __pfx_sock_write_iter+0x10/0x10 [ 416.890128][T11560] do_iter_readv_writev+0x619/0x8b0 [ 416.890165][T11560] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 416.890193][T11560] ? common_file_perm+0x1b5/0x230 [ 416.890231][T11560] ? bpf_lsm_file_permission+0x9/0x20 [ 416.890265][T11560] ? security_file_permission+0x75/0x290 [ 416.890296][T11560] ? rw_verify_area+0x255/0x4d0 [ 416.890326][T11560] vfs_writev+0x31a/0x960 [ 416.890366][T11560] ? __lock_acquire+0xab9/0xd20 [ 416.890395][T11560] ? __pfx_vfs_writev+0x10/0x10 [ 416.890469][T11560] ? __fget_files+0x2a/0x420 [ 416.890506][T11560] ? __fget_files+0x3a0/0x420 [ 416.890536][T11560] ? __fget_files+0x2a/0x420 [ 416.890577][T11560] do_writev+0x14d/0x2d0 [ 416.890613][T11560] ? __pfx_do_writev+0x10/0x10 [ 416.890652][T11560] ? do_syscall_64+0xbe/0xfa0 [ 416.890678][T11560] do_syscall_64+0xfa/0xfa0 [ 416.890698][T11560] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.890736][T11560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.890760][T11560] ? clear_bhb_loop+0x60/0xb0 [ 416.890789][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.890812][T11560] RIP: 0033:0x7fe66fd8ebe9 [ 416.890832][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.890853][T11560] RSP: 002b:00007fe670b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 416.890879][T11560] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 416.890897][T11560] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 416.890912][T11560] RBP: 00007fe670b26090 R08: 0000000000000000 R09: 0000000000000000 [ 416.890927][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.890942][T11560] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffef974eb98 [ 416.890979][T11560] [ 416.893404][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.6.1688 Not tainted syzkaller #0 PREEMPT(full) [ 416.893441][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.893457][T11565] Call Trace: [ 416.893475][T11565] [ 416.893486][T11565] dump_stack_lvl+0x189/0x250 [ 416.893516][T11565] ? __pfx____ratelimit+0x10/0x10 [ 416.893556][T11565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.893579][T11565] ? __pfx__printk+0x10/0x10 [ 416.893623][T11565] ? __pfx___might_resched+0x10/0x10 [ 416.893653][T11565] ? fs_reclaim_acquire+0x7d/0x100 [ 416.893691][T11565] should_fail_ex+0x414/0x560 [ 416.893727][T11565] should_failslab+0xa8/0x100 [ 416.893761][T11565] __kmalloc_noprof+0xcb/0x7f0 [ 416.893787][T11565] ? tomoyo_encode+0x28b/0x550 [ 416.893833][T11565] tomoyo_encode+0x28b/0x550 [ 416.893879][T11565] tomoyo_realpath_from_path+0x58d/0x5d0 [ 416.893937][T11565] tomoyo_check_open_permission+0x1c1/0x3b0 [ 416.893974][T11565] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 416.894007][T11565] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 416.894089][T11565] ? mnt_get_write_access+0x66/0x280 [ 416.894115][T11565] ? tomoyo_file_open+0x165/0x220 [ 416.894146][T11565] security_file_open+0xb1/0x270 [ 416.894180][T11565] do_dentry_open+0x384/0x13f0 [ 416.894227][T11565] ? vfs_open+0x31/0x340 [ 416.894270][T11565] vfs_open+0x3b/0x340 [ 416.894305][T11565] ? path_openat+0x2ecd/0x3830 [ 416.894335][T11565] path_openat+0x2ee5/0x3830 [ 416.894405][T11565] ? __pfx_path_openat+0x10/0x10 [ 416.894462][T11565] do_filp_open+0x1fa/0x410 [ 416.894496][T11565] ? __lock_acquire+0xab9/0xd20 [ 416.894527][T11565] ? __pfx_do_filp_open+0x10/0x10 [ 416.894584][T11565] ? _raw_spin_unlock+0x28/0x50 [ 416.894617][T11565] ? alloc_fd+0x64c/0x6c0 [ 416.894666][T11565] do_sys_openat2+0x121/0x1c0 [ 416.894694][T11565] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.894723][T11565] ? ksys_write+0x22a/0x250 [ 416.894755][T11565] ? __pfx_ksys_write+0x10/0x10 [ 416.894788][T11565] __x64_sys_openat+0x138/0x170 [ 416.894819][T11565] do_syscall_64+0xfa/0xfa0 [ 416.894843][T11565] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.894866][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.894892][T11565] ? clear_bhb_loop+0x60/0xb0 [ 416.894924][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.894949][T11565] RIP: 0033:0x7fa6beb8ebe9 [ 416.894971][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.894995][T11565] RSP: 002b:00007fa6bf926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.895021][T11565] RAX: ffffffffffffffda RBX: 00007fa6bedc5fa0 RCX: 00007fa6beb8ebe9 [ 416.895043][T11565] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 416.895061][T11565] RBP: 00007fa6bf926090 R08: 0000000000000000 R09: 0000000000000000 [ 416.895076][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.895092][T11565] R13: 00007fa6bedc6038 R14: 00007fa6bedc5fa0 R15: 00007ffe0fe007a8 [ 416.895135][T11565] [ 416.897565][T11565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.230711][ T5181] Bluetooth: hci2: command tx timeout [ 417.519489][T11399] veth0_vlan: entered promiscuous mode [ 417.566456][ T6102] udevd[6102]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 417.777148][T11399] veth1_vlan: entered promiscuous mode [ 417.872346][T11399] veth0_macvtap: entered promiscuous mode [ 417.896075][T11399] veth1_macvtap: entered promiscuous mode [ 417.934830][ T5905] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 417.964003][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.003675][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.062901][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.121271][ T1326] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.130777][ T5905] usb 7-1: device descriptor read/64, error -71 [ 418.186109][ T1326] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.216058][ T1326] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.336044][T11589] max out of range [ 418.341357][T11589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1694'. [ 418.353877][T11589] openvswitch: netlink: Flow key attr not present in new flow. [ 418.374009][ T5905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 418.407639][ T6949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.419717][ T6949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.517055][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.536787][ T5905] usb 7-1: device descriptor read/64, error -71 [ 418.543563][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.664365][ T5905] usb usb7-port1: attempt power cycle [ 418.989884][ T5873] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 419.059412][ T5905] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 419.089606][ T5905] usb 7-1: device descriptor read/8, error -71 [ 419.168201][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 419.183001][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.198156][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.214507][ T5873] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.224972][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.235278][ T5873] usb 10-1: Product: syz [ 419.240031][ T5873] usb 10-1: Manufacturer: syz [ 419.244920][ T5873] usb 10-1: SerialNumber: syz [ 419.348932][ T5905] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 419.390102][ T5905] usb 7-1: device descriptor read/8, error -71 [ 419.481137][ T5873] usb 10-1: invalid UAC_HEADER (v1) [ 419.508175][ T5905] usb usb7-port1: unable to enumerate USB device [ 419.546851][ T5873] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 419.563733][ T5873] usb 10-1: USB disconnect, device number 2 [ 419.622268][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.215600][T11636] random: crng reseeded on system resumption [ 420.223505][T11636] FAULT_INJECTION: forcing a failure. [ 420.223505][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 420.243035][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.9.1700 Not tainted syzkaller #0 PREEMPT(full) [ 420.243064][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.243079][T11636] Call Trace: [ 420.243089][T11636] [ 420.243100][T11636] dump_stack_lvl+0x189/0x250 [ 420.243128][T11636] ? __pfx____ratelimit+0x10/0x10 [ 420.243172][T11636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.243195][T11636] ? __pfx__printk+0x10/0x10 [ 420.243244][T11636] should_fail_ex+0x414/0x560 [ 420.243279][T11636] should_failslab+0xa8/0x100 [ 420.243310][T11636] __kmalloc_cache_noprof+0x6f/0x6f0 [ 420.243337][T11636] ? async_schedule_node_domain+0x5b/0x120 [ 420.243366][T11636] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 420.243406][T11636] async_schedule_node_domain+0x5b/0x120 [ 420.243437][T11636] dev_cache_fw_image+0x364/0x3e0 [ 420.243480][T11636] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 420.243522][T11636] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 420.243558][T11636] dpm_for_each_dev+0x56/0xb0 [ 420.243580][T11636] fw_pm_notify+0x200/0x2a0 [ 420.243614][T11636] ? __pfx_fw_pm_notify+0x10/0x10 [ 420.243649][T11636] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.243684][T11636] ? blocking_notifier_call_chain_robust+0x65/0x100 [ 420.243734][T11636] notifier_call_chain+0x1b3/0x3e0 [ 420.243775][T11636] blocking_notifier_call_chain_robust+0x85/0x100 [ 420.243814][T11636] pm_notifier_call_chain_robust+0x2c/0x60 [ 420.243842][T11636] snapshot_open+0x133/0x280 [ 420.243871][T11636] ? __pfx_snapshot_open+0x10/0x10 [ 420.243894][T11636] misc_open+0x2d5/0x350 [ 420.243926][T11636] chrdev_open+0x4cc/0x5e0 [ 420.243961][T11636] ? __pfx_chrdev_open+0x10/0x10 [ 420.243996][T11636] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 420.244035][T11636] ? __pfx_chrdev_open+0x10/0x10 [ 420.244065][T11636] do_dentry_open+0x950/0x13f0 [ 420.244118][T11636] vfs_open+0x3b/0x340 [ 420.244146][T11636] ? path_openat+0x2ecd/0x3830 [ 420.244178][T11636] path_openat+0x2ee5/0x3830 [ 420.244241][T11636] ? __pfx_path_openat+0x10/0x10 [ 420.244289][T11636] do_filp_open+0x1fa/0x410 [ 420.244313][T11636] ? __lock_acquire+0xab9/0xd20 [ 420.244341][T11636] ? __pfx_do_filp_open+0x10/0x10 [ 420.244393][T11636] ? _raw_spin_unlock+0x28/0x50 [ 420.244423][T11636] ? alloc_fd+0x64c/0x6c0 [ 420.244468][T11636] do_sys_openat2+0x121/0x1c0 [ 420.244494][T11636] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.244521][T11636] ? ksys_write+0x22a/0x250 [ 420.244552][T11636] ? __pfx_ksys_write+0x10/0x10 [ 420.244583][T11636] __x64_sys_openat+0x138/0x170 [ 420.244611][T11636] do_syscall_64+0xfa/0xfa0 [ 420.244629][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.244651][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.244674][T11636] ? clear_bhb_loop+0x60/0xb0 [ 420.244701][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.244724][T11636] RIP: 0033:0x7f0e09b8ebe9 [ 420.244745][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.244765][T11636] RSP: 002b:00007f0e0aa36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.244790][T11636] RAX: ffffffffffffffda RBX: 00007f0e09dc5fa0 RCX: 00007f0e09b8ebe9 [ 420.244807][T11636] RDX: 00000000000c0001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 420.244824][T11636] RBP: 00007f0e0aa36090 R08: 0000000000000000 R09: 0000000000000000 [ 420.244839][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.244853][T11636] R13: 00007f0e09dc6038 R14: 00007f0e09dc5fa0 R15: 00007ffea2581c98 [ 420.244891][T11636] [ 420.592522][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.659640][T11636] [ 420.662042][T11636] ============================================ [ 420.668217][T11636] WARNING: possible recursive locking detected [ 420.674551][T11636] syzkaller #0 Not tainted [ 420.678994][T11636] -------------------------------------------- [ 420.685154][T11636] syz.9.1700/11636 is trying to acquire lock: [ 420.691218][T11636] ffffffff8ef2eaa8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x890 [ 420.699161][T11636] [ 420.699161][T11636] but task is already holding lock: [ 420.706527][T11636] ffffffff8ef2eaa8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 420.714823][T11636] [ 420.714823][T11636] other info that might help us debug this: [ 420.722907][T11636] Possible unsafe locking scenario: [ 420.722907][T11636] [ 420.730372][T11636] CPU0 [ 420.733670][T11636] ---- [ 420.736951][T11636] lock(fw_lock); [ 420.740705][T11636] lock(fw_lock); [ 420.744434][T11636] [ 420.744434][T11636] *** DEADLOCK *** [ 420.744434][T11636] [ 420.752591][T11636] May be due to missing lock nesting notation [ 420.752591][T11636] [ 420.760939][T11636] 5 locks held by syz.9.1700/11636: [ 420.766167][T11636] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 420.774634][T11636] #1: ffffffff8e3ecce8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x4a/0x70 [ 420.785002][T11636] #2: ffffffff8e410430 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 420.796858][T11636] #3: ffffffff8ef2eaa8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 420.805586][T11636] #4: ffffffff8ef29b28 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0 [ 420.814908][T11636] [ 420.814908][T11636] stack backtrace: [ 420.820816][T11636] CPU: 0 UID: 0 PID: 11636 Comm: syz.9.1700 Not tainted syzkaller #0 PREEMPT(full) [ 420.820841][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.820854][T11636] Call Trace: [ 420.820863][T11636] [ 420.820871][T11636] dump_stack_lvl+0x189/0x250 [ 420.820893][T11636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.820909][T11636] ? __pfx__printk+0x10/0x10 [ 420.820935][T11636] ? print_lock_name+0xde/0x100 [ 420.820961][T11636] print_deadlock_bug+0x28b/0x2a0 [ 420.820986][T11636] validate_chain+0x1a3f/0x2140 [ 420.821013][T11636] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 420.821039][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.821059][T11636] __lock_acquire+0xab9/0xd20 [ 420.821082][T11636] ? assign_fw+0x52/0x890 [ 420.821106][T11636] lock_acquire+0x120/0x360 [ 420.821124][T11636] ? assign_fw+0x52/0x890 [ 420.821149][T11636] ? kasan_save_track+0x4f/0x80 [ 420.821166][T11636] ? __kasan_save_free_info+0x46/0x50 [ 420.821191][T11636] ? kmem_cache_free+0x19a/0x690 [ 420.821212][T11636] __mutex_lock+0x187/0x1350 [ 420.821229][T11636] ? assign_fw+0x52/0x890 [ 420.821252][T11636] ? do_dentry_open+0x950/0x13f0 [ 420.821277][T11636] ? vfs_open+0x3b/0x340 [ 420.821302][T11636] ? do_filp_open+0x1fa/0x410 [ 420.821326][T11636] ? do_sys_openat2+0x121/0x1c0 [ 420.821340][T11636] ? __x64_sys_openat+0x138/0x170 [ 420.821355][T11636] ? do_syscall_64+0xfa/0xfa0 [ 420.821370][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.821390][T11636] ? assign_fw+0x52/0x890 [ 420.821415][T11636] ? __pfx___mutex_lock+0x10/0x10 [ 420.821438][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.821455][T11636] assign_fw+0x52/0x890 [ 420.821478][T11636] ? _request_firmware+0xe57/0x15b0 [ 420.821503][T11636] ? kmem_cache_free+0x19a/0x690 [ 420.821524][T11636] _request_firmware+0xeea/0x15b0 [ 420.821549][T11636] ? __lock_acquire+0xab9/0xd20 [ 420.821575][T11636] ? __pfx__request_firmware+0x10/0x10 [ 420.821599][T11636] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 420.821625][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.821640][T11636] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.821666][T11636] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.821693][T11636] __async_dev_cache_fw_image+0x7f/0x280 [ 420.821722][T11636] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 420.821751][T11636] async_schedule_node_domain+0xe1/0x120 [ 420.821774][T11636] dev_cache_fw_image+0x364/0x3e0 [ 420.821803][T11636] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 420.821831][T11636] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 420.821859][T11636] dpm_for_each_dev+0x56/0xb0 [ 420.821875][T11636] fw_pm_notify+0x200/0x2a0 [ 420.821900][T11636] ? __pfx_fw_pm_notify+0x10/0x10 [ 420.821926][T11636] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.821953][T11636] ? blocking_notifier_call_chain_robust+0x65/0x100 [ 420.821982][T11636] notifier_call_chain+0x1b3/0x3e0 [ 420.822007][T11636] blocking_notifier_call_chain_robust+0x85/0x100 [ 420.822033][T11636] pm_notifier_call_chain_robust+0x2c/0x60 [ 420.822054][T11636] snapshot_open+0x133/0x280 [ 420.822076][T11636] ? __pfx_snapshot_open+0x10/0x10 [ 420.822095][T11636] misc_open+0x2d5/0x350 [ 420.822117][T11636] chrdev_open+0x4cc/0x5e0 [ 420.822143][T11636] ? __pfx_chrdev_open+0x10/0x10 [ 420.822167][T11636] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 420.822195][T11636] ? __pfx_chrdev_open+0x10/0x10 [ 420.822218][T11636] do_dentry_open+0x950/0x13f0 [ 420.822249][T11636] vfs_open+0x3b/0x340 [ 420.822274][T11636] ? path_openat+0x2ecd/0x3830 [ 420.822292][T11636] path_openat+0x2ee5/0x3830 [ 420.822329][T11636] ? __pfx_path_openat+0x10/0x10 [ 420.822355][T11636] do_filp_open+0x1fa/0x410 [ 420.822372][T11636] ? __lock_acquire+0xab9/0xd20 [ 420.822392][T11636] ? __pfx_do_filp_open+0x10/0x10 [ 420.822419][T11636] ? _raw_spin_unlock+0x28/0x50 [ 420.822442][T11636] ? alloc_fd+0x64c/0x6c0 [ 420.822469][T11636] do_sys_openat2+0x121/0x1c0 [ 420.822486][T11636] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.822503][T11636] ? ksys_write+0x22a/0x250 [ 420.822524][T11636] ? __pfx_ksys_write+0x10/0x10 [ 420.822544][T11636] __x64_sys_openat+0x138/0x170 [ 420.822562][T11636] do_syscall_64+0xfa/0xfa0 [ 420.822578][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.822593][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.822610][T11636] ? clear_bhb_loop+0x60/0xb0 [ 420.822630][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.822647][T11636] RIP: 0033:0x7f0e09b8ebe9 [ 420.822665][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.822680][T11636] RSP: 002b:00007f0e0aa36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.822700][T11636] RAX: ffffffffffffffda RBX: 00007f0e09dc5fa0 RCX: 00007f0e09b8ebe9 [ 420.822713][T11636] RDX: 00000000000c0001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 420.822726][T11636] RBP: 00007f0e0aa36090 R08: 0000000000000000 R09: 0000000000000000 [ 420.822737][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.822748][T11636] R13: 00007f0e09dc6038 R14: 00007f0e09dc5fa0 R15: 00007ffea2581c98 [ 420.822768][T11636] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.338311][ T5181] Bluetooth: hci3: command 0x0c1a tx timeout [ 421.362325][T11596] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 421.422285][T11596] Bluetooth: hci3: Error when powering off device on rfkill (-110)