last executing test programs: 2m32.337972575s ago: executing program 1 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0x80000a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(0xffffffffffffffff, &(0x7f0000000300)='82', 0x2) 2m32.309657766s ago: executing program 1 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 2m31.729774724s ago: executing program 1 (id=1256): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xa, 0x40000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000600)={0x0, 0x6, 0x69, 0x6, 0x2, 0xff}) 2m31.653886077s ago: executing program 1 (id=1258): syz_open_dev$evdev(0x0, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x400, @remote}, 0x10) add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m30.805782777s ago: executing program 1 (id=1264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x40}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 2m30.438683644s ago: executing program 1 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 2m15.418576861s ago: executing program 32 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 2m11.238193677s ago: executing program 5 (id=1495): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m10.990399649s ago: executing program 5 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 1m55.585123934s ago: executing program 33 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 1m28.649054971s ago: executing program 3 (id=1746): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) 1m28.546259156s ago: executing program 3 (id=1747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, 0x0, 0x0) 1m28.525935396s ago: executing program 3 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1m28.505803037s ago: executing program 3 (id=1749): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0x36, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) 1m18.308172677s ago: executing program 3 (id=1754): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0xfffc, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["0600", "0000000000000400", "00f638000000007c0300", "ffe9ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 1m17.749895973s ago: executing program 3 (id=1757): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0xa, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) 1m2.554944018s ago: executing program 34 (id=1757): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0xa, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) 35.28165587s ago: executing program 6 (id=2248): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0xfffc, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["0600", "0000000000000400", "00f638000000007c0300", "ffe9ff000100"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 35.129477148s ago: executing program 6 (id=2249): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x1, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x8, 0x5, 0x4, 0x0, 'syz1\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x2, 0x8f, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201030c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104ff63200309050900ff03030004090502020002f7810609050303ff030840040705a6c6"], 0x0) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000404505808001000102000109022900030100803209040000000000000009040100000000000009040200010000000007058101ff0301"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) 33.535884243s ago: executing program 6 (id=2263): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x48000) 32.431063905s ago: executing program 6 (id=2273): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000002c0)=[{0x3, 0x810, 0x6, &(0x7f0000000140)="143ca4ce23c8"}], 0x1}) 31.88572499s ago: executing program 6 (id=2280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x6020000003) 31.860830231s ago: executing program 6 (id=2281): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc01c586b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 22.54050758s ago: executing program 4 (id=2364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000480050001"], 0x80}}, 0x0) 22.517756861s ago: executing program 4 (id=2365): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}}, 0x20}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 22.496010302s ago: executing program 4 (id=2366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/PNP0B00:00\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000001c0)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='PNP0B00:00\x00', 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='PNP0B00:00\x00', 0xb) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000340)='unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='serial8250\x00', 0xb) 22.478971192s ago: executing program 4 (id=2367): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a0400600012800b000100697036746e6c000050000280060010000200000014000300fe8000000000000000000000000000aa0500060005000000080008002e00000008000834795d2700060011004e200000050009002900"], 0x80}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 22.404477776s ago: executing program 4 (id=2368): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6020000003) 22.385528577s ago: executing program 4 (id=2369): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc01c586b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) clock_nanosleep(0x2, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 16.767609221s ago: executing program 35 (id=2281): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc01c586b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 7.355267334s ago: executing program 36 (id=2369): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc01c586b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) clock_nanosleep(0x2, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 5.210409525s ago: executing program 0 (id=2536): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) shutdown(0xffffffffffffffff, 0x1) mlockall(0x0) 4.074255068s ago: executing program 0 (id=2546): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.203059529s ago: executing program 8 (id=2556): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0xd, "dd5f4b185700a08646630a910f"}, 0x0, 0x0, 0x0, 0x0}) 2.720822301s ago: executing program 0 (id=2558): pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 2.688244954s ago: executing program 0 (id=2559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r3, 0x5501) 2.688059643s ago: executing program 2 (id=2560): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 2.687090043s ago: executing program 9 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 2.224149475s ago: executing program 2 (id=2562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x101, 0x0) 2.189000937s ago: executing program 8 (id=2563): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x107a5d, 0x358145a8, 0x0, 0xfffd, 0x3, 0xfffffff8, 0x0, 0x0, 0x4, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) 1.731954968s ago: executing program 0 (id=2564): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.644934493s ago: executing program 0 (id=2565): r0 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\b\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8-\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x13\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~f\xb4%!X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xaek\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\b\x00\x00\x00\x00\x00\x00\x00\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x93(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x7) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES64=r0], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r2, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_getoverrun(r3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x200400d1) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5000000010000d042abd70000000000000000000", @ANYBLOB="00000000100000001c0012800c0001006d6163766c616e000c00028008000900ffffffff140035006d6163766c616e300000000000000000c3d7c0b1ac4f143c9ebc512290b0eb52e6db324d021cdfb7836ef433514e0a59748749cf79fa0a7aed356bdc86b17acb628cb29b2d4faa618d11f05c4b2ffbfbb48cac7f6c4d68d7c52c18d1336d53001cda3065a8eae50a8e54d82564f2a74874975065c404eec1a7154d6be3f3f767dccd31eb9b6f97c54607af4ab6eb025a3f8c2f2b56655588d65e6d5007"], 0x50}}, 0x8000) listen(r4, 0xa) mq_open(0x0, 0x40, 0x10a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) 1.326739097s ago: executing program 2 (id=2566): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x800800, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.164748705s ago: executing program 8 (id=2568): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4000000) 1.06864797s ago: executing program 7 (id=2569): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.012364072s ago: executing program 2 (id=2570): pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 986.928393ms ago: executing program 8 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/n\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/n\x00') 926.794786ms ago: executing program 8 (id=2572): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 901.076107ms ago: executing program 2 (id=2573): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 423.03415ms ago: executing program 8 (id=2574): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000480050001"], 0x80}}, 0x0) 187.059141ms ago: executing program 7 (id=2575): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 117.883474ms ago: executing program 7 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 90.847786ms ago: executing program 7 (id=2577): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount$9p_xen(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 53.892497ms ago: executing program 7 (id=2578): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, 0x0, &(0x7f00000003c0)) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 5.897389ms ago: executing program 7 (id=2579): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000780)={0x40, 0x14, 0xf, "40a7d337469509a83489bee31a4408"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) kernel console output (not intermixed with test programs): on call to 8913:0 failed 455/29201/-14, size 0-24 line 3350 [ 232.300674][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1667'. [ 232.332187][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 232.335194][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 232.337771][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 232.339192][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 232.340649][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 232.423894][ T24] usb write operation failed. (-71) [ 232.428315][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.430063][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 232.431267][ T24] usb 1-1: media controller created [ 232.432635][ T24] usb read operation failed. (-71) [ 232.433656][ T24] usb write operation failed. (-71) [ 232.436412][ T24] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 232.438851][ T24] usb 1-1: USB disconnect, device number 13 [ 232.440607][ T8809] udevd[8809]: setting mode of /dev/bus/usb/001/013 to 020664 failed: No such file or directory [ 232.442829][ T8809] udevd[8809]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 232.565105][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'. [ 232.594611][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 232.596329][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 232.733662][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.735108][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.838219][ T8937] binder: 8936:8937 ioctl 4018620d 0 returned -22 [ 233.177293][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.193121][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.460267][ T8926] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.462209][ T8926] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.463942][ T8926] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.465727][ T8926] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.700637][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 233.723384][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 233.725028][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 233.757748][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 233.773552][ T8967] binder: 8965:8967 ioctl 4018620d 0 returned -22 [ 234.357567][ T8989] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 234.421280][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 234.423867][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 234.425455][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 234.426753][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 234.428102][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 235.178064][ T9025] binder: 9024:9025 ioctl c0306201 0 returned -14 [ 235.205259][ T9027] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(1) [ 235.215112][ T9027] syz.6.1712: attempt to access beyond end of device [ 235.215112][ T9027] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 235.251432][ T9027] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 235.253101][ T9027] device-mapper: ioctl: error adding target to table [ 235.458074][ T9043] device syzkaller0 entered promiscuous mode [ 236.491192][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 236.493646][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 236.495578][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 236.496823][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 236.498205][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 238.571180][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 238.573887][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 238.575659][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 238.577095][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 238.578540][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 240.651183][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 240.653623][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 240.655257][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 240.656531][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 240.657846][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 242.731170][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 242.735688][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 242.737357][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 242.738603][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 242.739959][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 244.811172][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 244.814362][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 244.816029][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 244.817355][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 244.818736][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 246.350871][ T9056] __nla_validate_parse: 7 callbacks suppressed [ 246.350886][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 246.353784][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 246.400949][ T9079] binder: 9077:9079 ioctl c0306201 0 returned -14 [ 246.405513][ T9079] binder_user_error: 17 callbacks suppressed [ 246.405519][ T9079] binder: 9077:9079 got transaction to invalid handle, 1 [ 246.407586][ T9079] binder_debug: 18 callbacks suppressed [ 246.407599][ T9079] binder: 9079:9077 cannot find target node [ 246.409403][ T9079] binder: 9077:9079 transaction call to 0:0 failed 476/29201/-22, size 0-0 line 3062 [ 246.429077][ T8929] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.470987][ T9073] udevd[9073]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 246.476927][ T9093] fuse: Bad value for 'group_id' [ 246.619518][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1732'. [ 246.887797][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 246.892404][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 246.894935][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 246.896580][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 246.897845][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 246.899250][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 246.984219][ T9112] binder: 9111:9112 tried to acquire reference to desc 0, got 1 instead [ 246.988553][ T9112] binder: release 9111:9112 transaction 488 out, still active [ 246.990060][ T9112] binder: undelivered TRANSACTION_COMPLETE [ 246.993166][ T9112] binder: release 9111:9112 transaction 481 out, still active [ 246.994607][ T9112] binder: undelivered TRANSACTION_COMPLETE [ 247.005627][ T22] binder: send failed reply for transaction 488, target dead [ 247.007249][ T22] binder: send failed reply for transaction 481, target dead [ 247.075567][ T9127] device syzkaller0 entered promiscuous mode [ 247.078463][ T9125] trusted_key: encrypted_key: key user:syz not found [ 247.565958][ T9152] fuse: Bad value for 'group_id' [ 247.839844][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1746'. [ 248.821553][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.822850][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.971235][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 248.974184][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 248.975810][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 248.977081][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 248.978321][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 251.051230][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 251.053580][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 251.055155][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 251.056427][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 251.057742][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 253.131163][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 253.133580][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 253.135188][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 253.136426][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 253.137724][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 255.221163][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 255.224249][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 255.225753][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 255.226951][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 255.228069][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 257.302102][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 257.305278][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 257.306804][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 257.308074][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 257.309329][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 258.033937][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 258.041755][ T9154] tipc: Started in network mode [ 258.042702][ T9154] tipc: Node identity 2000004, cluster identity 4711 [ 258.043898][ T9154] tipc: Node number set to 33554436 [ 258.046309][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 258.139927][ T4334] Bluetooth: hci6: ISO packet for unknown connection handle 1588 [ 258.160433][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.162702][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.165846][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.167387][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.169861][ T9171] trusted_key: encrypted_key: key user:syz not found [ 258.479295][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.489964][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.203765][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1758'. [ 259.210997][ T9223] binder: 9222:9223 tried to acquire reference to desc 0, got 1 instead [ 259.219232][ T9223] binder: release 9222:9223 transaction 500 out, still active [ 259.223973][ T9223] binder: undelivered TRANSACTION_COMPLETE [ 259.228398][ T9223] binder: release 9222:9223 transaction 493 out, still active [ 259.238489][ T9223] binder: undelivered TRANSACTION_COMPLETE [ 259.298707][ T112] binder: send failed reply for transaction 500, target dead [ 259.300415][ T112] binder: send failed reply for transaction 493, target dead [ 259.332744][ T9235] gadgetfs: bound to dummy_udc driver [ 259.372339][ T5865] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 259.374936][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 259.376593][ T5865] (NULL device *): queue 0 connect admin queue failed (-6). [ 259.377931][ T5865] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 259.379313][ T5865] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 259.412362][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.413548][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.414814][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.417509][ T9244] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.425184][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.426590][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.427962][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.429239][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.430485][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.432199][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.434121][ T9244] wlan0 speed is unknown, defaulting to 1000 [ 259.455310][ T9200] nvme nvme2: failed to connect socket: -512 [ 259.705296][ T8929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.732121][ C1] gadgetfs: connected [ 259.734932][ T8929] gadgetfs: disconnected [ 259.892031][ T9234] gadgetfs: suspended from state 2 [ 259.934031][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.935746][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.959247][ T9265] printk: console [ttyS0] disabled [ 260.066698][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1766'. [ 260.145004][ T9289] binder: 9288:9289 tried to acquire reference to desc 0, got 1 instead [ 260.164672][ T4334] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 260.171565][ T8929] usb 1-1: device not accepting address 14, error -71 [ 260.682356][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1771'. [ 260.845326][ T9322] binder: 9321:9322 tried to acquire reference to desc 0, got 1 instead [ 260.853030][ T9322] binder: 9321:9322 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 260.856132][ T9322] binder: 9322 RLIMIT_NICE not set [ 260.857515][ T9322] binder: release 9321:9322 transaction 516 out, still active [ 260.859216][ T9322] binder: undelivered TRANSACTION_COMPLETE [ 260.860629][ T9322] binder: release 9321:9322 transaction 509 out, still active [ 260.864684][ T9322] binder: undelivered TRANSACTION_COMPLETE [ 261.017330][ T9326] fuse: Unknown parameter 'group_id00000000000000000000' [ 261.113474][ T9335] binder: 9334:9335 tried to acquire reference to desc 0, got 1 instead [ 261.207298][ T9345] siw: device registration error -23 [ 261.324730][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1784'. [ 261.417932][ T9355] binder: 9354:9355 tried to acquire reference to desc 0, got 1 instead [ 261.420833][ T9355] binder: 9354:9355 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 261.423363][ T9355] binder: 9355 RLIMIT_NICE not set [ 261.451336][ T4393] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 261.454652][ T8929] (NULL device *): Create Association LS failed: Association Allocation Failed [ 261.456538][ T4393] (NULL device *): queue 0 connect admin queue failed (-6). [ 261.457878][ T4393] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 261.459267][ T4393] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 261.486531][ T9358] fuse: Unknown parameter 'group_id00000000000000000000' [ 261.969513][ T4334] Bluetooth: hci6: ISO packet for unknown connection handle 1588 [ 262.144580][ T9375] binder: 9374:9375 tried to acquire reference to desc 0, got 1 instead [ 262.219390][ T9376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.221018][ T9376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.222833][ T9376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.224436][ T9376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.225913][ T9376] device geneve2 entered promiscuous mode [ 262.766801][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1798'. [ 262.980905][ T9393] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.080185][ T9404] siw: device registration error -23 [ 263.115573][ T9407] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1804'. [ 263.531247][ T8370] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 263.533778][ T8929] (NULL device *): Create Association LS failed: Association Allocation Failed [ 263.535427][ T8370] (NULL device *): queue 0 connect admin queue failed (-6). [ 263.536727][ T8370] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 263.538056][ T8370] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 263.855409][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1816'. [ 264.037606][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'. [ 264.134428][ T9436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.136018][ T9436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.137478][ T9436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.139024][ T9436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.140529][ T9436] device geneve2 entered promiscuous mode [ 264.733641][ T9438] binder_user_error: 3 callbacks suppressed [ 264.733651][ T9438] binder: 9426:9438 tried to acquire reference to desc 0, got 1 instead [ 264.749203][ T4334] Bluetooth: hci2: ISO packet for unknown connection handle 1588 [ 264.755696][ T9429] binder: 9426:9429 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 264.759403][ T9429] binder: 9429 RLIMIT_NICE not set [ 264.760703][ T9429] binder_debug: 14 callbacks suppressed [ 264.760714][ T9429] binder: release 9426:9429 transaction 560 out, still active [ 264.765417][ T9429] binder: undelivered TRANSACTION_COMPLETE [ 264.766750][ T9429] binder: release 9426:9429 transaction 553 out, still active [ 264.768042][ T9429] binder: undelivered TRANSACTION_COMPLETE [ 264.805524][ T9442] fuse: Bad value for 'user_id' [ 264.829779][ T4376] binder: send failed reply for transaction 560, target dead [ 264.831410][ T4376] binder: send failed reply for transaction 553, target dead [ 264.838972][ T9446] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1818'. [ 265.612095][ T39] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 265.616685][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 265.618464][ T39] (NULL device *): queue 0 connect admin queue failed (-6). [ 265.619815][ T39] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 265.623984][ T39] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 265.753747][ T9458] ima: Unable to open file: / (-13) [ 265.754028][ T9451] ima: policy update failed [ 265.756111][ T27] kauditd_printk_skb: 127 callbacks suppressed [ 265.756117][ T27] audit: type=1802 audit(265.740:1640): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1820" res=0 errno=0 [ 265.876407][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'. [ 265.902937][ T9471] fuse: Bad value for 'user_id' [ 265.950949][ T9473] binder: 9472:9473 tried to acquire reference to desc 0, got 1 instead [ 265.958641][ T9473] binder: 9472:9473 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 265.961058][ T9473] binder: 9473 RLIMIT_NICE not set [ 265.969144][ T9473] binder: release 9472:9473 transaction 572 out, still active [ 265.970463][ T9473] binder: undelivered TRANSACTION_COMPLETE [ 265.975139][ T9473] binder: release 9472:9473 transaction 565 out, still active [ 265.976592][ T9473] binder: undelivered TRANSACTION_COMPLETE [ 265.996163][ T9477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1830'. [ 266.891334][ T4334] Bluetooth: hci4: ISO packet for unknown connection handle 1588 [ 266.959371][ T9485] binder: 9484:9485 tried to acquire reference to desc 0, got 1 instead [ 266.970856][ T9485] binder: 9484:9485 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 266.975129][ T9485] binder: 9485 RLIMIT_NICE not set [ 267.555411][ T9509] fuse: Bad value for 'user_id' [ 267.667159][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 267.691273][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 267.693655][ T8929] (NULL device *): Create Association LS failed: Association Allocation Failed [ 267.695441][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 267.696924][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 267.698863][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 267.790679][ T9513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1843'. [ 267.902527][ T9520] binder: 9516:9520 tried to acquire reference to desc 0, got 1 instead [ 268.913077][ T9538] fuse: Bad value for 'fd' [ 269.009874][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1856'. [ 269.018038][ T9547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1857'. [ 269.535230][ T9562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.536943][ T9562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.538560][ T9562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.540100][ T9562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.541916][ T9562] device geneve2 entered promiscuous mode [ 269.791805][ T9437] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 269.794547][ T8929] (NULL device *): Create Association LS failed: Association Allocation Failed [ 269.796444][ T9437] (NULL device *): queue 0 connect admin queue failed (-6). [ 269.797975][ T9437] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 269.799493][ T9437] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 269.920142][ T9574] fuse: Bad value for 'fd' [ 269.960349][ T9578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1870'. [ 270.007540][ T9581] binder_user_error: 5 callbacks suppressed [ 270.007551][ T9581] binder: 9579:9581 tried to acquire reference to desc 0, got 1 instead [ 270.062725][ T9583] binder: 9579:9583 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 270.065362][ T9583] binder: 9583 RLIMIT_NICE not set [ 270.068673][ T9583] binder: 9579:9583 got transaction to invalid handle, 3 [ 270.074126][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1872'. [ 270.075307][ T9583] binder_debug: 20 callbacks suppressed [ 270.075322][ T9583] binder: 9583:9579 cannot find target node [ 270.078893][ T9581] binder_alloc: 9579: binder_alloc_buf, no vma [ 270.080105][ T9581] binder: cannot allocate buffer: vma cleared, target dead or dying [ 270.080133][ T9581] binder: 9579:9581 transaction call to 9579:0 failed 614/29189/-3, size 72-24 line 3247 [ 270.080930][ T9583] binder: 9579:9583 transaction call to 0:0 failed 613/29201/-22, size 0-0 line 3062 [ 270.089950][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1873'. [ 270.096077][ T9581] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.104066][ T8929] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.338329][ T9602] fuse: Bad value for 'fd' [ 270.363668][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1882'. [ 270.448183][ T9612] binder: 9611:9612 tried to acquire reference to desc 0, got 1 instead [ 270.450866][ T9612] binder: 9611:9612 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 270.453322][ T9612] binder: 9612 RLIMIT_NICE not set [ 270.454939][ T9612] binder: release 9611:9612 transaction 626 out, still active [ 270.456447][ T9612] binder: undelivered TRANSACTION_COMPLETE [ 270.457647][ T9612] binder: release 9611:9612 transaction 619 out, still active [ 270.459131][ T9612] binder: undelivered TRANSACTION_COMPLETE [ 270.514917][ T9617] loop1: detected capacity change from 0 to 65536 [ 270.529516][ T9617] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 270.604548][ T9620] block device autoloading is deprecated and will be removed. [ 270.606795][ T9620] syz.2.1887: attempt to access beyond end of device [ 270.606795][ T9620] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 270.654628][ T9617] device-mapper: ioctl: The device has no table. [ 270.676639][ T9620] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 270.678846][ T9620] device-mapper: ioctl: error adding target to table [ 270.828748][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1888'. [ 271.220838][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 271.245602][ T9637] fuse: Bad value for 'fd' [ 271.285340][ T9639] netlink: 'syz.4.1896': attribute type 11 has an invalid length. [ 271.309948][ T27] audit: type=1326 audit(271.290:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.6.1899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb51782e8 code=0x7ffc0000 [ 271.316834][ T27] audit: type=1326 audit(271.300:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.6.1899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffb51782e8 code=0x7ffc0000 [ 271.324408][ T27] audit: type=1326 audit(271.300:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.6.1899" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb51782e8 code=0x7ffc0000 [ 271.328825][ T9644] binder: 9642:9644 tried to acquire reference to desc 0, got 1 instead [ 271.336042][ T9644] binder: 9642:9644 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 271.338227][ T9644] binder: 9644 RLIMIT_NICE not set [ 271.514392][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1903'. [ 271.537389][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.539041][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.661056][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1906'. [ 271.723230][ T9664] fuse: Bad value for 'fd' [ 271.851204][ T6055] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 271.854249][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 271.855970][ T6055] (NULL device *): queue 0 connect admin queue failed (-6). [ 271.862461][ T6055] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 271.863971][ T6055] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 272.037621][ T9676] device-mapper: ioctl: Invalid ioctl structure: name cdev, dev f801 [ 272.092444][ T9684] trusted_key: encrypted_key: key user:syz not found [ 272.110023][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.112937][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.686164][ T9707] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 272.687941][ T9707] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 273.019549][ T9715] trusted_key: encrypted_key: key user:syz not found [ 273.076846][ T9719] binder: BINDER_SET_CONTEXT_MGR already set [ 273.079153][ T9719] binder: 9718:9719 ioctl 4018620d 20004a80 returned -16 [ 273.129595][ T9722] loop8: detected capacity change from 0 to 7 [ 273.133891][ T9722] Dev loop8: unable to read RDB block 7 [ 273.135145][ T9722] loop8: unable to read partition table [ 273.136330][ T9722] loop8: partition table beyond EOD, truncated [ 273.137547][ T9722] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.931835][ T39] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 273.951483][ T8929] (NULL device *): Create Association LS failed: Association Allocation Failed [ 273.953148][ T39] (NULL device *): queue 0 connect admin queue failed (-6). [ 273.954317][ T39] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 273.955732][ T39] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 274.012750][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.014892][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.016414][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.018020][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.019563][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.021020][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.241378][ T4376] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 274.490030][ T9745] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 274.504146][ T9745] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 274.535440][ T9747] trusted_key: encrypted_key: key user:syz not found [ 274.580072][ T9754] __nla_validate_parse: 6 callbacks suppressed [ 274.580083][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 274.651289][ T4376] usb 1-1: Using ep0 maxpacket: 8 [ 274.655640][ T4376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.657544][ T4376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.660322][ T9737] wlan0 speed is unknown, defaulting to 1000 [ 274.664411][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 274.667702][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 274.670283][ T4376] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.676250][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.690545][ T4376] hub 1-1:1.0: bad descriptor, ignoring hub [ 274.691864][ T4376] hub: probe of 1-1:1.0 failed with error -5 [ 274.693323][ T4376] cdc_wdm 1-1:1.0: skipping garbage [ 274.754573][ T9737] chnl_net:caif_netlink_parms(): no params data found [ 274.779604][ T4376] cdc_wdm 1-1:1.0: skipping garbage [ 274.787521][ T4376] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 274.789811][ T4376] cdc_wdm 1-1:1.0: Unknown control protocol [ 274.820137][ T9770] bond0 speed is unknown, defaulting to 1000 [ 274.822924][ T9770] bond0 speed is unknown, defaulting to 1000 [ 274.824352][ T9770] bond0 speed is unknown, defaulting to 1000 [ 274.827387][ T9770] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 275.011144][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.012725][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.014564][ T9737] device bridge_slave_0 entered promiscuous mode [ 275.016869][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.021325][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.023128][ T9737] device bridge_slave_1 entered promiscuous mode [ 275.024844][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.026277][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.035665][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.037400][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.039522][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.041014][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.045946][ T9773] binder_user_error: 10 callbacks suppressed [ 275.045955][ T9773] binder: 9772:9773 tried to acquire reference to desc 0, got 1 instead [ 275.050368][ T9737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.053427][ T9737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.055097][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.055332][ T9773] binder: 9772:9773 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 275.056444][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.058272][ T9773] binder: 9773 RLIMIT_NICE not set [ 275.064661][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.068933][ T9737] team0: Port device team_slave_0 added [ 275.072214][ T9737] team0: Port device team_slave_1 added [ 275.073591][ T9770] bond0 speed is unknown, defaulting to 1000 [ 275.091682][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.093166][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.098101][ T9737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.100981][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.102442][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.107640][ T9737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.142938][ T9737] device hsr_slave_0 entered promiscuous mode [ 275.191408][ T9737] device hsr_slave_1 entered promiscuous mode [ 275.231535][ T9737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.235732][ T9737] Cannot create hsr debugfs directory [ 275.253747][ T22] usb 1-1: USB disconnect, device number 16 [ 275.264668][ T9780] trusted_key: encrypted_key: key user:syz not found [ 275.320313][ T9737] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.362762][ T9737] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.374997][ T9785] 9pnet_fd: Insufficient options for proto=fd [ 275.402769][ T9737] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.453209][ T9737] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.499539][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.500995][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.503169][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.504404][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.666454][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.675969][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1958'. [ 275.690407][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.694258][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.696213][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.705517][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 275.726172][ T9737] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.733165][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.739035][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.750025][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.751411][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.799318][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.814027][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.826670][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.828006][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.860996][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.870835][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.879658][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.890280][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.898128][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.908228][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.927350][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.956970][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.968699][ T9737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.970825][ T9737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.984787][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.988821][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.997624][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.013600][ T4380] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 276.019804][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 276.024518][ T4380] (NULL device *): queue 0 connect admin queue failed (-6). [ 276.029896][ T9802] binder: 9801:9802 tried to acquire reference to desc 0, got 1 instead [ 276.033935][ T4380] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 276.037621][ T4380] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 276.048460][ T9802] binder: 9801:9802 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 276.058951][ T9802] binder: 9802 RLIMIT_NICE not set [ 276.065978][ T9802] binder_debug: 29 callbacks suppressed [ 276.065985][ T9802] binder: release 9801:9802 transaction 680 out, still active [ 276.077420][ T9802] binder: undelivered TRANSACTION_COMPLETE [ 276.085151][ T9802] binder: release 9801:9802 transaction 673 out, still active [ 276.089741][ T9802] binder: undelivered TRANSACTION_COMPLETE [ 276.091500][ T4334] Bluetooth: hci5: command 0x0409 tx timeout [ 276.137734][ T8930] binder: send failed reply for transaction 680, target dead [ 276.139601][ T8930] binder: send failed reply for transaction 673, target dead [ 276.280024][ T4376] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 276.282544][ T4376] wiimote 0005:057E:0306.0003: New device registered [ 276.285641][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.287187][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.289451][ T9808] wiimote 0005:057E:0306.0003: Device removed [ 276.309960][ T9814] fido_id[9814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 276.336376][ T9737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.341542][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.342913][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.498153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.499987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.516271][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.518179][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.520286][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.529174][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.537379][ T9737] device veth0_vlan entered promiscuous mode [ 276.552414][ T9737] device veth1_vlan entered promiscuous mode [ 276.554555][ T9792] syz.4.1957 (9792): drop_caches: 2 [ 276.599127][ T9737] device veth0_macvtap entered promiscuous mode [ 276.602790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.604691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.606347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.608427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.614026][ T9824] trusted_key: encrypted_key: key user:syz not found [ 276.614640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.624005][ T9737] device veth1_macvtap entered promiscuous mode [ 276.632894][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.635351][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.641787][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.649093][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.653674][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.655469][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.657222][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.664634][ T9737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.667002][ T9737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.671029][ T9737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.675247][ T9737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.731746][ T1618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.734633][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.736133][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.739679][ T1618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.741667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.744856][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.760082][ T9833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1969'. [ 276.766400][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 276.789462][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.796788][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.945869][ T9841] binder: 9840:9841 tried to acquire reference to desc 0, got 1 instead [ 276.948628][ T9841] binder: 9840:9841 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 276.953071][ T9841] binder: 9841 RLIMIT_NICE not set [ 276.954945][ T9841] binder: release 9840:9841 transaction 692 out, still active [ 276.956591][ T9841] binder: undelivered TRANSACTION_COMPLETE [ 276.957899][ T9841] binder: release 9840:9841 transaction 685 out, still active [ 276.959346][ T9841] binder: undelivered TRANSACTION_COMPLETE [ 277.182436][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1974'. [ 277.186773][ T9850] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.188541][ T9850] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.292167][ T4376] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 277.397592][ T4376] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input9 [ 277.459108][ T4376] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input10 [ 277.469291][ T4376] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input8 [ 277.546518][ T9859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1980'. [ 277.549390][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 277.549983][ T9858] binder: 9857:9858 tried to acquire reference to desc 0, got 1 instead [ 277.570861][ T9858] binder_alloc: 9857: binder_alloc_buf, no vma [ 277.660690][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 277.663737][ T9868] binder: 9865:9868 ioctl 4018620d 20000100 returned -16 [ 277.688710][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 277.690012][ T9868] binder: 9865:9868 ioctl 4018620d 20004a80 returned -16 [ 278.335644][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 278.355898][ T4393] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 278.488518][ T8930] (NULL device *): Create Association LS failed: Association Allocation Failed [ 278.875365][ T4393] (NULL device *): queue 0 connect admin queue failed (-6). [ 278.876958][ T4393] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 278.879340][ T4393] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 278.900069][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.906109][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.916054][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.918454][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.719998][ T9896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1993'. [ 279.723143][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 279.743614][ T9894] FAULT_INJECTION: forcing a failure. [ 279.743614][ T9894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.747313][ T9894] CPU: 0 PID: 9894 Comm: syz.6.1990 Not tainted syzkaller #0 [ 279.748758][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 279.750890][ T9894] Call trace: [ 279.751530][ T9894] dump_backtrace+0x1c4/0x1f0 [ 279.752447][ T9894] show_stack+0x2c/0x3c [ 279.753261][ T9894] __dump_stack+0x30/0x40 [ 279.754066][ T9894] dump_stack_lvl+0xf4/0x15c [ 279.754889][ T9894] dump_stack+0x1c/0x5c [ 279.755632][ T9894] should_fail_ex+0x3cc/0x524 [ 279.756497][ T9894] should_fail+0x14/0x24 [ 279.757287][ T9894] get_futex_key+0x904/0xfb0 [ 279.758153][ T9894] futex_wake+0x10c/0x458 [ 279.758972][ T9894] do_futex+0x2c4/0x340 [ 279.759707][ T9894] __arm64_sys_futex+0x390/0x414 [ 279.760597][ T9894] invoke_syscall+0x98/0x290 [ 279.761430][ T9894] el0_svc_common+0x13c/0x258 [ 279.762246][ T9894] do_el0_svc+0x5c/0x134 [ 279.763003][ T9894] el0_svc+0x58/0x128 [ 279.763712][ T9894] el0t_64_sync_handler+0x84/0xf0 [ 279.764642][ T9894] el0t_64_sync+0x18c/0x190 [ 279.784968][ T9900] block nbd7: NBD_DISCONNECT [ 279.908179][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.920525][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.136012][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.139168][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.411363][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 280.595641][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.597544][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.607674][ T9926] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2005'. [ 280.610372][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 280.891470][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 280.893698][ T112] (NULL device *): Create Association LS failed: Association Allocation Failed [ 280.897692][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 280.899045][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 280.900302][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 281.220749][ T9939] binder_user_error: 11 callbacks suppressed [ 281.220760][ T9939] binder: 9938:9939 tried to acquire reference to desc 0, got 1 instead [ 281.233875][ T9939] binder: 9938:9939 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 281.239245][ T9939] binder: 9939 RLIMIT_NICE not set [ 281.241262][ T9939] binder: 9939 RLIMIT_NICE not set [ 281.244597][ T9939] binder: 9938:9939 ioctl c0306201 0 returned -14 [ 281.245978][ T9939] binder_debug: 20 callbacks suppressed [ 281.245986][ T9939] binder: release 9938:9939 transaction 718 in, still active [ 281.248224][ T9939] binder: send failed reply for transaction 718 to 9938:9939 [ 281.249781][ T9939] binder: undelivered TRANSACTION_COMPLETE [ 281.251065][ T9939] binder: undelivered TRANSACTION_ERROR: 29189 [ 281.287495][ T9943] FAULT_INJECTION: forcing a failure. [ 281.287495][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 281.289990][ T9943] CPU: 0 PID: 9943 Comm: syz.6.2012 Not tainted syzkaller #0 [ 281.291309][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 281.293174][ T9943] Call trace: [ 281.293800][ T9943] dump_backtrace+0x1c4/0x1f0 [ 281.294702][ T9943] show_stack+0x2c/0x3c [ 281.295486][ T9943] __dump_stack+0x30/0x40 [ 281.296305][ T9943] dump_stack_lvl+0xf4/0x15c [ 281.297206][ T9943] dump_stack+0x1c/0x5c [ 281.298026][ T9943] should_fail_ex+0x3cc/0x524 [ 281.298903][ T9943] __should_failslab+0xc0/0x11c [ 281.299812][ T9943] should_failslab+0x10/0x28 [ 281.300682][ T9943] __kmem_cache_alloc_node+0x7c/0x318 [ 281.301687][ T9943] __kmalloc+0xc4/0x180 [ 281.302460][ T9943] tomoyo_supervisor+0xa7c/0xf5c [ 281.303368][ T9943] tomoyo_mount_permission+0x590/0x798 [ 281.304406][ T9943] tomoyo_sb_mount+0x48/0x60 [ 281.305281][ T9943] security_sb_mount+0x94/0xd4 [ 281.306179][ T9943] path_mount+0xb8/0xe6c [ 281.306992][ T9943] __arm64_sys_mount+0x4a0/0x5a0 [ 281.307908][ T9943] invoke_syscall+0x98/0x290 [ 281.308792][ T9943] el0_svc_common+0x13c/0x258 [ 281.309668][ T9943] do_el0_svc+0x5c/0x134 [ 281.310438][ T9943] el0_svc+0x58/0x128 [ 281.311210][ T9943] el0t_64_sync_handler+0x84/0xf0 [ 281.312191][ T9943] el0t_64_sync+0x18c/0x190 [ 281.685437][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.687561][ T9958] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2017'. [ 281.694414][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.706512][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2017'. [ 281.730667][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.732574][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.911545][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.915954][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.183563][ T9971] binder: 9970:9971 tried to acquire reference to desc 0, got 1 instead [ 282.186291][ T9971] binder: 9970:9971 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 282.188753][ T9971] binder: 9971 RLIMIT_NICE not set [ 282.189684][ T9971] binder: 9971 RLIMIT_NICE not set [ 282.190740][ T9971] binder: 9970:9971 ioctl c0306201 0 returned -14 [ 282.193838][ T9971] binder: release 9970:9971 transaction 729 in, still active [ 282.195378][ T9971] binder: send failed reply for transaction 729 to 9970:9971 [ 282.197018][ T9971] binder: undelivered TRANSACTION_COMPLETE [ 282.198213][ T9971] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.220519][ T9973] device-mapper: ioctl: Invalid ioctl structure: name t, dev f802 [ 282.469812][ T9990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2031'. [ 282.491302][ T4334] Bluetooth: hci5: command 0x0419 tx timeout [ 282.501507][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 282.625165][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2032'. [ 282.973684][ T4393] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 282.977759][ T8930] (NULL device *): Create Association LS failed: Association Allocation Failed [ 282.980812][ T4393] (NULL device *): queue 0 connect admin queue failed (-6). [ 283.083446][ T4393] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 283.084769][ T4393] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 283.094580][T10002] binder: 10001:10002 tried to acquire reference to desc 0, got 1 instead [ 283.097327][T10002] binder: 10001:10002 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 283.099791][T10002] binder: 10001:10002 ioctl c0306201 0 returned -14 [ 283.101157][T10002] binder: release 10001:10002 transaction 740 in, still active [ 283.102605][T10002] binder: send failed reply for transaction 740 to 10001:10002 [ 283.250026][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 283.255817][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.257354][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.264513][T10017] file system registered [ 283.279991][ T8547] ffs_data_put(): freeing [ 283.587202][T10041] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.654336][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.658315][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.781327][ T4724] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 283.961219][ T4724] usb 1-1: Using ep0 maxpacket: 8 [ 283.969816][ T4724] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 283.990400][ T4724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.013448][ T4724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.072223][ T4724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.110780][ T4724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.126074][ T4724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 284.130900][ T4724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.700671][ T4724] usb 1-1: GET_CAPABILITIES returned 0 [ 284.701953][ T4724] usbtmc 1-1:16.0: can't read capabilities [ 285.302831][ T39] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 285.346644][ T4724] (NULL device *): Create Association LS failed: Association Allocation Failed [ 285.350425][ T39] (NULL device *): queue 0 connect admin queue failed (-6). [ 285.351892][ T39] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 285.353232][ T39] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 285.362008][ T4724] usb 1-1: USB disconnect, device number 17 [ 285.413060][T10085] binder_alloc: 10084: binder_alloc_buf, no vma [ 285.872946][T10094] __nla_validate_parse: 6 callbacks suppressed [ 285.872957][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 285.876826][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 286.020967][T10104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 286.392134][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.394243][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.528475][T10122] binder_user_error: 19 callbacks suppressed [ 286.528485][T10122] binder: 10120:10122 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 286.539754][T10122] binder: 10122 RLIMIT_NICE not set [ 286.580280][T10123] binder: 10120:10123 got reply transaction with no transaction stack [ 286.582006][T10123] binder_debug: 20 callbacks suppressed [ 286.582012][T10123] binder: 10120:10123 transaction reply to 0:0 failed 787/29201/-71, size 0-0 line 2963 [ 286.628167][T10125] binder: 10124:10125 tried to acquire reference to desc 0, got 1 instead [ 286.637439][T10125] binder: 10124:10125 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 286.647563][T10125] binder: 10125 RLIMIT_NICE not set [ 286.649684][T10125] binder: 10125 RLIMIT_NICE not set [ 286.657022][T10125] binder: release 10124:10125 transaction 792 in, still active [ 286.658487][T10125] binder: send failed reply for transaction 792 to 10124:10125 [ 286.663122][T10125] binder: undelivered TRANSACTION_COMPLETE [ 286.665310][T10125] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.776527][T10128] device geneve2 entered promiscuous mode [ 287.017882][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 287.020666][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2089'. [ 287.062130][T10116] syz.6.2076 (10116): drop_caches: 2 [ 287.162086][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 287.501900][ T9437] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 287.508839][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 287.510579][ T9437] (NULL device *): queue 0 connect admin queue failed (-6). [ 287.512013][ T9437] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 287.514475][ T9437] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 287.536049][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.565284][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.570494][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.753962][T10157] binder: 10156:10157 tried to acquire reference to desc 0, got 1 instead [ 287.758016][T10157] binder: 10156:10157 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 287.760334][T10157] binder: 10157 RLIMIT_NICE not set [ 287.763932][T10157] binder: release 10156:10157 transaction 803 in, still active [ 287.765245][T10157] binder: send failed reply for transaction 803 to 10156:10157 [ 287.766869][T10157] binder: undelivered TRANSACTION_COMPLETE [ 287.767996][T10157] binder: undelivered TRANSACTION_ERROR: 29189 [ 288.133015][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.134680][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.595180][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 288.598508][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 288.718189][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2103'. [ 288.839674][T10185] device tunl0 entered promiscuous mode [ 288.840906][T10185] netlink: 'syz.4.2105': attribute type 4 has an invalid length. [ 288.843122][T10185] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2105'. [ 288.869055][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.870785][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.468339][T10205] syz.7.2107 (10205): drop_caches: 2 [ 289.532077][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 289.539102][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 289.540843][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 289.544814][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 289.556417][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 290.279962][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.286592][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.450058][T10232] jffs2: notice: (10232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.546071][T10236] wlan0 speed is unknown, defaulting to 1000 [ 290.549059][T10236] bond0 speed is unknown, defaulting to 1000 [ 290.848347][T10240] netlink: 'syz.6.2123': attribute type 1 has an invalid length. [ 290.854902][T10240] device bond1 entered promiscuous mode [ 290.864687][T10240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.888370][T10240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.896096][T10240] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 290.898156][T10240] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 290.904201][T10240] bond1: (slave wireguard0): making interface the new active one [ 290.905842][T10240] device wireguard0 entered promiscuous mode [ 290.907857][T10240] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 290.909643][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 290.964850][T10250] __nla_validate_parse: 4 callbacks suppressed [ 290.964863][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2126'. [ 290.969325][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2126'. [ 291.611210][ T4380] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 291.613681][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 291.616291][ T4380] (NULL device *): queue 0 connect admin queue failed (-6). [ 291.617558][ T4380] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 291.619635][ T4380] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 291.738977][ T112] binder_debug: 7 callbacks suppressed [ 291.738995][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.744679][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2131'. [ 292.218007][T10289] device syzkaller0 entered promiscuous mode [ 292.233178][T10289] tipc: Enabled bearer , priority 0 [ 292.235042][T10287] tipc: Resetting bearer [ 292.334082][T10287] tipc: Disabling bearer [ 292.339101][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 292.344328][T10286] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 292.378901][T10293] netlink: 'syz.7.2135': attribute type 49 has an invalid length. [ 292.449948][T10308] binder_user_error: 11 callbacks suppressed [ 292.449959][T10308] binder: 10307:10308 tried to acquire reference to desc 0, got 1 instead [ 292.457274][T10308] binder: 10307:10308 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 292.459681][T10308] binder: 10308 RLIMIT_NICE not set [ 292.460666][T10308] binder: 10308 RLIMIT_NICE not set [ 292.462684][T10308] binder: 10308 RLIMIT_NICE not set [ 292.463799][T10308] binder_alloc: 10307: binder_alloc_buf, no vma [ 292.465023][T10308] binder: cannot allocate buffer: vma cleared, target dead or dying [ 292.465055][T10308] binder: 10307:10308 transaction reply to 10307:10308 failed 830/29189/-3, size 0-0 line 3247 [ 292.468869][T10308] binder: send failed reply for transaction 829 to 10307:10308 [ 292.470999][ T112] binder: undelivered TRANSACTION_COMPLETE [ 292.473495][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 292.485403][ T112] binder: undelivered TRANSACTION_ERROR: 29190 [ 292.590767][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2145'. [ 292.644779][T10293] device ip6gretap0 entered promiscuous mode [ 292.653262][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 292.662733][ T22] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 292.706416][T10319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.708755][T10319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.852620][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 292.855012][ T22] usb 1-1: config 14 has an invalid interface number: 210 but max is 0 [ 292.856478][ T22] usb 1-1: config 14 has no interface number 0 [ 292.857616][ T22] usb 1-1: config 14 interface 210 has no altsetting 0 [ 292.860479][ T22] usb 1-1: New USB device found, idVendor=19d2, idProduct=b863, bcdDevice=b6.cc [ 292.862648][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.864092][ T22] usb 1-1: Product: syz [ 292.864868][ T22] usb 1-1: Manufacturer: syz [ 292.865729][ T22] usb 1-1: SerialNumber: syz [ 293.077882][ T22] usb 1-1: bad CDC descriptors [ 293.082608][ T22] usb 1-1: USB disconnect, device number 18 [ 293.652298][T10364] binder: 10363:10364 tried to acquire reference to desc 0, got 1 instead [ 293.656127][T10364] binder: 10363:10364 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 293.660930][T10364] binder: 10364 RLIMIT_NICE not set [ 293.663418][T10364] binder: 10364 RLIMIT_NICE not set [ 293.664404][T10364] binder: 10364 RLIMIT_NICE not set [ 293.667523][T10364] binder_alloc: 10363: binder_alloc_buf, no vma [ 293.669805][T10364] binder: cannot allocate buffer: vma cleared, target dead or dying [ 293.669831][T10364] binder: 10363:10364 transaction reply to 10363:10364 failed 836/29189/-3, size 0-0 line 3247 [ 293.675556][T10364] binder: send failed reply for transaction 835 to 10363:10364 [ 293.691146][ T4380] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 293.693517][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 293.695687][ T4380] (NULL device *): queue 0 connect admin queue failed (-6). [ 293.697129][ T4380] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 293.698391][ T4380] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 294.283729][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2159'. [ 294.305703][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 294.315810][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 294.425159][T10383] FAULT_INJECTION: forcing a failure. [ 294.425159][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.427536][T10383] CPU: 1 PID: 10383 Comm: syz.2.2162 Not tainted syzkaller #0 [ 294.428797][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 294.430448][T10383] Call trace: [ 294.431016][T10383] dump_backtrace+0x1c4/0x1f0 [ 294.431865][T10383] show_stack+0x2c/0x3c [ 294.432669][T10383] __dump_stack+0x30/0x40 [ 294.433409][T10383] dump_stack_lvl+0xf4/0x15c [ 294.434258][T10383] dump_stack+0x1c/0x5c [ 294.434980][T10383] should_fail_ex+0x3cc/0x524 [ 294.435823][T10383] should_fail+0x14/0x24 [ 294.436590][T10383] should_fail_usercopy+0x20/0x30 [ 294.437494][T10383] __arm64_sys_signalfd4+0x110/0x278 [ 294.438416][T10383] invoke_syscall+0x98/0x290 [ 294.439254][T10383] el0_svc_common+0x13c/0x258 [ 294.440109][T10383] do_el0_svc+0x5c/0x134 [ 294.440906][T10383] el0_svc+0x58/0x128 [ 294.441658][T10383] el0t_64_sync_handler+0x84/0xf0 [ 294.442619][T10383] el0t_64_sync+0x18c/0x190 [ 294.556994][T10386] input: syz0 as /devices/virtual/input/input11 [ 294.558318][T10386] input: failed to attach handler leds to device input11, error: -6 [ 294.865796][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.869489][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.873694][T10392] FAULT_INJECTION: forcing a failure. [ 294.873694][T10392] name failslab, interval 1, probability 0, space 0, times 0 [ 294.876035][T10392] CPU: 1 PID: 10392 Comm: syz.2.2164 Not tainted syzkaller #0 [ 294.877358][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 294.879354][T10392] Call trace: [ 294.879963][T10392] dump_backtrace+0x1c4/0x1f0 [ 294.880867][T10392] show_stack+0x2c/0x3c [ 294.881659][T10392] __dump_stack+0x30/0x40 [ 294.882468][T10392] dump_stack_lvl+0xf4/0x15c [ 294.883336][T10392] dump_stack+0x1c/0x5c [ 294.884132][T10392] should_fail_ex+0x3cc/0x524 [ 294.885013][T10392] __should_failslab+0xc0/0x11c [ 294.885918][T10392] should_failslab+0x10/0x28 [ 294.886793][T10392] kmem_cache_alloc+0x88/0x310 [ 294.887629][T10392] __kernfs_new_node+0xec/0x5fc [ 294.888512][T10392] kernfs_new_node+0x120/0x230 [ 294.889382][T10392] __kernfs_create_file+0x60/0x2e0 [ 294.890342][T10392] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 294.891322][T10392] internal_create_group+0x3e8/0xb24 [ 294.892289][T10392] sysfs_create_groups+0x60/0x134 [ 294.893205][T10392] device_add_attrs+0xdc/0x6f8 [ 294.894085][T10392] device_add+0x5ac/0xe4c [ 294.894856][T10392] netdev_register_kobject+0x170/0x2f4 [ 294.895839][T10392] register_netdevice+0xf28/0x1650 [ 294.896740][T10392] register_vlan_dev+0x350/0x734 [ 294.897573][T10392] register_vlan_device+0x2c8/0x3fc [ 294.898484][T10392] vlan_ioctl_handler+0x2c8/0x64c [ 294.899365][T10392] sock_ioctl+0x570/0x828 [ 294.900133][T10392] __arm64_sys_ioctl+0x14c/0x1c8 [ 294.900980][T10392] invoke_syscall+0x98/0x290 [ 294.901756][T10392] el0_svc_common+0x13c/0x258 [ 294.902548][T10392] do_el0_svc+0x5c/0x134 [ 294.903273][T10392] el0_svc+0x58/0x128 [ 294.903966][T10392] el0t_64_sync_handler+0x84/0xf0 [ 294.904828][T10392] el0t_64_sync+0x18c/0x190 [ 295.135395][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.142719][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.780701][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 295.784885][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 295.798761][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 295.800143][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 295.802776][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 295.838599][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2173'. [ 296.024637][T10413] __nla_validate_parse: 1 callbacks suppressed [ 296.024649][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2174'. [ 296.265969][T10430] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.354137][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 296.369633][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 297.301854][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.307137][T10460] binder_debug: 13 callbacks suppressed [ 297.307144][T10460] binder: 10458:10460 transaction reply to 0:0 failed 854/29201/-71, size 0-0 line 2963 [ 297.324385][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.350384][ T4376] binder: release 10458:10460 transaction 853 out, still active [ 297.364442][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 297.415984][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.417376][ T4376] binder: send failed reply for transaction 853, target dead [ 297.733407][T10473] tipc: Started in network mode [ 297.736641][T10473] tipc: Node identity ac1414aa, cluster identity 4711 [ 297.740471][T10473] tipc: New replicast peer: 172.20.20.187 [ 297.742324][T10473] tipc: Enabled bearer , priority 10 [ 297.861212][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 297.863575][ T22] (NULL device *): Create Association LS failed: Association Allocation Failed [ 297.865125][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 297.866329][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 297.867787][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 297.891511][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.895377][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.005219][T10492] binder_user_error: 6 callbacks suppressed [ 298.005231][T10492] binder: 10491:10492 tried to acquire reference to desc 0, got 1 instead [ 298.008456][T10492] binder: 10491:10492 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 298.010705][T10492] binder: 10492 RLIMIT_NICE not set [ 298.059890][T10495] binder: 10491:10495 got reply transaction with no transaction stack [ 298.062001][T10495] binder: 10491:10495 transaction reply to 0:0 failed 859/29201/-71, size 0-0 line 2963 [ 298.735031][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.738676][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.752521][ T4376] tipc: Node number set to 2886997162 [ 298.842812][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 299.404413][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2222'. [ 299.618172][T10544] binder: 10543:10544 tried to acquire reference to desc 0, got 1 instead [ 299.623120][T10544] binder: 10543:10544 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 299.629262][T10544] binder: 10544 RLIMIT_NICE not set [ 299.673947][T10547] binder: 10543:10547 got reply transaction with no transaction stack [ 299.675799][T10547] binder: 10543:10547 transaction reply to 0:0 failed 864/29201/-71, size 0-0 line 2963 [ 299.931281][ T9437] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 299.944448][ T4724] (NULL device *): Create Association LS failed: Association Allocation Failed [ 299.946259][ T9437] (NULL device *): queue 0 connect admin queue failed (-6). [ 299.947605][ T9437] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 299.949014][ T9437] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 300.023173][T10565] siw: device registration error -23 [ 300.035295][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.037081][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.446083][ T4724] binder: undelivered TRANSACTION_ERROR: 29201 [ 301.410456][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.412584][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.415425][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.417118][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.617290][T10609] SET target dimension over the limit! [ 301.755135][T10615] binder: 10614:10615 tried to acquire reference to desc 0, got 1 instead [ 301.757158][T10615] binder: 10614:10615 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 302.021305][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 302.023978][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 302.025821][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 302.027550][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 302.029118][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 302.419712][T10617] binder: 10614:10617 transaction reply to 0:0 failed 869/29201/-71, size 0-0 line 2963 [ 302.606620][ T8933] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.068253][T10646] input: syz0 as /devices/virtual/input/input12 [ 303.069639][T10646] input: failed to attach handler leds to device input12, error: -6 [ 303.902576][T10672] binder: BINDER_SET_CONTEXT_MGR already set [ 303.903766][T10672] binder: 10671:10672 ioctl 4018620d 20004a80 returned -16 [ 303.905378][T10672] binder_user_error: 2 callbacks suppressed [ 303.905384][T10672] binder: 10671:10672 got transaction to invalid handle, 1 [ 303.907740][T10672] binder: 10672:10671 cannot find target node [ 303.908877][T10672] binder: 10671:10672 transaction call to 0:0 failed 872/29201/-22, size 0-0 line 3062 [ 303.919772][T10672] binder: 10671:10672 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 303.922776][T10672] binder: 10672 RLIMIT_NICE not set [ 303.930810][T10676] wlan0 speed is unknown, defaulting to 1000 [ 303.933570][T10676] bond0 speed is unknown, defaulting to 1000 [ 303.970768][T10678] binder: 10671:10678 got reply transaction with no transaction stack [ 303.972521][T10678] binder: 10671:10678 transaction reply to 0:0 failed 873/29201/-71, size 0-0 line 2963 [ 304.054570][ T4376] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 304.069670][T10685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.075773][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2274'. [ 304.078194][T10685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.091271][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 304.093747][ T4724] (NULL device *): Create Association LS failed: Association Allocation Failed [ 304.095400][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 304.096906][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 304.098320][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 304.145939][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.149741][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.194274][T10698] nvmet: disable ns before setting buffered_io value. [ 304.243054][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.245131][ T4376] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.247157][ T4376] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 304.248553][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.251757][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.258241][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.258645][ T4376] usb 1-1: config 0 descriptor?? [ 304.665867][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.667316][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.668545][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.677358][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.678626][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.680891][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.694788][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.698865][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.701541][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.703970][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.706395][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.708625][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.711035][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.713830][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.716414][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.719129][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.737500][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.738683][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.739842][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.773135][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.774383][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.775547][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.776678][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.777795][ T4376] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0 [ 304.828386][ T4376] ntrig 0003:1B96:0004.0004: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 304.843246][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.844456][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.877844][ T4376] ntrig 0003:1B96:0004.0004: Firmware version: 4.14.14.11.7 (7978 7fd1) [ 305.080819][ T4724] usb 1-1: USB disconnect, device number 19 [ 305.668572][T10747] 9pnet_virtio: no channels available for device syz [ 306.206933][ T4393] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 306.601052][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 306.951803][T10759] binder: 10758:10759 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 307.164004][ T4393] (NULL device *): queue 0 connect admin queue failed (-6). [ 307.165257][ T4393] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 307.166545][ T4393] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 307.322863][T10759] binder: 10758:10759 got transaction to invalid handle, 1 [ 307.324191][T10759] binder: 10759:10758 cannot find target node [ 307.325204][T10759] binder: 10758:10759 transaction call to 0:0 failed 875/29201/-22, size 0-0 line 3062 [ 307.327044][T10759] binder: 10758:10759 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 307.329043][T10759] binder: 10759 RLIMIT_NICE not set [ 307.357995][T10766] nvme_fcloop: unknown parameter or missing value 'ww' [ 307.377272][T10762] binder: 10758:10762 got reply transaction with no transaction stack [ 307.378918][T10762] binder: 10758:10762 transaction reply to 0:0 failed 876/29201/-71, size 0-0 line 2963 [ 307.482750][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.489105][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.580651][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.583274][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.641240][ T8933] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 307.781271][ T4334] Bluetooth: hci7: command 0x1003 tx timeout [ 307.783198][ T4330] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 307.852096][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 308.003881][T10785] device veth0_to_bond entered promiscuous mode [ 308.015191][ T8933] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 308.016791][ T8933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.018088][ T8933] usb 1-1: Product: syz [ 308.020232][ T8933] usb 1-1: Manufacturer: syz [ 308.021073][ T8933] usb 1-1: SerialNumber: syz [ 308.520889][ T8933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 308.560413][T10812] binder: 10811:10812 got transaction to invalid handle, 1 [ 308.562080][T10812] binder: 10812:10811 cannot find target node [ 308.565386][T10812] binder: 10811:10812 transaction call to 0:0 failed 880/29201/-22, size 0-0 line 3062 [ 308.646673][T10822] binder: 10811:10822 transaction reply to 0:0 failed 881/29201/-71, size 0-0 line 2963 [ 308.926509][ T8933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 309.041892][ T8933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 309.043905][ T8933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 309.071730][ T8933] lan78xx: probe of 1-1:1.0 failed with error -32 [ 309.076431][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2310'. [ 309.211214][ T4393] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 309.214172][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 309.215983][ T4393] (NULL device *): queue 0 connect admin queue failed (-6). [ 309.217351][ T4393] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 309.218793][ T4393] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 309.282880][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.285491][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.392745][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.395840][ T8933] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.566616][T10855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 309.567776][T10855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.569353][T10855] vhci_hcd vhci_hcd.0: Device attached [ 309.841234][ T8930] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 310.251785][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.253298][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.346259][T10856] vhci_hcd: connection reset by peer [ 310.349491][ T5485] vhci_hcd: stop threads [ 310.350262][ T5485] vhci_hcd: release socket [ 310.359119][ T5485] vhci_hcd: disconnect device [ 310.382749][ T8933] usb 1-1: USB disconnect, device number 20 [ 310.440281][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'. [ 310.836894][T10879] binder_user_error: 3 callbacks suppressed [ 310.836905][T10879] binder: tried to use weak ref as strong ref [ 310.843392][T10879] binder: 10878:10879 Acquire 1 refcount change on invalid ref 0 ret -22 [ 310.846906][T10879] binder: 10878:10879 got transaction to invalid handle, 1 [ 310.868239][T10879] binder: 10879:10878 cannot find target node [ 310.873818][T10879] binder: 10878:10879 transaction call to 0:0 failed 884/29201/-22, size 0-0 line 3062 [ 310.878086][T10879] binder: 10878:10879 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 310.880469][T10879] binder: 10879 RLIMIT_NICE not set [ 310.886388][T10879] binder: 10878:10879 got reply transaction with no transaction stack [ 310.889084][ T4330] Bluetooth: Wrong link type (-71) [ 310.890070][T10879] binder: 10878:10879 transaction reply to 0:0 failed 885/29201/-71, size 0-0 line 2963 [ 310.923055][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.924974][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.133001][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2332'. [ 311.258908][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.260710][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.291248][ T1618] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 311.293744][ T4724] (NULL device *): Create Association LS failed: Association Allocation Failed [ 311.295286][ T1618] (NULL device *): queue 0 connect admin queue failed (-6). [ 311.296483][ T1618] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 311.297766][ T1618] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 311.387862][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2334'. [ 311.498893][T10909] binder: tried to use weak ref as strong ref [ 311.500021][T10909] binder: 10906:10909 Acquire 1 refcount change on invalid ref 0 ret -22 [ 311.505921][T10909] binder: 10906:10909 got transaction to invalid handle, 1 [ 311.507296][T10909] binder: 10906:10909 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 311.908906][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2342'. [ 312.022483][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 312.218812][T10940] ªªªªªª: renamed from vlan0 [ 312.340128][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2348'. [ 312.482273][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.484226][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.657760][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'. [ 312.926089][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2356'. [ 313.049832][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2357'. [ 313.075122][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 313.371291][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 313.373994][ T4376] (NULL device *): Create Association LS failed: Association Allocation Failed [ 313.375853][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 313.377330][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 313.395753][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 313.512974][T10975] binder: BINDER_SET_CONTEXT_MGR already set [ 313.514357][T10975] binder: 10974:10975 ioctl 4018620d 20004a80 returned -16 [ 313.518651][T10975] binder_debug: 12 callbacks suppressed [ 313.518657][T10975] binder: 10975:10974 cannot find target node [ 313.520690][T10975] binder: 10974:10975 transaction call to 0:0 failed 896/29201/-22, size 0-0 line 3062 [ 313.577886][T10980] binder: 10974:10980 transaction reply to 0:0 failed 897/29201/-71, size 0-0 line 2963 [ 314.325480][ T8928] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.338202][ T8928] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.659038][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.751489][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.971392][ T8930] vhci_hcd: vhci_device speed not set [ 315.493142][T11031] binder_alloc: 11030: binder_alloc_buf, no vma [ 315.494209][T11031] binder: cannot allocate buffer: vma cleared, target dead or dying [ 315.494239][T11031] binder: 11030:11031 transaction call to 11030:0 failed 902/29189/-3, size 0-0 line 3247 [ 315.531361][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 315.534089][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 315.535881][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 315.537265][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 315.540900][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 315.572603][T11033] binder: 11030:11033 transaction reply to 0:0 failed 903/29201/-71, size 0-0 line 2963 [ 315.893047][T11036] __nla_validate_parse: 3 callbacks suppressed [ 315.893059][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 315.945032][T11038] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2384'. [ 315.946918][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 316.048273][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2385'. [ 316.568030][ T8928] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.569305][ T8928] binder: undelivered TRANSACTION_ERROR: 29189 [ 317.190200][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2395'. [ 317.326384][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'. [ 317.454203][T11076] binder_user_error: 16 callbacks suppressed [ 317.454213][T11076] binder: 11075:11076 tried to acquire reference to desc 0, got 1 instead [ 317.457134][T11076] binder_alloc: 11075: binder_alloc_buf, no vma [ 317.458419][T11076] binder: 11075:11076 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 317.460750][T11076] binder: 11076 RLIMIT_NICE not set [ 317.509881][T11077] binder: 11075:11077 got reply transaction with no transaction stack [ 317.612325][ T4380] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 317.615102][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 317.616757][ T4380] (NULL device *): queue 0 connect admin queue failed (-6). [ 317.618187][ T4380] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 317.619396][ T4380] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 318.497531][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2407'. [ 319.143231][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2409'. [ 319.268192][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2410'. [ 319.334545][T11109] binder: tried to use weak ref as strong ref [ 319.336161][T11109] binder: 11108:11109 Acquire 1 refcount change on invalid ref 0 ret -22 [ 319.338234][T11109] binder: 11108:11109 got transaction to invalid handle, 1 [ 319.339640][T11109] binder_debug: 5 callbacks suppressed [ 319.339653][T11109] binder: 11109:11108 cannot find target node [ 319.345092][T11109] binder: 11108:11109 transaction call to 0:0 failed 912/29201/-22, size 0-0 line 3062 [ 319.347173][ T4724] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.691182][ T6055] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 319.693804][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 319.698625][ T6055] (NULL device *): queue 0 connect admin queue failed (-6). [ 319.702136][ T6055] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 319.705618][ T6055] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 319.706639][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 319.799895][ T4330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.807410][ T4330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.809676][ T4330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.811442][ T4334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.813629][ T4334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 319.815159][ T4334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.893006][T11122] wlan0 speed is unknown, defaulting to 1000 [ 319.895115][T11122] bond0 speed is unknown, defaulting to 1000 [ 319.952120][T11122] chnl_net:caif_netlink_parms(): no params data found [ 319.999061][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.000357][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.003251][T11122] device bridge_slave_0 entered promiscuous mode [ 320.005386][T11122] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.006694][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.008400][T11122] device bridge_slave_1 entered promiscuous mode [ 320.017737][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.020717][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.033650][T11122] team0: Port device team_slave_0 added [ 320.035786][T11122] team0: Port device team_slave_1 added [ 320.042008][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.043300][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.047677][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.063492][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.065013][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.070337][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.352804][T11122] device hsr_slave_0 entered promiscuous mode [ 320.421470][T11122] device hsr_slave_1 entered promiscuous mode [ 320.461882][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.463396][T11122] Cannot create hsr debugfs directory [ 320.536701][T11122] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 320.574729][T11122] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 320.664613][T11122] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 320.929212][T11151] binder: tried to use weak ref as strong ref [ 320.931366][T11151] binder: 11149:11151 Acquire 1 refcount change on invalid ref 0 ret -22 [ 320.933342][T11151] binder: 11149:11151 got transaction to invalid handle, 1 [ 320.934677][T11151] binder: 11151:11149 cannot find target node [ 320.935812][T11151] binder: 11149:11151 transaction call to 0:0 failed 915/29201/-22, size 0-0 line 3062 [ 320.937972][ T8930] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.955311][T11122] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 320.962087][T11153] __nla_validate_parse: 2 callbacks suppressed [ 320.962168][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2424'. [ 321.044613][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 321.057134][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.077610][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.079388][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.088062][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.094517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.096486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.098076][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.100248][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.106129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.126992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.128852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.132143][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.133316][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.145658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.149316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.172962][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 321.177013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.179981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.188210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.191159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.194361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.197808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.200074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.209257][T11122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.213051][T11122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.214764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.216676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.290402][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.295274][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.301474][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.437935][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 321.785064][T11142] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 321.797386][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 321.806427][T11142] (NULL device *): queue 0 connect admin queue failed (-6). [ 321.807249][T11203] device syzkaller0 entered promiscuous mode [ 321.808420][T11142] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 321.810365][T11142] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 321.851290][ T4345] Bluetooth: hci7: command 0x0409 tx timeout [ 321.947476][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.949550][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.956638][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.958851][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.960927][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.962647][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.967125][T11122] device veth0_vlan entered promiscuous mode [ 321.970763][T11122] device veth1_vlan entered promiscuous mode [ 321.978776][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 321.980689][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.982908][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.984859][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.992979][T11122] device veth0_macvtap entered promiscuous mode [ 321.997143][T11122] device veth1_macvtap entered promiscuous mode [ 322.011036][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.013501][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.025500][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.027516][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.029324][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.032374][T11209] binder: 11209:11208 cannot find target node [ 322.033588][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.035647][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.035642][T11209] binder: 11208:11209 transaction call to 0:0 failed 918/29201/-22, size 0-0 line 3062 [ 322.036142][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 322.038402][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.042642][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.044683][T11142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.048452][T11122] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.050226][T11122] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.052183][T11122] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.054249][T11122] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.105394][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.112110][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.117552][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.125350][T11198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.129503][T11198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.134832][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.148149][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 322.611061][T11229] input: syz0 as /devices/virtual/input/input13 [ 322.612528][T11229] input: failed to attach handler leds to device input13, error: -6 [ 323.043539][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2441'. [ 323.268188][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2444'. [ 323.499061][T11245] binder: BINDER_SET_CONTEXT_MGR already set [ 323.500477][T11245] binder: 11244:11245 ioctl 4018620d 20004a80 returned -16 [ 323.504763][T11245] binder_user_error: 3 callbacks suppressed [ 323.504770][T11245] binder: 11244:11245 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 323.509140][T11245] binder: 11245 RLIMIT_NICE not set [ 323.555812][T11248] binder: 11244:11248 got reply transaction with no transaction stack [ 323.557565][T11248] binder: 11244:11248 transaction reply to 0:0 failed 921/29201/-71, size 0-0 line 2963 [ 323.736021][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2448'. [ 323.846677][T11259] device syzkaller0 entered promiscuous mode [ 323.851751][ T1044] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 323.854398][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 323.859452][ T1044] (NULL device *): queue 0 connect admin queue failed (-6). [ 323.860620][ T1044] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 323.864249][ T1044] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 323.931291][ T4334] Bluetooth: hci7: command 0x041b tx timeout [ 323.978061][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.979377][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 323.985534][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.130402][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2457'. [ 324.355038][ T8928] binder: undelivered TRANSACTION_ERROR: 29201 [ 324.509945][T11301] device syzkaller0 entered promiscuous mode [ 324.671939][T11306] nvmet_rdma: malformed ip/port passed: nn-0x3333333333333333:pn-0x4444444444444444:4420 [ 324.706380][T11305] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.932823][T11198] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 325.938734][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 325.940631][T11198] (NULL device *): queue 0 connect admin queue failed (-6). [ 325.947142][T11198] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 325.953533][T11198] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 326.025761][ T4334] Bluetooth: hci7: command 0x040f tx timeout [ 326.051783][T11326] __nla_validate_parse: 2 callbacks suppressed [ 326.051797][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 326.128634][T11335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2474'. [ 326.175365][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.177094][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.381136][ T4376] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 326.562530][ T4376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.564462][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.566245][ T4376] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 326.568036][ T4376] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.570190][ T4376] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 326.571942][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.783280][ T4376] usb 1-1: USB disconnect, device number 21 [ 326.816590][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2479'. [ 326.824265][T11323] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 326.932493][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.934217][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.590514][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 327.648539][T11375] bond0: (slave bond_slave_0): Releasing backup interface [ 327.690903][T11375] bond0: (slave bond_slave_1): Releasing backup interface [ 327.728083][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2492'. [ 327.742743][T11375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.744772][T11375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.793093][T11382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.848648][T11384] siw: device registration error -23 [ 327.866113][T11384] nvmet_rdma: malformed ip/port passed: nn-0x3333333333333333:pn-0x4444444444444444:4420 [ 328.011180][ T4345] Bluetooth: hci0: command 0x080f tx timeout [ 328.021260][ T9437] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 328.023683][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 328.025249][ T9437] (NULL device *): queue 0 connect admin queue failed (-6). [ 328.026621][ T9437] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 328.028049][ T9437] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 328.111234][ T4345] Bluetooth: hci7: command 0x0419 tx timeout [ 328.133948][T11408] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.232257][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2506'. [ 328.746402][T11420] device geneve2 entered promiscuous mode [ 329.170756][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2516'. [ 329.220890][ T4345] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 329.233300][ T4345] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 329.235499][ T4345] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 329.239640][ T4345] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 329.246822][ T4345] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 329.283987][ T4345] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 329.308120][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2518'. [ 329.329353][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.338502][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.566230][T11435] wlan0 speed is unknown, defaulting to 1000 [ 329.567712][T11435] bond0 speed is unknown, defaulting to 1000 [ 329.665312][T11435] chnl_net:caif_netlink_parms(): no params data found [ 329.696610][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.698425][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.700473][T11435] device bridge_slave_0 entered promiscuous mode [ 329.704064][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.705529][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.707478][T11435] device bridge_slave_1 entered promiscuous mode [ 329.724888][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.728760][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.745747][T11435] team0: Port device team_slave_0 added [ 329.748776][T11435] team0: Port device team_slave_1 added [ 329.779518][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.781016][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.786948][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.790051][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.795683][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.800958][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.858909][T11435] device hsr_slave_0 entered promiscuous mode [ 329.924441][T11435] device hsr_slave_1 entered promiscuous mode [ 329.963977][T11435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.965483][T11435] Cannot create hsr debugfs directory [ 330.008443][T11471] nvmet_rdma: malformed ip/port passed: nn-0x3333333333333333:pn-0x4444444444444444:4420 [ 330.092359][ T5485] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 330.102172][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 330.114536][ T5485] (NULL device *): queue 0 connect admin queue failed (-6). [ 330.116049][ T5485] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 330.117606][ T5485] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 330.202196][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2526'. [ 330.364488][T11435] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.415868][T11483] fuse: Unknown parameter 'user_i00000000000000000000' [ 330.464389][T11435] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.512276][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2532'. [ 330.870285][T11435] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.879207][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.880896][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.891697][T11494] siw: device registration error -23 [ 330.896843][T11494] nvmet_rdma: malformed ip/port passed: nn-0x3333333333333333:pn-0x4444444444444444:4420 [ 331.056621][T11496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 331.058364][T11496] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.260786][T11435] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 331.291238][ T4345] Bluetooth: hci8: command 0x0409 tx timeout [ 331.389776][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.400587][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.404239][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.494578][T11503] Mass Storage Function, version: 2009/09/11 [ 331.495969][T11503] LUN: removable file: (no medium) [ 331.529291][T11503] LUN: removable file: (no medium) [ 331.603449][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.722757][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.724652][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.726219][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.727489][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.729079][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.730731][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.769731][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.771243][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.775168][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.780343][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.784045][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.789350][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.799965][T11507] __nla_validate_parse: 1 callbacks suppressed [ 331.799977][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2538'. [ 331.809616][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.811886][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.814899][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.820912][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.829031][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.835193][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.839947][T11435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.841630][T11511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.846222][T11435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.858069][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.862660][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.907798][T11515] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.993517][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.995083][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.999827][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.074836][T11525] input: syz0 as /devices/virtual/input/input14 [ 332.076175][T11525] input: failed to attach handler leds to device input14, error: -6 [ 332.171555][T11356] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 332.176720][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 332.179302][T11356] (NULL device *): queue 0 connect admin queue failed (-6). [ 332.217934][T11356] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 332.245245][T11356] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 332.957862][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.959768][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.985441][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.987424][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.989481][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.991043][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.997101][T11435] device veth0_vlan entered promiscuous mode [ 333.007629][T11435] device veth1_vlan entered promiscuous mode [ 333.017914][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 333.021080][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.024458][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.026188][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.028049][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.042857][T11435] device veth0_macvtap entered promiscuous mode [ 333.049925][T11435] device veth1_macvtap entered promiscuous mode [ 333.072847][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.075951][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.078606][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.080995][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.088474][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.090112][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.092857][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.094652][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.096470][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.105157][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.107981][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.119204][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.121533][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.124551][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.127414][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.130130][T11553] fuse: Unknown parameter 'user_id00000000000000000000' [ 333.135444][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.145729][T11435] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.149613][T11435] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.157782][T11435] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.160016][T11435] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.332947][T11142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.333980][ T5485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.334919][T11142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.338637][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 333.391576][ T4334] Bluetooth: hci8: command 0x041b tx timeout [ 333.421458][ T5485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.705726][T11562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.713997][T11562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.714226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.719390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.819304][T11573] device syzkaller0 entered promiscuous mode [ 333.938557][T11575] input: syz0 as /devices/virtual/input/input15 [ 333.939957][T11575] input: failed to attach handler leds to device input15, error: -6 [ 334.333368][T11142] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 334.348979][ T8933] (NULL device *): Create Association LS failed: Association Allocation Failed [ 334.351010][T11142] (NULL device *): queue 0 connect admin queue failed (-6). [ 334.357565][T11142] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 334.366818][T11142] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 335.276134][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2567'. [ 335.278292][ T8933] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 335.451226][ T4334] Bluetooth: hci8: command 0x040f tx timeout [ 335.502455][ T8933] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.504120][ T8933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 335.507202][ T8933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 335.515037][ T8933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 335.516480][ T8933] usb 1-1: Product: syz [ 335.517169][ T8933] usb 1-1: Manufacturer: syz [ 335.517932][ T8933] usb 1-1: SerialNumber: syz [ 335.529831][ T8933] usb 1-1: config 0 descriptor?? [ 335.542185][ T8933] usb 1-1: selecting invalid altsetting 0 [ 336.046479][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 336.056851][ T4724] usb 1-1: USB disconnect, device number 22 [ 336.377317][T11619] fuse: Bad value for 'fd' [ 336.402778][T11621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.411757][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 336.414269][ T8928] (NULL device *): Create Association LS failed: Association Allocation Failed [ 336.416185][ T11] (NULL device *): queue 0 connect admin queue failed (-6). [ 336.417647][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 336.419010][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 336.478920][T11625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.481061][T11625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.503361][ T28] INFO: task syz.1.1270:7722 blocked for more than 143 seconds. [ 336.504906][ T28] Not tainted syzkaller #0 [ 336.505884][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.507478][ T28] task:syz.1.1270 state:D stack:0 pid:7722 ppid:4329 flags:0x00000001 [ 336.509090][ T28] Call trace: [ 336.509737][ T28] __switch_to+0x2f4/0x550 [ 336.510576][ T28] __schedule+0xdb4/0x1a6c [ 336.512830][ T28] schedule+0xc4/0x170 [ 336.513589][ T28] schedule_preempt_disabled+0x18/0x2c [ 336.514711][ T28] __mutex_lock_common+0xb20/0x1f3c [ 336.515681][ T28] mutex_lock_nested+0x38/0x44 [ 336.516707][ T28] nfsd_nrthreads+0x58/0xfc [ 336.517539][ T28] write_threads+0x1c0/0x310 [ 336.518471][ T28] nfsctl_transaction_write+0x114/0x164 [ 336.519468][ T28] vfs_write+0x2a8/0x7c8 [ 336.520345][ T28] ksys_write+0x12c/0x228 [ 336.521612][ T28] __arm64_sys_write+0x7c/0x90 [ 336.522836][ T28] invoke_syscall+0x98/0x290 [ 336.523947][ T28] el0_svc_common+0x13c/0x258 [ 336.524820][ T28] do_el0_svc+0x5c/0x134 [ 336.525762][ T28] el0_svc+0x58/0x128 [ 336.526479][ T28] el0t_64_sync_handler+0x84/0xf0 [ 336.527499][ T28] el0t_64_sync+0x18c/0x190 [ 336.528303][ T28] [ 336.528303][ T28] Showing all locks held in the system: [ 336.529665][ T28] 1 lock held by rcu_tasks_kthre/12: [ 336.530508][ T28] #0: ffff800015597db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 336.533144][ T28] 1 lock held by rcu_tasks_trace/13: [ 336.534305][ T28] #0: ffff8000155985d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 336.536519][ T28] 3 locks held by kworker/1:0/22: [ 336.537439][ T28] 1 lock held by khungtaskd/28: [ 336.538550][ T28] #0: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 336.540400][ T28] 2 locks held by getty/4083: [ 336.541774][ T28] #0: ffff0000d6395098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 336.543714][ T28] #1: ffff800020b7b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 336.548894][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'. [ 336.555730][ T28] 3 locks held by syz.1.1270/7712: [ 336.556631][ T28] #0: ffff0000cbeeb268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 336.558266][ T28] #1: ffff0000cadb0460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 336.560026][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 336.563184][ T28] 3 locks held by syz.1.1270/7722: [ 336.564226][ T28] #0: ffff0000d8c96d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 336.565893][ T28] #1: ffff0000cadb0460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 336.567455][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x58/0xfc [ 336.569159][ T28] 2 locks held by syz.3.1757/9218: [ 336.579823][ T28] #0: ffff0000d8aae0e0 (&type->s_umount_key#55){++++}-{3:3}, at: deactivate_super+0xdc/0x104 [ 336.583527][ T28] #1: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x60/0x204 [ 336.589143][ T28] 1 lock held by udevd/9867: [ 336.590303][ T28] 1 lock held by syz.6.2281/10717: [ 336.591370][ T28] #0: ffff0000d8aae0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xa8/0x1d4 [ 336.595938][ T28] 1 lock held by syz.4.2369/10999: [ 336.596803][ T28] #0: ffff0000d8aae0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xa8/0x1d4 [ 336.598817][ T28] 1 lock held by syz.2.2580/11627: [ 336.599770][ T28] #0: ffff0000c3377eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x44/0x120 [ 336.603403][ T28] [ 336.603850][ T28] ============================================= [ 336.603850][ T28] [ 336.605603][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 336.606874][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 336.608293][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 336.610260][ T28] Call trace: [ 336.610909][ T28] dump_backtrace+0x1c4/0x1f0 [ 336.611851][ T28] show_stack+0x2c/0x3c [ 336.612631][ T28] __dump_stack+0x30/0x40 [ 336.613459][ T28] dump_stack_lvl+0xf4/0x15c [ 336.614328][ T28] dump_stack+0x1c/0x5c [ 336.615098][ T28] panic+0x2f8/0x7ac [ 336.615788][ T28] hung_task_panic+0x0/0x2c [ 336.616603][ T28] kthread+0x254/0x2e0 [ 336.617341][ T28] ret_from_fork+0x10/0x20 [ 336.618101][ T28] SMP: stopping secondary CPUs [ 336.618919][ T28] Kernel Offset: disabled [ 336.619671][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 336.620680][ T28] Memory Limit: none [ 336.924238][ T28] Rebooting in 86400 seconds..