last executing test programs: 10.480500566s ago: executing program 2 (id=1985): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 9.673534338s ago: executing program 1 (id=1989): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 7.085380049s ago: executing program 1 (id=1993): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 6.934035051s ago: executing program 1 (id=1996): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',gr']) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xe5a}}, {@blksize={'blksize', 0x3d, 0x400}}]}}) shmctl$IPC_RMID(0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x290202, 0x4, 0x8}, 0x18) open_tree(r3, 0x0, 0x2) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 5.540001053s ago: executing program 2 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_RESET(r3, 0x5514) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0xffffffff}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x1000, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x4, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x800000}, {0xffffffff, 0x0, 0x20000000}, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {0x0, 0xfffffff9}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe, 0xfffffffc}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40, 0xfffffffd, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4, 0x432e}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 5.311185137s ago: executing program 4 (id=2002): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 5.199151859s ago: executing program 4 (id=2003): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 4.744712606s ago: executing program 3 (id=2005): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x8, 0x1, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.638667347s ago: executing program 2 (id=2006): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x40243, 0x6b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'\x00', {0x2, 0x0, @initdev}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0xe, 0x0, &(0x7f0000000280)) 4.49125532s ago: executing program 3 (id=2007): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 4.47247601s ago: executing program 3 (id=2008): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 4.245891314s ago: executing program 4 (id=2009): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xaf0, &(0x7f0000000380)={0x0, 0x25b4, 0x200, 0x0, 0x215}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 3.960543118s ago: executing program 3 (id=2010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x8, 0x2, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = gettid() ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000300)=@ethtool_eee={0x45, 0x5, 0xaf, 0x9, 0x86a8000, 0xd8, 0x3ff, 0xfffffffe, [0x100000, 0x101]}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.14628812s ago: executing program 2 (id=2011): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0xaf0, &(0x7f0000000380)={0x0, 0x25b4, 0x200, 0x0, 0x215}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) 3.144022371s ago: executing program 4 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0xfffc}, 0x2, 0x4}}, 0x26) 2.886755835s ago: executing program 0 (id=2013): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 2.691101908s ago: executing program 0 (id=2014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9baae5f8277a4"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4007}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1ff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.014383168s ago: executing program 0 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) 1.92447337s ago: executing program 1 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_RESET(r1, 0x5514) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0xffffffff}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x1000, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x4, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x800000}, {0xffffffff, 0x0, 0x20000000}, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {0x0, 0xfffffff9}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe, 0xfffffffc}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40, 0xfffffffd, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4, 0x432e}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1.764199972s ago: executing program 1 (id=2017): prlimit64(0x0, 0xe, 0x0, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 1.710812853s ago: executing program 2 (id=2018): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 1.235114511s ago: executing program 4 (id=2019): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) 1.068615413s ago: executing program 0 (id=2021): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 1.034110944s ago: executing program 3 (id=2022): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="80c29060ea66c23cfdca83355baeaf85cbe4619ede7844118d880c72c10dce1d53663bfdd461dd721d11e60b5f3909c282cbe9bca8ddb5c46638f23a7a98780a2e361ca33dddaf3ad6dd8e6a088dfcb1f1eca82e7589ee0d34f4a74db5900d0202939093a1446832d5b772491a8ccf6d9769ac45e5c0c80b6cc4", @ANYRESDEC, @ANYBLOB="94053be58adbb539c6010b2f7a50abcce20f39d652ba73a6544ddab3c0ae4f321c17ad9e78496970f6fe27f98a8d3d7edfcb43e91811c0befd3f0ae44a722397e8d16d6873f2ad4d7f517ec86d42c7630112b4b663c8"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1.026906974s ago: executing program 0 (id=2023): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) recvfrom$inet(r0, &(0x7f0000000340)=""/211, 0xd3, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40010}], 0x1, 0x240000c0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf02}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1010, 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) 940.775375ms ago: executing program 3 (id=2024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 77.994818ms ago: executing program 2 (id=2025): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r0, 0xd00, 0x7e15, 0x0, 0x0, 0x30) 76.586069ms ago: executing program 1 (id=2026): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x7}, 0x14) 76.080869ms ago: executing program 4 (id=2027): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061115000080000000600000000000000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=2028): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.633962][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.636443][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.651753][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.654320][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.656987][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.660884][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.663553][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.666349][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.672653][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.676343][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.680758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.683521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.702297][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.705788][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.708702][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.711966][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.714670][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.733283][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.736345][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.739546][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.742401][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.745164][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.747950][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.751910][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.754688][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.757269][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.763665][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.776571][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.780004][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.782747][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.790175][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.795040][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.797693][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.804026][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.806560][ T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.811086][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.824177][ T4302] device veth0_vlan entered promiscuous mode [ 39.840050][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.844541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.847240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.852881][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.874353][ T4302] device veth1_vlan entered promiscuous mode [ 39.949107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.951830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.956792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.963676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.967487][ T4302] device veth0_macvtap entered promiscuous mode [ 39.983648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.986463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.989365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.014620][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.024958][ T4302] device veth1_macvtap entered promiscuous mode [ 40.082825][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.085868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.089576][ T4310] Bluetooth: hci3: command 0x041b tx timeout [ 40.090667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.091256][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 40.094568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.095056][ T4310] Bluetooth: hci4: command 0x041b tx timeout [ 40.101423][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.105685][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.108215][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.111481][ T4304] Bluetooth: hci2: command 0x041b tx timeout [ 40.111515][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 40.130522][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.132929][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.144696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.151239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.164028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.167019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.170972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.173188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.204505][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.216163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.222144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.239426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.242233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.255672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.258280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.260943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.263166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.272176][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.275770][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.288186][ T4305] device veth0_vlan entered promiscuous mode [ 40.314807][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.317692][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.345560][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.347757][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.352530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.355317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.358093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.367618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.370536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.378303][ T4305] device veth1_vlan entered promiscuous mode [ 40.383292][ T4297] device veth0_vlan entered promiscuous mode [ 40.403295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.406139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.410348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.452058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.455002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.457717][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.457941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.463140][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.463848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.472988][ T4297] device veth1_vlan entered promiscuous mode [ 40.475914][ T4296] device veth0_vlan entered promiscuous mode [ 40.482763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.504253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.507120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.523698][ T4305] device veth0_macvtap entered promiscuous mode [ 40.542049][ T4296] device veth1_vlan entered promiscuous mode [ 40.552815][ T4305] device veth1_macvtap entered promiscuous mode [ 40.585090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.587840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.590948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.594250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.596931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.601316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.606894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.611922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.629217][ T4297] device veth0_macvtap entered promiscuous mode [ 40.635074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.637739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.641750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.647452][ T4297] device veth1_macvtap entered promiscuous mode [ 40.667969][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.674208][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.678296][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.685385][ T4296] device veth0_macvtap entered promiscuous mode [ 40.689576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.692471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.695212][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.699260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.717706][ T4296] device veth1_macvtap entered promiscuous mode [ 40.723270][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.726853][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.731931][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.734832][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.745584][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.751893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.754639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.757272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.767200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.770453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.776568][ T4309] device veth0_vlan entered promiscuous mode [ 40.791975][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.794996][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.806867][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.814623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.817153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.825318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.828157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.846789][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.855517][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.859554][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.862487][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.866465][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.870638][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.873505][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.876290][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.880230][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.882973][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.885832][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.013819][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.140992][ T4416] binder: 4412:4416 ioctl c0046209 0 returned -22 [ 41.385141][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.407275][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.457729][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.633645][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.726377][ T4297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.743165][ T4297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.745576][ T4297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.747878][ T4297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.754112][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.756475][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.766253][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.769398][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.777297][ T4309] device veth1_vlan entered promiscuous mode [ 41.785133][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.787970][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.790718][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.793460][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.796133][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.805176][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.810464][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.825816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.828720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.964276][ T4296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.966760][ T4296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.969792][ T4296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.972195][ T4296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.067075][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.070906][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.100651][ T4309] device veth0_macvtap entered promiscuous mode [ 42.109507][ T4309] device veth1_macvtap entered promiscuous mode [ 42.160091][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.162431][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.164859][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.165345][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.167774][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.173254][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 42.174939][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 42.176647][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 42.178484][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 42.178873][ T4301] Bluetooth: hci3: command 0x040f tx timeout [ 42.180999][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.190847][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.193663][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.196528][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.206255][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.210295][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.213837][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.219921][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.221957][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.224590][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.227294][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.231622][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.234084][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.237221][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.254160][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.264577][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.276179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.278671][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.280857][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.284455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.352860][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.355076][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.358207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.404199][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.407128][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.412403][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.415320][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.419052][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.422067][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.424913][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.427770][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.432756][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.438335][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.441611][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.632739][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.635412][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.672387][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.202323][ T4309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.204722][ T4309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.207145][ T4309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.209878][ T4309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.345582][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.347922][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.351538][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.398624][ T574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.400920][ T574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.405090][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.619027][ T4431] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.799994][ T4431] usb 1-1: Using ep0 maxpacket: 32 [ 44.308840][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 44.609209][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 44.610871][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 44.612549][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 44.614221][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 44.633635][ T4431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 44.660013][ T4431] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 44.669106][ T4431] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 44.671829][ T4431] usb 1-1: Product: syz [ 44.673319][ T4431] usb 1-1: Manufacturer: syz [ 44.674762][ T4431] usb 1-1: SerialNumber: syz [ 44.726831][ T4431] usb 1-1: config 0 descriptor?? [ 44.762279][ T4435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.071604][ T4423] usb 1-1: USB disconnect, device number 2 [ 45.279357][ T4463] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.284058][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.309457][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.375770][ T4467] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 46.015165][ T4480] netlink: 168 bytes leftover after parsing attributes in process `syz.1.19'. [ 46.779957][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.783031][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.797055][ T4489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.817316][ T4489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.975078][ T4493] Zero length message leads to an empty skb [ 46.985091][ T4493] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 46.995286][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.005432][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.566861][ T4502] binder: 4501:4502 ioctl c018620c 20000100 returned -1 [ 49.003629][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.006131][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.917573][ T4532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.920318][ T4532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.248506][ T4376] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.294646][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.300282][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.333508][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.339249][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.438578][ T4376] usb 1-1: Using ep0 maxpacket: 8 [ 51.444767][ T4376] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 51.448037][ T4376] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 51.453033][ T4376] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.462728][ T4376] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 51.465361][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.467585][ T4376] usb 1-1: Product: syz [ 51.469430][ T4376] usb 1-1: Manufacturer: syz [ 51.470650][ T4376] usb 1-1: SerialNumber: syz [ 51.475307][ T4376] usb 1-1: config 0 descriptor?? [ 51.481242][ T4376] imon_raw 1-1:0.0: IR endpoint missing [ 52.272027][ T112] usb 1-1: USB disconnect, device number 3 [ 52.380037][ T4573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.392905][ T4573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.420697][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.423614][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.928204][ T4584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 55.000395][ T4604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.002940][ T4604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.256389][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 55.338895][ T4616] HTB: quantum of class 80010010 is big. Consider r2q change. [ 55.635517][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.643508][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.307925][ T4634] binder: 4633:4634 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 57.152660][ T27] audit: type=1326 audit(57.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 57.197268][ T27] audit: type=1326 audit(57.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 57.222304][ T4645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.239531][ T2522] cfg80211: failed to load regulatory.db [ 57.249740][ T4645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.301475][ T4660] netlink: 168 bytes leftover after parsing attributes in process `syz.1.85'. [ 58.351417][ T4662] binder: 4661:4662 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 58.443836][ T4665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.446591][ T4665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.451836][ T4664] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 59.257078][ T4678] loop6: detected capacity change from 0 to 7 [ 59.265329][ T4290] Dev loop6: unable to read RDB block 7 [ 59.268028][ T4290] loop6: unable to read partition table [ 59.270338][ T4290] loop6: partition table beyond EOD, truncated [ 59.292425][ T4678] Dev loop6: unable to read RDB block 7 [ 59.295265][ T4678] loop6: unable to read partition table [ 59.297220][ T4678] loop6: partition table beyond EOD, truncated [ 59.307406][ T4678] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 59.318600][ T4287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.524284][ T4287] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 59.564004][ T4287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.566361][ T4287] usb 1-1: Product: syz [ 59.567583][ T4287] usb 1-1: Manufacturer: syz [ 59.574686][ T4287] usb 1-1: SerialNumber: syz [ 59.577691][ T4287] usb 1-1: config 0 descriptor?? [ 59.591300][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.594045][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.509644][ T4287] usb 1-1: USB disconnect, device number 4 [ 61.732204][ T4698] netlink: 168 bytes leftover after parsing attributes in process `syz.4.98'. [ 61.754349][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.757259][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.790029][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.792660][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.857552][ T4704] binder: 4703:4704 tried to acquire reference to desc 0, got 1 instead [ 61.862196][ T4704] binder_alloc: 4703: pid 4703 spamming oneway? 2 buffers allocated for a total size of 5120 [ 61.866094][ T4704] binder_alloc: 4703: pid 4703 spamming oneway? 3 buffers allocated for a total size of 5128 [ 61.871660][ T4346] binder: undelivered TRANSACTION_COMPLETE [ 61.873354][ T4346] binder: undelivered TRANSACTION_COMPLETE [ 61.875051][ T4346] binder: undelivered TRANSACTION_COMPLETE [ 61.890073][ T4346] binder: undelivered transaction 8, process died. [ 61.892019][ T4346] binder: undelivered transaction 9, process died. [ 61.893966][ T4346] binder: undelivered transaction 7, process died. [ 65.132316][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.134102][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.210178][ T4741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.235558][ T4741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.261753][ T4745] binder: 4742:4745 tried to acquire reference to desc 0, got 1 instead [ 65.267761][ T4745] binder_alloc: 4742: pid 4742 spamming oneway? 2 buffers allocated for a total size of 5120 [ 65.275359][ T4745] binder_alloc: 4742: pid 4742 spamming oneway? 3 buffers allocated for a total size of 5128 [ 65.288885][ T112] binder: undelivered TRANSACTION_COMPLETE [ 65.290621][ T112] binder: undelivered TRANSACTION_COMPLETE [ 65.292428][ T112] binder: undelivered TRANSACTION_COMPLETE [ 65.326161][ T112] binder: undelivered transaction 15, process died. [ 65.594266][ T4760] loop6: detected capacity change from 0 to 7 [ 65.597184][ T4290] Dev loop6: unable to read RDB block 7 [ 65.600128][ T4290] loop6: unable to read partition table [ 65.601752][ T4290] loop6: partition table beyond EOD, truncated [ 66.635697][ T4760] Dev loop6: unable to read RDB block 7 [ 66.637565][ T4760] loop6: unable to read partition table [ 66.649678][ T4760] loop6: partition table beyond EOD, truncated [ 66.663466][ T4760] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.137977][ T4774] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 67.866651][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 67.898353][ T4784] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 67.966541][ T4786] binder: 4785:4786 tried to acquire reference to desc 0, got 1 instead [ 67.970742][ T4786] binder_alloc: 4785: pid 4785 spamming oneway? 2 buffers allocated for a total size of 5120 [ 67.973784][ T4786] binder_alloc: 4785: pid 4785 spamming oneway? 3 buffers allocated for a total size of 5128 [ 67.978240][ T4287] binder_debug: 2 callbacks suppressed [ 67.978251][ T4287] binder: undelivered TRANSACTION_COMPLETE [ 67.982529][ T4287] binder: undelivered TRANSACTION_COMPLETE [ 67.984134][ T4287] binder: undelivered TRANSACTION_COMPLETE [ 68.041799][ T4287] binder: undelivered transaction 22, process died. [ 68.043697][ T4287] binder: undelivered transaction 23, process died. [ 68.045535][ T4287] binder: undelivered transaction 21, process died. [ 68.155410][ T4774] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 68.176771][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.181008][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.291245][ T4774] bond1 (unregistering): Released all slaves [ 69.084585][ T4801] loop6: detected capacity change from 0 to 7 [ 69.088569][ T4801] Dev loop6: unable to read RDB block 7 [ 69.091434][ T4801] loop6: unable to read partition table [ 69.094713][ T4801] loop6: partition table beyond EOD, truncated [ 69.096580][ T4801] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.319316][ T4818] binder: 4817:4818 tried to acquire reference to desc 0, got 1 instead [ 70.324936][ T4818] binder_alloc: 4817: pid 4817 spamming oneway? 2 buffers allocated for a total size of 5120 [ 70.333926][ T4818] binder_alloc: 4817: pid 4817 spamming oneway? 3 buffers allocated for a total size of 5128 [ 70.351375][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 70.353463][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 70.355224][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 70.428319][ T4376] binder: undelivered transaction 29, process died. [ 71.319159][ T4809] infiniband syz2: set active [ 71.321584][ T4809] infiniband syz2: added bond_slave_0 [ 71.446621][ T4809] RDS/IB: syz2: added [ 71.448031][ T4809] smc: adding ib device syz2 with port count 1 [ 71.455985][ T4809] smc: ib device syz2 port 1 has pnetid [ 71.473059][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.563414][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.349377][ T4849] binder: 4848:4849 tried to acquire reference to desc 0, got 1 instead [ 73.425005][ T2522] binder_debug: 2 callbacks suppressed [ 73.425018][ T2522] binder: undelivered TRANSACTION_COMPLETE [ 73.427970][ T2522] binder: undelivered TRANSACTION_COMPLETE [ 73.508284][ T112] binder: undelivered transaction 36, process died. [ 73.510721][ T112] binder: undelivered transaction 35, process died. [ 74.244342][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 75.439238][ T4878] rdma_rxe: rxe_register_device failed with error -23 [ 75.442140][ T4878] rdma_rxe: failed to add team_slave_0 [ 75.473836][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.477054][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.496377][ T4871] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 75.589144][ T4871] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.616404][ T4871] bond0: (slave team0): Enslaving as an active interface with an up link [ 75.805961][ T4889] device ipvlan2 entered promiscuous mode [ 75.878801][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 76.052370][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.055262][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.068494][ T2522] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.275625][ T2522] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.372568][ T2522] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.604395][ T2522] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.606919][ T2522] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 76.619460][ T2522] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.622034][ T2522] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.624190][ T2522] usb 1-1: Product: syz [ 76.625335][ T2522] usb 1-1: Manufacturer: syz [ 76.649775][ T2522] cdc_wdm 1-1:1.0: skipping garbage [ 76.651206][ T2522] cdc_wdm 1-1:1.0: skipping garbage [ 76.652657][ T2522] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 76.697168][ T4911] process 'syz.3.174' launched '/dev/fd/3' with NULL argv: empty string added [ 76.786745][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 76.805749][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.821223][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.900656][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.903237][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.916718][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.924552][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.878199][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.887558][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.943717][ T4359] usb 1-1: USB disconnect, device number 5 [ 79.043731][ T4950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.046227][ T4950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.115035][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 81.523769][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 81.677400][ T5004] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 81.682585][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.686639][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.127940][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 82.169296][ T5028] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 82.359329][ T4359] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.648470][ T4359] usb 1-1: Using ep0 maxpacket: 32 [ 83.651561][ T4359] usb 1-1: config 2 has an invalid interface number: 176 but max is 0 [ 83.653888][ T4359] usb 1-1: config 2 has no interface number 0 [ 83.655869][ T4359] usb 1-1: config 2 interface 176 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 83.688499][ T4359] usb 1-1: config 2 interface 176 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 83.691761][ T4359] usb 1-1: config 2 interface 176 has no altsetting 0 [ 83.699531][ T4359] usb 1-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=48.6b [ 83.702115][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.704313][ T4359] usb 1-1: Product: syz [ 83.705454][ T4359] usb 1-1: Manufacturer: syz [ 83.706696][ T4359] usb 1-1: SerialNumber: syz [ 83.826721][ T5058] binder: 5056:5058 ioctl 4018620d 0 returned -22 [ 83.830958][ T5058] binder: 5056:5058 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 83.836108][ T5058] binder: 5056:5058 got transaction to invalid handle, 1 [ 83.863765][ T5058] binder: 5058:5056 cannot find target node [ 83.865406][ T5058] binder: 5056:5058 transaction async to 0:0 failed 39/29201/-22, size 0-0 line 3054 [ 83.885621][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.975667][ T5061] loop6: detected capacity change from 0 to 7 [ 83.983894][ T5061] Dev loop6: unable to read RDB block 7 [ 83.985648][ T5061] loop6: unable to read partition table [ 83.988694][ T5061] loop6: partition table beyond EOD, truncated [ 84.012584][ T4359] usb 1-1: USB disconnect, device number 6 [ 84.030112][ T5061] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.217706][ T5072] rdma_rxe: already configured on bond_slave_0 [ 86.439822][ T5093] binder: 5092:5093 ioctl 4018620d 0 returned -22 [ 86.458726][ T5093] binder: 5092:5093 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 86.463660][ T5093] binder: 5092:5093 got transaction to invalid handle, 1 [ 86.465640][ T5093] binder: 5093:5092 cannot find target node [ 86.467264][ T5093] binder: 5092:5093 transaction async to 0:0 failed 42/29201/-22, size 0-0 line 3054 [ 86.503137][ T4287] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.599455][ T5099] loop6: detected capacity change from 0 to 7 [ 86.606308][ T5099] Dev loop6: unable to read RDB block 7 [ 86.607916][ T5099] loop6: unable to read partition table [ 86.610653][ T5099] loop6: partition table beyond EOD, truncated [ 86.623748][ T5099] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.715399][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 86.752172][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 88.970862][ T5138] loop6: detected capacity change from 0 to 7 [ 88.984380][ T4290] Dev loop6: unable to read RDB block 7 [ 88.985959][ T4290] loop6: unable to read partition table [ 88.987641][ T4290] loop6: partition table beyond EOD, truncated [ 88.998682][ T5138] Dev loop6: unable to read RDB block 7 [ 89.000250][ T5138] loop6: unable to read partition table [ 89.001844][ T5138] loop6: partition table beyond EOD, truncated [ 89.013762][ T5138] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.305294][ T5147] binder: BINDER_SET_CONTEXT_MGR already set [ 89.307484][ T5147] binder: 5146:5147 ioctl 4018620d 20000040 returned -16 [ 89.319960][ T5147] binder: 5146:5147 got transaction to invalid handle, 1 [ 89.321870][ T5147] binder: 5147:5146 cannot find target node [ 89.323392][ T5147] binder: 5146:5147 transaction async to 0:0 failed 44/29201/-22, size 0-0 line 3054 [ 89.345377][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.494521][ T5155] netlink: 68 bytes leftover after parsing attributes in process `syz.2.258'. [ 90.221115][ T5121] ALSA: mixer_oss: invalid index 40000 [ 90.843960][ T5167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.852444][ T5167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.202732][ T5171] loop6: detected capacity change from 0 to 7 [ 91.206874][ T5171] Dev loop6: unable to read RDB block 7 [ 91.215379][ T5171] loop6: unable to read partition table [ 91.223891][ T5171] loop6: partition table beyond EOD, truncated [ 91.225646][ T5171] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.443002][ T5177] binder: BINDER_SET_CONTEXT_MGR already set [ 91.444757][ T5177] binder: 5176:5177 ioctl 4018620d 20000040 returned -16 [ 91.447168][ T5177] binder: 5176:5177 got transaction to invalid handle, 1 [ 91.454302][ T5177] binder: 5177:5176 cannot find target node [ 91.455907][ T5177] binder: 5176:5177 transaction async to 0:0 failed 46/29201/-22, size 0-0 line 3054 [ 91.460916][ T4287] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.567018][ T5181] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 91.662523][ T5181] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.677779][ T5181] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 92.483338][ T5181] bond1 (unregistering): Released all slaves [ 92.738208][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 92.741713][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 92.816802][ T5205] loop6: detected capacity change from 0 to 7 [ 92.820243][ T5205] Dev loop6: unable to read RDB block 7 [ 92.821906][ T5205] loop6: unable to read partition table [ 92.823583][ T5205] loop6: partition table beyond EOD, truncated [ 92.825346][ T5205] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.839272][ T5207] HTB: quantum of class 80040010 is big. Consider r2q change. [ 93.070673][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.078329][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.928751][ T5215] ALSA: mixer_oss: invalid index 40000 [ 94.050567][ T5221] binder: BINDER_SET_CONTEXT_MGR already set [ 94.067740][ T5221] binder: 5220:5221 ioctl 4018620d 20000040 returned -16 [ 94.120236][ T5221] binder: 5220:5221 got transaction to invalid handle, 1 [ 94.122231][ T5221] binder: 5221:5220 cannot find target node [ 94.133017][ T5221] binder: 5220:5221 transaction async to 0:0 failed 48/29201/-22, size 0-0 line 3054 [ 94.143627][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.150806][ T5240] loop6: detected capacity change from 0 to 7 [ 95.168594][ T5240] Dev loop6: unable to read RDB block 7 [ 95.170221][ T5240] loop6: unable to read partition table [ 95.171954][ T5240] loop6: partition table beyond EOD, truncated [ 95.173682][ T5240] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.234618][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 95.459767][ T5248] HTB: quantum of class 80050010 is big. Consider r2q change. [ 96.497819][ T5252] ALSA: mixer_oss: invalid index 40000 [ 96.736558][ T5268] binder: BINDER_SET_CONTEXT_MGR already set [ 96.758120][ T5267] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 96.761856][ T5268] binder: 5261:5268 ioctl 4018620d 20000040 returned -16 [ 96.776972][ T5268] binder: 5261:5268 got transaction to invalid handle, 1 [ 96.805744][ T5268] binder: 5268:5261 cannot find target node [ 96.807277][ T5268] binder: 5261:5268 transaction async to 0:0 failed 50/29201/-22, size 0-0 line 3054 [ 96.818313][ T5263] binder: 5261:5263 got transaction to invalid handle, 1 [ 96.853325][ T5263] binder: 5263:5261 cannot find target node [ 96.855020][ T5263] binder: 5261:5263 transaction async to 0:0 failed 51/29201/-22, size 0-0 line 3054 [ 96.895117][ T5272] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 96.908830][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.910505][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.916515][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.929322][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.937842][ T5265] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 97.108956][ T5273] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 97.828993][ T5273] bond1 (unregistering): Released all slaves [ 98.058031][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 99.834462][ T5293] ALSA: mixer_oss: invalid index 40000 [ 100.282461][ T5310] binder: 5309:5310 ioctl c0306201 0 returned -14 [ 100.288804][ T5310] binder: 5309:5310 got transaction to invalid handle, 1 [ 100.290898][ T5310] binder: 5310:5309 cannot find target node [ 100.292578][ T5310] binder: 5309:5310 transaction async to 0:0 failed 55/29201/-22, size 0-0 line 3054 [ 100.297035][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.608311][ T5315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 100.611331][ T5315] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.853073][ T27] audit: type=1326 audit(100.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 100.860804][ T27] audit: type=1326 audit(100.830:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 102.011351][ T5331] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 102.049591][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.052247][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.153425][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 102.230212][ T5338] HTB: quantum of class 80070010 is big. Consider r2q change. [ 102.297024][ T5344] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 102.354389][ T5344] bond1 (unregistering): Released all slaves [ 103.253198][ T5346] ALSA: mixer_oss: invalid index 40000 [ 103.449521][ T5355] binder: 5354:5355 ioctl c0306201 0 returned -14 [ 103.454323][ T5355] binder: 5354:5355 got transaction to invalid handle, 1 [ 103.456547][ T5355] binder: 5355:5354 cannot find target node [ 103.458236][ T5355] binder: 5354:5355 transaction async to 0:0 failed 59/29201/-22, size 0-0 line 3054 [ 103.496801][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.930640][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 105.038894][ T5383] HTB: quantum of class 80080010 is big. Consider r2q change. [ 105.201406][ T5385] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 105.208752][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.220097][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.263568][ T5387] ALSA: mixer_oss: invalid index 40000 [ 106.456907][ T5394] binder: 5393:5394 got transaction to invalid handle, 1 [ 106.473916][ T5394] binder: 5394:5393 cannot find target node [ 106.475628][ T5394] binder: 5393:5394 transaction async to 0:0 failed 63/29201/-22, size 0-0 line 3054 [ 106.507465][ T4353] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.747406][ T5407] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 106.968780][ T5413] bond1 (unregistering): Released all slaves [ 107.148919][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 107.896524][ T5414] HTB: quantum of class 80090010 is big. Consider r2q change. [ 109.752710][ T5433] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 109.883729][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.886297][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.924641][ T5439] binder: 5438:5439 got transaction to invalid handle, 1 [ 109.926808][ T5439] binder: 5439:5438 cannot find target node [ 109.933670][ T5439] binder: 5438:5439 transaction async to 0:0 failed 67/29201/-22, size 0-0 line 3054 [ 109.938114][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.650111][ T5434] ALSA: mixer_oss: invalid index 40000 [ 111.491949][ T5469] netlink: 168 bytes leftover after parsing attributes in process `syz.1.357'. [ 112.726196][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 113.849994][ T5481] ALSA: mixer_oss: invalid index 40000 [ 114.349507][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 114.680030][ T5511] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 114.682993][ T5511] FAT-fs (loop9): unable to read boot sector [ 116.572388][ T5523] ALSA: mixer_oss: invalid index 40000 [ 116.955731][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 117.073193][ T5538] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 117.075331][ T5538] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.088296][ T5538] vhci_hcd vhci_hcd.0: Device attached [ 117.148938][ T5540] vhci_hcd: connection closed [ 117.151977][ T4397] vhci_hcd: stop threads [ 117.155105][ T4397] vhci_hcd: release socket [ 117.158197][ T4397] vhci_hcd: disconnect device [ 117.446004][ T5542] tipc: Started in network mode [ 117.447653][ T5542] tipc: Node identity 4, cluster identity 4711 [ 117.456276][ T5542] tipc: Node number set to 4 [ 117.474874][ T5548] loop6: detected capacity change from 0 to 7 [ 117.477637][ T4290] Dev loop6: unable to read RDB block 7 [ 117.488927][ T4290] loop6: unable to read partition table [ 117.490610][ T4290] loop6: partition table beyond EOD, truncated [ 118.245325][ T5548] Dev loop6: unable to read RDB block 7 [ 118.246984][ T5548] loop6: unable to read partition table [ 118.258683][ T5548] loop6: partition table beyond EOD, truncated [ 118.260496][ T5548] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.502429][ T5560] netlink: 168 bytes leftover after parsing attributes in process `syz.4.384'. [ 118.829969][ T5569] binder: 5561:5569 tried to acquire reference to desc 0, got 1 instead [ 118.836920][ T5569] binder: 5561:5569 got transaction with out-of-order buffer fixup [ 118.839443][ T5569] binder: 5569:5561 failed to fixup parent [ 118.841717][ T5569] binder: 5561:5569 transaction async to 5561:0 failed 72/29201/-22, size 120-24 line 3549 [ 119.372242][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.274803][ T5584] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 120.610872][ T5575] ALSA: mixer_oss: invalid index 40000 [ 120.651487][ T5584] bond1 (unregistering): Released all slaves [ 120.699617][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 121.049668][ T5598] loop6: detected capacity change from 0 to 7 [ 121.058761][ T5598] Dev loop6: unable to read RDB block 7 [ 121.060474][ T5598] loop6: unable to read partition table [ 121.062135][ T5598] loop6: partition table beyond EOD, truncated [ 121.079052][ T5598] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.354203][ T5617] netlink: 168 bytes leftover after parsing attributes in process `syz.2.400'. [ 123.075115][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 123.100015][ T5632] loop6: detected capacity change from 0 to 7 [ 123.103229][ T5632] Dev loop6: unable to read RDB block 7 [ 123.105651][ T5632] loop6: unable to read partition table [ 123.107470][ T5632] loop6: partition table beyond EOD, truncated [ 123.651879][ T5632] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.807185][ T5625] ALSA: mixer_oss: invalid index 40000 [ 124.163212][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 125.102883][ T5654] binder: 5652:5654 tried to acquire reference to desc 0, got 1 instead [ 125.105814][ T5654] binder_alloc: 5652: binder_alloc_buf, no vma [ 125.112431][ T5654] binder: cannot allocate buffer: vma cleared, target dead or dying [ 125.112473][ T5654] binder: 5652:5654 transaction async to 5652:0 failed 77/29189/-3, size 0-0 line 3239 [ 125.137271][ T4353] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.583586][ T5664] netlink: 168 bytes leftover after parsing attributes in process `syz.2.419'. [ 125.984119][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.986047][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.327846][ T5675] loop6: detected capacity change from 0 to 7 [ 126.335837][ T4290] Dev loop6: unable to read RDB block 7 [ 126.337849][ T4290] loop6: unable to read partition table [ 126.354601][ T4290] loop6: partition table beyond EOD, truncated [ 127.017840][ T5668] ALSA: mixer_oss: invalid index 40000 [ 127.062579][ T5675] Dev loop6: unable to read RDB block 7 [ 127.064347][ T5675] loop6: unable to read partition table [ 127.065982][ T5675] loop6: partition table beyond EOD, truncated [ 127.103688][ T5675] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.160038][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 129.591646][ T5716] netlink: 168 bytes leftover after parsing attributes in process `syz.2.433'. [ 130.160028][ T5706] ALSA: mixer_oss: invalid index 40000 [ 130.269895][ T5711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 130.361681][ T5721] netlink: 'syz.2.436': attribute type 49 has an invalid length. [ 130.578228][ T5729] loop6: detected capacity change from 0 to 7 [ 130.620990][ T5729] Dev loop6: unable to read RDB block 7 [ 130.622584][ T5729] loop6: unable to read partition table [ 130.624195][ T5729] loop6: partition table beyond EOD, truncated [ 130.632938][ T5729] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.806484][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 132.533950][ T5746] ALSA: mixer_oss: invalid index 40000 [ 132.732791][ T5757] binder: tried to use weak ref as strong ref [ 132.734549][ T5757] binder: 5755:5757 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.737306][ T5757] binder: 5755:5757 got transaction to invalid handle, 1 [ 132.739730][ T5757] binder: 5757:5755 cannot find target node [ 132.741272][ T5757] binder: 5755:5757 transaction async to 0:0 failed 80/29201/-22, size 120-24 line 3054 [ 132.744627][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.148714][ T5774] loop6: detected capacity change from 0 to 7 [ 133.149265][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.164572][ T5774] Dev loop6: unable to read RDB block 7 [ 133.166169][ T5774] loop6: unable to read partition table [ 133.182703][ T5774] loop6: partition table beyond EOD, truncated [ 133.186120][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.194986][ T5774] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.536023][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 134.853472][ T5789] ALSA: mixer_oss: invalid index 40000 [ 135.024462][ T5795] binder: tried to use weak ref as strong ref [ 135.030863][ T5795] binder: 5793:5795 Acquire 1 refcount change on invalid ref 0 ret -22 [ 135.038074][ T5795] binder: 5793:5795 got transaction to invalid handle, 1 [ 135.044837][ T5795] binder: 5795:5793 cannot find target node [ 135.049807][ T5795] binder: 5793:5795 transaction async to 0:0 failed 83/29201/-22, size 120-24 line 3054 [ 135.057124][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.878480][ T5801] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 136.084448][ T5766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.944080][ T5813] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 136.977832][ T5813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.039172][ T5819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.041368][ T5819] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.045456][ T5819] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 137.170312][ T5823] loop6: detected capacity change from 0 to 7 [ 137.172956][ T5823] Dev loop6: unable to read RDB block 7 [ 137.175754][ T5823] loop6: unable to read partition table [ 137.178961][ T5823] loop6: partition table beyond EOD, truncated [ 137.180781][ T5823] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.266426][ T5813] device veth3 entered promiscuous mode [ 137.308621][ T5813] bond1: (slave veth3): Enslaving as an active interface with a down link [ 137.322397][ T5821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 137.343895][ T5821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.707575][ T5827] sched: RT throttling activated [ 139.346010][ T5830] ALSA: mixer_oss: invalid index 40000 [ 140.088545][ T5841] binder: 5835:5841 got transaction to invalid handle, 1 [ 140.090697][ T5841] binder: 5841:5835 cannot find target node [ 140.092462][ T5841] binder: 5835:5841 transaction async to 0:0 failed 86/29201/-22, size 120-24 line 3054 [ 140.107643][ T5844] netlink: 112 bytes leftover after parsing attributes in process `syz.0.474'. [ 140.365814][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.758461][ T5853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.476'. [ 142.360256][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.364056][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.886576][ T5892] binder: 5882:5892 got transaction to invalid handle, 1 [ 142.888714][ T5892] binder: 5892:5882 cannot find target node [ 142.890410][ T5892] binder: 5882:5892 transaction async to 0:0 failed 90/29201/-22, size 120-24 line 3054 [ 143.385558][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.672713][ T5897] netlink: 168 bytes leftover after parsing attributes in process `syz.4.492'. [ 146.270573][ T5931] binder: BINDER_SET_CONTEXT_MGR already set [ 146.272195][ T5931] binder: 5930:5931 ioctl 4018620d 20000040 returned -16 [ 146.274645][ T5931] binder: 5930:5931 ioctl c0306201 0 returned -14 [ 146.278824][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.286110][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.293222][ T5931] binder: 5930:5931 got transaction to invalid handle, 1 [ 146.295157][ T5931] binder: 5931:5930 cannot find target node [ 146.296761][ T5931] binder: 5930:5931 transaction async to 0:0 failed 93/29201/-22, size 0-0 line 3054 [ 146.314893][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.470878][ T5936] netlink: 168 bytes leftover after parsing attributes in process `syz.3.503'. [ 148.092362][ T5960] binder: 5958:5960 got transaction to invalid handle, 1 [ 148.108564][ T5960] binder: 5960:5958 cannot find target node [ 148.110238][ T5960] binder: 5958:5960 transaction async to 0:0 failed 99/29201/-22, size 0-0 line 3054 [ 148.187737][ T5962] binder: 5946:5962 got transaction to invalid handle, 1 [ 148.189895][ T5962] binder: 5962:5946 cannot find target node [ 148.191769][ T5962] binder: 5946:5962 transaction async to 0:0 failed 101/29201/-22, size 120-24 line 3054 [ 148.679230][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.844072][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.113923][ T5972] netlink: 168 bytes leftover after parsing attributes in process `syz.2.516'. [ 154.014107][ T6006] loop6: detected capacity change from 0 to 7 [ 154.016908][ T4290] Dev loop6: unable to read RDB block 7 [ 154.023728][ T4290] loop6: unable to read partition table [ 154.026642][ T4290] loop6: partition table beyond EOD, truncated [ 154.033414][ T6006] Dev loop6: unable to read RDB block 7 [ 154.035003][ T6006] loop6: unable to read partition table [ 154.037427][ T6006] loop6: partition table beyond EOD, truncated [ 154.040719][ T6006] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.054180][ T6005] binder: 6003:6005 got transaction to invalid handle, 1 [ 154.056364][ T6005] binder: 6005:6003 cannot find target node [ 154.057988][ T6005] binder: 6003:6005 transaction async to 0:0 failed 105/29201/-22, size 0-0 line 3054 [ 154.078915][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.190036][ T6013] netlink: 168 bytes leftover after parsing attributes in process `syz.1.530'. [ 156.515241][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 157.621674][ T6045] loop6: detected capacity change from 0 to 7 [ 157.678452][ T6045] Dev loop6: unable to read RDB block 7 [ 157.693432][ T6045] loop6: unable to read partition table [ 157.695252][ T6045] loop6: partition table beyond EOD, truncated [ 157.697106][ T6045] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.641235][ T6054] netlink: 168 bytes leftover after parsing attributes in process `syz.2.543'. [ 158.740897][ T4310] Bluetooth: hci4: command 0x0406 tx timeout [ 158.741555][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 158.744433][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 158.746120][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 158.746952][ T4310] Bluetooth: hci3: command 0x0406 tx timeout [ 163.063915][ T6100] loop6: detected capacity change from 0 to 7 [ 163.066475][ T4290] Dev loop6: unable to read RDB block 7 [ 163.068032][ T4290] loop6: unable to read partition table [ 163.070250][ T4290] loop6: partition table beyond EOD, truncated [ 163.078815][ T6100] Dev loop6: unable to read RDB block 7 [ 163.080349][ T6100] loop6: unable to read partition table [ 163.081942][ T6100] loop6: partition table beyond EOD, truncated [ 163.083573][ T6100] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.856450][ T6114] binder: 6111:6114 tried to acquire reference to desc 0, got 1 instead [ 163.861097][ T6114] binder_alloc: 6111: binder_alloc_buf, no vma [ 163.862952][ T6114] binder: cannot allocate buffer: vma cleared, target dead or dying [ 163.863188][ T6114] binder: 6111:6114 transaction async to 6111:0 failed 110/29189/-3, size 120-24 line 3239 [ 164.426556][ T5085] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.773041][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.775620][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.273585][ T6150] binder: 6143:6150 tried to acquire reference to desc 0, got 1 instead [ 167.277208][ T6150] binder_alloc: 6143: binder_alloc_buf, no vma [ 167.279095][ T6150] binder: cannot allocate buffer: vma cleared, target dead or dying [ 167.279291][ T6150] binder: 6143:6150 transaction async to 6143:0 failed 115/29189/-3, size 120-24 line 3239 [ 167.780906][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 167.921049][ T6153] netlink: 168 bytes leftover after parsing attributes in process `syz.0.575'. [ 172.835059][ T6198] binder: 6191:6198 tried to acquire reference to desc 0, got 1 instead [ 172.838767][ T6198] binder_alloc: 6191: binder_alloc_buf, no vma [ 172.840461][ T6198] binder: cannot allocate buffer: vma cleared, target dead or dying [ 172.840659][ T6198] binder: 6191:6198 transaction async to 6191:0 failed 120/29189/-3, size 120-24 line 3239 [ 173.483975][ T4353] binder: undelivered TRANSACTION_ERROR: 29189 [ 175.165992][ T6225] ALSA: mixer_oss: invalid index 40000 [ 175.818616][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.598'. [ 176.041413][ T6235] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 176.064636][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.100904][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.103075][ T6235] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.107470][ T6235] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 176.373299][ T6244] device veth3 entered promiscuous mode [ 176.391048][ T6244] bond1: (slave veth3): Enslaving as an active interface with a down link [ 176.538918][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 177.638561][ T6264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 178.810242][ T6278] netlink: 168 bytes leftover after parsing attributes in process `syz.2.613'. [ 179.331316][ T6283] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 179.400946][ T6283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.475448][ T6283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.477691][ T6283] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.499904][ T6283] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 179.625069][ T6287] device veth5 entered promiscuous mode [ 179.629793][ T6287] bond2: (slave veth5): Enslaving as an active interface with a down link [ 179.687087][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 180.890750][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.623'. [ 181.485831][ T6320] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 181.500138][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.542511][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.545100][ T6320] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.553251][ T6320] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 181.750023][ T6327] device veth3 entered promiscuous mode [ 181.756864][ T6327] bond1: (slave veth3): Enslaving as an active interface with a down link [ 181.760396][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 184.757232][ T6361] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 185.023313][ T6361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.159223][ T6365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.161518][ T6365] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.009850][ T6365] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 186.155797][ T6367] device veth3 entered promiscuous mode [ 186.247690][ T6367] bond1: (slave veth3): Enslaving as an active interface with a down link [ 186.304822][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.644'. [ 186.650139][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 186.653587][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 186.658331][ T47] Bluetooth: hci4: hardware error 0x00 [ 187.688527][ T6393] netlink: 168 bytes leftover after parsing attributes in process `syz.3.648'. [ 187.969780][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.971607][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.079099][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.128724][ T47] Bluetooth: hci3: command 0x0405 tx timeout [ 191.654377][ T6427] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 191.737973][ T6427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.800652][ T6431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.802843][ T6431] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.807767][ T6431] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 192.638694][ T6434] device veth5 entered promiscuous mode [ 192.649959][ T6434] bond2: (slave veth5): Enslaving as an active interface with a down link [ 192.652470][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 192.659451][ T6427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.105144][ T6444] netlink: 168 bytes leftover after parsing attributes in process `syz.1.661'. [ 197.176796][ T6485] netlink: 168 bytes leftover after parsing attributes in process `syz.2.677'. [ 198.805932][ T6505] binder: BINDER_SET_CONTEXT_MGR already set [ 198.815448][ T6505] binder: 6504:6505 ioctl 4018620d 20000040 returned -16 [ 199.097536][ T6505] binder: 6504:6505 got transaction to invalid handle, 1 [ 199.104424][ T6505] binder: 6505:6504 cannot find target node [ 199.459981][ T6505] binder: 6504:6505 transaction async to 0:0 failed 122/29201/-22, size 0-0 line 3054 [ 199.473799][ T4362] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.114119][ T6529] netlink: 168 bytes leftover after parsing attributes in process `syz.3.689'. [ 200.264911][ T6536] binder: 6534:6536 tried to acquire reference to desc 0, got 1 instead [ 200.284359][ T112] binder: undelivered TRANSACTION_COMPLETE [ 200.286349][ T112] binder: undelivered TRANSACTION_COMPLETE [ 200.397675][ T112] binder: undelivered transaction 128, process died. [ 200.399821][ T112] binder: undelivered transaction 127, process died. [ 200.458846][ T6539] binder: 6537:6539 ioctl c0306201 0 returned -14 [ 200.467673][ T6539] binder: 6537:6539 got transaction to invalid handle, 1 [ 200.469805][ T6539] binder: 6539:6537 cannot find target node [ 200.471341][ T6539] binder: 6537:6539 transaction async to 0:0 failed 132/29201/-22, size 0-0 line 3054 [ 200.474533][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.660691][ T6561] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 202.717897][ T6561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.860206][ T6561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.862464][ T6561] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 202.866555][ T6561] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 202.972220][ T6564] device veth7 entered promiscuous mode [ 203.002261][ T6564] bond3: (slave veth7): Enslaving as an active interface with a down link [ 203.004654][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'. [ 203.145452][ T6573] binder: 6572:6573 tried to acquire reference to desc 0, got 1 instead [ 203.274180][ T6578] binder: 6577:6578 ioctl c0306201 0 returned -14 [ 203.303152][ T6578] binder: 6577:6578 got transaction to invalid handle, 1 [ 204.947337][ T6601] binder: 6600:6601 tried to acquire reference to desc 0, got 1 instead [ 204.951413][ T6601] binder_alloc: 6600: pid 6600 spamming oneway? 2 buffers allocated for a total size of 5120 [ 204.954637][ T6601] binder: 6600:6601 ioctl c0306201 0 returned -14 [ 204.957747][ T4376] binder_debug: 7 callbacks suppressed [ 204.957757][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 204.961053][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 204.980752][ T4376] binder: undelivered transaction 148, process died. [ 204.982640][ T4376] binder: undelivered transaction 147, process died. [ 205.009912][ T6603] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 205.027994][ T6603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.081880][ T6603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.084162][ T6603] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 205.088292][ T6603] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 205.231267][ T6607] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 205.236919][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.253448][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.264694][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 205.267713][ T6609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.501334][ T6618] netlink: 168 bytes leftover after parsing attributes in process `syz.0.720'. [ 206.805840][ T6627] ALSA: mixer_oss: invalid index 40000 [ 207.334003][ T6645] binder: 6644:6645 tried to acquire reference to desc 0, got 1 instead [ 207.337200][ T6645] binder_alloc: 6644: pid 6644 spamming oneway? 2 buffers allocated for a total size of 5120 [ 207.344271][ T6645] binder: 6644:6645 ioctl c0306201 0 returned -14 [ 207.349489][ T4354] binder: undelivered TRANSACTION_COMPLETE [ 207.351160][ T4354] binder: undelivered TRANSACTION_COMPLETE [ 207.418541][ T4354] binder: undelivered transaction 154, process died. [ 207.420522][ T4354] binder: undelivered transaction 153, process died. [ 207.867216][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.882374][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.148206][ T6665] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 208.366468][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 208.418649][ T5085] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.791889][ T5085] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 208.794545][ T5085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.796733][ T5085] usb 1-1: Product: syz [ 208.797919][ T5085] usb 1-1: Manufacturer: syz [ 208.808444][ T5085] usb 1-1: SerialNumber: syz [ 208.811552][ T5085] usb 1-1: config 0 descriptor?? [ 209.582466][ T6671] ALSA: mixer_oss: invalid index 40000 [ 209.644167][ T5085] usb 1-1: USB disconnect, device number 7 [ 209.814878][ T6684] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 210.058041][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.060809][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.098716][ T6688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.106053][ T6684] bond4 (unregistering): Released all slaves [ 210.227951][ T6698] netlink: 168 bytes leftover after parsing attributes in process `syz.4.747'. [ 211.542226][ T6705] ALSA: mixer_oss: invalid index 40000 [ 212.344183][ T6726] syz.0.760 sent an empty control message without MSG_MORE. [ 212.558720][ T6734] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 212.769207][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.758'. [ 213.648443][ T4376] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 213.852042][ T4376] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 213.854593][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.856867][ T4376] usb 1-1: Product: syz [ 213.858011][ T4376] usb 1-1: Manufacturer: syz [ 213.877171][ T4376] usb 1-1: SerialNumber: syz [ 213.919462][ T4376] usb 1-1: config 0 descriptor?? [ 214.757030][ T4376] usb 1-1: USB disconnect, device number 8 [ 216.858956][ T6766] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 216.913277][ T6766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.011672][ T6773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.014033][ T6773] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 217.055719][ T6773] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 217.182622][ T6766] device veth9 entered promiscuous mode [ 217.184632][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.771'. [ 217.241061][ T6774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.423340][ T6780] netlink: 'syz.2.773': attribute type 4 has an invalid length. [ 217.960030][ T6792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.774'. [ 218.023387][ T6796] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 218.035544][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.041821][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.251388][ T6805] netlink: 168 bytes leftover after parsing attributes in process `syz.4.776'. [ 220.272855][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 220.842001][ T6839] device syzkaller1 entered promiscuous mode [ 222.551720][ T6863] binder: 6862:6863 got transaction to invalid handle, 1 [ 222.553665][ T6863] binder: 6863:6862 cannot find target node [ 222.555275][ T6863] binder: 6862:6863 transaction async to 0:0 failed 158/29201/-22, size 0-0 line 3054 [ 222.576491][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.848921][ T6872] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 222.915945][ T6872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.994902][ T6872] device veth5 entered promiscuous mode [ 223.008280][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 223.066034][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 223.229057][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 225.011202][ T6904] binder: 6900:6904 got transaction to invalid handle, 1 [ 225.013140][ T6904] binder: 6904:6900 cannot find target node [ 225.014768][ T6904] binder: 6900:6904 transaction async to 0:0 failed 162/29201/-22, size 0-0 line 3054 [ 225.044447][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.159746][ T6909] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 225.198851][ T6909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.345731][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 225.365561][ T6914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.367675][ T6914] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.425719][ T6914] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 225.556787][ T6909] device veth7 entered promiscuous mode [ 225.560902][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 225.566297][ T6923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.347458][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 226.847071][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 228.450305][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.452585][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.509085][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.637351][ T6964] device veth7 entered promiscuous mode [ 228.666932][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 228.743196][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 228.768719][ T6959] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 228.899585][ T6959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.509390][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.839'. [ 230.461819][ T6988] binder: tried to use weak ref as strong ref [ 230.478430][ T6988] binder: 6987:6988 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.481438][ T6988] binder: 6987:6988 got transaction to invalid handle, 1 [ 230.483459][ T6988] binder: 6988:6987 cannot find target node [ 230.508799][ T6988] binder: 6987:6988 transaction async to 0:0 failed 165/29201/-22, size 0-0 line 3054 [ 230.519228][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.016711][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.026266][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.098641][ T7000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.386167][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 234.260836][ T7023] binder: tried to use weak ref as strong ref [ 234.262568][ T7023] binder: 7022:7023 Acquire 1 refcount change on invalid ref 0 ret -22 [ 234.265333][ T7023] binder: 7022:7023 got transaction to invalid handle, 1 [ 234.267260][ T7023] binder: 7023:7022 cannot find target node [ 234.288510][ T7023] binder: 7022:7023 transaction async to 0:0 failed 168/29201/-22, size 0-0 line 3054 [ 234.291712][ T2522] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.858059][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 236.075753][ T7056] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 236.100598][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.140204][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.142394][ T7056] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.150090][ T7056] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 236.227726][ T7065] binder: 7059:7065 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 236.252169][ T7066] device veth3 entered promiscuous mode [ 236.269326][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 236.272113][ T7066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.275483][ T7065] binder: 7059:7065 ioctl 4018620d 0 returned -22 [ 236.298098][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.862'. [ 236.841504][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 239.833288][ T7113] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 239.881485][ T7113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.670362][ T7113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.672726][ T7113] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.676931][ T7113] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 240.811010][ T7119] device veth9 entered promiscuous mode [ 241.030567][ T7119] bond5: (slave veth9): Enslaving as an active interface with a down link [ 241.046795][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 241.050517][ T7121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.451612][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 245.123650][ T7155] ALSA: mixer_oss: invalid index 40000 [ 245.486682][ T7175] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 245.491178][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.494389][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.288132][ T7194] netlink: 168 bytes leftover after parsing attributes in process `syz.3.899'. [ 247.539166][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.541400][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.598726][ T7211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.088250][ T27] audit: type=1326 audit(248.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.4.912" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x0 [ 248.637975][ T7224] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 248.656526][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.669754][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.588770][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.590510][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.042049][ T7237] kthread_run failed with err -4 [ 251.043667][ T7237] netlink: 68 bytes leftover after parsing attributes in process `syz.1.916'. [ 251.147598][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 251.168519][ T7242] device bridge_slave_1 left promiscuous mode [ 251.171604][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.251561][ T7242] device bridge_slave_0 left promiscuous mode [ 251.253424][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.386734][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.390563][ T7250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.882417][ T7265] netlink: 168 bytes leftover after parsing attributes in process `syz.4.924'. [ 252.016953][ T7244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.079333][ T7244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 252.081441][ T7244] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 252.083633][ T7244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.089300][ T7244] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 252.090865][ T7244] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 252.093651][ T7244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.095332][ T7244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 252.096939][ T7244] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 252.102875][ T7244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.108632][ T7244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 252.110357][ T7244] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 252.353729][ T7277] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 252.362304][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.438684][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.448537][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.641556][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.668667][ T7289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.779467][ T7293] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 253.845437][ T7293] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 253.866247][ T7293] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 253.978737][ T7293] bond2 (unregistering): Released all slaves [ 254.118561][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.168454][ T4310] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.170364][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.528469][ T4304] Bluetooth: hci0: command 0x0406 tx timeout [ 255.560661][ T7314] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 255.573155][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.579536][ T7307] ceph: No mds server is up or the cluster is laggy [ 255.605560][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.178532][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 256.248550][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 256.248597][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 261.534206][ T7375] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 261.544653][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.558705][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.570969][ T7376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.955'. [ 262.595579][ T7385] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 262.932346][ T7385] bond4 (unregistering): Released all slaves [ 265.469996][ T7418] binder: BINDER_SET_CONTEXT_MGR already set [ 265.471683][ T7418] binder: 7415:7418 ioctl 4018620d 20000040 returned -16 [ 265.484612][ T7418] binder: 7415:7418 got transaction to invalid handle, 1 [ 265.495313][ T7418] binder: 7418:7415 cannot find target node [ 265.506215][ T7418] binder: 7415:7418 transaction async to 0:0 failed 170/29201/-22, size 120-24 line 3054 [ 265.517567][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.819992][ T7431] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 266.832208][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.835064][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.113200][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.944387][ T7443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.326003][ T7453] block device autoloading is deprecated and will be removed. [ 270.916043][ T7475] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 270.921500][ T7474] binder: 7473:7474 got transaction to invalid handle, 1 [ 270.923530][ T7474] binder: 7474:7473 cannot find target node [ 270.925233][ T7474] binder: 7473:7474 transaction async to 0:0 failed 174/29201/-22, size 0-0 line 3054 [ 270.929124][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.966269][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.971250][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.674213][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 275.676789][ T7522] device bridge_slave_1 left promiscuous mode [ 275.688760][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.719629][ T7522] device bridge_slave_0 left promiscuous mode [ 275.721383][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.931209][ T7528] binder: 7527:7528 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 275.944066][ T7528] binder: 7527:7528 got transaction to invalid handle, 1 [ 275.946335][ T7528] binder: 7528:7527 cannot find target node [ 275.950207][ T7528] binder: 7527:7528 transaction async to 0:0 failed 177/29201/-22, size 120-24 line 3054 [ 275.963026][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.013916][ T7524] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 276.142507][ T7526] bond6 (unregistering): Released all slaves [ 276.909216][ T7541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1005'. [ 277.429556][ T7552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.432347][ T7552] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.597145][ T27] audit: type=1326 audit(277.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 277.659451][ T27] audit: type=1326 audit(277.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 277.971777][ T7558] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 277.990020][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.006724][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.816832][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 278.898111][ T7575] binder: 7574:7575 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 278.915545][ T7575] binder: 7574:7575 got transaction to invalid handle, 1 [ 278.921257][ T7575] binder: 7575:7574 cannot find target node [ 278.935247][ T7575] binder: 7574:7575 transaction async to 0:0 failed 180/29201/-22, size 120-24 line 3054 [ 278.944432][ T2522] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.130571][ T7581] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 279.229106][ T7581] bond2 (unregistering): Released all slaves [ 280.381113][ T27] audit: type=1326 audit(280.360:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 280.387037][ T27] audit: type=1326 audit(280.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 282.349984][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 282.987349][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.038550][ T7631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.730552][ T27] audit: type=1326 audit(283.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 283.736714][ T27] audit: type=1326 audit(283.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 283.820044][ T7642] binder: 7641:7642 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 285.017776][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 285.049923][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 288.108983][ T27] audit: type=1326 audit(288.090:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 288.115234][ T27] audit: type=1326 audit(288.090:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.0.1046" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 289.199740][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 291.925443][ T7735] netlink: 'syz.2.1063': attribute type 10 has an invalid length. [ 292.124026][ T7735] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.237056][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 294.728528][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.778757][ T7771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.478136][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 296.696403][ T7798] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 296.806871][ T7803] device veth5 entered promiscuous mode [ 296.851413][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1083'. [ 297.425467][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.498715][ T7822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.730346][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 298.814025][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 298.855497][ T7840] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 299.334679][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 299.387431][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 299.498118][ T7851] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 299.542993][ T7851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.593786][ T7854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.596815][ T7854] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.612305][ T7854] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 299.818886][ T7851] device veth11 entered promiscuous mode [ 299.828697][ T7851] bond6: (slave veth11): Enslaving as an active interface with a down link [ 300.176691][ T7869] binder: 7867:7869 ioctl 4018620d 0 returned -22 [ 300.179617][ T7869] binder: 7867:7869 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 300.184495][ T7869] binder: 7867:7869 got transaction to invalid handle, 1 [ 300.186434][ T7869] binder: 7869:7867 cannot find target node [ 300.187972][ T7869] binder: 7867:7869 transaction async to 0:0 failed 184/29201/-22, size 120-24 line 3054 [ 300.193824][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 302.466843][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 302.486092][ T7891] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 303.145355][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1109'. [ 303.198165][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1109'. [ 303.245848][ T7906] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 303.359404][ T7903] Can't find ip_set type hash:ip,p [ 303.431720][ T7906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.491258][ T7909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.493415][ T7909] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 303.535191][ T7909] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 303.752273][ T7910] device veth9 entered promiscuous mode [ 303.756674][ T7910] bond4: (slave veth9): Enslaving as an active interface with a down link [ 304.598121][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 305.723804][ T7947] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 306.072855][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 306.369407][ T7952] binder: 7951:7952 ioctl 4018620d 0 returned -22 [ 306.372259][ T7952] binder: 7951:7952 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 306.377316][ T7952] binder: 7951:7952 got transaction to invalid handle, 1 [ 306.384274][ T7952] binder: 7952:7951 cannot find target node [ 306.385936][ T7952] binder: 7951:7952 transaction async to 0:0 failed 187/29201/-22, size 120-24 line 3054 [ 306.389303][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.860760][ T7967] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 306.930470][ T7967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.542113][ T7967] device veth5 entered promiscuous mode [ 307.846843][ T7984] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 307.876389][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.878700][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 307.898205][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.071015][ T7995] binder: BINDER_SET_CONTEXT_MGR already set [ 308.076495][ T7995] binder: 7994:7995 ioctl 4018620d 20000040 returned -16 [ 308.084740][ T7995] binder: 7994:7995 got transaction to invalid handle, 1 [ 308.086693][ T7995] binder: 7995:7994 cannot find target node [ 308.088243][ T7995] binder: 7994:7995 transaction async to 0:0 failed 189/29201/-22, size 120-24 line 3054 [ 308.189284][ T2522] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.302602][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 309.515428][ T4304] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 310.210705][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'. [ 310.250202][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.252060][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.982027][ T8041] dlm: no locking on control device [ 311.876201][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 312.008071][ T8066] binder: BINDER_SET_CONTEXT_MGR already set [ 312.020585][ T8066] binder: 8065:8066 ioctl 4018620d 20000040 returned -16 [ 312.028012][ T8066] binder: 8065:8066 got transaction to invalid handle, 1 [ 312.036429][ T8066] binder: 8066:8065 cannot find target node [ 312.042269][ T8066] binder: 8065:8066 transaction async to 0:0 failed 191/29201/-22, size 120-24 line 3054 [ 312.053108][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.175384][ T8070] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 312.196517][ T8070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.280642][ T8070] device veth13 entered promiscuous mode [ 312.296239][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 314.637162][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1173'. [ 316.126111][ T8119] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 316.247507][ T8119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.334661][ T8119] device veth7 entered promiscuous mode [ 316.389441][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'. [ 317.810876][ T8140] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 317.951465][ T8140] bond5 (unregistering): Released all slaves [ 318.085405][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1185'. [ 319.248756][ T8158] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 319.326100][ T8158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.626867][ T8158] device veth9 entered promiscuous mode [ 319.713457][ T8173] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1192'. [ 319.790216][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 320.318676][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1197'. [ 320.730808][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1200'. [ 322.073302][ T8211] binder: 8210:8211 tried to acquire reference to desc 0, got 1 instead [ 322.101266][ T4423] binder: undelivered TRANSACTION_COMPLETE [ 322.157076][ T4423] binder: undelivered transaction 196, process died. [ 322.232405][ T8213] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 322.245492][ T8213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.345363][ T8213] device veth5 entered promiscuous mode [ 322.365388][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'. [ 322.924540][ T8230] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1208'. [ 323.930873][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 323.954322][ T8232] input: syz1 as /devices/virtual/input/input2 [ 324.009830][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1213'. [ 324.320767][ T8247] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 324.356685][ T8247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.487464][ T8247] device veth7 entered promiscuous mode [ 324.516372][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 325.473406][ T8267] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1223'. [ 325.922126][ T8280] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 325.965363][ T8280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.247461][ T8280] device veth11 entered promiscuous mode [ 326.351015][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 326.382827][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 328.589637][ T8327] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1242'. [ 328.828317][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 328.947720][ T8334] device veth15 entered promiscuous mode [ 328.954684][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 330.693241][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 330.901547][ T8363] device veth11 entered promiscuous mode [ 330.993706][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'. [ 331.001253][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1256'. [ 331.211171][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1257'. [ 333.199120][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 334.199155][ T8411] device veth13 entered promiscuous mode [ 334.201213][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1268'. [ 337.375318][ T8460] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 337.601447][ T8462] bond6 (unregistering): Released all slaves [ 338.431258][ T8476] 8021q: VLANs not supported on ip6gre0 [ 338.614658][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.633058][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.814186][ T8485] binder: 8484:8485 got transaction to invalid handle, 1 [ 338.824384][ T8485] binder: 8485:8484 cannot find target node [ 338.835526][ T8485] binder: 8484:8485 transaction async to 0:0 failed 200/29201/-22, size 120-24 line 3054 [ 338.851977][ T2522] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.888949][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.913592][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.418607][ T8493] Bluetooth: MGMT ver 1.22 [ 339.420356][ T8493] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 340.320239][ T4304] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 341.596183][ T8516] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 341.731549][ T8519] bond8 (unregistering): Released all slaves [ 342.481979][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.518930][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.823001][ T8530] 8021q: VLANs not supported on ip6gre0 [ 342.854502][ T8533] binder: 8531:8533 got transaction to invalid handle, 1 [ 342.856605][ T8533] binder: 8533:8531 cannot find target node [ 342.858224][ T8533] binder: 8531:8533 transaction async to 0:0 failed 204/29201/-22, size 120-24 line 3054 [ 342.869138][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.174672][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 343.289085][ T8547] device veth9 entered promiscuous mode [ 343.332393][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 345.167681][ T8567] binder: tried to use weak ref as strong ref [ 345.176841][ T8567] binder: 8566:8567 Acquire 1 refcount change on invalid ref 0 ret -22 [ 345.199708][ T8567] binder: 8566:8567 got transaction to invalid handle, 1 [ 345.201994][ T8567] binder: 8567:8566 cannot find target node [ 345.203656][ T8567] binder: 8566:8567 transaction async to 0:0 failed 207/29201/-22, size 120-24 line 3054 [ 345.288568][ T6676] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.598660][ T4304] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 346.889987][ T8589] device veth9 entered promiscuous mode [ 348.688607][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 350.302872][ T8629] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 353.169739][ T8655] device veth11 entered promiscuous mode [ 353.348887][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1336'. [ 355.321815][ T4304] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 355.689801][ T8682] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 358.922928][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 361.903855][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 361.978116][ T8750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1364'. [ 365.607854][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 365.728022][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.735900][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.007311][ T4304] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 371.689084][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.692178][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.411339][ T4304] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 380.839645][ T8944] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1422'. [ 381.503419][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 381.611007][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 381.857159][ T4304] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 383.763395][ T8987] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1437'. [ 384.647728][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 384.665188][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 384.781515][ T4304] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 386.831434][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 386.836554][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 387.978598][ T4304] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 388.012901][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.015442][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.399154][ T9069] Illegal XDP return value 4294967294 on prog (id 37) dev N/A, expect packet loss! [ 390.762396][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 390.767401][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 392.890783][ T4304] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 393.044937][ T9100] bridge0: port 3(syz_tun) entered blocking state [ 393.047652][ T9100] bridge0: port 3(syz_tun) entered disabled state [ 393.079110][ T9100] device syz_tun entered promiscuous mode [ 393.081386][ T9100] bridge0: port 3(syz_tun) entered blocking state [ 393.083249][ T9100] bridge0: port 3(syz_tun) entered forwarding state [ 393.087347][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1469'. [ 393.090279][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1469'. [ 395.673220][ T4304] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 396.693299][ T9143] device macsec0 entered promiscuous mode [ 402.224015][ T9193] Scaler: ================= START STATUS ================= [ 402.226210][ T9193] Scaler: ================== END STATUS ================== [ 402.334861][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1497'. [ 402.422305][ T9201] device veth11 entered promiscuous mode [ 402.465917][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1497'. [ 406.140330][ T27] audit: type=1326 audit(406.120:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 406.146988][ T27] audit: type=1326 audit(406.120:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 407.424961][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 407.563990][ T9251] device veth9 entered promiscuous mode [ 409.667060][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 409.670889][ T9271] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 409.673435][ T9271] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 414.770832][ T27] audit: type=1326 audit(414.560:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 414.795348][ T27] audit: type=1326 audit(414.560:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 416.032809][ T9338] ALSA: mixer_oss: invalid index 40000 [ 416.224666][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.374473][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.948956][ T9417] block device autoloading is deprecated and will be removed. [ 425.815630][ T9443] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 425.893693][ T9444] bond6 (unregistering): Released all slaves [ 425.907629][ T9448] Scaler: ================= START STATUS ================= [ 425.919612][ T9448] Scaler: ================== END STATUS ================== [ 427.075515][ T9459] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 428.016079][ T9459] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 430.451207][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.466023][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.647459][ T9507] netlink: 'syz.0.1584': attribute type 1 has an invalid length. [ 431.776611][ T9507] bond8 (unregistering): Released all slaves [ 433.199460][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.201954][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.949992][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.952711][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.269369][ T9613] Scaler: ================= START STATUS ================= [ 442.285236][ T9613] Scaler: ================== END STATUS ================== [ 448.014957][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.049913][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.079425][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1627'. [ 459.105695][ T9796] device dummy0 entered promiscuous mode [ 478.232355][T10004] binder: 10003:10004 ioctl c0306201 0 returned -14 [ 481.256002][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1722'. [ 482.683750][T10048] binder: 10047:10048 ioctl c0306201 0 returned -14 [ 485.056241][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1738'. [ 489.068605][ T27] audit: type=1326 audit(489.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 489.076969][ T27] audit: type=1326 audit(489.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1743" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975a9a8 code=0x7ffc0000 [ 489.956860][T10117] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 489.994760][T10117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.060547][T10117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.062697][T10117] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 490.066587][T10117] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 490.199081][T10126] device veth17 entered promiscuous mode [ 490.202480][T10126] bond8: (slave veth17): Enslaving as an active interface with an up link [ 490.218759][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1750'. [ 490.221539][T10130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.362370][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1752'. [ 491.057472][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 493.810644][ T27] audit: type=1326 audit(493.790:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 493.824004][ T27] audit: type=1326 audit(493.790:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5a9a8 code=0x7ffc0000 [ 493.875386][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1766'. [ 494.134932][T10179] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 494.152846][T10179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.184302][T10179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.186602][T10179] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address [ 494.191170][T10179] bond4: (slave vxcan7): Error -95 calling set_mac_address [ 494.285693][T10181] device veth9 entered promiscuous mode [ 494.315341][T10181] bond4: (slave veth9): Enslaving as an active interface with an up link [ 494.341317][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 494.369330][T10179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.570756][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.572610][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.210415][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 498.433041][ T27] audit: type=1326 audit(498.410:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc55a9a8 code=0x7ffc0000 [ 498.441427][ T27] audit: type=1326 audit(498.410:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc55a9a8 code=0x7ffc0000 [ 498.702116][T10229] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 498.824965][T10229] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.827609][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 498.841972][T10233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.844209][T10233] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 498.848353][T10233] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 499.528871][T10236] device veth19 entered promiscuous mode [ 499.546112][T10236] bond9: (slave veth19): Enslaving as an active interface with an up link [ 499.562463][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 501.357777][T10264] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 501.365265][T10264] CIFS: Unable to determine destination address [ 502.025671][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 502.054202][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 502.723350][T10291] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 503.788566][ T27] audit: type=1326 audit(503.690:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10274 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc55a9a8 code=0x7ffc0000 [ 503.806394][ T27] audit: type=1326 audit(503.690:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10274 comm="syz.2.1795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc55a9a8 code=0x7ffc0000 [ 503.953541][T10305] device veth13 entered promiscuous mode [ 504.040328][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1799'. [ 504.120677][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 506.695591][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 506.719692][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 507.959554][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 508.492333][ T27] audit: type=1326 audit(508.470:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 508.498168][ T27] audit: type=1326 audit(508.470:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a9a8 code=0x7ffc0000 [ 508.560065][T10347] device veth11 entered promiscuous mode [ 509.918745][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1813'. [ 509.951556][T10367] ======================================================= [ 509.951556][T10367] WARNING: The mand mount option has been deprecated and [ 509.951556][T10367] and is ignored by this kernel. Remove the mand [ 509.951556][T10367] option from the mount to silence this warning. [ 509.951556][T10367] ======================================================= [ 509.976640][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1817'. [ 511.448577][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 511.548569][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 513.346060][T10410] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 513.806392][ T27] audit: type=1326 audit(513.780:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235a9a8 code=0x7ffc0000 [ 513.825352][ T27] audit: type=1326 audit(513.780:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb235a9a8 code=0x7ffc0000 [ 513.962455][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 514.028510][T10420] device veth11 entered promiscuous mode [ 514.075293][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 514.114907][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'. [ 518.441490][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 518.549053][T10467] device veth13 entered promiscuous mode [ 518.561294][T10473] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 518.579614][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1850'. [ 519.487682][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1854'. [ 521.067426][T10521] device veth15 entered promiscuous mode [ 521.131660][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1865'. [ 522.634862][T10546] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 524.034160][T10564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1874'. [ 525.080221][T10581] device veth15 entered promiscuous mode [ 525.128236][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'. [ 526.711639][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 529.217342][T10643] device veth11 entered promiscuous mode [ 529.263453][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 531.082018][T10674] binder: BINDER_SET_CONTEXT_MGR already set [ 531.083662][T10674] binder: 10661:10674 ioctl 4018620d 20000040 returned -16 [ 531.203624][T10676] binder: 10661:10676 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 531.207296][T10676] binder: 10676 RLIMIT_NICE not set [ 531.714750][T10673] device dummy0 entered promiscuous mode [ 535.357276][T10725] input: syz0 as /devices/virtual/input/input3 [ 538.511570][T10763] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1938'. [ 540.665309][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 544.883156][T10846] ALSA: mixer_oss: invalid index 40000 [ 547.385843][T10885] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 548.177377][T10882] ALSA: mixer_oss: invalid index 40000 [ 550.670133][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.688788][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.681650][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.683705][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.887625][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 559.891568][T11051] ------------[ cut here ]------------ [ 559.893414][T11051] WARNING: CPU: 0 PID: 11051 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 559.896016][T11051] Modules linked in: [ 559.897090][T11051] CPU: 0 PID: 11051 Comm: syz.0.2028 Not tainted 6.1.142-syzkaller #0 [ 559.899478][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.902415][T11051] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 559.904778][T11051] pc : hugetlb_split+0x234/0x29c [ 559.906146][T11051] lr : hugetlb_split+0x234/0x29c [ 559.907612][T11051] sp : ffff800020927830 [ 559.908786][T11051] x29: ffff800020927830 x28: dfff800000000000 x27: ffff700004124f24 [ 559.911060][T11051] x26: ffff0000d2ce8e58 x25: ffff800015080000 x24: 1ffff00002a100b0 [ 559.913370][T11051] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 559.915675][T11051] x20: 0000000020000000 x19: ffff0000d2ce8e58 x18: ffff800011a8bce0 [ 559.917979][T11051] x17: ffff8000087f15e8 x16: ffff8000082d0f50 x15: ffff8000088a64dc [ 559.920256][T11051] x14: 00000000ffff8000 x13: 00000000e80bfb03 x12: 0000000000080000 [ 559.922530][T11051] x11: 0000000000003378 x10: ffff800022576000 x9 : ffff800008887be4 [ 559.924876][T11051] x8 : 0000000000003379 x7 : 0000000000000000 x6 : 000000000000003f [ 559.927098][T11051] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008887a64 [ 559.929417][T11051] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 559.931674][T11051] Call trace: [ 559.932560][T11051] hugetlb_split+0x234/0x29c [ 559.933928][T11051] __vma_adjust+0x438/0x16b0 [ 559.935261][T11051] __split_vma+0x324/0x448 [ 559.936569][T11051] split_vma+0xa0/0xf8 [ 559.937736][T11051] mbind_range+0x490/0x6ec [ 559.938969][T11051] __arm64_sys_mbind+0x5f8/0x7e8 [ 559.940366][T11051] invoke_syscall+0x98/0x2bc [ 559.941671][T11051] el0_svc_common+0x138/0x258 [ 559.942997][T11051] do_el0_svc+0x58/0x13c [ 559.944172][T11051] el0_svc+0x58/0x138 [ 559.945253][T11051] el0t_64_sync_handler+0x84/0xf0 [ 559.946612][T11051] el0t_64_sync+0x18c/0x190 [ 559.947891][T11051] irq event stamp: 294 [ 559.948964][T11051] hardirqs last enabled at (293): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 559.951903][T11051] hardirqs last disabled at (294): [] el1_dbg+0x24/0x80 [ 559.954269][T11051] softirqs last enabled at (220): [] local_bh_enable+0x10/0x34 [ 559.957024][T11051] softirqs last disabled at (218): [] local_bh_disable+0x10/0x34 [ 559.959568][T11051] ---[ end trace 0000000000000000 ]--- [ 560.560195][T11051] ------------[ cut here ]------------ [ 560.561849][T11051] WARNING: CPU: 1 PID: 11051 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 560.564510][T11051] Modules linked in: [ 560.565611][T11051] CPU: 1 PID: 11051 Comm: syz.0.2028 Tainted: G W 6.1.142-syzkaller #0 [ 560.568290][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.571106][T11051] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 560.573286][T11051] pc : hugetlb_split+0x234/0x29c [ 560.574617][T11051] lr : hugetlb_split+0x234/0x29c [ 560.576030][T11051] sp : ffff800020927830 [ 560.577131][T11051] x29: ffff800020927830 x28: dfff800000000000 x27: ffff700004124f24 [ 560.579384][T11051] x26: ffff0000d2ce8e58 x25: ffff800015080000 x24: 1ffff00002a100b0 [ 560.581630][T11051] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 560.583936][T11051] x20: 0000000020600000 x19: ffff0000d2ce8e58 x18: ffff800011a8bce0 [ 560.586227][T11051] x17: ffff8000087f15e8 x16: ffff8000082d0f50 x15: ffff8000088a64dc [ 560.588410][T11051] x14: 00000000ffff8000 x13: 00000000e80bfb03 x12: 0000000000080000 [ 560.590860][T11051] x11: 000000000001b4e7 x10: ffff800022576000 x9 : ffff800008887be4 [ 560.593264][T11051] x8 : 000000000001b4e8 x7 : 0000000000000000 x6 : 000000000000003f [ 560.595589][T11051] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008887a64 [ 560.597860][T11051] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 560.600068][T11051] Call trace: [ 560.600985][T11051] hugetlb_split+0x234/0x29c [ 560.602233][T11051] __vma_adjust+0x444/0x16b0 [ 560.603503][T11051] __split_vma+0x324/0x448 [ 560.604796][T11051] split_vma+0xa0/0xf8 [ 560.606017][T11051] mbind_range+0x490/0x6ec [ 560.607314][T11051] __arm64_sys_mbind+0x5f8/0x7e8 [ 560.608707][T11051] invoke_syscall+0x98/0x2bc [ 560.609975][T11051] el0_svc_common+0x138/0x258 [ 560.611394][T11051] do_el0_svc+0x58/0x13c [ 560.612668][T11051] el0_svc+0x58/0x138 [ 560.613831][T11051] el0t_64_sync_handler+0x84/0xf0 [ 560.615217][T11051] el0t_64_sync+0x18c/0x190 [ 560.616537][T11051] irq event stamp: 622 [ 560.617621][T11051] hardirqs last enabled at (621): [] exit_to_kernel_mode+0xcc/0xfc [ 560.620313][T11051] hardirqs last disabled at (622): [] el1_dbg+0x24/0x80 [ 560.622737][T11051] softirqs last enabled at (614): [] handle_softirqs+0xaf8/0xc6c [ 560.625306][T11051] softirqs last disabled at (297): [] __do_softirq+0x14/0x20 [ 560.627882][T11051] ---[ end trace 0000000000000000 ]--- [ 560.629473][ C1] vkms_vblank_simulate: vblank timer overrun