last executing test programs: 3m31.18404556s ago: executing program 4 (id=492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m31.183342251s ago: executing program 4 (id=494): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000006c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x22, 0x1, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m31.143046233s ago: executing program 4 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) read$dsp(r3, 0x0, 0x0) 3m30.014130068s ago: executing program 4 (id=500): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r1, 0x0, 0x0, 0x6, 0x0, [0x0], [], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={r2}) 3m29.98006641s ago: executing program 4 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 3m29.897077345s ago: executing program 4 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 3m28.520740674s ago: executing program 2 (id=512): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r1, 0x0, 0x0, 0x6, 0x0, [0x0], [], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={r2}) 3m28.453276368s ago: executing program 2 (id=514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m28.4246851s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r0) 3m28.352227944s ago: executing program 2 (id=516): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m28.351979984s ago: executing program 2 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x261) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m28.346903694s ago: executing program 2 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000401", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 3m14.870354105s ago: executing program 32 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 3m12.604749106s ago: executing program 33 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000401", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 5.728349669s ago: executing program 5 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800"/80], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 4.598103284s ago: executing program 5 (id=1421): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r1, 0xf5f) accept(r1, 0x0, 0x0) 4.511928929s ago: executing program 6 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 3.665211488s ago: executing program 0 (id=1426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000800000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x3ff, @empty, 0xfffffff9}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80104d12, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x34, 0x1, 0x5, 0xc, 0x7fff, 0x81}) 3.595754562s ago: executing program 6 (id=1427): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x8, 0x1, 0x48, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x57f, 0x3649}}) 3.44801057s ago: executing program 5 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x81) pread64(r3, &(0x7f0000000380)=""/187, 0xbb, 0x5) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000240), 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000002c0)) userfaultfd(0x1) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) 3.396752433s ago: executing program 6 (id=1429): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 2.854256005s ago: executing program 1 (id=1430): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x24000080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.852876245s ago: executing program 3 (id=1431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.823355796s ago: executing program 1 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800"/80], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 2.822507766s ago: executing program 3 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) 2.318391046s ago: executing program 0 (id=1434): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) 2.318079296s ago: executing program 5 (id=1435): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.255733459s ago: executing program 0 (id=1436): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) 2.227172121s ago: executing program 6 (id=1437): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0xfffffff9, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000c13a8908b40402100d62010203010902164bf11c0000000904"], 0x0) 1.779513877s ago: executing program 1 (id=1438): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x14) socket(0x2, 0x80802, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.706773861s ago: executing program 1 (id=1439): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 1.372409331s ago: executing program 5 (id=1440): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) 1.325236123s ago: executing program 3 (id=1441): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x8001, 0x4, 0x1, 0x4000000, 0x10000, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x5, 0x9, 0x1, 0x2, 0x43, 0x40000003, 0x89, 0x5, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x408, 0x10000, 0xfffffff4]}) 1.318727814s ago: executing program 0 (id=1442): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 1.236199668s ago: executing program 3 (id=1443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.21647082s ago: executing program 1 (id=1444): setrlimit(0x1, &(0x7f0000000000)={0x2, 0x3}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.19900699s ago: executing program 3 (id=1445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000800000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x3ff, @empty, 0xfffffff9}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80104d12, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x34, 0x1, 0x5, 0xc, 0x7fff, 0x81}) 1.112071635s ago: executing program 6 (id=1446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfd, 0x2, @loopback}, 0x1c) 1.048137349s ago: executing program 5 (id=1447): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 757.260256ms ago: executing program 6 (id=1448): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1486000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) shmdt(0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) open_by_handle_at(r8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) 140.001762ms ago: executing program 0 (id=1449): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 139.462081ms ago: executing program 3 (id=1450): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 129.803892ms ago: executing program 1 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) 0s ago: executing program 0 (id=1452): ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x40000) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20044150}, 0x40008d4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002740)={0x50, 0x0, r1, {0x7, 0x2d, 0xffffffff, 0x400000, 0xff, 0xff, 0x2, 0x4, 0x0, 0x0, 0x80, 0x9}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x14, 0x1a, 0x400, 0x70bd29, 0x25dfdbfd, {0x13}}, 0x14}}, 0x4040000) syz_80211_inject_frame(&(0x7f0000002b00)=@device_b, &(0x7f0000002b40)=@ctrl_frame=@bar={{}, {0x7e00}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x5, {0x1, 0x98}, "15daae00eb6f246f"}, {0x0, 0x7, {0x1, 0xffc}, "32d2bd07f6512a3f"}, {0x0, 0xf, {0x8, 0xf}, "56a21fa03bd2aa0e"}, {0x0, 0x4, {0x2, 0x8}, "592b8fd5eb1a7210"}, {0x0, 0x3, {0x5, 0x68}, "0c57d4d8db694cd6"}, {0x0, 0xe, {0x4, 0xffd}, "efb754d7b759de3e"}, {0x0, 0xa, {0x1, 0xa3b}, "ebcc5a2f0031f23f"}, {0x0, 0xb, {0x2, 0x8ba}, "618b1e8255a08b3f"}]}}, 0x72) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002c40)={0x68, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_ID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=1453): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): x0419 tx timeout [ 40.407620][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 40.579810][ T4367] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 40.581098][ T4367] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 40.582376][ T4367] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 40.583875][ T4367] usb 1-1: config 220 has no interface number 2 [ 40.586588][ T4367] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 40.593629][ T4367] usb 1-1: config 220 interface 0 has no altsetting 0 [ 40.596423][ T4367] usb 1-1: config 220 interface 76 has no altsetting 0 [ 40.597520][ T4367] usb 1-1: config 220 interface 1 has no altsetting 0 [ 40.606730][ T4367] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 40.608210][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.616247][ T4367] usb 1-1: Product: syz [ 40.616891][ T4367] usb 1-1: Manufacturer: syz [ 40.617631][ T4367] usb 1-1: SerialNumber: syz [ 40.635104][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 40.664607][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.673309][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.837111][ T4367] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 40.838114][ T4367] usb 1-1: No valid video chain found. [ 40.850701][ T4367] usb 1-1: USB disconnect, device number 2 [ 41.671591][ T4684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.60'. [ 41.797406][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 41.848383][ T4698] netlink: 136 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.930974][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 41.938894][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.002171][ T4708] process 'syz.0.69' launched './file0' with NULL argv: empty string added [ 42.478272][ T4728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.80'. [ 42.488721][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.490101][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.771686][ T4745] loop3: detected capacity change from 0 to 32768 [ 42.852182][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.855297][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.880214][ T4745] XFS (loop3): Mounting V5 Filesystem [ 42.899973][ T4745] XFS (loop3): Ending clean mount [ 42.903049][ T4745] XFS (loop3): Quotacheck needed: Please wait. [ 43.207814][ T4745] XFS (loop3): Quotacheck: Done. [ 43.605653][ T4331] XFS (loop3): Unmounting Filesystem [ 43.688835][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.690348][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.275174][ T4799] loop0: detected capacity change from 0 to 32768 [ 44.334248][ T4799] XFS (loop0): Mounting V5 Filesystem [ 44.362278][ T4815] delete_channel: no stack [ 44.362761][ T4799] XFS (loop0): Ending clean mount [ 44.367040][ T4799] XFS (loop0): Quotacheck needed: Please wait. [ 44.767190][ T4799] XFS (loop0): Quotacheck: Done. [ 44.769120][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.770542][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.870668][ T4827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 45.245082][ T4325] XFS (loop0): Unmounting Filesystem [ 45.309418][ T4836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.314675][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.315949][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.573179][ T4853] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 45.853819][ T4857] binder: 4854:4857 ioctl c0306201 200004c0 returned -14 [ 45.943731][ T4865] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 45.947978][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.949278][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.955500][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.967669][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.968888][ T4865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.970163][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.971310][ T4865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.990008][ T4865] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 46.034920][ T4861] loop1: detected capacity change from 0 to 32768 [ 46.065642][ T4861] XFS (loop1): Mounting V5 Filesystem [ 46.100254][ T4861] XFS (loop1): Ending clean mount [ 46.102465][ T4861] XFS (loop1): Quotacheck needed: Please wait. [ 46.117105][ T4861] XFS (loop1): Quotacheck: Done. [ 46.194025][ T4869] netlink: 'syz.2.131': attribute type 10 has an invalid length. [ 46.597332][ T4869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 46.602379][ C0] Unknown status report in ack skb [ 46.632381][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 46.634032][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 46.669854][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.671289][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.763270][ T4321] XFS (loop1): Unmounting Filesystem [ 46.901083][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 46.903116][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 47.190408][ T4942] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 47.485772][ T4938] loop4: detected capacity change from 0 to 32768 [ 47.501895][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 47.508305][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 47.520999][ T4938] XFS (loop4): Mounting V5 Filesystem [ 47.561376][ T4938] XFS (loop4): Ending clean mount [ 47.569064][ T4938] XFS (loop4): Quotacheck needed: Please wait. [ 47.589200][ T4938] XFS (loop4): Quotacheck: Done. [ 48.003456][ T4320] XFS (loop4): Unmounting Filesystem [ 48.039044][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 48.169047][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.171614][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.249988][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.342096][ T5003] loop3: detected capacity change from 0 to 32768 [ 48.418428][ T5003] XFS (loop3): Mounting V5 Filesystem [ 48.457440][ T5003] XFS (loop3): Ending clean mount [ 48.459845][ T5003] XFS (loop3): Quotacheck needed: Please wait. [ 48.478294][ T5003] XFS (loop3): Quotacheck: Done. [ 49.277887][ T4331] XFS (loop3): Unmounting Filesystem [ 49.385774][ T5041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.387239][ T5041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.788395][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 49.832590][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.834108][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.854514][ T4375] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 50.036611][ T4375] usb 1-1: config 0 interface 0 altsetting 132 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 50.038554][ T4375] usb 1-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.040547][ T4375] usb 1-1: config 0 interface 0 has no altsetting 0 [ 50.041591][ T4375] usb 1-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 50.043011][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.045464][ T4375] usb 1-1: config 0 descriptor?? [ 50.047494][ T5044] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 50.223085][ T5061] syz.4.204 sent an empty control message without MSG_MORE. [ 50.241710][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.243146][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.543271][ T4375] apple 0003:05AC:021B.0001: hidraw0: USB HID v0.00 Device [HID 05ac:021b] on usb-dummy_hcd.0-1/input0 [ 50.733204][ T5069] loop1: detected capacity change from 0 to 32768 [ 50.757181][ T4375] usb 1-1: USB disconnect, device number 3 [ 50.781537][ T5069] XFS (loop1): Mounting V5 Filesystem [ 50.796184][ T5069] XFS (loop1): Ending clean mount [ 50.797635][ T5069] XFS (loop1): Quotacheck needed: Please wait. [ 50.810284][ T5069] XFS (loop1): Quotacheck: Done. [ 51.347408][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 52.106575][ T4321] XFS (loop1): Unmounting Filesystem [ 52.347366][ T5112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 52.687385][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 52.692116][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 52.814667][ T4375] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.129349][ T4375] usb 1-1: Using ep0 maxpacket: 8 [ 53.243907][ T4375] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 53.246294][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.247653][ T4375] usb 1-1: Product: syz [ 53.248405][ T4375] usb 1-1: Manufacturer: syz [ 53.249274][ T4375] usb 1-1: SerialNumber: syz [ 53.255343][ T4375] usb 1-1: config 0 descriptor?? [ 53.258288][ T4375] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 53.260040][ T4375] pctv452e: pctv452e_power_ctrl: 1 [ 53.260040][ T4375] [ 53.265611][ T4375] usb 1-1: selecting invalid altsetting 3 [ 53.266637][ T4375] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 53.266637][ T4375] [ 53.268364][ T4375] dvb-usb: bulk message failed: -22 (5/0) [ 53.271984][ T4375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 53.274132][ T4375] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 53.283236][ T4375] usb 1-1: media controller created [ 53.286695][ T4375] dvb-usb: bulk message failed: -22 (8/0) [ 53.291119][ T4375] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 53.294764][ T4375] dvb-usb: MAC address reading failed. [ 53.304054][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 53.349013][ T4375] DVB: Unable to find symbol stb0899_attach() [ 53.350151][ T4375] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 53.352783][ T4375] Registered IR keymap rc-tt-1500 [ 53.354217][ T4375] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 53.357631][ T4375] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input2 [ 53.361843][ T4375] dvb-usb: schedule remote query interval to 100 msecs. [ 53.364060][ T4375] pctv452e: pctv452e_power_ctrl: 0 [ 53.364060][ T4375] [ 53.369584][ T4375] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 53.899432][ T4375] dvb-usb: bulk message failed: -22 (4/0) [ 53.900340][ T4375] dvb-usb: error -22 while querying for an remote control event. [ 54.209768][ T4375] dvb-usb: bulk message failed: -22 (4/0) [ 54.211009][ T4375] dvb-usb: error -22 while querying for an remote control event. [ 54.314616][ T4375] dvb-usb: bulk message failed: -22 (4/0) [ 54.315664][ T4375] dvb-usb: error -22 while querying for an remote control event. [ 54.330362][ T5133] loop3: detected capacity change from 0 to 32768 [ 54.333408][ T5133] XFS (loop3): Mounting V5 Filesystem [ 54.350214][ T5112] dvb-usb: bulk message failed: -22 (7/0) [ 54.351096][ T5112] pctv452e: I2C error -22; AA 05 00 00 00 -> aa 05 31 03 00 00 00 [ 54.376138][ T4366] usb 1-1: USB disconnect, device number 4 [ 54.452244][ T5133] XFS (loop3): Ending clean mount [ 54.859089][ T5133] XFS (loop3): Quotacheck needed: Please wait. [ 55.085414][ T4366] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 55.213946][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 55.234941][ T5133] XFS (loop3): Quotacheck: Done. [ 55.343252][ T5179] syz.2.240 uses obsolete (PF_INET,SOCK_PACKET) [ 55.781225][ T4331] XFS (loop3): Unmounting Filesystem [ 55.944763][ T5200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 55.946710][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 56.943915][ T5228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 56.946893][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 57.487954][ T5220] loop4: detected capacity change from 0 to 32768 [ 57.924499][ T5220] XFS (loop4): Mounting V5 Filesystem [ 57.958605][ T5220] XFS (loop4): Ending clean mount [ 57.962650][ T5220] XFS (loop4): Quotacheck needed: Please wait. [ 57.991503][ T5220] XFS (loop4): Quotacheck: Done. [ 58.747959][ T4320] XFS (loop4): Unmounting Filesystem [ 59.199061][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.200490][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.225968][ T5268] infiniband syz1: set active [ 59.227096][ T5268] infiniband syz1: added syz_tun [ 59.259016][ T5268] RDS/IB: syz1: added [ 59.260119][ T5268] smc: adding ib device syz1 with port count 1 [ 59.261201][ T5268] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 59.486099][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.487545][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.316942][ T5301] loop4: detected capacity change from 0 to 32768 [ 61.438572][ T5301] XFS (loop4): Mounting V5 Filesystem [ 61.483965][ T5301] XFS (loop4): Ending clean mount [ 61.491747][ T5301] XFS (loop4): Quotacheck needed: Please wait. [ 61.575232][ T5301] XFS (loop4): Quotacheck: Done. [ 62.364334][ T4320] XFS (loop4): Unmounting Filesystem [ 62.481376][ T5351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.489394][ T5351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.046177][ T5371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'. [ 63.132184][ T5373] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.033566][ T5372] loop4: detected capacity change from 0 to 32768 [ 64.085743][ T5372] XFS (loop4): Mounting V5 Filesystem [ 64.132728][ T5372] XFS (loop4): Ending clean mount [ 64.137316][ T5372] XFS (loop4): Quotacheck needed: Please wait. [ 64.150098][ T5372] XFS (loop4): Quotacheck: Done. [ 64.476260][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477823][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.667145][ T4320] XFS (loop4): Unmounting Filesystem [ 64.832002][ T5423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.313'. [ 65.309551][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.312808][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.472019][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 65.610722][ T5445] loop3: detected capacity change from 0 to 32768 [ 65.618028][ T5445] XFS (loop3): Mounting V5 Filesystem [ 65.633436][ T5445] XFS (loop3): Ending clean mount [ 65.636815][ T5445] XFS (loop3): Quotacheck needed: Please wait. [ 65.652111][ T5445] XFS (loop3): Quotacheck: Done. [ 66.106009][ T5462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 66.722723][ T4331] XFS (loop3): Unmounting Filesystem [ 67.388132][ T5489] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 67.494453][ T3897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.637275][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 67.666913][ T5497] capability: warning: `syz.1.338' uses 32-bit capabilities (legacy support in use) [ 67.687387][ T3897] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.688890][ T3897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.690531][ T3897] usb 1-1: Product: syz [ 67.691563][ T3897] usb 1-1: Manufacturer: syz [ 67.692303][ T3897] usb 1-1: SerialNumber: syz [ 67.704854][ T3897] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 67.714208][ T3897] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 67.716227][ T3897] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 67.740649][ T5497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.742219][ T5497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.996879][ T5502] loop4: detected capacity change from 0 to 32768 [ 68.011209][ T5502] XFS (loop4): Mounting V5 Filesystem [ 68.029814][ T5502] XFS (loop4): Ending clean mount [ 68.031295][ T5502] XFS (loop4): Quotacheck needed: Please wait. [ 68.050545][ T5502] XFS (loop4): Quotacheck: Done. [ 68.891845][ T4320] XFS (loop4): Unmounting Filesystem [ 69.371428][ T5538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 69.412656][ T5542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.414235][ T5542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.527514][ T5556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'. [ 69.598384][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 69.605028][ T7] cfg80211: failed to load regulatory.db [ 69.956582][ T4366] usb 1-1: USB disconnect, device number 5 [ 69.981411][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.984891][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.001106][ T5573] input: syz0 as /devices/virtual/input/input3 [ 71.127791][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.134306][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.374016][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.382171][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.777550][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.780104][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.417513][ T5636] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 72.886131][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.893097][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.375777][ T5663] tmpfs: Unknown parameter 'usrquota' [ 73.436858][ T5664] ======================================================= [ 73.436858][ T5664] WARNING: The mand mount option has been deprecated and [ 73.436858][ T5664] and is ignored by this kernel. Remove the mand [ 73.436858][ T5664] option from the mount to silence this warning. [ 73.436858][ T5664] ======================================================= [ 73.445430][ T5664] FAT-fs (nullb0): bogus number of reserved sectors [ 73.446937][ T5664] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 74.820233][ T5687] device syzkaller0 entered promiscuous mode [ 74.833703][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.840480][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.389818][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.392640][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.427346][ T5715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.430752][ T5715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.125704][ T5723] NILFS (nullb0): couldn't find nilfs on the device [ 81.994409][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 86.343690][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.914117][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.916968][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.961544][ T5745] loop4: detected capacity change from 0 to 32768 [ 86.969292][ T5745] XFS (loop4): Mounting V5 Filesystem [ 86.984888][ T5745] XFS (loop4): Ending clean mount [ 86.986589][ T5745] XFS (loop4): Quotacheck needed: Please wait. [ 86.997091][ T5745] XFS (loop4): Quotacheck: Done. [ 87.486395][ T4320] XFS (loop4): Unmounting Filesystem [ 87.723560][ T5768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.838226][ T5770] overlayfs: failed to resolve './file1/file0': -2 [ 89.063604][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.144236][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.011958][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.013476][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.044967][ T27] audit: type=1326 audit(90.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.049159][ T27] audit: type=1326 audit(90.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.053267][ T27] audit: type=1326 audit(90.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.065217][ T27] audit: type=1326 audit(90.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.068579][ T27] audit: type=1326 audit(90.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.138660][ T5818] Cannot find add_set index 0 as target [ 90.190901][ T5818] overlayfs: overlapping lowerdir path [ 90.236175][ T5818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.435'. [ 90.391528][ T27] audit: type=1326 audit(90.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.410769][ T27] audit: type=1326 audit(90.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.444032][ T27] audit: type=1326 audit(90.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.448593][ T4588] Bluetooth: hci5: Frame reassembly failed (-84) [ 90.450896][ T27] audit: type=1326 audit(90.430:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.459215][ T27] audit: type=1326 audit(90.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 90.665256][ T5821] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 91.543333][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.545448][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.855569][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 92.878455][ T4322] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.697483][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 95.697493][ T27] audit: type=1326 audit(95.690:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.055525][ T27] audit: type=1326 audit(96.050:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.063714][ T27] audit: type=1326 audit(96.050:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.151597][ T27] audit: type=1326 audit(96.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.156347][ T27] audit: type=1326 audit(96.150:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.159800][ T27] audit: type=1326 audit(96.150:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.163008][ T27] audit: type=1326 audit(96.150:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.173228][ T27] audit: type=1326 audit(96.150:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.176628][ T27] audit: type=1326 audit(96.150:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.180443][ T27] audit: type=1326 audit(96.160:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 96.196820][ T4588] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.765871][ T5923] loop4: detected capacity change from 0 to 32768 [ 97.810510][ T5923] XFS (loop4): Mounting V5 Filesystem [ 97.820414][ T5923] XFS (loop4): Ending clean mount [ 97.822936][ T5923] XFS (loop4): Quotacheck needed: Please wait. [ 97.922030][ T5923] XFS (loop4): Quotacheck: Done. [ 98.234492][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 98.236185][ T4322] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.326766][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.329807][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.847423][ T4320] XFS (loop4): Unmounting Filesystem [ 99.626321][ T5991] ptrace attach of "./syz-executor exec"[4330] was attempted by ""[5991] [ 100.486198][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.487630][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.491949][ T6018] binder: tried to use weak ref as strong ref [ 100.492962][ T6018] binder: 6014:6018 Acquire 1 refcount change on invalid ref 0 ret -22 [ 100.494282][ T6018] binder: 6014:6018 got transaction to invalid handle, 1 [ 100.502073][ T6018] binder: 6018:6014 cannot find target node [ 100.502903][ T6018] binder: 6014:6018 transaction async to 0:0 failed 5/29201/-22, size 104-24 line 3045 [ 100.504946][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.535609][ T6008] loop3: detected capacity change from 0 to 32768 [ 100.593264][ T6008] XFS (loop3): Mounting V5 Filesystem [ 100.612833][ T6008] XFS (loop3): Ending clean mount [ 100.617416][ T6008] XFS (loop3): Quotacheck needed: Please wait. [ 100.630222][ T6008] XFS (loop3): Quotacheck: Done. [ 100.717816][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 100.717828][ T27] audit: type=1326 audit(100.710:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 100.722242][ T27] audit: type=1326 audit(100.710:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 100.727811][ T27] audit: type=1326 audit(100.710:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 100.732448][ T27] audit: type=1326 audit(100.720:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 100.738006][ T27] audit: type=1326 audit(100.720:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 100.742943][ T27] audit: type=1326 audit(100.720:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 101.073080][ T27] audit: type=1326 audit(100.730:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 101.084191][ T27] audit: type=1326 audit(100.730:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f776b68 code=0x7ffc0000 [ 101.631282][ T4331] XFS (loop3): Unmounting Filesystem [ 102.223452][ T6062] binder: BINDER_SET_CONTEXT_MGR already set [ 102.225158][ T6062] binder: 6059:6062 ioctl 4018620d 200002c0 returned -16 [ 102.671087][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 102.699014][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.701633][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.304379][ C0] sched: RT throttling activated [ 106.218012][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.224546][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.756836][ T6128] Cannot find add_set index 0 as target [ 108.444921][ T27] audit: type=1326 audit(108.440:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.3.541" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x0 [ 108.660646][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.662608][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.176189][ T6171] Cannot find del_set index 4 as target [ 109.603177][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 110.171167][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.172710][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.640696][ T6210] loop2: detected capacity change from 0 to 7 [ 110.644290][ T6210] loop2: [ 110.645156][ T6210] loop2: partition table partially beyond EOD, truncated [ 111.778054][ T6237] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 112.376286][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.379097][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.778203][ T6256] binder: BINDER_SET_CONTEXT_MGR already set [ 112.779164][ T6256] binder: 6255:6256 ioctl 4018620d 200002c0 returned -16 [ 112.799747][ T6258] netlink: 'syz.0.576': attribute type 6 has an invalid length. [ 113.720879][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 113.736406][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.585'. [ 113.856949][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.858534][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.860474][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 115.040418][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.041961][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.499307][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 115.590886][ T6331] tipc: Failed to remove unknown binding: 66,0,0/0:2206661963/2206661964 [ 115.650447][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.652549][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.669966][ T6327] team0: Port device team_slave_0 removed [ 116.854761][ T4332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.857572][ T4332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.859273][ T4332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.860957][ T4332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.862579][ T4332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.867447][ T4332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.146465][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 117.163596][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 117.215195][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.216423][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.217936][ T6350] device bridge_slave_0 entered promiscuous mode [ 117.220766][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.222095][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.223568][ T6350] device bridge_slave_1 entered promiscuous mode [ 117.230818][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.233529][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.241826][ T6350] team0: Port device team_slave_0 added [ 117.244912][ T6350] team0: Port device team_slave_1 added [ 117.250826][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.251839][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.263871][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.266804][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.267839][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.274018][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.374623][ T6350] device hsr_slave_0 entered promiscuous mode [ 117.773017][ T6350] device hsr_slave_1 entered promiscuous mode [ 117.814664][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.815913][ T6350] Cannot create hsr debugfs directory [ 117.827151][ T6386] hfs: can't find a HFS filesystem on dev nullb0 [ 118.106830][ T4561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.176584][ T4561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.208687][ T6350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.308002][ T4561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.310715][ T6350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.631388][ T4561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.640342][ T6350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.691512][ T6350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.754508][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.759509][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.761070][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.764191][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.770470][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.772610][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.774154][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.775356][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.779165][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.781600][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.783270][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.786406][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.787552][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.791070][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.794062][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.803786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.805902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.807653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.821866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.825457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.833982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.838893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.849296][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.852819][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.855953][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.857545][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.884660][ T4322] Bluetooth: hci5: command 0x0409 tx timeout [ 118.942172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.943718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.956616][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.140272][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.142279][ T4322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.144007][ T4322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.147627][ T4322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.149343][ T4322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.150711][ T4322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.253961][ T4330] infiniband syz1: set down [ 119.297126][ T9] smc: removing ib device syz1 [ 119.302405][ T4386] infiniband syz1: ib_query_port failed (-19) [ 119.361333][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.363265][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.432284][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.434227][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.437742][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.439342][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.464426][ T6350] device veth0_vlan entered promiscuous mode [ 119.575868][ T6350] device veth1_vlan entered promiscuous mode [ 119.643973][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.645884][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.647393][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.648966][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.657238][ T6350] device veth0_macvtap entered promiscuous mode [ 119.661296][ T6350] device veth1_macvtap entered promiscuous mode [ 119.667252][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.668830][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.670327][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.671880][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.674367][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.677212][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.678765][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.680372][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.681812][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.683356][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.686153][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.726396][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.728024][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.729503][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.730960][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.734602][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.736414][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.738180][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.739882][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.741435][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.743068][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.745256][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.747076][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.748813][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.750551][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.752850][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.754243][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 119.767142][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.768827][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.835621][ T6350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.837185][ T6350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.838748][ T6350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.840387][ T6350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.867571][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.868961][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.870687][ T6424] device bridge_slave_0 entered promiscuous mode [ 119.945985][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.947413][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.949159][ T6424] device bridge_slave_1 entered promiscuous mode [ 119.967312][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.021332][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.025049][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.026284][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.033161][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.050140][ T6424] team0: Port device team_slave_0 added [ 120.060977][ T6424] team0: Port device team_slave_1 added [ 120.084278][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.086160][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.086671][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.092883][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.102111][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.375982][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.395741][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.396969][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.401236][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.660402][ T6498] hub 8-0:1.0: USB hub found [ 120.663279][ T6498] hub 8-0:1.0: 8 ports detected [ 120.991187][ T4322] Bluetooth: hci5: command 0x041b tx timeout [ 121.342147][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 121.388390][ T6424] device hsr_slave_0 entered promiscuous mode [ 121.435406][ T6424] device hsr_slave_1 entered promiscuous mode [ 121.484522][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.486601][ T6424] Cannot create hsr debugfs directory [ 122.050121][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.051637][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.082967][ T4561] device hsr_slave_0 left promiscuous mode [ 122.114782][ T4561] device hsr_slave_1 left promiscuous mode [ 122.214627][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.216076][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.218345][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.219627][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.221126][ T4561] device bridge_slave_1 left promiscuous mode [ 122.232832][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.275508][ T4561] device bridge_slave_0 left promiscuous mode [ 122.276830][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.406123][ T4561] device veth1_macvtap left promiscuous mode [ 122.407291][ T4561] device veth0_macvtap left promiscuous mode [ 122.408512][ T4561] device veth1_vlan left promiscuous mode [ 122.409461][ T4561] device veth0_vlan left promiscuous mode [ 122.466483][ T6536] block device autoloading is deprecated and will be removed. [ 122.472020][ T6535] md: md2 stopped. [ 122.961174][ T6545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.037381][ T4322] Bluetooth: hci5: command 0x040f tx timeout [ 123.364451][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 123.399654][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.401226][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.114451][ T4332] Bluetooth: hci5: command 0x0419 tx timeout [ 125.130244][ T4561] team0 (unregistering): Port device team_slave_1 removed [ 125.295162][ T4561] team0 (unregistering): Port device team_slave_0 removed [ 125.434430][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 125.464908][ T4561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.664948][ T4561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.914910][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.916070][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.146307][ T4561] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 127.185203][ T4561] bond0 (unregistering): Released all slaves [ 127.514533][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 127.551382][ T6424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.666077][ T6424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.363386][ T6424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.451402][ T6584] loop2: detected capacity change from 0 to 7 [ 128.454884][ T6570] Dev loop2: unable to read RDB block 7 [ 128.455821][ T6570] loop2: AHDI p1 p2 p3 [ 128.456576][ T6570] loop2: partition table partially beyond EOD, truncated [ 128.459179][ T6570] loop2: p1 start 1601398130 is beyond EOD, truncated [ 128.460303][ T6570] loop2: p2 start 1702059890 is beyond EOD, truncated [ 128.502268][ T6584] Dev loop2: unable to read RDB block 7 [ 128.503260][ T6584] loop2: AHDI p1 p2 p3 [ 128.503955][ T6584] loop2: partition table partially beyond EOD, truncated [ 128.523234][ T6424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.523404][ T6584] loop2: p1 start 1601398130 is beyond EOD, truncated [ 128.527437][ T6584] loop2: p2 start 1702059890 is beyond EOD, truncated [ 128.531726][ T6587] tipc: Failed to remove unknown binding: 66,0,0/0:1026692666/1026692667 [ 128.538825][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.540397][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.982336][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.987725][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.989286][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.993181][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.012162][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.014185][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.020324][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.021547][ T4573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.023208][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.030450][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.032237][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.034328][ T4577] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.035557][ T4577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.042491][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.045541][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.049180][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.052446][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.054159][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.059578][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.061452][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.070930][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.072799][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.077380][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.079126][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.086035][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.393627][ T6636] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.660445][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.661681][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.665349][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.143100][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.148083][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.612766][ T6673] 9pnet_fd: Insufficient options for proto=fd [ 131.578980][ T4561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.757664][ T3897] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 131.759020][ T3897] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 131.760167][ T3897] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 131.857291][ T6687] tipc: Failed to remove unknown binding: 66,0,0/0:2347656014/2347656015 [ 131.859217][ T4561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.186337][ T4561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.288784][ T4561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.311602][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.313337][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.332603][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.334270][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.336312][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.337829][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.341959][ T6424] device veth0_vlan entered promiscuous mode [ 132.356003][ T6424] device veth1_vlan entered promiscuous mode [ 132.395768][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.397522][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.399161][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.401232][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.409568][ T6424] device veth0_macvtap entered promiscuous mode [ 132.415209][ T6424] device veth1_macvtap entered promiscuous mode [ 132.436470][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.438348][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.440070][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.441745][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.443412][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.445628][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.447267][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.449199][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.450875][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.454527][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.459180][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.460705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.462308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.463636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.466234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.500836][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.502792][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.508248][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.510015][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.512387][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.514182][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.516344][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.518151][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.522380][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.524169][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.532930][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.535171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.536991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.540556][ T6424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.542080][ T6424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.543622][ T6424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.548884][ T6424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.891039][ T6711] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 132.909452][ T6711] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.125329][ T4561] bond0: (slave wlan1): Releasing backup interface [ 133.134505][ T6677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.135669][ T6677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.139791][ T6677] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 133.141233][ T6677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.142144][ T6677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.143863][ T6677] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 133.145132][ T6677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.146235][ T6677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.147562][ T6677] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 133.148737][ T6677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 133.149778][ T6677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 133.151765][ T6677] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 133.152881][ T6677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.153808][ T6677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.157398][ T6677] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 133.159053][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.160582][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.245767][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.247548][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.253147][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.274073][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.278297][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.600128][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.027440][ T4332] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.042973][ T4561] device hsr_slave_0 left promiscuous mode [ 134.136557][ T4561] device hsr_slave_1 left promiscuous mode [ 134.194026][ T6764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.244739][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.267391][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.346484][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.347814][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.358240][ T4561] device bridge_slave_1 left promiscuous mode [ 134.483302][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.563459][ T4561] device bridge_slave_0 left promiscuous mode [ 134.564562][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.117661][ T4561] device veth1_macvtap left promiscuous mode [ 135.119852][ T4561] device veth0_macvtap left promiscuous mode [ 135.120808][ T4561] device veth1_vlan left promiscuous mode [ 135.122909][ T4561] device veth0_vlan left promiscuous mode [ 135.204672][ T4322] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.205727][ T4332] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.206781][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.209923][ T4328] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.074994][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 137.284468][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 137.285533][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 137.286471][ T4328] Bluetooth: hci5: command 0x0406 tx timeout [ 137.287436][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 137.466671][ T4561] team0 (unregistering): Port device team_slave_1 removed [ 137.637702][ T4561] team0 (unregistering): Port device team_slave_0 removed [ 137.805317][ T4561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.027309][ T4561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.585840][ T4561] bond0 (unregistering): Released all slaves [ 141.281452][ T6817] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 142.094542][ T6851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.517494][ T6817] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.409100][ T6866] Cannot find add_set index 0 as target [ 143.781607][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.6.696'. [ 145.300773][ T6921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.321952][ T6935] Cannot find del_set index 4 as target [ 146.548661][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.6.709'. [ 148.187968][ T6983] loop2: detected capacity change from 0 to 7 [ 148.192972][ T6983] Dev loop2: unable to read RDB block 7 [ 148.193998][ T6983] loop2: AHDI p1 p2 p3 [ 148.936210][ T6991] tmpfs: Unknown parameter 'usrquota' [ 148.998452][ T6992] FAT-fs (nullb0): bogus number of reserved sectors [ 148.999673][ T6992] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 149.140470][ T6983] loop2: partition table partially beyond EOD, truncated [ 149.141782][ T6983] loop2: p1 start 1601398130 is beyond EOD, truncated [ 149.148220][ T6983] loop2: p2 start 1702059890 is beyond EOD, truncated [ 149.217616][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.721'. [ 149.810604][ T7009] binder: 7004:7009 ioctl 4018620d 0 returned -22 [ 149.823503][ T7009] binder: 7004:7009 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 149.949009][ T7009] binder: 7004:7009 got transaction to invalid handle, 1 [ 149.950294][ T7009] binder: 7009:7004 cannot find target node [ 149.951264][ T7009] binder: 7004:7009 transaction async to 0:0 failed 11/29201/-22, size 104-24 line 3045 [ 149.957551][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.657179][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 151.117412][ T7051] loop2: detected capacity change from 0 to 7 [ 151.119656][ T7013] Dev loop2: unable to read RDB block 7 [ 151.120490][ T7013] loop2: AHDI p1 p2 p3 [ 151.121386][ T7013] loop2: partition table partially beyond EOD, truncated [ 151.123164][ T7013] loop2: p1 start 1601398130 is beyond EOD, truncated [ 151.125672][ T7013] loop2: p2 start 1702059890 is beyond EOD, truncated [ 151.128119][ T7051] Dev loop2: unable to read RDB block 7 [ 151.130086][ T7051] loop2: AHDI p1 p2 p3 [ 151.131514][ T7051] loop2: partition table partially beyond EOD, truncated [ 151.133247][ T7051] loop2: p1 start 1601398130 is beyond EOD, truncated [ 151.138300][ T7051] loop2: p2 start 1702059890 is beyond EOD, truncated [ 151.199861][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.737'. [ 151.290970][ T7059] binder: BINDER_SET_CONTEXT_MGR already set [ 151.292026][ T7059] binder: 7058:7059 ioctl 4018620d 200002c0 returned -16 [ 151.376426][ T27] audit: type=1326 audit(151.370:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.382284][ T27] audit: type=1326 audit(151.370:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.390212][ T27] audit: type=1326 audit(151.370:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.436316][ T27] audit: type=1326 audit(151.420:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.439968][ T27] audit: type=1326 audit(151.420:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.449699][ T27] audit: type=1326 audit(151.420:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.556250][ T27] audit: type=1326 audit(151.550:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.559826][ T27] audit: type=1326 audit(151.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.563261][ T27] audit: type=1326 audit(151.550:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.6.738" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 151.592723][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 152.082756][ T7096] loop2: detected capacity change from 0 to 7 [ 152.086200][ T7013] Dev loop2: unable to read RDB block 7 [ 152.089326][ T7013] loop2: AHDI p1 p2 p3 [ 152.089992][ T7013] loop2: partition table partially beyond EOD, truncated [ 152.093035][ T7013] loop2: p1 start 1601398130 is beyond EOD, truncated [ 152.094860][ T7013] loop2: p2 start 1702059890 is beyond EOD, truncated [ 152.098212][ T7096] Dev loop2: unable to read RDB block 7 [ 152.099286][ T7096] loop2: AHDI p1 p2 p3 [ 152.099982][ T7096] loop2: partition table partially beyond EOD, truncated [ 152.103028][ T7096] loop2: p1 start 1601398130 is beyond EOD, truncated [ 152.108565][ T7096] loop2: p2 start 1702059890 is beyond EOD, truncated [ 152.137693][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 152.197214][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 152.198740][ T7104] binder: 7103:7104 ioctl 4018620d 200002c0 returned -16 [ 152.302340][ T4324] Bluetooth: hci5: Unable to find connection with handle 0x00c9 [ 152.738052][ T7122] 9pnet_fd: Insufficient options for proto=fd [ 152.973431][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 152.997062][ T7142] binder: BINDER_SET_CONTEXT_MGR already set [ 152.998126][ T7142] binder: 7140:7142 ioctl 4018620d 200002c0 returned -16 [ 153.083455][ T7148] loop2: detected capacity change from 0 to 7 [ 153.093564][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.100930][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.103603][ T7013] Dev loop2: unable to read RDB block 7 [ 153.107039][ T7013] loop2: unable to read partition table [ 153.118363][ T7013] loop2: partition table beyond EOD, truncated [ 153.140863][ T7148] Dev loop2: unable to read RDB block 7 [ 153.141796][ T7148] loop2: unable to read partition table [ 153.153642][ T7148] loop2: partition table beyond EOD, truncated [ 153.155001][ T7148] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.271064][ T7165] Device name cannot be null; rc = [-22] [ 153.338583][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 153.406460][ T7174] binder: 7173:7174 ioctl c0306201 0 returned -14 [ 153.408778][ T7174] binder: 7173:7174 got transaction to invalid handle, 1 [ 153.409922][ T7174] binder: 7174:7173 cannot find target node [ 153.410834][ T7174] binder: 7173:7174 transaction async to 0:0 failed 18/29201/-22, size 104-24 line 3045 [ 153.432105][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.010838][ T27] audit: type=1326 audit(154.000:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 154.193895][ T7212] loop2: detected capacity change from 0 to 7 [ 154.200375][ T7013] Dev loop2: unable to read RDB block 7 [ 154.201272][ T7013] loop2: unable to read partition table [ 154.202399][ T7013] loop2: partition table beyond EOD, truncated [ 154.212338][ T7212] Dev loop2: unable to read RDB block 7 [ 154.216758][ T7212] loop2: unable to read partition table [ 154.219496][ T7212] loop2: partition table beyond EOD, truncated [ 154.222695][ T7212] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.327730][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 154.347267][ T7223] binder: 7221:7223 ioctl c0306201 0 returned -14 [ 154.355206][ T7223] binder: 7221:7223 got transaction to invalid handle, 1 [ 154.356289][ T7223] binder: 7223:7221 cannot find target node [ 154.357140][ T7223] binder: 7221:7223 transaction async to 0:0 failed 22/29201/-22, size 104-24 line 3045 [ 154.359217][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.838152][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.787'. [ 155.499820][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 155.552612][ T7275] binder: 7274:7275 ioctl c0306201 0 returned -14 [ 155.570178][ T7275] binder: 7274:7275 got transaction to invalid handle, 1 [ 155.571318][ T7275] binder: 7275:7274 cannot find target node [ 155.572285][ T7275] binder: 7274:7275 transaction async to 0:0 failed 26/29201/-22, size 104-24 line 3045 [ 155.574144][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.790832][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.794856][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.994910][ T7302] device veth0 entered promiscuous mode [ 155.999001][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 157.353537][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.812'. [ 159.330170][ T4324] Bluetooth: hci2: command 0x0406 tx timeout [ 159.331240][ T4324] Bluetooth: hci4: command 0x0406 tx timeout [ 159.373584][ T7387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.823'. [ 161.063712][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 168.786093][ T7665] loop2: detected capacity change from 0 to 7 [ 168.788624][ T7013] Dev loop2: unable to read RDB block 7 [ 168.789870][ T7013] loop2: unable to read partition table [ 168.792441][ T7013] loop2: partition table beyond EOD, truncated [ 168.798254][ T7665] Dev loop2: unable to read RDB block 7 [ 168.800751][ T7665] loop2: unable to read partition table [ 168.802091][ T7665] loop2: partition table beyond EOD, truncated [ 168.819288][ T7665] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.887628][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 177.887640][ T27] audit: type=1326 audit(177.880:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 177.955378][ T27] audit: type=1326 audit(177.900:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 177.983085][ T27] audit: type=1326 audit(177.970:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 177.994771][ T27] audit: type=1326 audit(177.970:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 177.998085][ T27] audit: type=1326 audit(177.970:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 178.001294][ T27] audit: type=1326 audit(177.970:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 178.035009][ T27] audit: type=1326 audit(177.970:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 178.038244][ T27] audit: type=1326 audit(177.970:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 178.041383][ T27] audit: type=1326 audit(177.970:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 178.072147][ T27] audit: type=1326 audit(177.970:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 180.636055][ T4324] Bluetooth: hci3: command 0x1003 tx timeout [ 180.638231][ T4328] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 181.835485][ T8059] 9pnet_fd: Insufficient options for proto=fd [ 183.433546][ T8103] 9pnet_fd: Insufficient options for proto=fd [ 184.735870][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 184.739748][ T4328] Bluetooth: hci3: command 0x1003 tx timeout [ 185.386094][ T8142] 9pnet_fd: Insufficient options for proto=fd [ 186.550642][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 186.550653][ T27] audit: type=1326 audit(186.540:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.555770][ T27] audit: type=1326 audit(186.550:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.605581][ T27] audit: type=1326 audit(186.590:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.637428][ T27] audit: type=1326 audit(186.630:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.683857][ T8177] 9pnet_fd: Insufficient options for proto=fd [ 186.687451][ T27] audit: type=1326 audit(186.680:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.693511][ T27] audit: type=1326 audit(186.680:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.720631][ T27] audit: type=1326 audit(186.680:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.729817][ T27] audit: type=1326 audit(186.680:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 186.734950][ T27] audit: type=1326 audit(186.680:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 187.355111][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.356338][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.614327][ T8223] 9pnet_fd: Insufficient options for proto=fd [ 188.634615][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 188.689534][ T8226] Bluetooth: MGMT ver 1.22 [ 189.745374][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 190.156846][ T27] audit: type=1326 audit(190.150:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 190.274690][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1023'. [ 190.325087][ T235] Bluetooth: hci3: Frame reassembly failed (-84) [ 191.417439][ T8295] 9pnet_fd: Insufficient options for proto=fd [ 192.314616][ T4328] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 192.484927][ T3897] usb 1-1: no suitable firmware found! [ 192.490718][ T3897] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 192.493498][ T4366] usb 1-1: ath9k_htc: USB layer deinitialized [ 193.574267][ T8331] 9pnet_fd: Insufficient options for proto=fd [ 194.770402][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 194.770411][ T27] audit: type=1326 audit(194.760:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.779011][ T27] audit: type=1326 audit(194.770:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.785733][ T27] audit: type=1326 audit(194.770:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.790362][ T27] audit: type=1326 audit(194.770:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.798094][ T27] audit: type=1326 audit(194.770:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.803904][ T27] audit: type=1326 audit(194.770:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.813664][ T27] audit: type=1326 audit(194.770:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.817390][ T27] audit: type=1326 audit(194.780:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.821060][ T27] audit: type=1326 audit(194.780:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 194.824586][ T27] audit: type=1326 audit(194.780:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 195.251183][ T4447] Bluetooth: hci3: Frame reassembly failed (-84) [ 195.583131][ T8369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1051'. [ 195.621988][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 195.726653][ T8375] device syzkaller0 entered promiscuous mode [ 196.455040][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.459247][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.185077][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1062'. [ 197.206855][ T8410] 9pnet_fd: Insufficient options for proto=fd [ 197.274497][ T4332] Bluetooth: hci3: command 0x1003 tx timeout [ 197.275077][ T4328] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 197.309416][ T4328] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 197.310980][ T4328] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 197.754490][ T4328] Bluetooth: hci6: command 0x1003 tx timeout [ 197.757349][ T4324] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 198.010028][ T8443] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1073'. [ 198.095701][ T8449] 9pnet_fd: Insufficient options for proto=fd [ 198.140420][ T8454] loop2: detected capacity change from 0 to 7 [ 198.142467][ T7013] Dev loop2: unable to read RDB block 7 [ 198.143480][ T7013] loop2: unable to read partition table [ 198.145831][ T7013] loop2: partition table beyond EOD, truncated [ 198.155409][ T8454] Dev loop2: unable to read RDB block 7 [ 198.156309][ T8454] loop2: unable to read partition table [ 198.159000][ T8454] loop2: partition table beyond EOD, truncated [ 198.161003][ T8454] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.252994][ T4595] Bluetooth: hci3: Frame reassembly failed (-84) [ 199.256223][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 199.266448][ T8486] loop2: detected capacity change from 0 to 7 [ 199.277431][ T8486] Dev loop2: unable to read RDB block 7 [ 199.278322][ T8486] loop2: unable to read partition table [ 199.279233][ T8486] loop2: partition table beyond EOD, truncated [ 199.290668][ T8486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.314586][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 200.469680][ T8520] 9pnet_fd: Insufficient options for proto=fd [ 200.653905][ T8525] loop2: detected capacity change from 0 to 7 [ 200.656472][ T7013] Dev loop2: unable to read RDB block 7 [ 200.657713][ T7013] loop2: unable to read partition table [ 200.658988][ T7013] loop2: partition table beyond EOD, truncated [ 200.664128][ T8525] Dev loop2: unable to read RDB block 7 [ 200.690157][ T8525] loop2: unable to read partition table [ 200.691284][ T8525] loop2: partition table beyond EOD, truncated [ 200.700022][ T8525] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.861712][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 200.861722][ T27] audit: type=1326 audit(200.850:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.157190][ T27] audit: type=1326 audit(201.150:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.160551][ T27] audit: type=1326 audit(201.150:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.167154][ T27] audit: type=1326 audit(201.160:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.183659][ T27] audit: type=1326 audit(201.170:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.201867][ T27] audit: type=1326 audit(201.190:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.205445][ T27] audit: type=1326 audit(201.190:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.249671][ T27] audit: type=1326 audit(201.240:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.253683][ T27] audit: type=1326 audit(201.240:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.280901][ T27] audit: type=1326 audit(201.270:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.1103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 201.864342][ T8558] 9pnet_fd: Insufficient options for proto=fd [ 202.088521][ T8564] loop2: detected capacity change from 0 to 7 [ 202.095738][ T7013] Dev loop2: unable to read RDB block 7 [ 202.096807][ T7013] loop2: unable to read partition table [ 202.097835][ T7013] loop2: partition table beyond EOD, truncated [ 202.128663][ T4366] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.130356][ T8564] Dev loop2: unable to read RDB block 7 [ 202.131372][ T8564] loop2: unable to read partition table [ 202.132567][ T8564] loop2: partition table beyond EOD, truncated [ 202.140281][ T8564] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.383094][ T8574] Cannot find del_set index 4 as target [ 202.475985][ T4366] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.477656][ T4366] usb 1-1: config 1 has no interface number 1 [ 202.480247][ T4366] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.481664][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.483023][ T4366] usb 1-1: Product: syz [ 202.483653][ T4366] usb 1-1: Manufacturer: syz [ 202.487722][ T4366] usb 1-1: SerialNumber: syz [ 203.112013][ T4366] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 203.113483][ T4366] usb 1-1: 2:1 : sample bitwidth 8 in over sample bytes 0 [ 203.115184][ T4366] usb 1-1: 2:1 : unsupported sample bitwidth 8 in 0 bytes [ 203.135143][ T4366] usb 1-1: USB disconnect, device number 6 [ 203.143494][ T8588] 9pnet_fd: Insufficient options for proto=fd [ 203.346120][ T7013] udevd[7013]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.411292][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1122'. [ 203.835200][ T4324] Bluetooth: hci3: command 0x1003 tx timeout [ 203.836934][ T4322] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 203.875602][ T8607] loop2: detected capacity change from 0 to 7 [ 203.880682][ T7013] Dev loop2: unable to read RDB block 7 [ 203.881705][ T7013] loop2: unable to read partition table [ 203.882786][ T7013] loop2: partition table beyond EOD, truncated [ 203.895840][ T8607] Dev loop2: unable to read RDB block 7 [ 203.900060][ T8607] loop2: unable to read partition table [ 203.904357][ T8607] loop2: partition table beyond EOD, truncated [ 203.912461][ T8607] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.992726][ T4322] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 204.143324][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 205.217064][ T8642] loop2: detected capacity change from 0 to 7 [ 205.219047][ T7013] Dev loop2: unable to read RDB block 7 [ 205.219990][ T7013] loop2: unable to read partition table [ 205.220942][ T7013] loop2: partition table beyond EOD, truncated [ 205.226592][ T8642] Dev loop2: unable to read RDB block 7 [ 205.227531][ T8642] loop2: unable to read partition table [ 205.229446][ T8642] loop2: partition table beyond EOD, truncated [ 205.230525][ T8642] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.688433][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1145'. [ 207.801349][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 207.995162][ T4322] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 207.996634][ T4322] Bluetooth: hci2: Injecting HCI hardware error event [ 207.998200][ T4322] Bluetooth: hci2: hardware error 0x00 [ 210.154857][ T4322] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 215.267153][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.269880][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.749184][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 215.749198][ T27] audit: type=1326 audit(215.740:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.756790][ T27] audit: type=1326 audit(215.750:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.763515][ T27] audit: type=1326 audit(215.750:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.799856][ T27] audit: type=1326 audit(215.790:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.846454][ T27] audit: type=1326 audit(215.840:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.850992][ T27] audit: type=1326 audit(215.840:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.857304][ T27] audit: type=1326 audit(215.850:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.863545][ T27] audit: type=1326 audit(215.850:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.875908][ T27] audit: type=1326 audit(215.850:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 215.881329][ T27] audit: type=1326 audit(215.850:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 216.518522][ T8729] binder: 8728:8729 tried to acquire reference to desc 0, got 1 instead [ 216.537403][ T8729] binder: 8728:8729 got reply transaction with bad transaction stack, transaction 31 has target 8728:0 [ 216.539363][ T8729] binder: 8728:8729 transaction reply to 0:0 failed 36/29201/-71, size 0-0 line 2961 [ 216.544232][ T8729] binder: 8728:8729 ioctl c0306201 20000c80 returned -14 [ 216.548863][ T4366] binder: release 8728:8729 transaction 31 out, still active [ 216.550273][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 216.551121][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.571971][ T4366] binder: send failed reply for transaction 31, target dead [ 216.938405][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.940316][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.932317][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.933961][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.008975][ T8793] 9pnet: Could not find request transport: fd0x0000000000000003 [ 228.059629][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 228.059639][ T27] audit: type=1326 audit(228.050:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.063840][ T27] audit: type=1326 audit(228.050:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.082447][ T27] audit: type=1326 audit(228.050:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.257197][ T27] audit: type=1326 audit(228.050:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.373064][ T27] audit: type=1326 audit(228.050:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.416853][ T27] audit: type=1326 audit(228.050:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.420202][ T27] audit: type=1326 audit(228.050:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.423913][ T27] audit: type=1326 audit(228.050:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.441965][ T27] audit: type=1326 audit(228.050:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.448652][ T27] audit: type=1326 audit(228.060:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 228.500840][ T8817] device syzkaller0 entered promiscuous mode [ 232.110063][ T8848] 9pnet_fd: Insufficient options for proto=fd [ 240.305733][ T8874] xt_connbytes: Forcing CT accounting to be enabled [ 240.306865][ T8874] set match dimension is over the limit! [ 240.512899][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.515701][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.633393][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.636226][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.642335][ T4324] Bluetooth: hci5: command 0x0406 tx timeout [ 240.724672][ T8883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.738400][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 240.738410][ T27] audit: type=1326 audit(240.730:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.745263][ T27] audit: type=1326 audit(240.740:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.763417][ T27] audit: type=1326 audit(240.750:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.771118][ T27] audit: type=1326 audit(240.750:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.774198][ T8890] 9pnet_fd: Insufficient options for proto=fd [ 240.776683][ T27] audit: type=1326 audit(240.750:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.787952][ T27] audit: type=1326 audit(240.770:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.791527][ T27] audit: type=1326 audit(240.770:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.802270][ T27] audit: type=1326 audit(240.770:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.827676][ T27] audit: type=1326 audit(240.780:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 240.830980][ T27] audit: type=1326 audit(240.780:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cb76b68 code=0x7ffc0000 [ 241.074683][ T4366] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 241.284787][ T4366] usb 1-1: Using ep0 maxpacket: 8 [ 241.303625][ T4366] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.311639][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 241.313531][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.315365][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 241.322503][ T4366] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 241.324830][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 241.328783][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 241.330678][ T4366] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 241.339260][ T4366] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 241.341637][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.344131][ T4366] usb 1-1: Product: syz [ 241.346012][ T4366] usb 1-1: Manufacturer: syz [ 241.346822][ T4366] usb 1-1: SerialNumber: syz [ 241.358479][ T4366] usb 1-1: config 0 descriptor?? [ 241.360847][ T8892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.363642][ T8892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.986988][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.988902][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.990921][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.992454][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.350074][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.351646][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.992831][ T8915] device veth0 entered promiscuous mode [ 242.994644][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 243.824912][ T4366] usb 1-1: USB disconnect, device number 7 [ 243.849519][ T8932] 9pnet_fd: Insufficient options for proto=fd [ 245.754743][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 246.064959][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 246.064970][ T27] audit: type=1326 audit(246.060:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.069335][ T27] audit: type=1326 audit(246.060:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.074665][ T4328] Bluetooth: hci3: command 0x1003 tx timeout [ 246.076484][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 246.078959][ T27] audit: type=1326 audit(246.060:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.082212][ T27] audit: type=1326 audit(246.060:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.107422][ T27] audit: type=1326 audit(246.060:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.124646][ T27] audit: type=1326 audit(246.060:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.127727][ T27] audit: type=1326 audit(246.060:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.130719][ T27] audit: type=1326 audit(246.060:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=281 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.140747][ T27] audit: type=1326 audit(246.080:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 246.144228][ T27] audit: type=1326 audit(246.080:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 248.796331][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797424][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.838544][ T9003] binder: 9001:9003 tried to acquire reference to desc 0, got 1 instead [ 255.840402][ T9003] binder_alloc: 9001: binder_alloc_buf, no vma [ 255.845815][ T9003] binder: cannot allocate buffer: vma cleared, target dead or dying [ 255.845861][ T9003] binder: 9001:9003 transaction call to 9001:0 failed 41/29189/-3, size 72-24 line 3230 [ 255.849973][ T9003] binder: 9001:9003 ioctl c0306201 20000c80 returned -14 [ 256.291799][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 256.291809][ T27] audit: type=1326 audit(256.280:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.300649][ T27] audit: type=1326 audit(256.290:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.308487][ T27] audit: type=1326 audit(256.300:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.312917][ T27] audit: type=1326 audit(256.300:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.317669][ T27] audit: type=1326 audit(256.300:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.322255][ T27] audit: type=1326 audit(256.300:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.326786][ T27] audit: type=1326 audit(256.300:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.331285][ T27] audit: type=1326 audit(256.300:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.337090][ T27] audit: type=1326 audit(256.300:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 256.341342][ T27] audit: type=1326 audit(256.300:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9014 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 257.406098][ T9048] binder: 9047:9048 tried to acquire reference to desc 0, got 1 instead [ 257.407959][ T9048] binder_alloc: 9047: binder_alloc_buf, no vma [ 257.408968][ T9048] binder: cannot allocate buffer: vma cleared, target dead or dying [ 257.409008][ T9048] binder: 9047:9048 transaction call to 9047:0 failed 46/29189/-3, size 72-24 line 3230 [ 257.411955][ T9048] binder: 9047:9048 ioctl c0306201 20000c80 returned -14 [ 258.234437][ T4322] Bluetooth: hci0: command 0x1407 tx timeout [ 258.234545][ T4328] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 258.394576][ T4332] Bluetooth: hci3: command 0x1003 tx timeout [ 258.396563][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 258.473742][ T9079] binder: tried to use weak ref as strong ref [ 258.483417][ T9079] binder: 9078:9079 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.493656][ T9079] binder: 9078:9079 got transaction to invalid handle, 1 [ 258.498588][ T9079] binder: 9079:9078 cannot find target node [ 258.503640][ T9079] binder: 9078:9079 transaction call to 0:0 failed 49/29201/-22, size 72-24 line 3045 [ 258.511579][ T9079] binder: 9078:9079 ioctl c0306201 20000c80 returned -14 [ 260.314819][ T4324] Bluetooth: hci0: command 0x1407 tx timeout [ 260.315961][ T4328] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 260.318733][ T4328] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 261.154318][ T9120] binder: tried to use weak ref as strong ref [ 261.155543][ T9120] binder: 9119:9120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.157102][ T9120] binder: 9119:9120 got transaction to invalid handle, 1 [ 261.158254][ T9120] binder: 9120:9119 cannot find target node [ 261.159104][ T9120] binder: 9119:9120 transaction call to 0:0 failed 52/29201/-22, size 72-24 line 3045 [ 261.160856][ T9120] binder: 9119:9120 ioctl c0306201 20000c80 returned -14 [ 261.594508][ T4328] Bluetooth: hci3: command 0x1003 tx timeout [ 261.596298][ T4322] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 262.394490][ T4322] Bluetooth: hci0: command 0x1407 tx timeout [ 262.523516][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.526994][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.128717][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 266.128729][ T27] audit: type=1326 audit(266.120:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.133036][ T27] audit: type=1326 audit(266.120:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.141304][ T27] audit: type=1326 audit(266.130:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.147847][ T27] audit: type=1326 audit(266.130:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.151165][ T27] audit: type=1326 audit(266.130:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.154272][ T27] audit: type=1326 audit(266.140:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.161719][ T27] audit: type=1326 audit(266.140:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.166363][ T27] audit: type=1326 audit(266.140:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.169697][ T27] audit: type=1326 audit(266.140:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 266.173031][ T27] audit: type=1326 audit(266.140:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb9f76b68 code=0x7ffc0000 [ 268.234620][ T4328] Bluetooth: hci3: command 0x1003 tx timeout [ 268.241980][ T4322] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 269.431136][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.432779][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.452653][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.454302][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.623517][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 272.623528][ T27] audit: type=1326 audit(272.610:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 272.628087][ T27] audit: type=1326 audit(272.610:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.047718][ T27] audit: type=1326 audit(273.040:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.058447][ T27] audit: type=1326 audit(273.040:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.062703][ T27] audit: type=1326 audit(273.050:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.069395][ T27] audit: type=1326 audit(273.050:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.072807][ T27] audit: type=1326 audit(273.060:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.081102][ T27] audit: type=1326 audit(273.060:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.085592][ T27] audit: type=1326 audit(273.060:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 273.088892][ T27] audit: type=1326 audit(273.060:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b76b68 code=0x7ffc0000 [ 275.120714][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 275.122821][ T4322] Bluetooth: hci3: command 0x1003 tx timeout [ 275.510320][ T9256] binder: 9253:9256 tried to acquire reference to desc 0, got 1 instead [ 275.514737][ T9256] binder: 9253:9256 got transaction with invalid parent offset or type [ 275.516491][ T9256] binder: 9253:9256 transaction call to 9253:0 failed 57/29201/-22, size 96-24 line 3439 [ 275.536152][ T4367] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.747381][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.749013][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.687385][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.688920][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.092907][ T9281] loop2: detected capacity change from 0 to 7 [ 280.099576][ T9281] Dev loop2: unable to read RDB block 7 [ 280.100481][ T9281] loop2: unable to read partition table [ 280.101415][ T9281] loop2: partition table beyond EOD, truncated [ 280.102298][ T9281] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.102746][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 281.102756][ T27] audit: type=1326 audit(281.090:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.112494][ T27] audit: type=1326 audit(281.100:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.124832][ T27] audit: type=1326 audit(281.110:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.128174][ T27] audit: type=1326 audit(281.110:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.131329][ T27] audit: type=1326 audit(281.120:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.140512][ T27] audit: type=1326 audit(281.130:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.143735][ T27] audit: type=1326 audit(281.130:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.148954][ T27] audit: type=1326 audit(281.130:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.152310][ T27] audit: type=1326 audit(281.130:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.163381][ T27] audit: type=1326 audit(281.130:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb8376b68 code=0x7ffc0000 [ 281.188488][ T4593] Bluetooth: hci3: Frame reassembly failed (-84) [ 283.194458][ T4324] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 283.194486][ T4322] Bluetooth: hci3: command 0x1003 tx timeout [ 286.623332][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.624889][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.212166][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.213891][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.612144][ T9403] binder: 9402:9403 got transaction to invalid handle, 1 [ 291.613462][ T9403] binder: 9403:9402 cannot find target node [ 291.614770][ T9403] binder: 9402:9403 transaction call to 0:0 failed 63/29201/-22, size 0-24 line 3045 [ 292.560493][ T9423] IPVS: lc: FWM 3 0x00000003 - no destination available [ 292.562107][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 293.022179][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 294.300507][ T9449] input: syz1 as /devices/virtual/input/input4 [ 299.179824][ T9488] loop2: detected capacity change from 0 to 7 [ 299.183542][ T9488] Dev loop2: unable to read RDB block 7 [ 299.184588][ T9488] loop2: unable to read partition table [ 299.185588][ T9488] loop2: partition table beyond EOD, truncated [ 299.192705][ T9488] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.228173][ T9523] hfs: can't find a HFS filesystem on dev nullb0 [ 303.339626][ T9529] device bridge1 entered promiscuous mode [ 303.359802][ T9529] team0: Port device bridge1 added [ 303.386997][ T9529] bridge0: port 3(team0) entered blocking state [ 303.388285][ T9529] bridge0: port 3(team0) entered disabled state [ 303.398479][ T9529] device team0 entered promiscuous mode [ 303.399390][ T9529] device team_slave_0 entered promiscuous mode [ 303.402200][ T9529] device team_slave_1 entered promiscuous mode [ 303.410357][ T9529] bridge0: port 3(team0) entered blocking state [ 303.411845][ T9529] bridge0: port 3(team0) entered forwarding state [ 303.996857][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 303.996868][ T27] audit: type=1326 audit(303.990:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.010345][ T27] audit: type=1326 audit(304.000:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.016922][ T27] audit: type=1326 audit(304.010:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.059020][ T27] audit: type=1326 audit(304.040:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.096579][ T27] audit: type=1326 audit(304.090:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.271065][ T27] audit: type=1326 audit(304.260:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.356920][ T27] audit: type=1326 audit(304.350:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.360285][ T27] audit: type=1326 audit(304.350:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8776b68 code=0x7ffc0000 [ 304.486311][ T9570] loop5: detected capacity change from 0 to 7 [ 304.495175][ T9570] Dev loop5: unable to read RDB block 7 [ 304.496008][ T9570] loop5: unable to read partition table [ 304.496897][ T9570] loop5: partition table beyond EOD, truncated [ 304.756350][ T9570] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.875031][ T9609] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 305.876563][ T9609] netlink: 'syz.0.1414': attribute type 2 has an invalid length. [ 306.244981][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 306.464719][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 306.470257][ T22] usb 1-1: config index 0 descriptor too short (expected 19222, got 18) [ 306.471770][ T22] usb 1-1: config 28 has too many interfaces: 241, using maximum allowed: 32 [ 306.474164][ T22] usb 1-1: config 28 has 1 interface, different from the descriptor's value: 241 [ 306.475537][ T9619] loop5: detected capacity change from 0 to 7 [ 306.479263][ T9489] Dev loop5: unable to read RDB block 7 [ 306.480331][ T9489] loop5: unable to read partition table [ 306.481472][ T9489] loop5: partition table beyond EOD, truncated [ 306.483003][ T9619] Dev loop5: unable to read RDB block 7 [ 306.484198][ T9619] loop5: unable to read partition table [ 306.485893][ T9619] loop5: partition table beyond EOD, truncated [ 306.486878][ T9619] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.491348][ T22] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d [ 306.494733][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.497174][ T22] usb 1-1: Product: syz [ 306.497782][ T22] usb 1-1: Manufacturer: syz [ 306.499872][ T22] usb 1-1: SerialNumber: syz [ 307.039735][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.045868][ T4324] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 307.111957][ T4366] usb 1-1: USB disconnect, device number 8 [ 308.797765][ T9661] hfs: can't find a HFS filesystem on dev nullb0 [ 309.440664][ T9687] netlink: 'syz.6.1437': attribute type 1 has an invalid length. [ 309.441964][ T9687] netlink: 'syz.6.1437': attribute type 2 has an invalid length. [ 309.465707][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.467428][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.321996][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.323070][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.999951][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.020365][ T9742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.030812][ T9745] ------------[ cut here ]------------ [ 312.031803][ T9745] WARNING: CPU: 0 PID: 9745 at security/landlock/fs.c:752 collect_domain_accesses+0x6d8/0x738 [ 312.033340][ T9745] Modules linked in: [ 312.033933][ T9745] CPU: 0 PID: 9745 Comm: syz.6.1453 Not tainted syzkaller #0 [ 312.034976][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 312.036442][ T9745] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 312.037577][ T9745] pc : collect_domain_accesses+0x6d8/0x738 [ 312.038418][ T9745] lr : collect_domain_accesses+0x6d4/0x738 [ 312.039281][ T9745] sp : ffff800023a178c0 [ 312.039867][ T9745] x29: ffff800023a17900 x28: 0000000000000001 x27: ffff800023a179fa [ 312.041069][ T9745] x26: ffff0000d5a28eac x25: 0000000000000000 x24: ffff0000cfbe5be8 [ 312.042325][ T9745] x23: 0000000000002004 x22: ffffffffffffffff x21: ffffffffffffffff [ 312.043542][ T9745] x20: ffff0000ca883608 x19: 0000000000000000 x18: 0000000000000000 [ 312.044798][ T9745] x17: 0000000000000000 x16: ffff8000082d7e60 x15: 0000000000000000 [ 312.046087][ T9745] x14: 0000000000000001 x13: 1ffff00002a40071 x12: 0000000000080000 [ 312.047294][ T9745] x11: 000000000000137c x10: ffff8000275c9000 x9 : ffff80000a5844f0 [ 312.048537][ T9745] x8 : 000000000000137d x7 : ffff80000a57fbe8 x6 : 0000000000000000 [ 312.049790][ T9745] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 312.051025][ T9745] x2 : 0000000000000008 x1 : ffff800011b7ebc0 x0 : ffff0000cfbe5c38 [ 312.052318][ T9745] Call trace: [ 312.052833][ T9745] collect_domain_accesses+0x6d8/0x738 [ 312.053654][ T9745] current_check_refer_path+0x408/0x804 [ 312.054489][ T9745] hook_path_rename+0x4c/0x60 [ 312.055218][ T9745] security_path_rename+0x154/0x1f0 [ 312.056084][ T9745] do_renameat2+0x5b8/0xa74 [ 312.056797][ T9745] __arm64_sys_renameat2+0xe0/0xfc [ 312.057593][ T9745] invoke_syscall+0x98/0x2b4 [ 312.058354][ T9745] el0_svc_common+0x138/0x258 [ 312.059117][ T9745] do_el0_svc+0x58/0x130 [ 312.059756][ T9745] el0_svc+0x58/0x128 [ 312.060361][ T9745] el0t_64_sync_handler+0x84/0xf0 [ 312.061134][ T9745] el0t_64_sync+0x18c/0x190 [ 312.061821][ T9745] irq event stamp: 1572 [ 312.062428][ T9745] hardirqs last enabled at (1571): [] mod_objcg_state+0x338/0x4fc [ 312.063810][ T9745] hardirqs last disabled at (1572): [] el1_dbg+0x24/0x80 [ 312.065110][ T9745] softirqs last enabled at (1546): [] local_bh_enable+0x10/0x34 [ 312.066503][ T9745] softirqs last disabled at (1544): [] local_bh_disable+0x10/0x34 [ 312.067891][ T9745] ---[ end trace 0000000000000000 ]--- [ 312.068790][ C0] vkms_vblank_simulate: vblank timer overrun