last executing test programs: 1m45.762419563s ago: executing program 1 (id=2936): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2}, 0xff}, 0x18) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x48005) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m45.550854069s ago: executing program 1 (id=2937): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m44.447076381s ago: executing program 1 (id=2939): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {0x0}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) 1m42.573267831s ago: executing program 1 (id=2944): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r4 = open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0xc8030, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f657874656e642c63616368653d300858a59590c70e73696f6e3d3970323030302e4c2c70726976706f72742c657569643e", @ANYRESDEC, @ANYBLOB=',\x00']) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) 1m41.082482597s ago: executing program 1 (id=2947): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2}, 0xff}, 0x18) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x48005) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m40.969253893s ago: executing program 1 (id=2948): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x1500, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x640688d1) unshare(0x6a040000) mmap(&(0x7f0000595000/0x2000)=nil, 0x2000, 0x3, 0x2010, 0xffffffffffffffff, 0xec0fa000) 1m25.404143547s ago: executing program 32 (id=2948): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x1500, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x640688d1) unshare(0x6a040000) mmap(&(0x7f0000595000/0x2000)=nil, 0x2000, 0x3, 0x2010, 0xffffffffffffffff, 0xec0fa000) 55.616439647s ago: executing program 2 (id=3055): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030628a34303030302c757365720000000000000000000008f3cd152c76379dc13d4560151f96037d8172464465c2fe1db2e6280dc14e5ef87b0d76fcfe0a238b276e4c49dbc649f299542acb9188a6e8831f87a530adcbc3549f9c2a9214c83de4e18a2abc46c7334e730f99a65dd259fd945441acee2a7e0ff1b1b6795513882f34af", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0xffff, 0x4, 0x10006, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x112, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r0, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 45.150475367s ago: executing program 2 (id=3079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 43.851989071s ago: executing program 2 (id=3082): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 42.327953834s ago: executing program 2 (id=3083): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0xa, {0x80000001, 0xf, 0x5, 0x6ba}}) 42.042348167s ago: executing program 2 (id=3085): fanotify_init(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 37.494456566s ago: executing program 2 (id=3091): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 21.772815109s ago: executing program 33 (id=3091): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 8.842404613s ago: executing program 3 (id=3147): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 8.814812663s ago: executing program 5 (id=3148): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 7.355258372s ago: executing program 5 (id=3151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 7.266654551s ago: executing program 0 (id=3152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x89901) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x7) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.246545804s ago: executing program 3 (id=3153): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.540516386s ago: executing program 4 (id=3155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) 6.354376288s ago: executing program 0 (id=3156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x610, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x5e0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x174, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="bd5577acf3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x440, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xcc, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x9d, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x98, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xe4, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xb9, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.901501815s ago: executing program 4 (id=3157): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000580)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 5.727858972s ago: executing program 3 (id=3158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x20000040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 5.542057048s ago: executing program 4 (id=3159): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') r4 = open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0xc8030, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f657874656e642c63616368653d300858a59590c70e73696f6e3d3970323030302e4c2c70726976706f72742c657569643e", @ANYRESDEC, @ANYBLOB=',\x00']) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) 5.181739616s ago: executing program 5 (id=3160): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.471345936s ago: executing program 5 (id=3161): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 3.545807747s ago: executing program 4 (id=3162): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b1e2a00090582020002000000255486d09878c9d26ac67ebe1e8dbbf6a8f957f47f3b0d2dce169a6b650f1323fe6b7893005029c56b1f0da3ca83aec4307a2a8eabf90e4cb74a96b1ebee6aecf55908d682e36c72e776cac338a9379c49150072a5f423d24ab994f23e0e"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f00000001c0)=0x13) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) 3.458593231s ago: executing program 0 (id=3163): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) msgsnd(0x0, 0x0, 0x0, 0x800) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 3.391982409s ago: executing program 3 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) 2.334973326s ago: executing program 3 (id=3165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54ca", @ANYRES32=r2, @ANYRES32], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r3, 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766a", @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0000000", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r8, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a3000000000090001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c890) socket$inet6_udp(0xa, 0x2, 0x0) 2.278454583s ago: executing program 0 (id=3166): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r3 = socket$inet6(0xa, 0xa, 0xfffffffc) setresgid(0xee00, 0xee01, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) keyctl$chown(0x4, r4, 0xee00, 0x0) keyctl$describe(0x6, r4, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 1.049738811s ago: executing program 5 (id=3167): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) getpeername$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 988.10859ms ago: executing program 0 (id=3168): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 786.380794ms ago: executing program 5 (id=3169): dup(0xffffffffffffffff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x80b2}, {0xffffffffffffffff, 0x1002}, {0xffffffffffffffff, 0x400}, {r0}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0xfffffffffffffff8]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 735.289265ms ago: executing program 3 (id=3170): syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 622.431452ms ago: executing program 0 (id=3171): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 261.402937ms ago: executing program 4 (id=3172): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 0s ago: executing program 4 (id=3173): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xb, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): `syz.2.1318'. [ 657.897164][T10801] ubi: mtd0 is already attached to ubi31 [ 657.918446][ T7713] usb 2-1: USB disconnect, device number 17 [ 658.229280][T10821] tipc: Enabled bearer , priority 0 [ 658.237126][T10821] syzkaller0: entered promiscuous mode [ 658.246424][T10821] syzkaller0: entered allmulticast mode [ 658.262351][T10821] tipc: Resetting bearer [ 658.274731][T10820] tipc: Resetting bearer [ 658.745186][T10831] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 658.782025][T10820] tipc: Disabling bearer [ 659.820711][ T7712] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 659.994456][ T7712] usb 1-1: Using ep0 maxpacket: 8 [ 660.021062][ T7712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.174035][ T7712] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.187946][ T7712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.203246][ T7712] usb 1-1: config 0 descriptor?? [ 660.426368][ T7712] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 661.348952][T10852] fuse: Unknown parameter '0x0000000000000006' [ 661.798831][T10854] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 663.428171][T10864] netlink: 'syz.3.1337': attribute type 3 has an invalid length. [ 663.436042][T10864] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1337'. [ 663.719038][T10873] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 663.784852][T10875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 667.782863][ T7731] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 667.920630][ T7731] usb 2-1: device descriptor read/64, error -71 [ 668.180655][ T7731] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 668.332367][ T7731] usb 2-1: device descriptor read/64, error -71 [ 668.453507][ T7731] usb usb2-port1: attempt power cycle [ 669.010675][ T7731] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 669.051237][ T7731] usb 2-1: device descriptor read/8, error -71 [ 669.320416][ T7731] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 669.351853][ T7731] usb 2-1: device descriptor read/8, error -71 [ 669.473934][ T7731] usb usb2-port1: unable to enumerate USB device [ 669.959443][T10918] netlink: 'syz.3.1351': attribute type 3 has an invalid length. [ 669.967422][T10918] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1351'. [ 670.952683][T10926] 9pnet_fd: Insufficient options for proto=fd [ 671.060907][T10931] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 674.323988][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.376630][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.192872][T10954] wg1 speed is unknown, defaulting to 1000 [ 676.568645][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.578226][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.104614][T10964] netlink: 'syz.4.1364': attribute type 3 has an invalid length. [ 677.112528][T10964] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1364'. [ 678.873207][T10972] 9pnet_fd: Insufficient options for proto=fd [ 679.210181][T10978] netlink: 'syz.4.1366': attribute type 21 has an invalid length. [ 680.521536][T10990] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1370'. [ 682.189790][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1375'. [ 682.207104][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.216400][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.454376][T11018] 9pnet_fd: Insufficient options for proto=fd [ 686.559373][ T30] audit: type=1800 audit(1755579376.684:18): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1383" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 687.088440][T11041] netlink: 'syz.3.1385': attribute type 21 has an invalid length. [ 691.026042][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.032619][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.154473][T11076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1394'. [ 691.166448][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.176133][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.542958][T11079] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[11079] [ 698.930770][T11125] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 699.771705][T11141] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1407'. [ 702.675183][T11164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 703.525971][T11168] 9pnet_fd: Insufficient options for proto=fd [ 707.241706][T11184] wg1 speed is unknown, defaulting to 1000 [ 707.261708][T11183] syz.0.1417 (11183) used greatest stack depth: 16184 bytes left [ 708.324271][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 709.150680][T11198] rdma_rxe: rxe_newlink: failed to add wg1 [ 711.557347][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.569483][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.877152][T11231] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 713.886535][T11231] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.895680][T11231] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.914605][T11231] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 715.366763][T11245] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 715.900407][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 715.977158][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 715.987025][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 715.993151][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 716.000111][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 716.336730][T11254] rdma_rxe: rxe_newlink: failed to add wg1 [ 717.915393][T11264] netlink: 'syz.1.1440': attribute type 3 has an invalid length. [ 717.923333][T11264] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1440'. [ 720.470644][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 721.160911][ T43] usb 2-1: device descriptor read/64, error -71 [ 721.582817][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 721.780649][ T43] usb 2-1: device descriptor read/64, error -71 [ 722.224750][T11297] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 722.260507][ T43] usb usb2-port1: attempt power cycle [ 722.725023][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 723.162490][T11308] rdma_rxe: rxe_newlink: failed to add wg1 [ 724.003258][T11311] netlink: 'syz.2.1452': attribute type 3 has an invalid length. [ 724.011207][T11311] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1452'. [ 727.504332][T11344] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 729.308675][T11361] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 729.317133][T11361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1468'. [ 731.870638][T11362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 731.876866][T11362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.905668][T11362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 731.968659][T11362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 733.900457][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 733.908346][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 733.995742][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 734.063936][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 734.411317][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1477'. [ 734.422697][T11402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.433349][T11401] syz.1.1476 (11401): drop_caches: 2 [ 734.555458][T11402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.585628][T11401] syz.1.1476 (11401): drop_caches: 2 [ 735.756902][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.769847][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.169896][ T30] audit: type=1800 audit(1755579431.804:19): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1490" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 742.626548][T11468] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 743.175684][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.187602][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.557057][T11492] input: syz1 as /devices/virtual/input/input11 [ 748.511514][T11514] netlink: 'syz.3.1506': attribute type 21 has an invalid length. [ 752.800685][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.811577][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.394601][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.415189][T11560] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1519'. [ 754.431317][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.809632][T11565] ubi: mtd0 is already attached to ubi31 [ 759.069686][T11590] netlink: 'syz.0.1526': attribute type 21 has an invalid length. [ 762.080387][T11526] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 762.284127][T11526] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 762.292931][T11526] usb 2-1: config 0 has no interface number 0 [ 762.317770][T11526] usb 2-1: config 0 interface 171 has no altsetting 0 [ 762.340708][T11526] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 762.350732][T11526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.358801][T11526] usb 2-1: Product: syz [ 762.384412][T11526] usb 2-1: Manufacturer: syz [ 762.405367][T11526] usb 2-1: SerialNumber: syz [ 762.438437][T11526] usb 2-1: config 0 descriptor?? [ 762.475965][T11526] usb-storage 2-1:0.171: USB Mass Storage device detected [ 763.691621][T11641] ubi: mtd0 is already attached to ubi31 [ 765.635836][ T7712] usb 2-1: USB disconnect, device number 25 [ 766.500397][ T30] audit: type=1800 audit(1755579457.024:20): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1545" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 769.031564][T11676] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[11676] [ 771.141779][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.181598][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.581018][T11702] ubi: mtd0 is already attached to ubi31 [ 772.684470][ T30] audit: type=1800 audit(1755579463.204:21): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1556" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 778.056812][T11743] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 778.317255][ T30] audit: type=1800 audit(1755579468.954:22): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1567" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 782.019962][T11771] syz.4.1574 (11771): drop_caches: 2 [ 782.029620][T11771] syz.4.1574 (11771): drop_caches: 2 [ 785.822605][T11811] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 789.353287][T11826] tipc: Enabled bearer , priority 0 [ 789.451457][T11827] syzkaller0: entered promiscuous mode [ 789.470365][T11827] syzkaller0: entered allmulticast mode [ 789.532973][T11826] tipc: Resetting bearer [ 789.540985][T11825] tipc: Resetting bearer [ 789.610067][T11825] tipc: Disabling bearer [ 793.455185][T11867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 793.472033][T11867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 793.478965][T11867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 793.488536][T11867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 795.268833][T11884] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 795.340534][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 795.511087][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 795.517872][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 795.597186][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 797.964098][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 798.456564][ T5900] usb 2-1: config 0 has no interfaces? [ 798.496108][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 798.515505][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.553165][ T5900] usb 2-1: Product: syz [ 798.567225][ T5900] usb 2-1: Manufacturer: syz [ 798.591797][ T5900] usb 2-1: SerialNumber: syz [ 798.625368][ T5900] usb 2-1: config 0 descriptor?? [ 798.931593][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1610'. [ 801.692943][ T7731] usb 2-1: USB disconnect, device number 26 [ 802.490296][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.504072][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.712614][T11944] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 802.893872][ T30] audit: type=1800 audit(1755579493.524:23): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1621" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 803.950994][T11964] wg1 speed is unknown, defaulting to 1000 [ 804.866394][T11969] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 807.314420][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 808.552572][T11995] syzkaller1: entered promiscuous mode [ 808.558154][T11995] syzkaller1: entered allmulticast mode [ 814.092518][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.101186][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.366422][T12060] netlink: 'syz.0.1656': attribute type 7 has an invalid length. [ 817.506802][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1656'. [ 819.553964][T12076] syzkaller1: entered promiscuous mode [ 819.567480][T12076] syzkaller1: entered allmulticast mode [ 820.011617][T12085] input: syz0 as /devices/virtual/input/input13 [ 825.290018][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.302131][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.155116][T12142] tipc: Started in network mode [ 827.169820][T12142] tipc: Node identity 4, cluster identity 4711 [ 827.186393][T12142] tipc: Node number set to 4 [ 828.678455][T12162] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 833.636190][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.645358][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.360075][T12264] __vm_enough_memory: pid: 12264, comm: syz.2.1704, bytes: 4503599627366400 not enough memory for the allocation [ 840.597096][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.606374][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.620120][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1705'. [ 840.632501][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.641718][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.329175][T12273] wg1 speed is unknown, defaulting to 1000 [ 841.834721][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 841.845362][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 841.856399][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 842.132526][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 842.235546][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 842.257413][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 842.702314][T12287] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[12287] [ 843.425133][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 843.434445][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 843.446013][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 844.246606][T12296] netlink: 'syz.2.1711': attribute type 9 has an invalid length. [ 844.350270][ C1] hrtimer: interrupt took 78940 ns [ 844.742987][T12301] syz.2.1712 (12301): drop_caches: 2 [ 844.749229][T12301] syz.2.1712 (12301): drop_caches: 2 [ 845.646667][T12305] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 845.654635][T12305] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1713'. [ 846.836573][T12313] netlink: 'syz.1.1717': attribute type 2 has an invalid length. [ 846.870369][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 846.942117][T12313] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 847.025197][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 849.021092][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.033591][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.115952][T12338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 852.168754][T12360] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[12360] [ 852.851887][T12361] wg1 speed is unknown, defaulting to 1000 [ 855.453579][T12381] tipc: Enabled bearer , priority 0 [ 855.471567][T12380] tipc: Resetting bearer [ 855.534145][T12378] tipc: Disabling bearer [ 857.792849][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.805668][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.942986][T12403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 862.240412][T12435] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[12435] [ 865.009183][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 865.447016][T12458] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 865.766331][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 867.711954][T12486] syz.4.1763 (12486): drop_caches: 2 [ 867.717717][T12486] syz.4.1763 (12486): drop_caches: 2 [ 869.550936][T12505] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 870.755971][T12520] netlink: 'syz.1.1776': attribute type 4 has an invalid length. [ 873.023215][T12543] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[12543] [ 875.429601][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.449116][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.540505][T12570] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 876.447040][T12583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.494543][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 881.599378][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1802'. [ 881.787078][T12633] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1803'. [ 884.952473][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 885.178954][T12657] tipc: Enabled bearer , priority 0 [ 885.201886][T12657] syzkaller0: entered promiscuous mode [ 885.207427][T12657] syzkaller0: entered allmulticast mode [ 885.266702][T12660] tipc: Resetting bearer [ 885.310979][T12656] tipc: Resetting bearer [ 885.360355][T12656] tipc: Disabling bearer [ 885.689905][T12666] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 885.716385][T12666] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 886.967079][T12682] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 888.693823][T12696] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1821'. [ 889.525639][T12702] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 889.589540][T12702] kvm: pic: non byte read [ 889.609935][T12706] tipc: Enabled bearer , priority 0 [ 889.622573][T12702] kvm: pic: non byte read [ 889.654318][T12702] kvm: pic: non byte read [ 889.675077][T12702] kvm: pic: single mode not supported [ 889.678363][T12706] syzkaller0: entered promiscuous mode [ 889.681243][T12702] kvm: pic: non byte read [ 889.720856][T12706] syzkaller0: entered allmulticast mode [ 889.829005][T12706] tipc: Resetting bearer [ 889.878074][T12705] tipc: Resetting bearer [ 890.231849][T12705] tipc: Disabling bearer [ 890.706202][T12720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1829'. [ 892.099443][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 896.750245][T12771] fuse: Bad value for 'fd' [ 898.180348][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 901.192059][T12810] fuse: Bad value for 'fd' [ 901.323381][T12813] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 901.375559][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 904.885215][T12834] wg1 speed is unknown, defaulting to 1000 [ 909.683464][T12864] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 913.425840][T12906] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 915.572724][T12918] netlink: 'syz.1.1874': attribute type 3 has an invalid length. [ 915.581709][T12918] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1874'. [ 920.013460][T12970] openvswitch: netlink: Message has 8 unknown bytes. [ 920.939247][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.040146][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.944613][ T30] audit: type=1800 audit(1755579614.864:24): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1902" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 925.065787][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'. [ 929.566692][ T30] audit: type=1800 audit(1755579619.484:25): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1915" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 929.842418][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.060775][T11526] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 930.519895][T11526] usb 2-1: Using ep0 maxpacket: 32 [ 931.026767][T11526] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 931.096278][T11526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.129155][T11526] usb 2-1: config 0 descriptor?? [ 931.359873][T11526] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 932.123225][T11526] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.261170][T11526] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 932.316612][T11526] usb 2-1: media controller created [ 932.406720][T11526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.513245][T11526] az6027: usb out operation failed. (-71) [ 932.563380][T11526] az6027: usb out operation failed. (-71) [ 932.589114][T11526] stb0899_attach: Driver disabled by Kconfig [ 933.520272][ T30] audit: type=1800 audit(1755579623.664:26): pid=13099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1928" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 933.649451][T11526] az6027: no front-end attached [ 933.649451][T11526] [ 933.868064][T11526] az6027: usb out operation failed. (-71) [ 933.874287][T11526] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 933.888035][T11526] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 933.963169][T11526] dvb-usb: schedule remote query interval to 400 msecs. [ 933.990282][T11526] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 934.775970][T11526] usb 2-1: USB disconnect, device number 27 [ 935.093647][T11526] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 935.544066][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 935.644962][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.657117][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.522005][ T30] audit: type=1326 audit(1755579627.164:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.4.1939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x0 [ 936.824034][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.836932][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.765587][T13141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 938.781063][T13141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 938.836071][T13141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 938.909013][T13154] syz.0.1946 (13154): drop_caches: 2 [ 938.922079][T13154] syz.0.1946 (13154): drop_caches: 2 [ 938.993588][T13141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 940.220336][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 940.910449][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 940.916581][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 941.059529][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 943.484073][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'. [ 943.587457][T13193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 945.051059][T13209] netlink: 'syz.1.1960': attribute type 3 has an invalid length. [ 945.058974][T13209] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1960'. [ 947.177613][T13223] gretap0: entered promiscuous mode [ 947.187567][T13223] gretap0: left promiscuous mode [ 947.251199][T13223] wg1 speed is unknown, defaulting to 1000 [ 954.067643][T13263] netlink: 'syz.2.1974': attribute type 3 has an invalid length. [ 954.076547][T13263] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1974'. [ 954.898536][T13266] tipc: Enabling of bearer rejected, failed to enable media [ 958.492701][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 959.415867][T13327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.528366][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.540047][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.521394][T13344] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 960.545749][T13344] netlink: 'syz.3.1992': attribute type 2 has an invalid length. [ 962.585169][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 962.765602][T13368] tipc: Enabled bearer , priority 0 [ 962.847771][T13368] syzkaller0: entered promiscuous mode [ 962.891240][T13368] syzkaller0: entered allmulticast mode [ 962.989360][T13368] tipc: Resetting bearer [ 962.998079][T13366] tipc: Resetting bearer [ 963.051829][T13366] tipc: Disabling bearer [ 964.363178][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.522999][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.401948][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 967.109403][T13417] tipc: Enabled bearer , priority 0 [ 967.135065][T13417] syzkaller0: entered promiscuous mode [ 967.141586][T13417] syzkaller0: entered allmulticast mode [ 967.717590][T13417] tipc: Resetting bearer [ 967.768533][T13416] tipc: Resetting bearer [ 968.006661][T13416] tipc: Disabling bearer [ 969.013697][T13441] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[13441] [ 973.145370][T13479] tipc: Enabled bearer , priority 0 [ 973.161331][T13479] syzkaller0: entered promiscuous mode [ 973.166857][T13479] syzkaller0: entered allmulticast mode [ 973.260461][T13482] syzkaller0: entered promiscuous mode [ 973.266013][T13482] syzkaller0: entered allmulticast mode [ 973.293313][T13479] tipc: Resetting bearer [ 973.363580][T13477] tipc: Resetting bearer [ 973.463183][T13484] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 973.538890][T13477] tipc: Disabling bearer [ 973.618383][T13491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.618927][T13500] program syz.4.2042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.644674][T13521] tipc: Enabling of bearer rejected, failed to enable media [ 977.551178][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 980.516105][T13568] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2063'. [ 980.780788][T13572] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2064'. [ 980.952473][T13575] tipc: Enabling of bearer rejected, failed to enable media [ 981.486186][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 985.892632][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.906448][T13628] tipc: Enabling of bearer rejected, failed to enable media [ 986.325193][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.622657][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 993.140352][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.155551][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.999282][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 995.347740][T13721] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 995.426941][T13722] tipc: Enabled bearer , priority 0 [ 995.537967][T13723] tipc: Resetting bearer [ 995.687460][T13719] tipc: Disabling bearer [ 997.110677][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.123194][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.226754][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.233309][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.357289][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.375384][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.103597][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 999.697687][T13767] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1000.760989][T13782] netlink: 4832 bytes leftover after parsing attributes in process `syz.0.2122'. [ 1000.771207][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.790575][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.714111][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.740979][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.862400][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'. [ 1004.034267][ T30] audit: type=1800 audit(1755579694.334:28): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2130" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1004.133718][T13825] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1004.502221][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.511831][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.526592][T13832] netlink: 'syz.3.2134': attribute type 5 has an invalid length. [ 1004.549286][T13832] ip6erspan0: entered promiscuous mode [ 1004.574386][T13832] bridge0: port 3(macsec0) entered blocking state [ 1004.581385][T13832] bridge0: port 3(macsec0) entered disabled state [ 1004.588468][T13832] macsec0: entered allmulticast mode [ 1004.593897][T13832] veth1_macvtap: entered allmulticast mode [ 1004.604039][T13832] macsec0: entered promiscuous mode [ 1004.617745][T13832] bridge0: port 3(macsec0) entered blocking state [ 1004.624643][T13832] bridge0: port 3(macsec0) entered forwarding state [ 1008.848578][T13877] trusted_key: syz.4.2150 sent an empty control message without MSG_MORE. [ 1010.382389][T13891] syz.1.2153: attempt to access beyond end of device [ 1010.382389][T13891] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1013.233009][ T30] audit: type=1326 audit(1755579703.864:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13911 comm="syz.3.2159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x0 [ 1013.765872][ T30] audit: type=1326 audit(1755579704.384:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1013.896989][ T30] audit: type=1326 audit(1755579704.404:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1013.973073][ T30] audit: type=1326 audit(1755579704.404:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.087152][ T30] audit: type=1326 audit(1755579704.404:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.108583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.290432][ T30] audit: type=1326 audit(1755579704.414:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.454818][ T30] audit: type=1326 audit(1755579704.414:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.639242][ T30] audit: type=1326 audit(1755579704.414:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.738973][ T30] audit: type=1326 audit(1755579704.424:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1014.805170][T13920] wg1 speed is unknown, defaulting to 1000 [ 1014.812820][ T30] audit: type=1326 audit(1755579704.554:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13906 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59ee52add9 code=0x7ffc0000 [ 1016.693692][T13943] fuse: Bad value for 'fd' [ 1016.868428][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'. [ 1017.742809][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.752726][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.245442][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 1018.245460][ T30] audit: type=1326 audit(1755579708.884:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.395744][ T30] audit: type=1326 audit(1755579708.884:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.433531][ T30] audit: type=1326 audit(1755579708.884:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.455070][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.468983][ T30] audit: type=1326 audit(1755579708.884:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.490546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.507367][ T30] audit: type=1326 audit(1755579708.884:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.534950][ T30] audit: type=1326 audit(1755579708.884:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1018.556471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.248125][ T30] audit: type=1326 audit(1755579708.884:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1019.273416][ T30] audit: type=1326 audit(1755579708.884:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1019.296811][ T30] audit: type=1326 audit(1755579708.884:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1019.848840][ T30] audit: type=1326 audit(1755579708.884:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f391a72add9 code=0x7ffc0000 [ 1021.255240][T13986] fuse: Bad value for 'fd' [ 1022.325757][T14000] netlink: 'syz.1.2184': attribute type 15 has an invalid length. [ 1022.354265][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2184'. [ 1024.426919][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.439207][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.540481][T14029] fuse: Bad value for 'fd' [ 1026.378485][T14053] syz.2.2201 (14053): drop_caches: 2 [ 1026.387829][T14053] syz.2.2201 (14053): drop_caches: 2 [ 1026.736128][T14055] netlink: 'syz.4.2203': attribute type 13 has an invalid length. [ 1030.238515][T14083] overlayfs: failed to resolve './file0': -2 [ 1031.237484][T14095] netlink: 'syz.1.2214': attribute type 21 has an invalid length. [ 1033.520699][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 1035.001520][T14131] overlayfs: failed to resolve './file0': -2 [ 1039.056419][T14163] binfmt_misc: register: failed to install interpreter file ./file0 [ 1040.090164][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1040.090182][ T30] audit: type=1326 audit(1755579730.714:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.267975][ T30] audit: type=1326 audit(1755579730.714:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.305233][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 1040.340978][ T30] audit: type=1326 audit(1755579730.714:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.440274][ T30] audit: type=1326 audit(1755579730.714:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.500270][ T30] audit: type=1326 audit(1755579730.714:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.523552][ T30] audit: type=1326 audit(1755579730.714:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.545601][ T30] audit: type=1326 audit(1755579730.714:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.568325][ T30] audit: type=1326 audit(1755579730.714:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1040.590482][ T30] audit: type=1326 audit(1755579730.714:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1041.220313][ T30] audit: type=1326 audit(1755579730.714:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1043.793527][T14197] syzkaller0: entered promiscuous mode [ 1043.799287][T14197] syzkaller0: entered allmulticast mode [ 1044.941104][T14215] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1044.949550][T14215] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1044.956397][T14215] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1044.963312][T14215] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1044.969975][T14215] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1044.977987][T14215] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1044.986293][T14215] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1044.993030][T14215] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1045.000241][T14215] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1045.008570][T14215] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1045.024148][T14215] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1045.031188][T14215] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1045.038070][T14215] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 1045.045270][T14215] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1045.867440][T14223] fuse: Unknown parameter 'grou00000000000000000000' [ 1048.654468][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 1050.478971][T14294] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2279'. [ 1056.388396][ T5914] IPVS: starting estimator thread 0... [ 1056.500410][T14335] IPVS: using max 28 ests per chain, 67200 per kthread [ 1057.800234][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1058.010359][ T43] usb 2-1: device descriptor read/64, error -71 [ 1058.671022][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1058.860428][ T43] usb 2-1: device descriptor read/64, error -71 [ 1059.085642][ T43] usb usb2-port1: attempt power cycle [ 1059.678425][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.685293][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.200056][T14375] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1061.931552][T14401] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1061.941273][T14401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1064.620330][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1064.905433][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1064.936716][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.959750][ T43] usb 2-1: Product: syz [ 1064.965032][ T43] usb 2-1: Manufacturer: syz [ 1064.973780][ T43] usb 2-1: SerialNumber: syz [ 1064.988143][ T43] usb 2-1: config 0 descriptor?? [ 1064.998089][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 1065.225491][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1065.247242][ T43] f81232 2-1:0.0: f81534a converter detected [ 1065.284737][ T43] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1065.309643][ T43] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1065.379401][ T43] usb 2-1: USB disconnect, device number 31 [ 1065.420378][ T43] f81232 2-1:0.0: device disconnected [ 1068.563742][T14456] syzkaller0: entered promiscuous mode [ 1068.599376][T14456] syzkaller0: entered allmulticast mode [ 1071.063546][T14472] orangefs_mount: mount request failed with -4 [ 1072.699813][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.709373][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.949323][ T5844] Bluetooth: hci1: Malformed Event: 0x02 [ 1073.293379][T14509] netlink: 1332 bytes leftover after parsing attributes in process `syz.0.2346'. [ 1073.428935][T14509] hsr_slave_1 (unregistering): left promiscuous mode [ 1076.481189][T14554] netlink: 'syz.2.2361': attribute type 3 has an invalid length. [ 1076.489077][T14554] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2361'. [ 1077.548918][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.119383][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.489538][T14603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1080.509709][T14603] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1081.509621][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.703804][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.812623][T14600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.144382][T14694] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1095.137564][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1095.137584][ T30] audit: type=1326 audit(1755579785.774:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1095.250173][ T30] audit: type=1326 audit(1755579785.774:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1095.360205][ T30] audit: type=1326 audit(1755579785.814:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1095.970435][ T30] audit: type=1326 audit(1755579785.814:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1096.073551][ T30] audit: type=1326 audit(1755579785.814:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1097.608692][T14768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.620427][T14768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.364372][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1105.526437][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.538582][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.081026][T14819] capability: warning: `syz.3.2442' uses 32-bit capabilities (legacy support in use) [ 1108.490213][ T30] audit: type=1326 audit(1755579799.084:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1108.689873][ T30] audit: type=1326 audit(1755579799.084:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1109.097321][ T30] audit: type=1326 audit(1755579799.084:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1109.356930][ T30] audit: type=1326 audit(1755579799.084:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1109.390221][ T30] audit: type=1326 audit(1755579799.084:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1109.415346][ T30] audit: type=1326 audit(1755579799.084:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1109.998815][ T30] audit: type=1326 audit(1755579799.084:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1110.062508][ T30] audit: type=1326 audit(1755579799.084:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1110.130278][ T30] audit: type=1326 audit(1755579799.084:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1111.190428][ T30] audit: type=1326 audit(1755579799.084:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1111.859408][T14868] syzkaller0: entered promiscuous mode [ 1111.927555][T14868] syzkaller0: entered allmulticast mode [ 1112.212379][T14879] syzkaller0: entered promiscuous mode [ 1112.218154][T14879] syzkaller0: entered allmulticast mode [ 1114.420789][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.070046][T14917] syzkaller0: entered promiscuous mode [ 1115.107983][T14917] syzkaller0: entered allmulticast mode [ 1116.036443][T14931] netlink: 'syz.2.2478': attribute type 21 has an invalid length. [ 1118.023713][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1118.056649][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1118.122884][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1118.166256][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1120.201143][T14986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1121.111914][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.118548][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.129980][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1128.130000][ T30] audit: type=1326 audit(1755579818.734:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1128.498506][ T30] audit: type=1326 audit(1755579818.734:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1128.842071][ T30] audit: type=1326 audit(1755579818.734:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1128.958199][ T30] audit: type=1326 audit(1755579818.734:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1129.700193][ T30] audit: type=1326 audit(1755579818.734:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1129.878429][ T30] audit: type=1326 audit(1755579818.734:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1130.063828][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.090234][ T30] audit: type=1326 audit(1755579818.734:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1130.131725][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.251509][ T30] audit: type=1326 audit(1755579818.734:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1130.351609][ T30] audit: type=1326 audit(1755579818.734:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1130.600253][ T30] audit: type=1326 audit(1755579818.734:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ee58ebe9 code=0x7ffc0000 [ 1130.621861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.894871][T15087] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2527'. [ 1133.006459][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.033348][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.226644][T15100] overlayfs: missing 'lowerdir' [ 1136.298716][T15136] tipc: Enabling of bearer rejected, failed to enable media [ 1136.362338][T15141] syzkaller0: entered promiscuous mode [ 1136.377738][T15141] syzkaller0: entered allmulticast mode [ 1137.789145][ T1012] Bluetooth: hci5: Frame reassembly failed (-84) [ 1139.178777][ T5846] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 1139.421876][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1141.184688][T15194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1144.783303][T15230] sd 0:0:1:0: device reset [ 1145.430490][T15232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2575'. [ 1146.849647][T15243] netlink: 'syz.1.2579': attribute type 4 has an invalid length. [ 1146.917021][T15243] netlink: 'syz.1.2579': attribute type 4 has an invalid length. [ 1147.972118][T15250] netlink: 'syz.1.2581': attribute type 21 has an invalid length. [ 1148.049073][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 1149.594124][T15284] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1154.414726][T15322] overlayfs: missing 'lowerdir' [ 1155.929430][ T7713] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1155.966321][ T7713] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1157.119949][T15340] fido_id[15340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1161.740016][T15385] netlink: 'syz.1.2618': attribute type 3 has an invalid length. [ 1161.748847][T15385] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1162.076535][T15388] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15388] [ 1162.205242][T15390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.214392][T15390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.112160][T15440] tipc: Enabling of bearer rejected, failed to enable media [ 1168.179201][T15441] syzkaller0: entered promiscuous mode [ 1168.225661][T15441] syzkaller0: entered allmulticast mode [ 1168.233873][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.270804][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.702131][T15447] ======================================================= [ 1168.702131][T15447] WARNING: The mand mount option has been deprecated and [ 1168.702131][T15447] and is ignored by this kernel. Remove the mand [ 1168.702131][T15447] option from the mount to silence this warning. [ 1168.702131][T15447] ======================================================= [ 1178.018877][T15543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.561812][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.822745][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.485068][T15622] overlayfs: missing 'lowerdir' [ 1188.429579][T15636] netlink: 'syz.3.2693': attribute type 3 has an invalid length. [ 1188.437526][T15636] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2693'. [ 1189.558600][ T5844] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 1193.975969][T15688] sp0: Synchronizing with TNC [ 1198.057285][T15739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 1199.335829][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1199.335848][ T30] audit: type=1326 audit(1755579889.974:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1199.568978][T15752] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1199.598096][ T30] audit: type=1326 audit(1755579889.974:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.215013][ T30] audit: type=1326 audit(1755579889.974:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.252213][ T30] audit: type=1326 audit(1755579889.974:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.381899][ T30] audit: type=1326 audit(1755579889.974:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.406175][ T30] audit: type=1326 audit(1755579889.974:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.574545][ T30] audit: type=1326 audit(1755579889.974:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.721128][ T30] audit: type=1326 audit(1755579889.974:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.850234][ T30] audit: type=1326 audit(1755579889.974:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1200.940290][ T30] audit: type=1326 audit(1755579889.974:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15750 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1204.281016][T15799] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[15799] [ 1206.107671][T15820] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1206.966222][T15828] syzkaller0: entered promiscuous mode [ 1206.972074][T15828] syzkaller0: entered allmulticast mode [ 1207.368765][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1207.368778][ T30] audit: type=1326 audit(1755579898.004:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1207.596867][ T30] audit: type=1326 audit(1755579898.034:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1207.723237][ T30] audit: type=1326 audit(1755579898.034:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1207.914154][ T30] audit: type=1326 audit(1755579898.034:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1208.130814][ T30] audit: type=1326 audit(1755579898.034:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1208.398953][T15853] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1208.971277][ T30] audit: type=1326 audit(1755579898.034:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1209.056486][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1209.456150][ T30] audit: type=1326 audit(1755579898.034:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1209.477748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.558668][ T30] audit: type=1326 audit(1755579898.044:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1210.104995][ T30] audit: type=1326 audit(1755579898.044:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1210.126641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.138432][ T30] audit: type=1326 audit(1755579898.044:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f17deb8ebe9 code=0x7ffc0000 [ 1210.160010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.099352][T15882] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1212.910581][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1213.100461][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1213.177192][ T43] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1213.219177][ T43] usb 2-1: config 0 has no interface number 0 [ 1213.297914][ T43] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1213.405745][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1213.459570][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.562546][ T43] usb 2-1: Product: syz [ 1213.578445][ T43] usb 2-1: Manufacturer: syz [ 1213.585252][ T43] usb 2-1: SerialNumber: syz [ 1213.597113][ T43] usb 2-1: config 0 descriptor?? [ 1213.686971][ T43] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1213.925840][ T43] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1214.037116][ T43] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1214.154216][ T43] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1214.176230][ T43] em28xx 2-1:0.89: board has no eeprom [ 1214.269976][ T43] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1214.278712][ T43] em28xx 2-1:0.89: analog set to bulk mode. [ 1214.286630][ T7722] em28xx 2-1:0.89: Registering V4L2 extension [ 1214.308409][ T43] usb 2-1: USB disconnect, device number 32 [ 1214.345786][ T43] em28xx 2-1:0.89: Disconnecting em28xx [ 1215.504496][ T7722] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1215.538964][ T7722] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1215.666980][ T7722] em28xx 2-1:0.89: No AC97 audio processor [ 1216.208537][ T7722] usb 2-1: Decoder not found [ 1216.216797][ T7722] em28xx 2-1:0.89: failed to create media graph [ 1216.245346][ T7722] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1216.354615][ T7722] em28xx 2-1:0.89: Registering snapshot button... [ 1216.405948][ T7722] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input15 [ 1216.463366][ T7722] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1216.705856][ T43] em28xx 2-1:0.89: Closing input extension [ 1216.740331][ T43] em28xx 2-1:0.89: Deregistering snapshot button [ 1216.805306][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1217.174574][ T43] em28xx 2-1:0.89: Freeing device [ 1217.620058][T15935] bridge0: port 3(macvlan2) entered disabled state [ 1217.627886][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.635175][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.433774][T15959] syz.4.2793 (15959): drop_caches: 2 [ 1219.450116][T15959] syz.4.2793 (15959): drop_caches: 2 [ 1220.454763][T15935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.539885][T15935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.292981][T15935] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.314131][T15935] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.336473][T15935] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.366385][T15935] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.619590][T15935] team0: left promiscuous mode [ 1221.624551][T15935] team_slave_0: left promiscuous mode [ 1221.631963][T15935] team_slave_1: left promiscuous mode [ 1222.691440][T15980] netlink: 'syz.1.2800': attribute type 3 has an invalid length. [ 1222.699247][T15980] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2800'. [ 1223.540819][T15987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1223.548619][T15987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1223.566860][T15987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1223.573085][T15987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1223.775232][T15987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1223.796713][T16001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.003157][T16001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.998683][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1224.998698][ T30] audit: type=1326 audit(1755579915.604:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.196959][ T30] audit: type=1326 audit(1755579915.614:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.273638][T16012] fuse: Unknown parameter '0x0000000000000004' [ 1225.283024][ T30] audit: type=1326 audit(1755579915.614:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.348877][ T30] audit: type=1326 audit(1755579915.614:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.431193][ T30] audit: type=1326 audit(1755579915.614:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.497554][ T30] audit: type=1326 audit(1755579915.614:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.557330][ T30] audit: type=1326 audit(1755579915.614:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.581277][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1225.587364][T15996] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.654230][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 1225.668358][ T30] audit: type=1326 audit(1755579915.614:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.690206][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 1225.703423][ T30] audit: type=1326 audit(1755579915.614:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.726334][ T30] audit: type=1326 audit(1755579915.614:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16006 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1225.830340][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 1226.583719][T16028] syzkaller0: entered promiscuous mode [ 1226.604234][T16028] syzkaller0: entered allmulticast mode [ 1227.750348][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 1227.859703][T16040] sd 0:0:1:0: device reset [ 1233.187499][T16068] syzkaller0: entered promiscuous mode [ 1233.211253][T16068] syzkaller0: entered allmulticast mode [ 1233.338162][T16076] sd 0:0:1:0: device reset [ 1233.881199][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1233.881239][ T30] audit: type=1326 audit(1755579924.514:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1233.986559][ T30] audit: type=1326 audit(1755579924.514:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.066253][ T30] audit: type=1326 audit(1755579924.514:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.146441][ T30] audit: type=1326 audit(1755579924.514:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.353184][T16082] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1234.403838][ T30] audit: type=1326 audit(1755579924.514:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.485709][ T30] audit: type=1326 audit(1755579924.514:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.577425][ T30] audit: type=1326 audit(1755579924.514:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.676270][ T30] audit: type=1326 audit(1755579924.514:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.767059][ T30] audit: type=1326 audit(1755579924.514:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1234.890920][ T30] audit: type=1326 audit(1755579924.514:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16065 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748458ebe9 code=0x7ffc0000 [ 1239.180385][T16128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1239.190455][T16128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1239.700212][ T7731] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1239.870261][ T7731] usb 2-1: Using ep0 maxpacket: 32 [ 1239.918913][ T7731] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1239.997454][ T7731] usb 2-1: config 0 has no interface number 0 [ 1240.087319][ T7731] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1240.138981][ T7731] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1240.154516][ T7731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.190184][ T7731] usb 2-1: Product: syz [ 1240.209084][ T7731] usb 2-1: Manufacturer: syz [ 1240.228285][ T7731] usb 2-1: SerialNumber: syz [ 1240.264022][ T7731] usb 2-1: config 0 descriptor?? [ 1240.315897][ T7731] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1240.370251][ T7731] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1240.389566][T15996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1240.410188][T15996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1240.420230][T15996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1240.438925][T15996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1240.446973][T15996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1240.580583][ T7731] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1240.627815][T16139] wg1 speed is unknown, defaulting to 1000 [ 1240.671052][ T7731] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1240.754927][ T7731] em28xx 2-1:0.89: board has no eeprom [ 1240.870151][ T7731] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1240.899965][ T7731] em28xx 2-1:0.89: analog set to bulk mode. [ 1240.926322][ T43] em28xx 2-1:0.89: Registering V4L2 extension [ 1240.970863][ T7731] usb 2-1: USB disconnect, device number 33 [ 1241.014092][ T7731] em28xx 2-1:0.89: Disconnecting em28xx [ 1241.344285][T16147] netlink: 'syz.0.2848': attribute type 3 has an invalid length. [ 1241.352217][T16147] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1242.094990][T11526] usb 3-1: USB disconnect, device number 21 [ 1242.134907][ T43] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1242.551432][T15996] Bluetooth: hci5: command tx timeout [ 1242.581325][ T43] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1242.588583][ T43] em28xx 2-1:0.89: No AC97 audio processor [ 1242.621413][ T43] usb 2-1: Decoder not found [ 1242.626175][ T43] em28xx 2-1:0.89: failed to create media graph [ 1242.633814][ T43] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1242.658941][ T43] em28xx 2-1:0.89: Registering snapshot button... [ 1242.731301][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16 [ 1242.815624][ T43] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1242.853712][ T7731] em28xx 2-1:0.89: Closing input extension [ 1242.867831][ T7731] em28xx 2-1:0.89: Deregistering snapshot button [ 1243.008534][ T7731] em28xx 2-1:0.89: Freeing device [ 1243.986259][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.998806][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.266284][T16169] use of bytesused == 0 is deprecated and will be removed in the future, [ 1244.274967][T16169] use the actual size instead. [ 1244.710752][T15996] Bluetooth: hci5: command tx timeout [ 1245.878574][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.887678][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.780570][T15996] Bluetooth: hci5: command tx timeout [ 1246.863504][ T141] bridge_slave_1: left allmulticast mode [ 1246.910633][ T141] bridge_slave_1: left promiscuous mode [ 1246.946864][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.157161][ T141] bridge_slave_0: left allmulticast mode [ 1247.278845][T16195] netlink: 'syz.1.2858': attribute type 3 has an invalid length. [ 1247.286831][T16195] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1247.770475][ T141] bridge_slave_0: left promiscuous mode [ 1247.776334][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.259113][T16199] sd 0:0:1:0: device reset [ 1248.701039][T16204] vivid-000: disconnect [ 1248.715873][T16202] vivid-000: reconnect [ 1248.871051][T15996] Bluetooth: hci5: command tx timeout [ 1249.247012][T16216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.491948][T16222] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1249.501842][T16222] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1251.407999][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.593092][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.437360][ T141] bond0 (unregistering): Released all slaves [ 1253.029347][T16139] chnl_net:caif_netlink_parms(): no params data found [ 1253.245942][ T141] tipc: Disabling bearer [ 1253.261349][ T141] tipc: Left network mode [ 1254.093428][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.112060][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.130498][T16139] bridge_slave_0: entered allmulticast mode [ 1254.150441][T16139] bridge_slave_0: entered promiscuous mode [ 1254.169736][T16139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.177190][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.195867][T16139] bridge_slave_1: entered allmulticast mode [ 1254.218918][T16139] bridge_slave_1: entered promiscuous mode [ 1254.270886][ T7731] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1254.375223][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.418289][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.431256][ T7731] usb 2-1: device descriptor read/64, error -71 [ 1254.613933][T16263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.633560][T16139] team0: Port device team_slave_0 added [ 1254.700467][ T7731] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1254.895900][T16139] team0: Port device team_slave_1 added [ 1254.924159][ T7731] usb 2-1: device descriptor read/64, error -71 [ 1255.091729][ T7731] usb usb2-port1: attempt power cycle [ 1255.198168][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.224970][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.286426][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.337805][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.407117][T16274] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[16274] [ 1255.557915][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.612535][ T7731] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1255.650168][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.692733][ T7731] usb 2-1: device descriptor read/8, error -71 [ 1256.040539][ T141] hsr_slave_0: left promiscuous mode [ 1256.060757][ T7731] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1256.081006][ T141] hsr_slave_1: left promiscuous mode [ 1256.112486][ T7731] usb 2-1: device descriptor read/8, error -71 [ 1256.118909][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.200036][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.340290][ T7731] usb usb2-port1: unable to enumerate USB device [ 1259.159378][T16312] netlink: 'syz.4.2878': attribute type 3 has an invalid length. [ 1259.167266][T16312] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1259.948128][ T141] team0 (unregistering): Port device team_slave_1 removed [ 1260.014585][ T141] team0 (unregistering): Port device team_slave_0 removed [ 1260.747416][T16139] hsr_slave_0: entered promiscuous mode [ 1260.775679][T16139] hsr_slave_1: entered promiscuous mode [ 1260.795794][T16139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.809751][T16139] Cannot create hsr debugfs directory [ 1261.458138][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1261.458157][ T30] audit: type=1326 audit(1755579952.094:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1261.492290][ T30] audit: type=1326 audit(1755579952.094:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1261.579186][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.591156][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.270951][ T30] audit: type=1326 audit(1755579952.104:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1262.293409][ T30] audit: type=1326 audit(1755579952.104:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1262.320443][ T30] audit: type=1326 audit(1755579952.104:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1262.612374][ T30] audit: type=1326 audit(1755579952.104:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1262.788183][ T30] audit: type=1326 audit(1755579952.104:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1262.811200][ T30] audit: type=1326 audit(1755579952.104:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1263.003033][T16341] sd 0:0:1:0: device reset [ 1263.283766][ T30] audit: type=1326 audit(1755579952.104:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1263.530330][ T30] audit: type=1326 audit(1755579952.104:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391a78ebe9 code=0x7ffc0000 [ 1263.767815][ T141] IPVS: stop unused estimator thread 0... [ 1265.365787][T16139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1265.439864][T16139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1265.466930][T16139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1265.539428][T16139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1265.878279][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'. [ 1266.084315][T16139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.150987][T16139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.282810][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.290117][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.335209][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.342380][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.997658][T16139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.169110][T16139] veth0_vlan: entered promiscuous mode [ 1268.251382][T16139] veth1_vlan: entered promiscuous mode [ 1268.403306][T16139] veth0_macvtap: entered promiscuous mode [ 1268.569193][T16139] veth1_macvtap: entered promiscuous mode [ 1268.589193][T16139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.601781][T16139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.254325][ T5844] Bluetooth: hci2: command 0x1003 tx timeout [ 1269.280262][T15996] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1269.496339][T16139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.508805][T16139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.518606][T16139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.527602][T16139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.599695][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1270.599709][ T30] audit: type=1326 audit(1755579961.224:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1270.740098][ T30] audit: type=1326 audit(1755579961.224:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1270.760152][T16148] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1270.826250][ T30] audit: type=1326 audit(1755579961.224:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1270.900334][T16148] usb 2-1: device descriptor read/64, error -71 [ 1271.268285][T11570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.334215][T11570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.380087][ T30] audit: type=1326 audit(1755579961.224:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1271.381086][T16148] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1271.431966][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.443839][ T30] audit: type=1326 audit(1755579961.224:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1271.497922][ T30] audit: type=1326 audit(1755579961.224:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1271.569099][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.761659][ T30] audit: type=1326 audit(1755579961.224:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1271.783440][T16148] usb 2-1: device descriptor read/64, error -71 [ 1271.890656][T16148] usb usb2-port1: attempt power cycle [ 1271.900915][ T30] audit: type=1326 audit(1755579961.224:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1271.990735][ T30] audit: type=1326 audit(1755579961.224:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1272.069723][ T30] audit: type=1326 audit(1755579961.224:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16424 comm="syz.0.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34ab8ebe9 code=0x7ffc0000 [ 1272.350328][T16148] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1272.392985][T16148] usb 2-1: device descriptor read/8, error -71 [ 1273.381098][T16148] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1273.571905][T16148] usb 2-1: device descriptor read/8, error -71 [ 1273.682918][T16148] usb usb2-port1: unable to enumerate USB device [ 1274.442714][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1275.595792][ T7712] usb 4-1: USB disconnect, device number 22 [ 1276.892625][T15156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1276.907419][T15156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1276.916775][T15156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1276.928510][T15156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1276.936513][T15156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1276.945550][T15996] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1277.018816][T16499] wg1 speed is unknown, defaulting to 1000 [ 1278.847067][ T6147] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.070255][ T5844] Bluetooth: hci6: command tx timeout [ 1279.213277][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.224378][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.922537][ T6147] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.124231][ T6147] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.978555][ T6147] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.107697][ T5844] Bluetooth: hci6: command tx timeout [ 1281.730566][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.738299][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.180145][ T5844] Bluetooth: hci6: command tx timeout [ 1283.625710][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2930'. [ 1283.739465][T16555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.839691][T16555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.166905][T16555] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.189398][T16555] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.205220][T16555] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.216574][T16555] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.393734][T16499] chnl_net:caif_netlink_parms(): no params data found [ 1285.260213][ T5844] Bluetooth: hci6: command tx timeout [ 1285.983322][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.010793][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.035415][T16499] bridge_slave_0: entered allmulticast mode [ 1286.067414][T16499] bridge_slave_0: entered promiscuous mode [ 1286.225550][ T6147] macsec0: left allmulticast mode [ 1286.251049][ T6147] veth1_macvtap: left allmulticast mode [ 1286.272245][ T6147] macsec0: left promiscuous mode [ 1286.421487][ T6147] bridge0: port 3(macsec0) entered disabled state [ 1287.220835][ T6147] bridge_slave_1: left allmulticast mode [ 1287.246972][ T6147] bridge_slave_1: left promiscuous mode [ 1287.257311][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.355212][ T6147] bridge_slave_0: left allmulticast mode [ 1287.380949][ T6147] bridge_slave_0: left promiscuous mode [ 1287.410435][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.620342][ T5844] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1289.229612][T16656] overlayfs: missing 'workdir' [ 1289.376952][T16659] fuse: Bad value for 'fd' [ 1290.218752][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.241719][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.254907][ T6147] bond0 (unregistering): Released all slaves [ 1290.278429][ T6147] bond1 (unregistering): Released all slaves [ 1290.298810][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.307676][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.317931][T16499] bridge_slave_1: entered allmulticast mode [ 1290.333833][T16499] bridge_slave_1: entered promiscuous mode [ 1291.386175][T16647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.423330][T16647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.829737][T16647] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.843870][T16647] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.852952][T16647] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.866189][T16647] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.059041][T16662] tipc: Enabling of bearer rejected, failed to enable media [ 1292.092302][T16663] syzkaller0: entered promiscuous mode [ 1292.099365][T16663] syzkaller0: entered allmulticast mode [ 1292.181304][ T6147] tipc: Left network mode [ 1292.450422][T16701] netlink: 'syz.2.2950': attribute type 3 has an invalid length. [ 1292.458262][T16701] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2950'. [ 1292.806258][T16683] wg1 speed is unknown, defaulting to 1000 [ 1292.818484][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.878001][T16704] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2952'. [ 1293.529374][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.573129][T16711] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1293.581822][T16711] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1293.594006][T16711] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1296.902359][T16499] team0: Port device team_slave_0 added [ 1296.922426][T16499] team0: Port device team_slave_1 added [ 1297.774225][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.805937][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.989977][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.073742][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.087759][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.128540][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.263336][ T6147] hsr_slave_0: left promiscuous mode [ 1298.279003][ T6147] hsr_slave_1: left promiscuous mode [ 1298.314051][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.337723][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.400563][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.428471][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.472571][T16751] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2963'. [ 1298.513581][T16753] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1298.572141][ T6147] veth1_macvtap: left promiscuous mode [ 1298.577896][ T6147] veth0_macvtap: left promiscuous mode [ 1298.608515][ T6147] veth1_vlan: left promiscuous mode [ 1298.637720][ T6147] veth0_vlan: left promiscuous mode [ 1302.037001][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 1302.096065][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 1305.511046][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.517691][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.868063][T16499] hsr_slave_0: entered promiscuous mode [ 1306.892473][T16499] hsr_slave_1: entered promiscuous mode [ 1306.914398][T16499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.933252][T16499] Cannot create hsr debugfs directory [ 1307.499442][T16840] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1307.643456][T15156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1307.660534][T15156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1307.670367][T15156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1307.679294][T15156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1307.688151][T15156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1308.274512][T16841] wg1 speed is unknown, defaulting to 1000 [ 1309.759348][T15156] Bluetooth: hci2: command tx timeout [ 1310.455939][T16876] syzkaller0: entered promiscuous mode [ 1310.463067][T16876] syzkaller0: entered allmulticast mode [ 1311.345869][T16499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1311.449982][T16499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1311.465473][T16499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1311.515578][T16499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1311.694883][T16841] chnl_net:caif_netlink_parms(): no params data found [ 1311.821122][T15156] Bluetooth: hci2: command tx timeout [ 1312.039412][T16841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.047165][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.056102][T16841] bridge_slave_0: entered allmulticast mode [ 1312.068045][T16841] bridge_slave_0: entered promiscuous mode [ 1312.078543][T16841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.087799][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.098034][T16841] bridge_slave_1: entered allmulticast mode [ 1312.108420][T16841] bridge_slave_1: entered promiscuous mode [ 1312.240252][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.258879][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.426734][T16841] team0: Port device team_slave_0 added [ 1312.447850][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.456825][T16841] team0: Port device team_slave_1 added [ 1312.653210][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.675095][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.684166][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.711215][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.768876][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.776117][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.814215][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.191725][T15156] Bluetooth: hci2: command tx timeout [ 1314.430908][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.621887][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.647610][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.654785][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.899272][T16841] hsr_slave_0: entered promiscuous mode [ 1314.911462][T16841] hsr_slave_1: entered promiscuous mode [ 1314.947594][T16841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.970191][T16841] Cannot create hsr debugfs directory [ 1316.222259][T15156] Bluetooth: hci2: command tx timeout [ 1317.877853][T16841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1317.932010][T16841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1317.993909][T16841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1318.043985][T16841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1318.577508][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.638746][T16841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.846926][T16841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.872373][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.879615][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.898619][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.905834][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.019400][T16499] veth0_vlan: entered promiscuous mode [ 1319.137458][T16499] veth1_vlan: entered promiscuous mode [ 1319.282170][T16499] veth0_macvtap: entered promiscuous mode [ 1319.293894][T16499] veth1_macvtap: entered promiscuous mode [ 1319.405878][T16963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1319.413049][T16963] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1319.419771][T16963] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1319.521210][T16963] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1319.556869][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.580893][T15156] Bluetooth: hci3: command 0x0406 tx timeout [ 1319.608736][T16963] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1319.623194][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.698497][T16963] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1319.733413][T16499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.763154][T16499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.773784][T16499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.783615][T16499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.794011][T16963] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1319.804215][T16963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1319.812767][T16963] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1319.827549][T16963] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1319.886005][T16841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.218235][T11570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.501815][T15156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1321.532073][T11570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.661566][T15156] Bluetooth: hci6: command 0x0c1a tx timeout [ 1321.820141][T15156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1321.974988][T17036] /dev/nullb0: Can't open blockdev [ 1322.398284][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.411256][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.520849][T17041] tipc: Enabled bearer , priority 0 [ 1322.551847][T17041] syzkaller0: entered promiscuous mode [ 1322.557449][T17041] syzkaller0: entered allmulticast mode [ 1322.628466][T17041] tipc: Resetting bearer [ 1322.641384][T17040] tipc: Resetting bearer [ 1322.681108][T17040] tipc: Disabling bearer [ 1322.796397][T16841] veth0_vlan: entered promiscuous mode [ 1323.580123][T15156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1323.659660][T16841] veth1_vlan: entered promiscuous mode [ 1323.740176][T15156] Bluetooth: hci6: command 0x0c1a tx timeout [ 1323.920104][T15156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1323.943666][T16841] veth0_macvtap: entered promiscuous mode [ 1324.074720][T16841] veth1_macvtap: entered promiscuous mode [ 1324.324486][T16841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.347711][T16841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.361512][T16841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.370866][T16841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.379755][T16841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.500455][T16841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.110518][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.169472][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.314645][T11570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.381434][T11570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.674855][T15156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1325.871333][T17076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1325.880161][T15156] Bluetooth: hci6: command 0x0c1a tx timeout [ 1325.882215][T17076] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1325.918372][T17076] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1325.980498][T15156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1326.145115][T17076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1327.744580][T15156] Bluetooth: hci3: command 0x0406 tx timeout [ 1327.900352][T15156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1327.980431][T15156] Bluetooth: hci6: command 0x0c1a tx timeout [ 1328.220244][T15156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1329.383629][T17102] ptrace attach of "./syz-executor exec"[16841] was attempted by "./syz-executor exec"[17102] [ 1332.067293][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1332.076622][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1332.085250][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1332.096724][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1332.138027][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1332.787251][T17132] wg1 speed is unknown, defaulting to 1000 [ 1334.216506][T17156] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1334.233988][ T5844] Bluetooth: hci1: command tx timeout [ 1336.008997][T17177] fuse: Bad value for 'fd' [ 1336.223629][T17188] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1336.302704][ T5844] Bluetooth: hci1: command tx timeout [ 1336.929457][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.962533][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.987252][ T59] bond0 (unregistering): Released all slaves [ 1337.159968][ T59] bond1 (unregistering): Released all slaves [ 1337.192626][T17182] smc: removing ib device syz0 [ 1337.214227][T17181] netlink: 'syz.3.3053': attribute type 29 has an invalid length. [ 1337.235466][ T7731] syz1: Port: 1 Link DOWN [ 1337.329123][T17177] lo speed is unknown, defaulting to 1000 [ 1337.396802][T17177] lo speed is unknown, defaulting to 1000 [ 1337.595996][T17208] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 1338.380214][ T5844] Bluetooth: hci1: command tx timeout [ 1338.412238][T17177] lo speed is unknown, defaulting to 1000 [ 1338.661417][T17177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1338.813098][ T59] tipc: Left network mode [ 1338.879629][T17177] lo speed is unknown, defaulting to 1000 [ 1339.067247][T17177] lo speed is unknown, defaulting to 1000 [ 1339.176238][T17177] lo speed is unknown, defaulting to 1000 [ 1339.258842][T17177] lo speed is unknown, defaulting to 1000 [ 1339.593484][T17177] lo speed is unknown, defaulting to 1000 [ 1339.645087][T17177] lo speed is unknown, defaulting to 1000 [ 1340.115140][T17248] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.3063'. [ 1340.141099][T17177] lo speed is unknown, defaulting to 1000 [ 1340.241909][T17245] tipc: Started in network mode [ 1340.266987][T17245] tipc: Node identity 2efe956559ea, cluster identity 4711 [ 1340.278758][T17245] tipc: Enabled bearer , priority 0 [ 1340.449182][T17242] tipc: Resetting bearer [ 1340.460190][ T5844] Bluetooth: hci1: command tx timeout [ 1340.474296][T17132] chnl_net:caif_netlink_parms(): no params data found [ 1340.557227][T17249] syzkaller0: entered promiscuous mode [ 1340.574757][T17249] syzkaller0: entered allmulticast mode [ 1340.627885][T17238] tipc: Resetting bearer [ 1340.716989][T17238] tipc: Disabling bearer [ 1343.091888][T17132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.193444][T17132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.358051][T17132] bridge_slave_0: entered allmulticast mode [ 1343.982277][T17132] bridge_slave_0: entered promiscuous mode [ 1344.002155][T17132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.011292][T17132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.018914][T17132] bridge_slave_1: entered allmulticast mode [ 1344.047831][T17132] bridge_slave_1: entered promiscuous mode [ 1344.854223][T17132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.931969][T17132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.219792][T17132] team0: Port device team_slave_0 added [ 1345.228975][T17308] tipc: Started in network mode [ 1345.238028][T17308] tipc: Node identity 5a3b70249557, cluster identity 4711 [ 1345.286437][T17308] tipc: Enabled bearer , priority 0 [ 1345.306834][T17306] syzkaller0: entered promiscuous mode [ 1345.315957][T17306] syzkaller0: entered allmulticast mode [ 1345.345673][T17132] team0: Port device team_slave_1 added [ 1345.371207][T17306] tipc: Resetting bearer [ 1345.449677][T17305] tipc: Resetting bearer [ 1345.501407][T17305] tipc: Disabling bearer [ 1345.723436][T17132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.740996][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.259861][T17132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.326641][T17132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.428323][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.699297][T17132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.942040][ T59] hsr_slave_0: left promiscuous mode [ 1347.820246][ T59] hsr_slave_1: left promiscuous mode [ 1347.826717][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.041169][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.375612][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1352.457902][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1353.639094][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1354.044305][T17132] hsr_slave_0: entered promiscuous mode [ 1354.109043][T17132] hsr_slave_1: entered promiscuous mode [ 1354.151031][T17132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1354.188125][T17132] Cannot create hsr debugfs directory [ 1355.509724][ T59] IPVS: stop unused estimator thread 0... [ 1358.301030][T17132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1358.359905][T17132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1358.410813][T17132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1358.864272][T17132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1359.082884][T17430] tipc: Enabled bearer , priority 0 [ 1359.095156][T17426] tipc: Resetting bearer [ 1359.120858][T17422] syzkaller0: entered promiscuous mode [ 1359.131913][T17422] syzkaller0: entered allmulticast mode [ 1359.221994][T17421] tipc: Resetting bearer [ 1359.301441][T17421] tipc: Disabling bearer [ 1360.970868][T17132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.681605][T17132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.714814][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.722111][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.125154][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.132562][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.903535][T17132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1364.196274][T17132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.346951][T17132] veth0_vlan: entered promiscuous mode [ 1366.365643][T17132] veth1_vlan: entered promiscuous mode [ 1366.873895][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.880468][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.181284][T17132] veth0_macvtap: entered promiscuous mode [ 1367.679875][T17132] veth1_macvtap: entered promiscuous mode [ 1369.007288][T17132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.049685][T17132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.237512][T17132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.264234][T17132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.291399][T17132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.776017][T17132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.810875][ T7722] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1370.154114][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.197582][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.277968][ T7722] usb 4-1: Using ep0 maxpacket: 32 [ 1370.882436][ T7722] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1370.891074][ T7722] usb 4-1: config 0 has no interface number 0 [ 1370.924085][ T7722] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1370.978692][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.038114][ T7722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.090520][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.304220][ T7722] usb 4-1: Product: syz [ 1371.340836][ T7722] usb 4-1: Manufacturer: syz [ 1371.345508][ T7722] usb 4-1: SerialNumber: syz [ 1371.461095][ T7722] usb 4-1: config 0 descriptor?? [ 1371.523540][ T7722] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1371.590113][ T7722] usb 4-1: selecting invalid altsetting 1 [ 1371.610131][T15156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1371.639553][T15156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.649039][T15156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.658360][T15156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.667435][T15156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.730623][ T7722] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1371.771602][T17532] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 1371.829765][T17559] lo speed is unknown, defaulting to 1000 [ 1371.837943][ T7722] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1372.466587][ T7722] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1372.546183][ T7722] usb 4-1: media controller created [ 1372.964933][ T7722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.139532][T17571] program syz.4.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1373.351191][ T7722] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1373.358614][ T7722] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1373.411649][ T7722] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1373.847480][T15156] Bluetooth: hci3: command tx timeout [ 1374.302673][T17572] ptrace attach of "./syz-executor exec"[16841] was attempted by "./syz-executor exec"[17572] [ 1374.546142][ T7722] usb 4-1: USB disconnect, device number 23 [ 1374.802550][T17559] chnl_net:caif_netlink_parms(): no params data found [ 1375.100736][ T7722] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1375.188193][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.240936][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.283896][T17559] bridge_slave_0: entered allmulticast mode [ 1375.292163][ T7722] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1375.343860][T17559] bridge_slave_0: entered promiscuous mode [ 1375.353633][ T7722] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1375.391617][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.431262][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.468436][ T7722] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1375.479617][T17559] bridge_slave_1: entered allmulticast mode [ 1375.502404][ T7722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.538727][T17559] bridge_slave_1: entered promiscuous mode [ 1375.552177][ T7722] usb 4-1: config 0 descriptor?? [ 1375.605585][ T7722] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1375.892828][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.275490][T15156] Bluetooth: hci3: command tx timeout [ 1376.292459][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.538646][T17559] team0: Port device team_slave_0 added [ 1376.647498][T12850] usb 4-1: USB disconnect, device number 24 [ 1376.668175][T17559] team0: Port device team_slave_1 added [ 1376.985333][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.011627][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.047579][T17601] sd 0:0:1:0: device reset [ 1377.100765][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.360757][T12850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1377.510803][T12850] usb 6-1: device descriptor read/64, error -71 [ 1377.705890][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.729023][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.766509][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.783137][T12850] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1377.924519][T12850] usb 6-1: device descriptor read/64, error -71 [ 1378.059660][T12850] usb usb6-port1: attempt power cycle [ 1378.300134][T15156] Bluetooth: hci3: command tx timeout [ 1378.348627][T17559] hsr_slave_0: entered promiscuous mode [ 1378.363294][T17559] hsr_slave_1: entered promiscuous mode [ 1378.397045][T17559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.404948][T17559] Cannot create hsr debugfs directory [ 1378.764831][T12850] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1378.812032][T12850] usb 6-1: device descriptor read/8, error -71 [ 1378.848562][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.858114][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.188172][T12850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1379.221422][T12850] usb 6-1: device descriptor read/8, error -71 [ 1379.340874][T12850] usb usb6-port1: unable to enumerate USB device [ 1379.571877][ T49] bridge_slave_1: left allmulticast mode [ 1379.596997][ T49] bridge_slave_1: left promiscuous mode [ 1379.605645][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.623862][ T49] bridge_slave_0: left allmulticast mode [ 1379.629551][ T49] bridge_slave_0: left promiscuous mode [ 1379.654191][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.380623][T15156] Bluetooth: hci3: command tx timeout [ 1382.386642][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.419679][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.452042][ T49] bond0 (unregistering): Released all slaves [ 1382.852775][T17559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1382.914449][T17559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1382.992142][T17559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1383.048553][T17559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1383.171771][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.233716][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.278606][ T49] hsr_slave_0: left promiscuous mode [ 1383.328314][ T49] hsr_slave_1: left promiscuous mode [ 1383.339776][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.376071][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.376591][T17685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.412743][T17685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.166449][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1386.466358][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1388.898325][T17559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.931823][T17559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.948058][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.955365][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.275741][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.283071][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.116911][T17768] vivid-000: disconnect [ 1391.347646][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.752596][T17760] ================================================================== [ 1391.760740][T17760] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0xa7/0xf0 [ 1391.768951][T17760] Read of size 1 at addr ffff88814b58a0b0 by task syz.5.3169/17760 [ 1391.776159][T17782] tipc: Enabling of bearer rejected, failed to enable media [ 1391.776860][T17760] [ 1391.776897][T17760] CPU: 1 UID: 0 PID: 17760 Comm: syz.5.3169 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 1391.776925][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1391.776951][T17760] Call Trace: [ 1391.776967][T17760] [ 1391.776978][T17760] dump_stack_lvl+0x189/0x250 [ 1391.777011][T17760] ? rcu_is_watching+0x15/0xb0 [ 1391.777038][T17760] ? __kasan_check_byte+0x12/0x40 [ 1391.777064][T17760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.777089][T17760] ? rcu_is_watching+0x15/0xb0 [ 1391.777114][T17760] ? lock_release+0x4b/0x3e0 [ 1391.777138][T17760] ? __virt_addr_valid+0x1c8/0x5c0 [ 1391.777168][T17760] ? __virt_addr_valid+0x4a5/0x5c0 [ 1391.777198][T17760] print_report+0xca/0x240 [ 1391.777234][T17760] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 1391.777270][T17760] kasan_report+0x118/0x150 [ 1391.777296][T17760] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 1391.777337][T17760] ? remove_wait_queue+0x24/0x120 [ 1391.777369][T17760] __kasan_check_byte+0x2a/0x40 [ 1391.777392][T17760] lock_acquire+0x8d/0x360 [ 1391.777422][T17760] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1391.777457][T17760] ? remove_wait_queue+0x24/0x120 [ 1391.777490][T17760] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1391.777544][T17760] remove_wait_queue+0x24/0x120 [ 1391.777580][T17760] poll_freewait+0xb1/0x240 [ 1391.777606][T17760] do_sys_poll+0xda4/0x1070 [ 1391.777635][T17760] ? do_sys_poll+0x661/0x1070 [ 1391.777666][T17760] ? __pfx_do_sys_poll+0x10/0x10 [ 1391.777694][T17760] ? futex_unqueue+0x22/0x240 [ 1391.777726][T17760] ? __pfx_pollwake+0x10/0x10 [ 1391.777752][T17760] ? __pfx_pollwake+0x10/0x10 [ 1391.777816][T17760] ? cgroup_freezing+0x20/0x350 [ 1391.777856][T17760] ? cgroup_freezing+0x20/0x350 [ 1391.777886][T17760] ? cgroup_freezing+0x20/0x350 [ 1391.777936][T17760] ? set_user_sigmask+0x15b/0x1b0 [ 1391.777962][T17760] ? __pfx_set_user_sigmask+0x10/0x10 [ 1391.777994][T17760] __se_sys_ppoll+0x1ff/0x260 [ 1391.778021][T17760] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1391.778047][T17760] ? rcu_is_watching+0x15/0xb0 [ 1391.778075][T17760] ? do_syscall_64+0xbe/0x3b0 [ 1391.778099][T17760] ? __x64_sys_ppoll+0x20/0xc0 [ 1391.778125][T17760] do_syscall_64+0xfa/0x3b0 [ 1391.778151][T17760] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.778175][T17760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.778199][T17760] ? clear_bhb_loop+0x60/0xb0 [ 1391.778226][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.778251][T17760] RIP: 0033:0x7f5c4958ebe9 [ 1391.778279][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.778301][T17760] RSP: 002b:00007f5c4a4bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1391.778335][T17760] RAX: ffffffffffffffda RBX: 00007f5c497b5fa0 RCX: 00007f5c4958ebe9 [ 1391.778355][T17760] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 0000200000000100 [ 1391.778372][T17760] RBP: 00007f5c49611e19 R08: 0000000000000008 R09: 0000000000000000 [ 1391.778388][T17760] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1391.778404][T17760] R13: 00007f5c497b6038 R14: 00007f5c497b5fa0 R15: 00007fff2c400ef8 [ 1391.778434][T17760] [ 1391.778443][T17760] [ 1392.095968][T17760] Allocated by task 1: [ 1392.100053][T17760] kasan_save_track+0x3e/0x80 [ 1392.104775][T17760] __kasan_kmalloc+0x93/0xb0 [ 1392.109382][T17760] __kmalloc_cache_noprof+0x230/0x3d0 [ 1392.114762][T17760] comedi_device_postconfig+0x4a8/0xc90 [ 1392.120327][T17760] comedi_auto_config+0x267/0x380 [ 1392.125364][T17760] comedi_test_init+0x8e/0x110 [ 1392.130135][T17760] do_one_initcall+0x233/0x820 [ 1392.134915][T17760] do_initcall_level+0x137/0x1f0 [ 1392.139867][T17760] do_initcalls+0x69/0xd0 [ 1392.144210][T17760] kernel_init_freeable+0x3d9/0x570 [ 1392.149423][T17760] kernel_init+0x1d/0x1d0 [ 1392.153781][T17760] ret_from_fork+0x3fc/0x770 [ 1392.158381][T17760] ret_from_fork_asm+0x1a/0x30 [ 1392.163162][T17760] [ 1392.165497][T17760] Freed by task 17763: [ 1392.169567][T17760] kasan_save_track+0x3e/0x80 [ 1392.174265][T17760] kasan_save_free_info+0x46/0x50 [ 1392.179301][T17760] __kasan_slab_free+0x62/0x70 [ 1392.184103][T17760] kfree+0x18e/0x440 [ 1392.188036][T17760] comedi_device_detach+0x372/0x720 [ 1392.193256][T17760] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 1392.198544][T17760] __se_sys_ioctl+0xfc/0x170 [ 1392.203166][T17760] do_syscall_64+0xfa/0x3b0 [ 1392.207684][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.213586][T17760] [ 1392.215914][T17760] The buggy address belongs to the object at ffff88814b58a000 [ 1392.215914][T17760] which belongs to the cache kmalloc-256 of size 256 [ 1392.229978][T17760] The buggy address is located 176 bytes inside of [ 1392.229978][T17760] freed 256-byte region [ffff88814b58a000, ffff88814b58a100) [ 1392.243820][T17760] [ 1392.246184][T17760] The buggy address belongs to the physical page: [ 1392.252603][T17760] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14b58a [ 1392.261462][T17760] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1392.269979][T17760] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 1392.277636][T17760] page_type: f5(slab) [ 1392.281645][T17760] raw: 057ff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 1392.290239][T17760] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1392.298830][T17760] head: 057ff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 1392.309419][T17760] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1392.318091][T17760] head: 057ff00000000001 ffffea00052d6281 00000000ffffffff 00000000ffffffff [ 1392.326758][T17760] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1392.335427][T17760] page dumped because: kasan: bad access detected [ 1392.341843][T17760] page_owner tracks the page as allocated [ 1392.347572][T17760] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24612052847, free_ts 0 [ 1392.367306][T17760] post_alloc_hook+0x240/0x2a0 [ 1392.372094][T17760] get_page_from_freelist+0x21d5/0x22b0 [ 1392.377653][T17760] __alloc_frozen_pages_noprof+0x181/0x370 [ 1392.383475][T17760] alloc_pages_mpol+0x232/0x4a0 [ 1392.388343][T17760] allocate_slab+0x8a/0x3b0 [ 1392.392865][T17760] ___slab_alloc+0xbfc/0x1480 [ 1392.397592][T17760] __kmalloc_cache_noprof+0x296/0x3d0 [ 1392.402988][T17760] comedi_device_postconfig+0x4a8/0xc90 [ 1392.408552][T17760] comedi_auto_config+0x267/0x380 [ 1392.413588][T17760] comedi_test_init+0x8e/0x110 [ 1392.418357][T17760] do_one_initcall+0x233/0x820 [ 1392.423129][T17760] do_initcall_level+0x137/0x1f0 [ 1392.428071][T17760] do_initcalls+0x69/0xd0 [ 1392.432425][T17760] kernel_init_freeable+0x3d9/0x570 [ 1392.437643][T17760] kernel_init+0x1d/0x1d0 [ 1392.441980][T17760] ret_from_fork+0x3fc/0x770 [ 1392.446574][T17760] page_owner free stack trace missing [ 1392.451945][T17760] [ 1392.454268][T17760] Memory state around the buggy address: [ 1392.459899][T17760] ffff88814b589f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1392.467972][T17760] ffff88814b58a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1392.476067][T17760] >ffff88814b58a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1392.484137][T17760] ^ [ 1392.489774][T17760] ffff88814b58a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1392.497849][T17760] ffff88814b58a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1392.505950][T17760] ================================================================== [ 1392.514026][T17760] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1392.521244][T17760] CPU: 1 UID: 0 PID: 17760 Comm: syz.5.3169 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1392.531233][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1392.541300][T17760] Call Trace: [ 1392.544589][T17760] [ 1392.547537][T17760] dump_stack_lvl+0x99/0x250 [ 1392.552151][T17760] ? __asan_memcpy+0x40/0x70 [ 1392.556765][T17760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1392.561985][T17760] ? __pfx__printk+0x10/0x10 [ 1392.566602][T17760] panic+0x2db/0x790 [ 1392.570523][T17760] ? __pfx_panic+0x10/0x10 [ 1392.574955][T17760] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1392.580870][T17760] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1392.587220][T17760] ? print_memory_metadata+0x314/0x400 [ 1392.592701][T17760] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 1392.598089][T17760] check_panic_on_warn+0x89/0xb0 [ 1392.603046][T17760] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 1392.608431][T17760] end_report+0x78/0x160 [ 1392.612696][T17760] kasan_report+0x129/0x150 [ 1392.617207][T17760] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 1392.622595][T17760] ? remove_wait_queue+0x24/0x120 [ 1392.627646][T17760] __kasan_check_byte+0x2a/0x40 [ 1392.632502][T17760] lock_acquire+0x8d/0x360 [ 1392.636926][T17760] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1392.642133][T17760] ? remove_wait_queue+0x24/0x120 [ 1392.647165][T17760] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1392.653074][T17760] remove_wait_queue+0x24/0x120 [ 1392.657943][T17760] poll_freewait+0xb1/0x240 [ 1392.662464][T17760] do_sys_poll+0xda4/0x1070 [ 1392.666986][T17760] ? do_sys_poll+0x661/0x1070 [ 1392.671692][T17760] ? __pfx_do_sys_poll+0x10/0x10 [ 1392.676641][T17760] ? futex_unqueue+0x22/0x240 [ 1392.681342][T17760] ? __pfx_pollwake+0x10/0x10 [ 1392.686040][T17760] ? __pfx_pollwake+0x10/0x10 [ 1392.690775][T17760] ? cgroup_freezing+0x20/0x350 [ 1392.695648][T17760] ? cgroup_freezing+0x20/0x350 [ 1392.700522][T17760] ? cgroup_freezing+0x20/0x350 [ 1392.705413][T17760] ? set_user_sigmask+0x15b/0x1b0 [ 1392.710453][T17760] ? __pfx_set_user_sigmask+0x10/0x10 [ 1392.715847][T17760] __se_sys_ppoll+0x1ff/0x260 [ 1392.720652][T17760] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1392.725877][T17760] ? rcu_is_watching+0x15/0xb0 [ 1392.730653][T17760] ? do_syscall_64+0xbe/0x3b0 [ 1392.735341][T17760] ? __x64_sys_ppoll+0x20/0xc0 [ 1392.740113][T17760] do_syscall_64+0xfa/0x3b0 [ 1392.744636][T17760] ? lockdep_hardirqs_on+0x9c/0x150 [ 1392.749861][T17760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.755944][T17760] ? clear_bhb_loop+0x60/0xb0 [ 1392.760639][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.766547][T17760] RIP: 0033:0x7f5c4958ebe9 [ 1392.771064][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.790690][T17760] RSP: 002b:00007f5c4a4bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1392.799160][T17760] RAX: ffffffffffffffda RBX: 00007f5c497b5fa0 RCX: 00007f5c4958ebe9 [ 1392.807145][T17760] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 0000200000000100 [ 1392.815138][T17760] RBP: 00007f5c49611e19 R08: 0000000000000008 R09: 0000000000000000 [ 1392.823117][T17760] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1392.831114][T17760] R13: 00007f5c497b6038 R14: 00007f5c497b5fa0 R15: 00007fff2c400ef8 [ 1392.839109][T17760] [ 1392.842457][T17760] Kernel Offset: disabled [ 1392.846790][T17760] Rebooting in 86400 seconds..