last executing test programs: 9m47.085935167s ago: executing program 3 (id=610): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 9m45.709985136s ago: executing program 3 (id=612): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 9m42.654853907s ago: executing program 3 (id=617): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000000c0), 0x8) 9m40.453767367s ago: executing program 3 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$video(0x0, 0x7ff, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) write$snapshot(r5, 0x0, 0x0) write$snapshot(r5, 0x0, 0x0) 9m38.74116687s ago: executing program 3 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40000100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xb12}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m38.540303392s ago: executing program 3 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000002cba8cbf462c6fea1f20bb0495", @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYBLOB="2eb7300ef6f291fb445f415614aa474004339fae498efc00e6996561ee80504e907cf5d82c2216eca30682860dffc9e2b989ef85b4d76a204a1f38eb77d65fc98549f33d7537019da5702be00269df6f976517eaabe853ea8e8a8a7701d876a80c9f42f1681d344049002394cedc96b0b4fc5ec2b7f3f6a73243b1bf083eb2f7c698ddbf9b", @ANYRESDEC=r0], 0x48) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300), &(0x7f0000000440)=0x4) close(0x3) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000480)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) setsockopt(r1, 0x84, 0x1, &(0x7f0000000380)="02090000003c0e73f7cb50e9ff07b6ffdf", 0x11) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0x3}) 9m23.218037429s ago: executing program 32 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000002cba8cbf462c6fea1f20bb0495", @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYBLOB="2eb7300ef6f291fb445f415614aa474004339fae498efc00e6996561ee80504e907cf5d82c2216eca30682860dffc9e2b989ef85b4d76a204a1f38eb77d65fc98549f33d7537019da5702be00269df6f976517eaabe853ea8e8a8a7701d876a80c9f42f1681d344049002394cedc96b0b4fc5ec2b7f3f6a73243b1bf083eb2f7c698ddbf9b", @ANYRESDEC=r0], 0x48) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300), &(0x7f0000000440)=0x4) close(0x3) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000480)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) setsockopt(r1, 0x84, 0x1, &(0x7f0000000380)="02090000003c0e73f7cb50e9ff07b6ffdf", 0x11) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0x3}) 17.712045259s ago: executing program 2 (id=2697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'ni_at_a2150\x00', [0xf2, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0xf, 0x8, 0x5]}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d7000000"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)}, 0x0) 16.923162532s ago: executing program 2 (id=2699): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x401, 0x0, 0x107ff, 0x7, "0441960887e87fcb36784ce80000080100", 0x4, 0x200}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9}) 16.769681744s ago: executing program 2 (id=2700): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x56) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) close(r4) syz_io_uring_setup(0x1619, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x24ba, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@generic={0x3, 0xb, 0x7, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x200, 0x7, 0x1, 0x306, 0xfff, 0x5, 0xfc4e, 0x7}, &(0x7f00000000c0)=0x20) 15.686625601s ago: executing program 2 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 15.470988125s ago: executing program 2 (id=2704): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040040) close_range(r0, 0xffffffffffffffff, 0x0) 15.351767907s ago: executing program 4 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone3(&(0x7f0000000340)={0x40000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15.207166549s ago: executing program 2 (id=2706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 14.431566911s ago: executing program 4 (id=2709): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0xfc0}], 0x2, 0x8, 0x1) write$vga_arbiter(r10, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 13.592218805s ago: executing program 1 (id=2712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 10.73379791s ago: executing program 1 (id=2720): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) 9.428988091s ago: executing program 5 (id=2722): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x200000000000011d, &(0x7f00000191c0)=ANY=[@ANYBLOB="1815000000a70000fe8720a2e9204ab248da04e8167cf200b56fae0ac39adb912c0acd00a833cfe1a0e7d6d7303b", @ANYBLOB="1cf9c0eb5d98a5a007ed4b2cb4d29fcb35db5b88aeee5ad128d451393c0c620bd8ce41abdae9e033bbe3e1d591002b1891e393b243479181ded1896b8c69f91121e71b94a95add7499b74bc5e5a7971757a2c46eda3f6b0ab8188a13b268a8f1e2ddf4e75dd40b549874615a74ca9c0af417df0f9bb23ed074676b11fb9aff1d6a61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) 8.410240027s ago: executing program 5 (id=2723): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010021ad7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b00000000000800040044"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8.330928748s ago: executing program 1 (id=2724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40000100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.330367158s ago: executing program 4 (id=2725): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x56) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) close(r4) syz_io_uring_setup(0x1619, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x24ba, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@generic={0x3, 0xb, 0x7, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x200, 0x7, 0x1, 0x306, 0xfff, 0x5, 0xfc4e, 0x7}, &(0x7f00000000c0)=0x20) 8.152859391s ago: executing program 5 (id=2727): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.072985512s ago: executing program 1 (id=2728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) connect$unix(r2, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000", @ANYBLOB], 0x1c}], 0x1}, 0x0) statfs(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 7.359380453s ago: executing program 4 (id=2730): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 7.294964505s ago: executing program 5 (id=2731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x80000045}}) 7.051909218s ago: executing program 4 (id=2732): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1e3d00, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000440)={0xe000003, 0xfffffffffffffe55, 0x0, 0x1, 0x5}) 6.226450901s ago: executing program 5 (id=2734): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) 5.303267486s ago: executing program 4 (id=2735): ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.147023719s ago: executing program 5 (id=2736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 3.727139291s ago: executing program 0 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 3.578933413s ago: executing program 0 (id=2741): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x56) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) close(r4) syz_io_uring_setup(0x1619, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x24ba, 0x0, &(0x7f0000000480)=0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x200, 0x7, 0x1, 0x306, 0xfff, 0x5, 0xfc4e, 0x7}, &(0x7f00000000c0)=0x20) 2.642086418s ago: executing program 0 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) getpriority(0x1, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.497617451s ago: executing program 1 (id=2743): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket(0x10, 0x80003, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000300)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 343.495445ms ago: executing program 0 (id=2744): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) 277.533856ms ago: executing program 1 (id=2745): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000440)={0xe000003, 0xfffffffffffffe55, 0x0, 0x1, 0x5}) 178.996548ms ago: executing program 0 (id=2746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f84843000000011406ca000000000e000a000f000000028000001294ae", 0x2f}], 0x1}, 0x400c000) 30.33728ms ago: executing program 33 (id=2706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 0s ago: executing program 0 (id=2748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c01"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): uous mode [ 277.588933][ T39] device veth1_vlan left promiscuous mode [ 277.591731][ T39] device veth0_vlan left promiscuous mode [ 278.987011][ T39] bond1 (unregistering): Released all slaves [ 280.678342][ T39] team0 (unregistering): Port device team_slave_1 removed [ 280.887133][ T39] team0 (unregistering): Port device team_slave_0 removed [ 281.105430][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.326592][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.811090][ T39] bond0 (unregistering): Released all slaves [ 284.145979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.151303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.225408][ T7272] netlink: 260 bytes leftover after parsing attributes in process `syz.0.760'. [ 284.227947][ T7272] netlink: 100 bytes leftover after parsing attributes in process `syz.0.760'. [ 284.231553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.237890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.417101][ T6861] device veth0_vlan entered promiscuous mode [ 284.428079][ T6861] device veth1_vlan entered promiscuous mode [ 284.459113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.156069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.165038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.309216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.312624][ T7286] tipc: Enabled bearer , priority 0 [ 286.319696][ T7276] device syzkaller0 entered promiscuous mode [ 287.087499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.090496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.106061][ T6861] device veth0_macvtap entered promiscuous mode [ 287.145273][ T6861] device veth1_macvtap entered promiscuous mode [ 287.163125][ T7275] tipc: Resetting bearer [ 287.312057][ T7309] binder: 7306:7309 tried to acquire reference to desc 0, got 1 instead [ 287.315392][ T4490] tipc: Node number set to 3778213193 [ 288.194817][ T22] binder: undelivered TRANSACTION_COMPLETE [ 288.242420][ T22] binder: undelivered transaction 198, process died. [ 288.259000][ T7275] tipc: Disabling bearer [ 288.523954][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.631169][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.648277][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.651358][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.672494][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.778690][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.047186][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.057530][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.060395][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.064969][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.252399][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.346360][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.363547][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.374782][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.388445][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.391282][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.410919][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.415496][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.421036][ T7330] netlink: 260 bytes leftover after parsing attributes in process `syz.0.771'. [ 289.464413][ T7330] netlink: 100 bytes leftover after parsing attributes in process `syz.0.771'. [ 289.548430][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.551453][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.633911][ T6861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.636433][ T6861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.638860][ T6861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.641220][ T6861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.056742][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.063341][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.081860][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.084870][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.089020][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.173117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.220022][ T7357] binder: 7354:7357 tried to acquire reference to desc 0, got 1 instead [ 292.270548][ T4490] binder: undelivered TRANSACTION_COMPLETE [ 292.330899][ T4351] binder: undelivered transaction 203, process died. [ 293.098797][ T7367] tipc: Enabled bearer , priority 0 [ 293.117887][ T7367] device syzkaller0 entered promiscuous mode [ 293.227555][ T7359] tipc: Resetting bearer [ 293.968917][ T7387] netlink: 260 bytes leftover after parsing attributes in process `syz.0.783'. [ 294.000252][ T7387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.783'. [ 294.158081][ T7359] tipc: Disabling bearer [ 295.819909][ T7411] binder: 7405:7411 tried to acquire reference to desc 0, got 1 instead [ 295.823803][ T5471] binder: undelivered TRANSACTION_COMPLETE [ 295.899213][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.908858][ T22] binder: undelivered transaction 208, process died. [ 295.924321][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.068191][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.070763][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.152234][ T7430] netlink: 260 bytes leftover after parsing attributes in process `syz.2.795'. [ 297.202376][ T7430] netlink: 100 bytes leftover after parsing attributes in process `syz.2.795'. [ 297.451412][ T7446] tipc: Enabled bearer , priority 0 [ 297.453852][ T7446] device syzkaller0 entered promiscuous mode [ 297.570888][ T7445] tipc: Resetting bearer [ 298.505802][ T7445] tipc: Disabling bearer [ 300.322620][ T7475] netlink: 260 bytes leftover after parsing attributes in process `syz.5.809'. [ 300.344257][ T7475] netlink: 100 bytes leftover after parsing attributes in process `syz.5.809'. [ 300.514897][ T7486] tipc: Trying to set illegal importance in message [ 301.169199][ T27] audit: type=1326 audit(301.151:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.815" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 302.991759][ T51] block nbd1: Attempted send on invalid socket [ 302.995551][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 302.998236][ T7515] hpfs: hpfs_map_sector(): read error [ 303.090690][ T7519] tipc: Enabled bearer , priority 0 [ 303.093135][ T7519] device syzkaller0 entered promiscuous mode [ 303.389684][ T7518] tipc: Resetting bearer [ 304.205850][ T7518] tipc: Disabling bearer [ 304.253240][ T7538] netlink: 260 bytes leftover after parsing attributes in process `syz.5.824'. [ 304.269322][ T7538] netlink: 100 bytes leftover after parsing attributes in process `syz.5.824'. [ 307.313812][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.373888][ T7592] tipc: Enabling of bearer rejected, failed to enable media [ 307.478099][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.535682][ T7596] device syzkaller0 entered promiscuous mode [ 308.447550][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 310.257935][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.259766][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.668516][ T7690] tipc: Enabled bearer , priority 0 [ 313.693453][ T7690] tipc: Resetting bearer [ 313.866785][ T7689] tipc: Disabling bearer [ 316.443565][ T27] audit: type=1326 audit(316.412:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.0.871" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 316.961141][ T7758] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 317.349784][ T7766] netlink: 60 bytes leftover after parsing attributes in process `syz.2.876'. [ 317.381751][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 318.435772][ T7795] tipc: Cannot configure node identity twice [ 322.068495][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.071406][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.874942][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.923761][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.193505][ T27] audit: type=1326 audit(328.169:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.920" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 329.863875][ T7990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 329.866733][ T7990] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 332.527226][ T4309] Bluetooth: hci5: command 0x0405 tx timeout [ 333.033608][ T8044] tipc: Enabled bearer , priority 0 [ 333.042712][ T8044] device syzkaller0 entered promiscuous mode [ 333.057676][ T8044] tipc: Resetting bearer [ 333.063144][ T8043] tipc: Resetting bearer [ 333.125057][ T8043] tipc: Disabling bearer [ 334.331354][ T8042] syz.2.945 (8042): drop_caches: 2 [ 336.117055][ T8073] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.953'. [ 337.096762][ T51] block nbd0: Attempted send on invalid socket [ 337.098559][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.133931][ T8088] hpfs: hpfs_map_sector(): read error [ 337.236316][ T8091] device syzkaller0 entered promiscuous mode [ 338.637263][ T8116] tipc: Started in network mode [ 338.638716][ T8116] tipc: Node identity 2ef3854f8b88, cluster identity 4711 [ 338.640665][ T8116] tipc: Enabled bearer , priority 0 [ 338.714837][ T8116] device syzkaller0 entered promiscuous mode [ 339.187408][ T8118] Cannot find del_set index 0 as target [ 339.476266][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 339.512384][ T8116] tipc: Resetting bearer [ 339.575278][ T8111] tipc: Resetting bearer [ 339.628631][ T8111] tipc: Disabling bearer [ 341.465150][ T51] block nbd5: Attempted send on invalid socket [ 341.466913][ T51] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 341.469455][ T8150] hpfs: hpfs_map_sector(): read error [ 341.956750][ T8169] vhci_hcd: default hub control req: 000e v0001 i0007 l0 [ 342.011114][ T8175] fuse: Bad value for 'group_id' [ 343.505705][ T4309] Bluetooth: hci5: command 0x0406 tx timeout [ 344.472892][ T8199] device syzkaller0 entered promiscuous mode [ 345.275019][ T27] audit: type=1326 audit(345.248:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.0.982" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 345.282347][ T8210] syz.4.975 (8210): drop_caches: 2 [ 346.519608][ T4315] Bluetooth: Wrong link type (-22) [ 346.583878][ T8238] fuse: Bad value for 'group_id' [ 346.643341][ T51] block nbd0: Attempted send on invalid socket [ 346.645240][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 346.647837][ T8241] hpfs: hpfs_map_sector(): read error [ 351.681783][ T51] block nbd5: Attempted send on invalid socket [ 351.683726][ T51] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.686761][ T8301] hpfs: hpfs_map_sector(): read error [ 351.819852][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.820046][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.224777][ T8324] fuse: Bad value for 'fd' [ 352.453698][ T8330] fuse: Unknown parameter 'group_id00000000000000000000' [ 352.982263][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.982678][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.150075][ T8352] syz.1.1016 (8352): drop_caches: 2 [ 353.517833][ T51] block nbd4: Attempted send on invalid socket [ 353.520508][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 353.523164][ T8353] hpfs: hpfs_map_sector(): read error [ 354.496434][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 354.501693][ T8372] fuse: Unknown parameter 'group_id00000000000000000000' [ 357.222753][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.233369][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.857042][ T8405] syz.1.1030 (8405): drop_caches: 2 [ 358.882374][ T78] block nbd0: Attempted send on invalid socket [ 358.882415][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 358.882475][ T8412] hpfs: hpfs_map_sector(): read error [ 359.692160][ T27] audit: type=1326 audit(359.667:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.2.1037" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 360.227872][ T8429] tipc: Enabled bearer , priority 0 [ 360.233802][ T8429] tipc: Resetting bearer [ 361.091051][ T8428] tipc: Disabling bearer [ 361.260944][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1045'. [ 361.309199][ T8445] tipc: Enabled bearer , priority 0 [ 361.314667][ T8445] device syzkaller0 entered promiscuous mode [ 361.337250][ T8445] tipc: Resetting bearer [ 361.358422][ T8444] tipc: Resetting bearer [ 361.514840][ T8444] tipc: Disabling bearer [ 361.564717][ T4369] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 361.964905][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 362.332603][ T4369] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 362.335188][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.337359][ T4369] usb 1-1: Product: syz [ 362.338487][ T4369] usb 1-1: Manufacturer: syz [ 362.339685][ T4369] usb 1-1: SerialNumber: syz [ 362.398174][ T4369] usb 1-1: config 0 descriptor?? [ 364.303150][ T4369] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 365.214620][ T4369] gspca_sunplus: reg_w_riv err -110 [ 365.216485][ T4369] sunplus: probe of 1-1:0.0 failed with error -110 [ 365.256968][ T8484] binder: 8483:8484 tried to acquire reference to desc 0, got 1 instead [ 365.259841][ T8484] binder: 8483:8484 not enough space to store 5 fds in buffer [ 365.261932][ T8484] binder: 8484:8483 translate fd array failed [ 365.263903][ T8484] binder: 8483:8484 transaction call to 8483:0 failed 213/29201/-22, size 112-24 line 3495 [ 365.271926][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.581753][ T8490] tipc: Enabled bearer , priority 0 [ 365.588630][ T8490] device syzkaller0 entered promiscuous mode [ 365.602148][ T8490] tipc: Resetting bearer [ 365.609778][ T8489] tipc: Resetting bearer [ 366.769965][ T8495] syz.1.1059 (8495): drop_caches: 2 [ 367.019298][ T4490] usb 1-1: USB disconnect, device number 17 [ 367.967182][ T8489] tipc: Disabling bearer [ 371.394002][ T8545] syz.1.1075 (8545): drop_caches: 2 [ 371.496193][ T78] block nbd2: Attempted send on invalid socket [ 371.499086][ T78] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 371.501779][ T8544] hpfs: hpfs_map_sector(): read error [ 371.685123][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.687224][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.135418][ T8552] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1077'. [ 373.459903][ T8566] tipc: Enabled bearer , priority 0 [ 373.466079][ T8566] tipc: Resetting bearer [ 373.564850][ T8564] tipc: Disabling bearer [ 373.765106][ T4309] Bluetooth: hci5: command 0x0406 tx timeout [ 373.827289][ T27] audit: type=1326 audit(373.807:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.5.1082" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 373.889316][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.906237][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.289770][ T51] block nbd1: Attempted send on invalid socket [ 374.291661][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 374.294627][ T8590] hpfs: hpfs_map_sector(): read error [ 375.021170][ T8596] tipc: Cannot configure node identity twice [ 375.218487][ T8604] tipc: Enabled bearer , priority 0 [ 375.242206][ T8604] tipc: Resetting bearer [ 375.292423][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.305667][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.445088][ T8603] tipc: Disabling bearer [ 379.195431][ T27] audit: type=1326 audit(379.177:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1115" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 379.344032][ T27] audit: type=1326 audit(379.317:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.4.1116" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 379.409999][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 379.811993][ T8679] tipc: Enabling of bearer rejected, failed to enable media [ 380.842217][ T78] block nbd0: Attempted send on invalid socket [ 380.844012][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 380.846865][ T8699] hpfs: hpfs_map_sector(): read error [ 381.545448][ T8701] tipc: Enabled bearer , priority 0 [ 381.559203][ T8701] device syzkaller0 entered promiscuous mode [ 381.586065][ T8701] tipc: Resetting bearer [ 381.596297][ T8700] tipc: Resetting bearer [ 381.735790][ T8700] tipc: Disabling bearer [ 381.751953][ T22] libceph: connect (1)[c::]:6789 error -101 [ 381.755364][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 381.903254][ T22] libceph: connect (1)[c::]:6789 error -101 [ 381.905085][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 381.918626][ T8722] tipc: Enabling of bearer rejected, failed to enable media [ 382.185137][ T4884] libceph: connect (1)[c::]:6789 error -101 [ 382.212450][ T4884] libceph: mon0 (1)[c::]:6789 connect error [ 382.652435][ T8708] ceph: No mds server is up or the cluster is laggy [ 382.754555][ T22] libceph: connect (1)[c::]:6789 error -101 [ 382.756352][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 383.012583][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 383.067452][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 384.512314][ T27] audit: type=1326 audit(384.477:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8748 comm="syz.5.1138" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 387.142245][ T8782] tipc: Enabling of bearer rejected, failed to enable media [ 387.218066][ T27] audit: type=1326 audit(387.187:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.1.1139" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 388.969504][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1152'. [ 388.995216][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 393.750427][ T8862] fuse: Bad value for 'user_id' [ 393.914462][ T27] audit: type=1326 audit(393.887:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz.0.1159" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 395.818303][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 395.822346][ T8899] fuse: Bad value for 'user_id' [ 396.741437][ T27] audit: type=1326 audit(396.717:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.4.1177" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 398.691482][ T8943] fuse: Bad value for 'user_id' [ 399.000590][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 399.056778][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 401.341410][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.346742][ T8986] bond0: (slave rose0): Enslaving as an active interface with an up link [ 401.349207][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 401.801852][ T9012] tipc: Enabling of bearer rejected, failed to enable media [ 403.483245][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 403.505893][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 403.561522][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 404.251904][ T51] block nbd4: Attempted send on invalid socket [ 404.253903][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.257247][ T9009] hpfs: hpfs_map_sector(): read error [ 406.361023][ T9084] tipc: Enabling of bearer rejected, failed to enable media [ 406.389254][ T9078] syz.5.1212 (9078): drop_caches: 2 [ 406.510778][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.513201][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.565011][ T9093] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 406.567020][ T9093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 406.576240][ T9093] vhci_hcd vhci_hcd.0: Device attached [ 406.586159][ T9096] vhci_hcd: connection closed [ 406.588604][ T4557] vhci_hcd: stop threads [ 406.591945][ T4557] vhci_hcd: release socket [ 406.597769][ T4557] vhci_hcd: disconnect device [ 407.120840][ T27] audit: type=1326 audit(407.097:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9071 comm="syz.4.1211" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 407.269538][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 407.450044][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 407.457025][ T9122] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1218'. [ 407.509580][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.512333][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.370498][ T9149] fuse: Unknown parameter 'use00000000000000000000' [ 410.567809][ T9152] syz.0.1225 (9152): drop_caches: 2 [ 410.618919][ T9158] tipc: Enabling of bearer rejected, failed to enable media [ 411.634635][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 411.709396][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 412.675760][ T78] block nbd0: Attempted send on invalid socket [ 412.677569][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 412.680018][ T9194] hpfs: hpfs_map_sector(): read error [ 412.750316][ T9199] fuse: Unknown parameter 'use00000000000000000000' [ 413.032396][ T9205] syz.0.1237 (9205): drop_caches: 2 [ 414.246284][ T9214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1240'. [ 414.457233][ T9215] lo speed is unknown, defaulting to 1000 [ 414.940756][ T9221] tipc: Enabling of bearer rejected, failed to enable media [ 416.666887][ T9245] tipc: Enabled bearer , priority 0 [ 416.687103][ T9245] device syzkaller0 entered promiscuous mode [ 416.974753][ T9247] tipc: Resetting bearer [ 417.173169][ T9243] tipc: Resetting bearer [ 418.074585][ T5252] tipc: Node number set to 3221332709 [ 418.097727][ T51] block nbd2: Attempted send on invalid socket [ 418.099452][ T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 418.101911][ T9257] hpfs: hpfs_map_sector(): read error [ 418.184945][ T9243] tipc: Disabling bearer [ 418.441436][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.443948][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.455298][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 423.621638][ T27] audit: type=1326 audit(423.577:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.0.1262" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 423.710011][ T9345] tipc: Enabled bearer , priority 0 [ 423.728732][ T9345] tipc: Resetting bearer [ 423.817746][ T9344] tipc: Disabling bearer [ 423.872470][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 423.983896][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.987620][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.975468][ T27] audit: type=1326 audit(424.957:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.1.1271" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 425.016565][ T9374] syz.4.1276 (9374): drop_caches: 2 [ 425.259376][ T9389] random: crng reseeded on system resumption [ 425.270466][ T9389] Restarting kernel threads ... done. [ 425.644414][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 427.218041][ T9419] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.308643][ T9421] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1289'. [ 427.468666][ T9423] syz.5.1290 (9423): drop_caches: 2 [ 427.504314][ T27] audit: type=1326 audit(427.477:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1285" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 427.530521][ T9429] fuse: Unknown parameter 'user_id00000000000000000000' [ 427.575416][ T9431] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 427.866885][ T9436] random: crng reseeded on system resumption [ 427.937163][ T9436] Restarting kernel threads ... done. [ 428.614817][ T9442] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1295'. [ 428.624665][ T9445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1294'. [ 428.748618][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 428.949244][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.978055][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.082030][ T9469] fuse: Unknown parameter 'user_id00000000000000000000' [ 430.817090][ T9465] syz.5.1302 (9465): drop_caches: 2 [ 430.929249][ T9477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 430.938160][ T27] audit: type=1326 audit(430.917:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.0.1300" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 431.229394][ T9483] random: crng reseeded on system resumption [ 431.299957][ T9483] Restarting kernel threads ... done. [ 432.390901][ T27] audit: type=1326 audit(432.367:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1307" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 433.124933][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.126768][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.473487][ T9505] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1312'. [ 434.215687][ T9510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1313'. [ 434.271576][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 434.546253][ T9518] fuse: Unknown parameter 'user_id00000000000000000000' [ 434.638885][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.641442][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.925041][ T9530] random: crng reseeded on system resumption [ 435.935266][ T9530] Restarting kernel threads ... done. [ 436.231050][ T9531] syz.0.1319 (9531): drop_caches: 2 [ 436.659478][ T9533] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.843245][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1322'. [ 438.111195][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 439.028327][ T9555] fuse: Bad value for 'fd' [ 443.569782][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.572341][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.574824][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.577120][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.579433][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.581771][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.584056][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.586611][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.588958][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 443.591287][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 445.600197][ T78] block nbd0: Attempted send on invalid socket [ 445.602488][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 445.605496][ T9631] hpfs: hpfs_map_sector(): read error [ 447.907015][ T9641] libceph: resolve '. [ 447.907015][ T9641] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 447.907015][ T9641] ' (ret=-3): failed [ 449.165712][ T9656] trusted_key: encrypted_key: key user:syz not found [ 450.274741][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.432330][ T39] Bluetooth: (null): Invalid header checksum [ 450.435414][ T39] Bluetooth: (null): Invalid header checksum [ 450.447117][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.036392][ T51] block nbd4: Attempted send on invalid socket [ 451.038888][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 451.042474][ T9675] hpfs: hpfs_map_sector(): read error [ 451.723908][ T9677] input: syz0 as /devices/virtual/input/input5 [ 451.764254][ T113] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 451.944343][ T113] usb 1-1: Using ep0 maxpacket: 8 [ 451.947267][ T113] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 451.949544][ T113] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 451.952385][ T113] usb 1-1: config 135 has no interface number 0 [ 451.954010][ T113] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 451.978446][ T113] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 451.982178][ T113] usb 1-1: config 135 interface 230 has no altsetting 0 [ 452.007471][ T113] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 452.010733][ T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.012934][ T113] usb 1-1: Product: syz [ 452.024453][ T113] usb 1-1: Manufacturer: syz [ 452.026046][ T113] usb 1-1: SerialNumber: syz [ 452.783281][ T9691] trusted_key: encrypted_key: key user:syz not found [ 453.481934][ T4879] usb 1-1: USB disconnect, device number 18 [ 453.563820][ T9700] fuse: Unknown parameter 'user_id00000000000000000000' [ 454.400090][ T51] block nbd0: Attempted send on invalid socket [ 454.402621][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 454.406269][ T9718] hpfs: hpfs_map_sector(): read error [ 455.285976][ T9729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.289136][ T9729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.038501][ T9736] fuse: Unknown parameter 'user_id00000000000000000000' [ 456.789802][ T78] block nbd4: Attempted send on invalid socket [ 456.792154][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 456.795964][ T9754] hpfs: hpfs_map_sector(): read error [ 457.957108][ T9771] fuse: Unknown parameter 'user_id00000000000000000000' [ 459.187460][ T9783] fuse: Unknown parameter '0x0000000000000004' [ 459.711233][ T78] block nbd2: Attempted send on invalid socket [ 459.713456][ T78] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 459.717260][ T9798] hpfs: hpfs_map_sector(): read error [ 460.410175][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.412729][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.591397][ T9806] fuse: Bad value for 'fd' [ 462.419961][ T78] block nbd5: Attempted send on invalid socket [ 462.422043][ T78] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 462.425310][ T9838] hpfs: hpfs_map_sector(): read error [ 463.164629][ T9844] fuse: Bad value for 'fd' [ 464.764001][ T9870] fuse: Unknown parameter '0x0000000000000004' [ 465.722382][ T9889] __nla_validate_parse: 38 callbacks suppressed [ 465.722396][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.750508][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.759825][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.762450][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.778895][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.790666][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.797679][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.833612][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.851701][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.865033][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.870890][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 465.877235][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.015075][ T9899] fuse: Bad value for 'fd' [ 467.201926][ T4309] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 467.205584][ T4309] CPU: 1 PID: 4309 Comm: kworker/u5:2 Not tainted 6.1.145-syzkaller #0 [ 467.207860][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.210615][ T4309] Workqueue: hci2 hci_rx_work [ 467.211931][ T4309] Call trace: [ 467.212785][ T4309] dump_backtrace+0x1c8/0x1f4 [ 467.214068][ T4309] show_stack+0x2c/0x3c [ 467.215282][ T4309] __dump_stack+0x30/0x40 [ 467.216466][ T4309] dump_stack_lvl+0xf8/0x160 [ 467.217782][ T4309] dump_stack+0x1c/0x5c [ 467.218954][ T4309] sysfs_create_dir_ns+0x22c/0x24c [ 467.220351][ T4309] kobject_add_internal+0x5a8/0xb30 [ 467.221743][ T4309] kobject_add+0x134/0x1f8 [ 467.222991][ T4309] device_add+0x3f0/0xf94 [ 467.224194][ T4309] hci_conn_add_sysfs+0xbc/0x1cc [ 467.225587][ T4309] le_conn_complete_evt+0xa24/0xf8c [ 467.226976][ T4309] hci_le_conn_complete_evt+0x114/0x3f8 [ 467.228487][ T4309] hci_le_meta_evt+0x2c0/0x4a4 [ 467.229792][ T4309] hci_event_packet+0x6ac/0xf08 [ 467.231164][ T4309] hci_rx_work+0x324/0xaa0 [ 467.232426][ T4309] process_one_work+0x7f4/0x13a8 [ 467.233766][ T4309] worker_thread+0x8c8/0xfbc [ 467.235072][ T4309] kthread+0x250/0x2d8 [ 467.236212][ T4309] ret_from_fork+0x10/0x20 [ 467.237491][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.242017][ T4309] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.245735][ T4309] Bluetooth: hci2: failed to register connection device [ 468.214779][ T9914] fuse: Unknown parameter 'fd0x0000000000000004' [ 469.133308][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.681682][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.064849][ T9938] device syzkaller0 entered promiscuous mode [ 472.050453][ T9956] fuse: Unknown parameter 'fd0x0000000000000004' [ 474.327286][ T9983] ======================================================= [ 474.327286][ T9983] WARNING: The mand mount option has been deprecated and [ 474.327286][ T9983] and is ignored by this kernel. Remove the mand [ 474.327286][ T9983] option from the mount to silence this warning. [ 474.327286][ T9983] ======================================================= [ 474.431714][ T51] block nbd0: Attempted send on invalid socket [ 474.559618][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 474.563784][ T9986] hpfs: hpfs_map_sector(): read error [ 475.220152][ T9991] netlink: 'syz.1.1465': attribute type 33 has an invalid length. [ 475.222316][ T9991] __nla_validate_parse: 38 callbacks suppressed [ 475.222325][ T9991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1465'. [ 475.385965][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.386127][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.850276][T10017] nftables ruleset with unbound chain [ 478.589035][ T78] block nbd5: Attempted send on invalid socket [ 478.590860][ T78] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 478.593385][T10023] hpfs: hpfs_map_sector(): read error [ 478.713449][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.718386][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.233884][T10042] rdma_rxe: rxe_register_device failed with error -23 [ 479.236518][T10042] rdma_rxe: failed to add lo [ 481.407836][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.410364][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.626493][ T51] block nbd4: Attempted send on invalid socket [ 483.628276][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.630829][T10076] hpfs: hpfs_map_sector(): read error [ 483.818336][ T5472] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 483.999467][ T5472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.002440][ T5472] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 484.005296][ T5472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.033840][ T5472] usb 1-1: config 0 descriptor?? [ 484.535584][ T5472] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 484.758273][ T4309] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 484.984542][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 485.742345][ T4351] usb 1-1: USB disconnect, device number 19 [ 487.504029][ T51] block nbd1: Attempted send on invalid socket [ 487.506909][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.509423][T10150] hpfs: hpfs_map_sector(): read error [ 487.636626][T10141] fido_id[10141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 491.452591][ T51] block nbd4: Attempted send on invalid socket [ 491.454479][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 491.457116][T10211] hpfs: hpfs_map_sector(): read error [ 491.484330][ T4380] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 491.694386][ T4380] usb 1-1: Using ep0 maxpacket: 16 [ 491.719457][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.756183][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.844930][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 491.940530][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 26368, setting to 1024 [ 492.094930][ T4380] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.115476][ T4380] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.117911][ T4380] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.144212][ T4380] usb 1-1: Manufacturer: syz [ 492.155700][ T4380] usb 1-1: config 0 descriptor?? [ 492.360737][ T4380] Registered IR keymap rc-hauppauge [ 492.494199][ T4380] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 492.498726][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 492.524440][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 492.565227][ T4380] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 492.574657][ T4380] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 492.631045][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 492.669943][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.406386][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.434418][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.464426][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.494368][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.524364][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.554400][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.572058][T10234] ax25_connect(): syz.1.1527 uses autobind, please contact jreuter@yaina.de [ 493.587250][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.618356][ T4380] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 493.644878][ T4380] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 493.647307][ T4380] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.654501][ T4380] usb 1-1: USB disconnect, device number 20 [ 493.780484][T10240] ax25_connect(): syz.1.1529 uses autobind, please contact jreuter@yaina.de [ 494.256898][ T27] audit: type=1326 audit(494.237:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.2.1530" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 494.685287][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.687165][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.267589][T10260] tipc: New replicast peer: 255.255.255.255 [ 495.270309][T10260] tipc: Enabled bearer , priority 10 [ 495.302361][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'. [ 496.013717][T10262] trusted_key: encrypted_key: insufficient parameters specified [ 496.385233][ T5252] tipc: Node number set to 529245615 [ 499.863939][ T27] audit: type=1326 audit(499.837:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.5.1545" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 501.205235][ T27] audit: type=1326 audit(501.187:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.5.1546" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 503.540087][T10335] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 503.542423][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 503.854034][ T27] audit: type=1326 audit(503.827:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.0.1558" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 505.265491][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1563'. [ 506.028986][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1570'. [ 506.061666][ T4309] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 506.064655][ T4309] CPU: 0 PID: 4309 Comm: kworker/u5:2 Not tainted 6.1.145-syzkaller #0 [ 506.066840][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.069588][ T4309] Workqueue: hci1 hci_rx_work [ 506.070933][ T4309] Call trace: [ 506.071870][ T4309] dump_backtrace+0x1c8/0x1f4 [ 506.073147][ T4309] show_stack+0x2c/0x3c [ 506.074308][ T4309] __dump_stack+0x30/0x40 [ 506.075493][ T4309] dump_stack_lvl+0xf8/0x160 [ 506.076793][ T4309] dump_stack+0x1c/0x5c [ 506.077972][ T4309] sysfs_create_dir_ns+0x22c/0x24c [ 506.079419][ T4309] kobject_add_internal+0x5a8/0xb30 [ 506.080906][ T4309] kobject_add+0x134/0x1f8 [ 506.082143][ T4309] device_add+0x3f0/0xf94 [ 506.083365][ T4309] hci_conn_add_sysfs+0xbc/0x1cc [ 506.084808][ T4309] le_conn_complete_evt+0xa24/0xf8c [ 506.086203][ T4309] hci_le_conn_complete_evt+0x114/0x3f8 [ 506.087710][ T4309] hci_le_meta_evt+0x2c0/0x4a4 [ 506.089024][ T4309] hci_event_packet+0x6ac/0xf08 [ 506.090342][ T4309] hci_rx_work+0x324/0xaa0 [ 506.091565][ T4309] process_one_work+0x7f4/0x13a8 [ 506.092976][ T4309] worker_thread+0x8c8/0xfbc [ 506.094229][ T4309] kthread+0x250/0x2d8 [ 506.095396][ T4309] ret_from_fork+0x10/0x20 [ 506.096657][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.101165][ T4309] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 506.105267][ T4309] Bluetooth: hci1: failed to register connection device [ 507.324785][ T27] audit: type=1326 audit(507.299:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.0.1572" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 507.771803][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.774325][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.777128][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.779610][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.782073][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.784622][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 507.786987][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 509.294813][T10397] __nla_validate_parse: 41 callbacks suppressed [ 509.294826][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 509.312759][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 509.335384][T10397] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.338105][T10397] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.340450][T10397] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.342734][T10397] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.405967][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 509.421591][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 509.821386][T10412] ip6t_srh: unknown srh invflags 7863 [ 509.891430][ T4309] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 509.979668][T10421] hugetlbfs: Bad value '%' for mount option 'size' [ 509.979668][T10421] [ 511.771265][ T4380] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 511.841746][T10428] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1586'. [ 511.985712][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.988471][ T4380] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 511.990990][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.001958][ T4380] usb 1-1: config 0 descriptor?? [ 512.172045][T10437] lo speed is unknown, defaulting to 1000 [ 512.417638][ T4380] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 512.471513][T10446] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 512.504535][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.531785][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.634488][ T4309] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 512.764364][ T27] audit: type=1326 audit(512.749:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.1591" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 513.582878][ T4380] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 513.590669][ T4380] usb 1-1: USB disconnect, device number 21 [ 514.965151][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.967865][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.066986][T10466] fido_id[10466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 515.417662][ T4309] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 515.519460][T10495] device syzkaller0 entered promiscuous mode [ 516.428925][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.439116][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.073574][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.077683][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.510417][ T4315] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 519.930162][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.938769][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.095966][ T4315] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 520.928643][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'. [ 523.944806][ T4315] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 523.948348][ T4315] CPU: 0 PID: 4315 Comm: kworker/u5:3 Not tainted 6.1.145-syzkaller #0 [ 523.950714][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.953581][ T4315] Workqueue: hci0 hci_rx_work [ 523.954981][ T4315] Call trace: [ 523.955887][ T4315] dump_backtrace+0x1c8/0x1f4 [ 523.957284][ T4315] show_stack+0x2c/0x3c [ 523.958429][ T4315] __dump_stack+0x30/0x40 [ 523.959694][ T4315] dump_stack_lvl+0xf8/0x160 [ 523.961050][ T4315] dump_stack+0x1c/0x5c [ 523.962210][ T4315] sysfs_create_dir_ns+0x22c/0x24c [ 523.963635][ T4315] kobject_add_internal+0x5a8/0xb30 [ 523.965081][ T4315] kobject_add+0x134/0x1f8 [ 523.966370][ T4315] device_add+0x3f0/0xf94 [ 523.967594][ T4315] hci_conn_add_sysfs+0xbc/0x1cc [ 523.969039][ T4315] le_conn_complete_evt+0xa24/0xf8c [ 523.970469][ T4315] hci_le_conn_complete_evt+0x114/0x3f8 [ 523.972077][ T4315] hci_le_meta_evt+0x2c0/0x4a4 [ 523.973442][ T4315] hci_event_packet+0x6ac/0xf08 [ 523.974812][ T4315] hci_rx_work+0x324/0xaa0 [ 523.976065][ T4315] process_one_work+0x7f4/0x13a8 [ 523.977468][ T4315] worker_thread+0x8c8/0xfbc [ 523.978813][ T4315] kthread+0x250/0x2d8 [ 523.979946][ T4315] ret_from_fork+0x10/0x20 [ 523.984118][ T4315] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.987733][ T4315] Bluetooth: hci0: failed to register connection device [ 524.323104][T10615] wireguard: wg1: Could not create IPv4 socket [ 524.979859][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.037503][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.172199][T10623] netlink: get zone limit has 8 unknown bytes [ 525.359489][T10621] block nbd5: shutting down sockets [ 526.406423][ T4315] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 526.576955][T10644] syz.2.1659 uses old SIOCAX25GETINFO [ 526.610465][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.622264][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.047190][ T4315] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 529.283286][ T27] audit: type=1326 audit(529.258:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.2.1672" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 531.704322][ T27] audit: type=1326 audit(531.678:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10707 comm="syz.4.1680" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 533.414027][ T27] audit: type=1326 audit(533.388:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.0.1685" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 533.557411][T10737] syz.4.1683 (10737): drop_caches: 2 [ 534.833540][T10742] loop3: detected capacity change from 0 to 1 [ 534.839060][T10745] batman_adv: batadv0: Adding interface: dummy0 [ 534.840880][T10745] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.892100][ T4315] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 534.914424][T10742] Dev loop3: unable to read RDB block 1 [ 534.916266][T10742] loop3: unable to read partition table [ 534.918062][T10745] batman_adv: batadv0: Interface activated: dummy0 [ 534.934345][T10742] loop3: partition table beyond EOD, truncated [ 534.969850][T10742] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.735249][T10761] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 535.741709][T10761] ubi31: attaching mtd0 [ 535.752843][T10761] ubi31: scanning is finished [ 535.754270][T10761] ubi31: empty MTD device detected [ 536.330380][T10761] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 537.685754][T10772] tipc: Enabling of bearer rejected, failed to enable media [ 537.707924][T10770] siw: device registration error -23 [ 539.484957][ T4315] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 541.409776][ T4315] Bluetooth: hci2: unexpected subevent 0x1a length: 28 > 6 [ 546.300920][T10861] netlink: 'syz.1.1723': attribute type 11 has an invalid length. [ 546.419486][T10864] lo speed is unknown, defaulting to 1000 [ 547.918658][T10878] siw: device registration error -23 [ 548.464421][T10877] tipc: Enabling of bearer rejected, failed to enable media [ 548.633511][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 552.060820][T10917] nbd4: detected capacity change from 0 to 8589934592 [ 552.140189][ T78] block nbd4: Send control failed (result -89) [ 552.142296][ T78] block nbd4: Request send failed, requeueing [ 552.145784][ T4315] block nbd4: Receive control failed (result -32) [ 552.149892][ T78] block nbd4: Dead connection, failed to find a fallback [ 552.151856][ T78] block nbd4: shutting down sockets [ 552.153241][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.156414][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.159868][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.162380][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.168204][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.170839][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.173191][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.175801][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.178391][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.180905][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.183943][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.186563][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.194051][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.196595][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.198879][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.201363][ T78] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.203690][ T7269] ldm_validate_partition_table(): Disk read failed. [ 552.227089][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.229665][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.233514][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.236164][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 552.244325][ T7269] Dev nbd4: unable to read RDB block 0 [ 552.259721][ T7269] nbd4: unable to read partition table [ 553.328134][ T7269] ldm_validate_partition_table(): Disk read failed. [ 553.330337][ T7269] Dev nbd4: unable to read RDB block 0 [ 553.332133][ T7269] nbd4: unable to read partition table [ 553.542441][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.565650][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.706759][T10943] lo speed is unknown, defaulting to 1000 [ 555.892665][ T27] audit: type=1326 audit(555.868:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.5.1750" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 556.023622][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.025528][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.352037][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 558.550182][T11010] tipc: Enabling of bearer rejected, failed to enable media [ 558.605603][T11010] device syzkaller0 entered promiscuous mode [ 558.610365][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.612826][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.174344][ T5472] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 559.444302][ T5472] usb 1-1: Using ep0 maxpacket: 16 [ 559.520681][ T5472] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 559.523619][ T5472] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 560.069103][ T5472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.071990][ T5472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 560.097294][ T5472] usb 1-1: SerialNumber: syz [ 560.101045][T11018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.104242][ T5472] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 560.106394][ T5472] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 560.108143][ T5472] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 560.343209][ T5472] usb 1-1: USB disconnect, device number 22 [ 560.442436][T11042] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 563.727126][T11084] ceph: No mds server is up or the cluster is laggy [ 563.729874][ T4380] libceph: connect (1)[c::]:6789 error -101 [ 563.731705][ T4380] libceph: mon0 (1)[c::]:6789 connect error [ 563.943694][ T27] audit: type=1326 audit(563.918:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11064 comm="syz.5.1780" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 564.087693][T11108] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1789'. [ 569.056987][T11183] lo speed is unknown, defaulting to 1000 [ 569.287632][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 571.414187][ T27] audit: type=1326 audit(571.378:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11182 comm="syz.1.1808" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 572.764764][T11241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1819'. [ 572.773294][T11244] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1819'. [ 574.371742][T11282] affs: No valid root block on device nullb0 [ 575.195972][T11288] lo speed is unknown, defaulting to 1000 [ 575.469856][T11296] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1830'. [ 577.154403][ T27] audit: type=1326 audit(577.138:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.4.1829" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 577.272007][T11309] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 577.275712][T11309] bond0: (slave wlan1): Opening slave failed [ 578.847333][T11332] ceph: No mds server is up or the cluster is laggy [ 579.248356][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 579.468301][T11345] netlink: set zone limit has 8 unknown bytes [ 580.590586][T11354] lo speed is unknown, defaulting to 1000 [ 583.455400][ T27] audit: type=1326 audit(583.438:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.4.1846" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 585.219005][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1858'. [ 585.262273][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 585.591295][T11413] netlink: set zone limit has 8 unknown bytes [ 585.873396][T11415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 585.876301][T11415] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 588.027500][T11432] lo speed is unknown, defaulting to 1000 [ 588.887536][T11441] infiniband syz0: set active [ 588.891976][T11441] infiniband syz0: set active [ 588.959039][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.968818][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.149286][ T27] audit: type=1326 audit(589.128:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1865" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 589.158025][ T4380] lo speed is unknown, defaulting to 1000 [ 589.173923][ T4380] lo speed is unknown, defaulting to 1000 [ 589.489507][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.498643][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.574552][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1873'. [ 591.506433][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 592.093053][T11490] lo speed is unknown, defaulting to 1000 [ 593.140800][T11512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'. [ 593.241930][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 593.468092][ T27] audit: type=1326 audit(593.448:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11489 comm="syz.4.1881" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 593.779916][T11534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.782795][T11534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 594.451406][T11538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.454015][T11538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.013724][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 598.012872][T11587] device syzkaller0 entered promiscuous mode [ 598.014124][T11584] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 598.349167][T11596] lo speed is unknown, defaulting to 1000 [ 598.456983][T11600] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 598.510833][T11598] lo speed is unknown, defaulting to 1000 [ 598.573815][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.582336][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.752081][ T27] audit: type=1326 audit(598.728:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.2.1908" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 601.571412][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.580878][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.752113][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1916'. [ 603.706027][T11660] lo speed is unknown, defaulting to 1000 [ 606.814484][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 606.965130][T11703] Sensor A: ================= START STATUS ================= [ 606.967244][T11703] Sensor A: Test Pattern: 75% Colorbar [ 606.984380][T11703] Sensor A: Show Information: All [ 606.985838][T11703] Sensor A: Vertical Flip: false [ 606.987180][T11703] Sensor A: Horizontal Flip: false [ 606.988597][T11703] Sensor A: Brightness: 3 [ 606.989753][T11703] Sensor A: Contrast: 128 [ 607.020749][T11703] Sensor A: Hue: 0 [ 607.022997][T11703] Sensor A: Saturation: 128 [ 607.077136][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.090756][T11703] Sensor A: ================== END STATUS ================== [ 607.106599][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.181055][ T5472] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 607.246002][ T5472] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 610.575513][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 611.886947][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 616.148260][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1963'. [ 616.461160][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 617.445896][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.447748][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.914211][ T27] audit: type=1326 audit(617.878:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.4.1969" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 618.031783][T11841] tipc: Enabling of bearer rejected, failed to enable media [ 618.040675][T11841] siw: device registration error -23 [ 618.906436][T11849] device lo entered promiscuous mode [ 618.912985][T11849] device tunl0 entered promiscuous mode [ 618.927291][T11849] device gre0 entered promiscuous mode [ 618.929489][T11849] device gretap0 entered promiscuous mode [ 618.931640][T11849] device erspan0 entered promiscuous mode [ 618.933855][T11849] device ip_vti0 entered promiscuous mode [ 618.955225][T11849] device ip6_vti0 entered promiscuous mode [ 618.975108][T11849] device sit0 entered promiscuous mode [ 618.977319][T11849] device ip6tnl0 entered promiscuous mode [ 618.979447][T11849] device ip6gre0 entered promiscuous mode [ 618.981671][T11849] device syz_tun entered promiscuous mode [ 618.983673][T11849] device ip6gretap0 entered promiscuous mode [ 619.073730][T11849] device bridge0 entered promiscuous mode [ 619.083751][T11849] device vcan0 entered promiscuous mode [ 619.094473][T11849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 619.101542][T11849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 619.103767][T11849] device bond0 entered promiscuous mode [ 619.201688][T11849] device bond_slave_0 entered promiscuous mode [ 619.211653][T11849] device bond_slave_1 entered promiscuous mode [ 619.222496][T11849] device team0 entered promiscuous mode [ 619.238618][T11849] device team_slave_0 entered promiscuous mode [ 619.252434][T11849] device team_slave_1 entered promiscuous mode [ 619.272013][T11849] device dummy0 entered promiscuous mode [ 619.304692][T11849] device nlmon0 entered promiscuous mode [ 619.385967][T11849] device caif0 entered promiscuous mode [ 619.391905][T11849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.718956][T11871] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 620.736445][T11871] bond0: (slave wlan1): Opening slave failed [ 621.043778][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.378780][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 621.433170][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 621.494451][ T27] audit: type=1326 audit(621.468:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.2.1983" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 622.016232][ T4380] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 622.284829][ T4380] usb 1-1: Using ep0 maxpacket: 8 [ 622.383379][ T4380] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 622.386320][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.406558][ T4380] usb 1-1: Product: syz [ 622.409955][ T4380] usb 1-1: Manufacturer: syz [ 622.411265][ T4380] usb 1-1: SerialNumber: syz [ 622.439653][ T4380] usb 1-1: config 0 descriptor?? [ 622.443424][ T4380] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 622.474361][T11910] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 622.495465][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.498246][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.641010][T11918] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 623.139575][T11927] device lo entered promiscuous mode [ 623.141602][T11927] device tunl0 entered promiscuous mode [ 623.153628][T11927] device gre0 entered promiscuous mode [ 623.156148][T11927] device gretap0 entered promiscuous mode [ 623.158323][T11927] device erspan0 entered promiscuous mode [ 623.194968][T11927] device ip_vti0 entered promiscuous mode [ 623.197402][T11927] device ip6_vti0 entered promiscuous mode [ 623.230837][T11927] device sit0 entered promiscuous mode [ 623.233115][T11927] device ip6tnl0 entered promiscuous mode [ 623.250727][T11927] device ip6gre0 entered promiscuous mode [ 623.298945][T11927] device syz_tun entered promiscuous mode [ 623.316649][T11927] device ip6gretap0 entered promiscuous mode [ 623.336558][T11927] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.338686][T11927] bridge0: port 2(bridge_slave_1) entered listening state [ 623.340873][T11927] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.342920][T11927] bridge0: port 1(bridge_slave_0) entered listening state [ 623.400670][T11927] device bridge0 entered promiscuous mode [ 623.403976][T11927] device vcan0 entered promiscuous mode [ 623.405859][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.408154][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.410627][T11927] device bond0 entered promiscuous mode [ 623.412209][T11927] device bond_slave_0 entered promiscuous mode [ 623.414735][T11927] device bond_slave_1 entered promiscuous mode [ 623.436175][T11927] device team0 entered promiscuous mode [ 623.451108][T11927] device team_slave_0 entered promiscuous mode [ 623.468671][T11927] device team_slave_1 entered promiscuous mode [ 623.491588][T11927] device dummy0 entered promiscuous mode [ 623.513349][T11927] device nlmon0 entered promiscuous mode [ 623.596366][T11927] device caif0 entered promiscuous mode [ 623.600033][T11927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.358330][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 624.662277][ T4380] gspca_sonixj: reg_w1 err -71 [ 624.728772][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.731348][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.831905][ T4380] sonixj: probe of 1-1:0.0 failed with error -71 [ 624.835922][ T4380] usb 1-1: USB disconnect, device number 23 [ 625.703557][T11976] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 625.726133][T11981] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 626.507841][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2015'. [ 626.969976][ T27] audit: type=1326 audit(626.888:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.2013" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 627.231441][T12023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.259803][T12023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.560642][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.563165][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.997054][T12043] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 628.016514][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.066261][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.079708][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 628.091228][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 628.101576][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 628.114804][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 628.122012][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 628.134270][T12049] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 628.292754][T12055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.327399][T12055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.509351][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2029'. [ 629.596525][ T27] audit: type=1326 audit(629.578:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12071 comm="syz.2.2031" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 629.862963][T12089] netlink: 'syz.5.2037': attribute type 10 has an invalid length. [ 629.883230][T12089] bond0: (slave wlan1): Opening slave failed [ 629.911843][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 629.930038][T12092] usb usb8: usbfs: process 12092 (syz.0.2038) did not claim interface 0 before use [ 630.008743][T12095] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 630.010192][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.017390][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.896466][ T4315] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 630.899560][ T4315] CPU: 1 PID: 4315 Comm: kworker/u5:3 Not tainted 6.1.145-syzkaller #0 [ 630.901915][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.904698][ T4315] Workqueue: hci5 hci_rx_work [ 630.905990][ T4315] Call trace: [ 630.906945][ T4315] dump_backtrace+0x1c8/0x1f4 [ 630.908265][ T4315] show_stack+0x2c/0x3c [ 630.909447][ T4315] __dump_stack+0x30/0x40 [ 630.910661][ T4315] dump_stack_lvl+0xf8/0x160 [ 630.911941][ T4315] dump_stack+0x1c/0x5c [ 630.913096][ T4315] sysfs_create_dir_ns+0x22c/0x24c [ 630.914581][ T4315] kobject_add_internal+0x5a8/0xb30 [ 630.916072][ T4315] kobject_add+0x134/0x1f8 [ 630.917286][ T4315] device_add+0x3f0/0xf94 [ 630.918468][ T4315] hci_conn_add_sysfs+0xbc/0x1cc [ 630.919780][ T4315] le_conn_complete_evt+0xa24/0xf8c [ 630.921167][ T4315] hci_le_conn_complete_evt+0x114/0x3f8 [ 630.922705][ T4315] hci_le_meta_evt+0x2c0/0x4a4 [ 630.923999][ T4315] hci_event_packet+0x6ac/0xf08 [ 630.925301][ T4315] hci_rx_work+0x324/0xaa0 [ 630.926555][ T4315] process_one_work+0x7f4/0x13a8 [ 630.927875][ T4315] worker_thread+0x8c8/0xfbc [ 630.929199][ T4315] kthread+0x250/0x2d8 [ 630.930278][ T4315] ret_from_fork+0x10/0x20 [ 630.933068][ T4315] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 630.937830][ T4315] Bluetooth: hci5: failed to register connection device [ 631.378282][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 631.876444][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.880461][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.414152][T12103] Bluetooth: hci5: command 0x2016 tx timeout [ 633.650595][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 634.497355][T12159] device lo entered promiscuous mode [ 634.499233][T12159] infiniband syz0: set active [ 634.511724][T12159] device tunl0 entered promiscuous mode [ 634.513941][T12159] device gre0 entered promiscuous mode [ 634.522470][T12159] device gretap0 entered promiscuous mode [ 634.525533][T12159] device erspan0 entered promiscuous mode [ 634.527696][T12159] device ip_vti0 entered promiscuous mode [ 634.529793][T12159] device ip6_vti0 entered promiscuous mode [ 634.553690][T12159] device sit0 entered promiscuous mode [ 634.570969][T12159] device ip6tnl0 entered promiscuous mode [ 634.588760][T12159] device ip6gre0 entered promiscuous mode [ 634.590941][T12159] device syz_tun entered promiscuous mode [ 634.592797][T12159] device ip6gretap0 entered promiscuous mode [ 634.605306][T12159] device bridge0 entered promiscuous mode [ 634.607744][T12159] device vcan0 entered promiscuous mode [ 634.609859][T12159] device bond0 entered promiscuous mode [ 634.611417][T12159] device bond_slave_0 entered promiscuous mode [ 634.623594][T12159] device bond_slave_1 entered promiscuous mode [ 634.626352][T12159] device team0 entered promiscuous mode [ 634.627924][T12159] device team_slave_0 entered promiscuous mode [ 634.629794][T12159] device team_slave_1 entered promiscuous mode [ 634.632428][T12159] device dummy0 entered promiscuous mode [ 634.640126][T12159] device nlmon0 entered promiscuous mode [ 634.674250][T12159] device caif0 entered promiscuous mode [ 634.675871][T12159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.686297][ T5472] lo speed is unknown, defaulting to 1000 [ 634.942949][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.962711][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.115592][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 635.483984][T12190] netlink: 'syz.5.2066': attribute type 10 has an invalid length. [ 635.486994][T12190] bond0: (slave wlan1): Opening slave failed [ 635.834219][ T27] audit: type=1326 audit(635.808:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2067" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 636.225415][T12210] device lo entered promiscuous mode [ 636.227406][T12210] device tunl0 entered promiscuous mode [ 636.229857][T12210] device gre0 entered promiscuous mode [ 636.232436][T12210] device gretap0 entered promiscuous mode [ 636.886412][T12210] device erspan0 entered promiscuous mode [ 636.888711][T12210] device ip_vti0 entered promiscuous mode [ 636.890986][T12210] device ip6_vti0 entered promiscuous mode [ 636.893156][T12210] device sit0 entered promiscuous mode [ 636.935069][T12210] device ip6tnl0 entered promiscuous mode [ 636.937275][T12210] device ip6gre0 entered promiscuous mode [ 636.939373][T12210] device syz_tun entered promiscuous mode [ 636.941402][T12210] device ip6gretap0 entered promiscuous mode [ 636.943342][T12210] device bridge0 entered promiscuous mode [ 637.006612][T12210] device vcan0 entered promiscuous mode [ 637.025260][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 637.027581][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 637.046218][T12210] device bond0 entered promiscuous mode [ 637.047797][T12210] device bond_slave_0 entered promiscuous mode [ 637.049511][T12210] device bond_slave_1 entered promiscuous mode [ 637.051913][T12210] device team0 entered promiscuous mode [ 637.053510][T12210] device team_slave_0 entered promiscuous mode [ 637.055575][T12210] device team_slave_1 entered promiscuous mode [ 637.058045][T12210] device dummy0 entered promiscuous mode [ 637.060258][T12210] device nlmon0 entered promiscuous mode [ 637.094463][T12210] device caif0 entered promiscuous mode [ 637.096018][T12210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.158426][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2077'. [ 638.565753][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 638.568578][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 639.327426][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.329910][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.374787][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.377318][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.379809][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.382238][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.429021][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.431571][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.434008][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 639.458937][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 641.163225][ T27] audit: type=1326 audit(641.128:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.0.2086" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 642.362116][ T27] audit: type=1326 audit(642.338:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.2.2095" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 643.547197][ T27] audit: type=1326 audit(643.528:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.1.2103" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 645.147165][ T27] audit: type=1326 audit(645.128:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.1.2109" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 646.173622][T12353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 646.296371][T12360] netlink: 'syz.4.2113': attribute type 10 has an invalid length. [ 646.636775][ T27] audit: type=1326 audit(646.618:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.5.2116" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 648.095144][T12401] __nla_validate_parse: 87 callbacks suppressed [ 648.095159][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 648.275452][T12403] netlink: 'syz.5.2128': attribute type 10 has an invalid length. [ 648.278997][T12403] bond0: (slave wlan1): Opening slave failed [ 648.785833][ T27] audit: type=1326 audit(648.758:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12406 comm="syz.5.2130" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 649.372765][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 649.395174][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 649.397428][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 649.399399][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 649.401552][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 649.403791][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 649.428189][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 649.431637][T12417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.496865][T12417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.511606][T12421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 650.935004][T12453] netlink: 'syz.4.2140': attribute type 10 has an invalid length. [ 651.463782][ T27] audit: type=1326 audit(651.438:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.2.2144" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 652.007946][T12469] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 652.442678][ T27] audit: type=1326 audit(652.418:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.2.2149" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 652.937890][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 652.945926][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 652.952943][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 652.959899][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 652.962022][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 652.965955][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 652.968111][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 652.971371][T12477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 653.147001][T12477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.174330][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2152'. [ 653.924276][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.926328][ C0] bridge0: topology change detected, propagating [ 653.928712][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.930752][ C0] bridge0: topology change detected, propagating [ 654.849839][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.177265][T12502] netlink: 'syz.0.2157': attribute type 10 has an invalid length. [ 655.190526][T12502] bond0: (slave wlan1): Opening slave failed [ 656.282680][ T27] audit: type=1326 audit(656.258:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2160" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 657.083279][T12530] lo speed is unknown, defaulting to 1000 [ 658.333290][ T27] audit: type=1326 audit(658.308:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.2.2164" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 658.608025][T12557] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 658.610342][T12557] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 658.627952][T12557] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 659.921536][ T27] audit: type=1326 audit(659.898:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.2.2176" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 660.592680][T12576] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 660.617253][T12582] netlink: 'syz.1.2181': attribute type 10 has an invalid length. [ 660.622539][T12582] bond0: (slave wlan1): Opening slave failed [ 663.094863][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 663.891207][ T27] audit: type=1326 audit(663.868:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.4.2189" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 665.091985][T12645] netlink: 'syz.2.2194': attribute type 10 has an invalid length. [ 665.690469][T12657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 667.242620][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2204'. [ 667.337419][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 669.626360][T12713] netlink: 'syz.4.2210': attribute type 10 has an invalid length. [ 670.197857][T12723] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 673.515429][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 674.457349][T12764] netlink: 'syz.0.2224': attribute type 10 has an invalid length. [ 674.464634][T12764] bond0: (slave wlan1): Opening slave failed [ 675.279129][T12783] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 678.955007][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.495502][T12822] netlink: 'syz.2.2239': attribute type 10 has an invalid length. [ 679.568492][T12827] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 679.570412][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2242'. [ 683.884900][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 683.949731][T12877] netlink: 'syz.2.2255': attribute type 10 has an invalid length. [ 685.242882][T12886] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 688.245320][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2267'. [ 688.565655][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.568114][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.570644][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.573075][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.575601][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.578044][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.580467][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.582874][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.585310][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 688.772279][T12931] netlink: 'syz.1.2271': attribute type 10 has an invalid length. [ 688.800129][T12931] bond0: (slave wlan1): Opening slave failed [ 689.589193][T12935] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 692.883426][ T27] audit: type=1326 audit(692.858:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.4.2277" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 694.322681][T12980] netlink: 'syz.0.2284': attribute type 10 has an invalid length. [ 694.570665][T12980] bond0: (slave wlan1): Opening slave failed [ 694.573030][T12983] __nla_validate_parse: 39 callbacks suppressed [ 694.573041][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 696.536769][T13006] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 697.152264][ T27] audit: type=1326 audit(697.128:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.5.2293" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 699.048650][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 699.746359][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.748852][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.751406][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.753867][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.756512][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.759058][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.761546][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.764225][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.766796][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 699.769304][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 701.633109][T13066] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 702.197757][ T27] audit: type=1326 audit(702.178:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.1.2309" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 705.421749][T13122] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 706.901350][T13135] __nla_validate_parse: 86 callbacks suppressed [ 706.901365][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.905532][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.908106][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.910393][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.912898][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.915324][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.917762][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.920188][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.922664][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.925055][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 706.983157][T13139] netlink: 'syz.0.2326': attribute type 10 has an invalid length. [ 706.990031][T13139] bond0: (slave wlan1): Opening slave failed [ 707.236960][ T27] audit: type=1326 audit(707.208:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.5.2324" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 707.729172][T13147] tipc: Enabled bearer , priority 0 [ 707.732713][T13147] device syzkaller0 entered promiscuous mode [ 707.776399][T13147] tipc: Resetting bearer [ 708.534968][T13174] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 710.442220][T13200] fuse: Bad value for 'fd' [ 710.460900][ T27] audit: type=1326 audit(710.438:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.2.2342" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895aba8 code=0x0 [ 711.175101][T13203] tipc: Enabled bearer , priority 0 [ 711.177635][T13203] device syzkaller0 entered promiscuous mode [ 711.182138][T13203] tipc: Resetting bearer [ 714.562882][T13250] tipc: Enabling of bearer rejected, already enabled [ 714.692701][T13252] fuse: Bad value for 'fd' [ 714.706636][ T27] audit: type=1326 audit(714.688:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13247 comm="syz.0.2355" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 715.809565][T13268] __nla_validate_parse: 86 callbacks suppressed [ 715.809591][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 717.240270][T13290] tipc: Enabled bearer , priority 0 [ 717.258567][T13290] device syzkaller0 entered promiscuous mode [ 717.269566][T13290] tipc: Resetting bearer [ 717.272989][T13288] tipc: Resetting bearer [ 717.355842][T13288] tipc: Disabling bearer [ 718.711745][T13311] fuse: Bad value for 'fd' [ 718.743075][ T27] audit: type=1326 audit(718.718:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13301 comm="syz.4.2370" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 720.715157][T13327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2376'. [ 721.291400][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 721.638147][T13349] tipc: Enabled bearer , priority 0 [ 721.654431][T13349] device syzkaller0 entered promiscuous mode [ 721.679442][T13349] tipc: Resetting bearer [ 721.704618][T13348] tipc: Resetting bearer [ 721.775597][T13348] tipc: Disabling bearer [ 724.567976][T13366] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2387'. [ 724.580125][ T27] audit: type=1326 audit(724.558:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.0.2385" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 726.126809][T13388] tipc: Enabled bearer , priority 0 [ 726.151294][T13388] device syzkaller0 entered promiscuous mode [ 726.160899][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2392'. [ 726.244020][T13388] tipc: Resetting bearer [ 726.270871][T13386] tipc: Resetting bearer [ 726.720232][T13386] tipc: Disabling bearer [ 727.383921][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.386625][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.389129][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.391582][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.394071][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.396706][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.399194][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.401743][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.404486][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.407054][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 727.533763][ T27] audit: type=1326 audit(727.508:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13412 comm="syz.1.2400" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 729.284425][T13443] infiniband syz0: set active [ 729.344222][T13443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.348765][ T5252] lo speed is unknown, defaulting to 1000 [ 729.350548][T13447] tipc: Enabled bearer , priority 0 [ 729.353063][T13442] device syzkaller0 entered promiscuous mode [ 729.369155][T13442] tipc: Resetting bearer [ 729.401781][T13440] tipc: Resetting bearer [ 729.494949][T13440] tipc: Disabling bearer [ 732.079431][ T27] audit: type=1326 audit(732.058:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.5.2417" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 733.958000][T13500] tipc: Enabled bearer , priority 0 [ 733.960642][T13500] device syzkaller0 entered promiscuous mode [ 733.965759][T13500] tipc: Resetting bearer [ 734.891388][T13517] __nla_validate_parse: 36 callbacks suppressed [ 734.891402][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 735.089584][ T5252] tipc: Node number set to 2776335695 [ 736.510386][T13538] tipc: Enabling of bearer rejected, already enabled [ 738.029987][ T27] audit: type=1326 audit(738.008:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.5.2437" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8795aba8 code=0x0 [ 738.593302][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2445'. [ 739.218017][T13580] device syzkaller0 left promiscuous mode [ 739.222236][T13580] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 739.228869][T13580] bond0: (slave wlan1): Opening slave failed [ 739.423473][T13586] tipc: Enabling of bearer rejected, already enabled [ 739.431564][T13586] device syzkaller0 entered promiscuous mode [ 741.517087][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.931503][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 742.209442][ T27] audit: type=1326 audit(742.188:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.0.2456" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 742.847504][T13630] tipc: Enabling of bearer rejected, already enabled [ 743.158909][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 745.415924][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 745.460115][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 745.462314][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 745.508021][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 745.510210][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 745.512496][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 745.514714][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 745.518042][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 745.770319][T13659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.908644][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.911691][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.914730][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.917612][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.920437][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.923329][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.926146][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 745.929025][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 746.574207][ T27] audit: type=1326 audit(746.548:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.0.2471" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 747.090049][T13685] tipc: Enabling of bearer rejected, already enabled [ 747.245400][T13687] __nla_validate_parse: 40 callbacks suppressed [ 747.245415][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 749.934015][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.936846][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.939426][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.942021][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.944425][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.946949][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.949447][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.951796][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 749.954343][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 750.002011][T13731] tipc: Enabled bearer , priority 0 [ 750.091543][ T27] audit: type=1326 audit(750.068:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13725 comm="syz.4.2487" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 750.096175][T13731] device syzkaller0 entered promiscuous mode [ 750.722828][T13731] tipc: Resetting bearer [ 750.744610][T13730] tipc: Resetting bearer [ 750.960463][T13730] tipc: Disabling bearer [ 753.899532][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 753.944720][T13780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.949139][T13782] __nla_validate_parse: 39 callbacks suppressed [ 753.949152][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.953300][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.955880][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.958213][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.960671][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.963133][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.965729][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.968138][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.970512][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 753.972868][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2500'. [ 754.256534][ T27] audit: type=1326 audit(754.238:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13781 comm="syz.4.2502" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 757.890132][T13827] netlink: 'syz.4.2509': attribute type 10 has an invalid length. [ 758.158141][T13835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 758.521318][ T27] audit: type=1326 audit(758.498:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.4.2515" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa115aba8 code=0x0 [ 761.145164][T13864] device lo entered promiscuous mode [ 761.147626][T13864] device tunl0 entered promiscuous mode [ 761.149816][T13864] device gre0 entered promiscuous mode [ 761.151952][T13864] device gretap0 entered promiscuous mode [ 761.153963][T13864] device erspan0 entered promiscuous mode [ 761.162295][T13864] device ip_vti0 entered promiscuous mode [ 761.167173][T13864] device ip6_vti0 entered promiscuous mode [ 761.170997][T13864] device sit0 entered promiscuous mode [ 761.173147][T13864] device ip6tnl0 entered promiscuous mode [ 761.175758][T13864] device ip6gre0 entered promiscuous mode [ 761.178002][T13864] device syz_tun entered promiscuous mode [ 761.180011][T13864] device ip6gretap0 entered promiscuous mode [ 761.181970][T13864] device bridge0 entered promiscuous mode [ 761.184875][T13864] device vcan0 entered promiscuous mode [ 761.224852][T13864] device bond0 entered promiscuous mode [ 761.226370][T13864] device bond_slave_0 entered promiscuous mode [ 761.228102][T13864] device bond_slave_1 entered promiscuous mode [ 761.244612][T13864] device team0 entered promiscuous mode [ 761.246179][T13864] device team_slave_0 entered promiscuous mode [ 761.247916][T13864] device team_slave_1 entered promiscuous mode [ 761.262109][T13864] device dummy0 entered promiscuous mode [ 761.270197][T13864] device nlmon0 entered promiscuous mode [ 761.446634][T13864] device caif0 entered promiscuous mode [ 761.448155][T13864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.781893][ T27] audit: type=1326 audit(762.758:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.1.2530" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 763.350981][T13903] tipc: Enabled bearer , priority 0 [ 763.353337][T13903] device syzkaller0 entered promiscuous mode [ 763.684941][T13910] tipc: Resetting bearer [ 763.743372][T13902] tipc: Resetting bearer [ 763.825784][T13902] tipc: Disabling bearer [ 763.833068][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 764.046556][T13924] device syzkaller0 left promiscuous mode [ 764.098401][T13924] netlink: 'syz.5.2540': attribute type 10 has an invalid length. [ 764.101348][T13924] bond0: (slave wlan1): Opening slave failed [ 765.936232][ T27] audit: type=1326 audit(765.908:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13948 comm="syz.1.2547" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b5aba8 code=0x0 [ 766.301333][T13951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.599285][T13964] tipc: Enabled bearer , priority 0 [ 766.601791][T13964] device syzkaller0 entered promiscuous mode [ 767.106161][T13968] tipc: Resetting bearer [ 767.124447][T13963] tipc: Resetting bearer [ 767.235262][T13963] tipc: Disabling bearer [ 768.287963][T13995] netlink: 'syz.4.2555': attribute type 10 has an invalid length. [ 769.627968][T14022] tipc: Enabled bearer , priority 0 [ 769.630251][T14022] device syzkaller0 entered promiscuous mode [ 769.716494][T14023] tipc: Resetting bearer [ 769.731746][T14021] tipc: Resetting bearer [ 769.795455][T14021] tipc: Disabling bearer [ 769.854961][T14025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.442595][T14042] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 771.702954][T14065] infiniband syz0: set active [ 771.760866][ T4380] lo speed is unknown, defaulting to 1000 [ 772.610060][T14086] netlink: 'syz.5.2586': attribute type 10 has an invalid length. [ 772.613145][T14086] bond0: (slave wlan1): Opening slave failed [ 772.767129][T14091] netlink: 'syz.1.2589': attribute type 29 has an invalid length. [ 772.769746][T14091] netlink: 'syz.1.2589': attribute type 29 has an invalid length. [ 772.815099][T14091] netlink: 'syz.1.2589': attribute type 29 has an invalid length. [ 773.461887][T14098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 773.554844][T14098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.133347][T14122] bridge0: port 3(team0) entered blocking state [ 774.133661][T14122] bridge0: port 3(team0) entered disabled state [ 774.143283][T14122] bridge0: port 3(team0) entered blocking state [ 774.143348][T14122] bridge0: port 3(team0) entered listening state [ 776.730378][T14147] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 776.755262][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 776.833275][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 776.880658][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 776.915980][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 776.921429][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 776.974646][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 776.978617][T14151] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 777.014413][T14153] infiniband syz0: set active [ 777.190554][T14153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.318542][T14160] lo speed is unknown, defaulting to 1000 [ 779.343137][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 779.380858][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 779.383064][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 779.389541][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 779.391644][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 779.393748][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 779.395863][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 779.399131][T14201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 779.454246][T14201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.460038][T14207] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 779.485759][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 779.529346][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 779.531547][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 779.533553][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 779.544048][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 779.565219][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 779.567607][T14203] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 782.102710][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 782.115370][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 782.117609][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 782.119646][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 782.121710][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 782.123941][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 782.140117][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 782.143355][T14253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 782.812496][T14253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 784.614242][ T4369] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 784.794566][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 784.809336][ T4369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.834748][ T4369] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 784.953304][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.216258][ T4369] usb 1-1: config 0 descriptor?? [ 785.255971][ T4369] usb 1-1: Found UVC 0.00 device (2833:0201) [ 785.257875][ T4369] usb 1-1: No valid video chain found. [ 785.331694][T14310] netlink: 'syz.5.2660': attribute type 10 has an invalid length. [ 785.371467][T14310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.379722][T14310] device batadv0 entered promiscuous mode [ 785.394436][T14310] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 785.401254][T14311] netlink: 'syz.5.2660': attribute type 10 has an invalid length. [ 785.403407][T14311] __nla_validate_parse: 85 callbacks suppressed [ 785.403417][T14311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2660'. [ 785.555206][T14311] bond0: (slave batadv0): Releasing backup interface [ 786.340867][T14311] bridge0: port 4(batadv0) entered blocking state [ 786.343647][T14311] bridge0: port 4(batadv0) entered disabled state [ 786.349519][ T4425] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 786.352303][ T4425] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 787.384163][ T4369] usb 1-1: USB disconnect, device number 24 [ 787.546349][T14335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.604172][ C1] bridge0: port 3(team0) entered learning state [ 790.242299][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 790.278917][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 790.299651][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 790.321775][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 790.336500][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 790.345169][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 790.360103][T14377] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 790.362544][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 790.389089][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 790.404419][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 790.406529][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 790.408639][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 790.410960][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 790.413126][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 790.453835][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 790.615072][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.617208][T14380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 791.477563][T14390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.775318][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 795.800485][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 795.810153][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 795.812431][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 795.843544][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 795.871525][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 795.906472][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 796.026784][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 796.119537][T14449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.773640][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'. [ 798.786199][T14482] netlink: 'syz.4.2709': attribute type 13 has an invalid length. [ 798.816941][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.905480][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 798.942119][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 799.012692][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 799.086239][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 799.159011][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 799.223942][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 799.273810][T14504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.279600][T14482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 799.291504][T14504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.354622][T14482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.788050][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.004713][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 803.039101][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 803.041283][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 803.043421][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 803.064331][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 803.066884][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 803.069161][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 803.078492][T14530] tipc: Enabling of bearer rejected, already enabled [ 803.211713][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.215879][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.964159][ C1] bridge0: port 3(team0) entered forwarding state [ 804.966080][ C1] bridge0: topology change detected, propagating [ 806.794945][ T27] audit: type=1326 audit(806.768:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.0.2737" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055aba8 code=0x0 [ 807.378536][T14585] tipc: Enabling of bearer rejected, already enabled [ 811.182090][T14610] netlink: 'syz.0.2746': attribute type 10 has an invalid length. [ 812.004317][ C1] ================================================================== [ 812.006604][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x404/0x45c [ 812.008692][ C1] Read of size 2 at addr ffff0000f4b1e02a by task kworker/u4:16/5326 [ 812.010936][ C1] [ 812.011571][ C1] CPU: 1 PID: 5326 Comm: kworker/u4:16 Not tainted 6.1.145-syzkaller #0 [ 812.013870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.016543][ C1] Workqueue: events_power_efficient gc_worker [ 812.018201][ C1] Call trace: [ 812.019096][ C1] dump_backtrace+0x1c8/0x1f4 [ 812.020371][ C1] show_stack+0x2c/0x3c [ 812.021435][ C1] __dump_stack+0x30/0x40 [ 812.022684][ C1] dump_stack_lvl+0xf8/0x160 [ 812.023914][ C1] print_address_description+0x88/0x220 [ 812.025410][ C1] print_report+0x50/0x68 [ 812.026587][ C1] kasan_report+0xa8/0x100 [ 812.027781][ C1] __asan_report_load2_noabort+0x2c/0x38 [ 812.029342][ C1] rose_timer_expiry+0x404/0x45c [ 812.030759][ C1] call_timer_fn+0x1b8/0x964 [ 812.032013][ C1] __run_timers+0x460/0x6bc [ 812.033224][ C1] run_timer_softirq+0x7c/0x114 [ 812.034543][ C1] handle_softirqs+0x318/0xc6c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.035824][ C1] __do_softirq+0x14/0x20 [ 812.037015][ C1] ____do_softirq+0x14/0x20 [ 812.038232][ C1] call_on_irq_stack+0x24/0x30 [ 812.039627][ C1] do_softirq_own_stack+0x20/0x2c [ 812.041065][ C1] __irq_exit_rcu+0x23c/0x43c [ 812.042331][ C1] irq_exit_rcu+0x14/0x84 [ 812.043506][ C1] el1_interrupt+0x38/0x54 [ 812.044743][ C1] el1h_64_irq_handler+0x18/0x24 [ 812.046081][ C1] el1h_64_irq+0x64/0x68 [ 812.047245][ C1] nf_conntrack_get_ht+0x128/0x20c [ 812.048622][ C1] gc_worker+0x27c/0x1050 [ 812.049795][ C1] process_one_work+0x7f4/0x13a8 [ 812.051237][ C1] worker_thread+0x8c8/0xfbc [ 812.052500][ C1] kthread+0x250/0x2d8 [ 812.053694][ C1] ret_from_fork+0x10/0x20 [ 812.054822][ C1] [ 812.055431][ C1] Allocated by task 14107: [ 812.056628][ C1] kasan_set_track+0x4c/0x80 [ 812.057856][ C1] kasan_save_alloc_info+0x28/0x34 [ 812.059240][ C1] __kasan_kmalloc+0xa0/0xb8 [ 812.060425][ C1] __kmalloc_node_track_caller+0xe0/0x16c [ 812.062015][ C1] __alloc_skb+0x264/0x718 [ 812.063221][ C1] __ip6_append_data+0x2194/0x31d8 [ 812.064605][ C1] ip6_append_data+0x1a8/0x39c [ 812.065907][ C1] rawv6_sendmsg+0xe04/0x12c0 [ 812.067118][ C1] inet_sendmsg+0x154/0x284 [ 812.068338][ C1] ____sys_sendmsg+0x5b8/0x918 [ 812.069633][ C1] __sys_sendmmsg+0x2f8/0x754 [ 812.070869][ C1] __arm64_sys_sendmmsg+0xa0/0xbc [ 812.072298][ C1] invoke_syscall+0x98/0x2bc [ 812.073525][ C1] el0_svc_common+0x138/0x258 [ 812.074803][ C1] do_el0_svc+0x58/0x13c [ 812.075960][ C1] el0_svc+0x58/0x138 [ 812.077042][ C1] el0t_64_sync_handler+0x84/0xf0 [ 812.078433][ C1] el0t_64_sync+0x18c/0x190 [ 812.079662][ C1] [ 812.080290][ C1] The buggy address belongs to the object at ffff0000f4b1e000 [ 812.080290][ C1] which belongs to the cache kmalloc-512 of size 512 [ 812.084108][ C1] The buggy address is located 42 bytes inside of [ 812.084108][ C1] 512-byte region [ffff0000f4b1e000, ffff0000f4b1e200) [ 812.087662][ C1] [ 812.088289][ C1] The buggy address belongs to the physical page: [ 812.090045][ C1] page:0000000046f2ec6e refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f4b1d400 pfn:0x134b1c [ 812.093076][ C1] head:0000000046f2ec6e order:2 compound_mapcount:0 compound_pincount:0 [ 812.095207][ C1] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 812.097466][ C1] raw: 05ffc00000010200 fffffc000346ca08 fffffc0003d28e08 ffff0000c0002600 [ 812.099777][ C1] raw: ffff0000f4b1d400 0000000000100003 00000001ffffffff 0000000000000000 [ 812.102144][ C1] page dumped because: kasan: bad access detected [ 812.104030][ C1] [ 812.104662][ C1] Memory state around the buggy address: [ 812.106331][ C1] ffff0000f4b1df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 812.108563][ C1] ffff0000f4b1df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 812.110793][ C1] >ffff0000f4b1e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 812.112983][ C1] ^ [ 812.114407][ C1] ffff0000f4b1e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 812.116572][ C1] ffff0000f4b1e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 812.118794][ C1] ================================================================== [ 812.121026][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.122703][ C1] Disabling lock debugging due to kernel taint [ 813.265543][ T4518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.386622][ T4518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.475987][ T4518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.555891][ T4518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.805339][ T4518] tipc: Left network mode [ 815.335053][ T4518] device hsr_slave_0 left promiscuous mode [ 815.374562][ T4518] device hsr_slave_1 left promiscuous mode [ 815.464391][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.466526][ T4518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.469359][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.471344][ T4518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.473655][ T4518] device bridge_slave_1 left promiscuous mode [ 815.475468][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.535841][ T4518] device bridge_slave_0 left promiscuous mode [ 815.537824][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.664321][ T4518] device veth1_macvtap left promiscuous mode [ 815.666047][ T4518] device veth0_macvtap left promiscuous mode [ 817.114524][ T4518] device team_slave_1 left promiscuous mode [ 817.116702][ T4518] team0 (unregistering): Port device team_slave_1 removed [ 817.344441][ T4518] device team_slave_0 left promiscuous mode [ 817.346626][ T4518] team0 (unregistering): Port device team_slave_0 removed [ 817.514721][ T4518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.554285][ T4518] device bond_slave_1 left promiscuous mode [ 817.755933][ T4518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.814465][ T4518] device bond_slave_0 left promiscuous mode [ 820.128148][ T4518] bond0 (unregistering): Released all slaves