last executing test programs: 5m25.564303553s ago: executing program 3 (id=3298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) io_setup(0xfff, &(0x7f0000000140)=0x0) io_getevents(r6, 0x3a, 0x80000000000012c, &(0x7f0000000400), &(0x7f0000000200)={0x0, 0x3938700}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m24.202046987s ago: executing program 3 (id=3301): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000240)) munlockall() add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc", 0x7f, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502", @ANYRESDEC], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 5m20.452784663s ago: executing program 3 (id=3305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="4b7252fe9939375acf4f99c7a75d", 0xe) 5m13.046411791s ago: executing program 3 (id=3315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 5m11.821915709s ago: executing program 3 (id=3317): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000002f40)="34343130302c34383030302c38383230302c393630303010", 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 5m11.565730451s ago: executing program 3 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) preadv(r3, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001700)=""/49, 0x31}], 0x2, 0x4, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x7f}}, 0x0) 4m55.012245598s ago: executing program 32 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) preadv(r3, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001700)=""/49, 0x31}], 0x2, 0x4, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x7f}}, 0x0) 4m52.300623686s ago: executing program 0 (id=3350): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 4m51.091457163s ago: executing program 0 (id=3352): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) 4m48.323836003s ago: executing program 0 (id=3355): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 4m47.007533124s ago: executing program 0 (id=3358): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ptrace$poke(0x4, 0x0, &(0x7f00000010c0), 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 4m45.233931336s ago: executing program 0 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m43.699355068s ago: executing program 0 (id=3364): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) unshare(0x42000000) 4m28.679899748s ago: executing program 33 (id=3364): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) unshare(0x42000000) 2m37.822424865s ago: executing program 2 (id=3561): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x5, 0xb4a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ptrace$poke(0x4, 0x0, &(0x7f00000010c0), 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 2m36.609619661s ago: executing program 2 (id=3563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2m34.552084957s ago: executing program 2 (id=3565): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x24, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000180), 0x0, 0x2002, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d400d000000e006dcdf73951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de692954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x1, 0xa, 0x4, 0x1, 0x5d7a202e63400190}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x0, 0x1, 0x8, 0xa}, {0x3, 0x1, 0x4, 0x5}, {0x0, 0x3, 0x7, 0x5}, {0x3, 0x5, 0xd, 0x9}], 0x10, 0x2e3aced3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0x25, 0x0, @void}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 2m28.68329494s ago: executing program 2 (id=3576): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x3400c8d4) close(0x4) 2m27.251559077s ago: executing program 2 (id=3579): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) creat(&(0x7f0000000580)='./bus\x00', 0x80) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./cgroup\x00') removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi0\x00', 0x88543, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000280)={0x4, 0x3a, 0x6, 0x8, 0x9, 0x6, 0x7f46908c}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) statfs(&(0x7f0000000480)='./file0\x00', 0x0) 2m26.415482376s ago: executing program 2 (id=3580): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000100, 0x0, 0x400000000001}]}) 2m10.655663791s ago: executing program 34 (id=3580): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000100, 0x0, 0x400000000001}]}) 37.092112811s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 29.462157096s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 21.274115478s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 14.420449438s ago: executing program 1 (id=3768): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 14.046285965s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 11.101985792s ago: executing program 1 (id=3771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 11.101519163s ago: executing program 4 (id=3772): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r2, 0x0, 0x10040800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x2000c800) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 10.619421015s ago: executing program 4 (id=3774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r5}) 10.255981842s ago: executing program 5 (id=3775): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x100000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) dup2(r2, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1\n', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/reg0\x00', 0x1ff) 9.522988246s ago: executing program 4 (id=3776): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000003218ce2500001700293eebec9828030b3f897af9404e1632c0620e04ceee319ef007ff30f5c165fb9839a0a34629b65925fe556182f6533a3c5b88c8784c7c952bb37959aa1f55d79bec5f19b67214c36c01f6b5083d70a154438ad43241de228f07533e23bcc6cafc21c94c50aaedefc792c17ead9b1d193f99b1c2212fabd3bf21d28411f60d18a13ba5cb0436c4dbf7d81e5edcae3bfc713a438b69e3ea6fcb78e37cbfd6cb140aa00dac322311c9bd1a4cd14663c324c142a3ad3f6a16ec6db19a3c7c3ccea280", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000060010000000100006002030000125f627744144f70"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000001640)=""/4096, &(0x7f0000002640)=0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) timer_create(0x6, &(0x7f0000001580)={0x0, 0x38, 0x2, @thr={&(0x7f00000000c0)="18e8db3aeb79efabd69d290ddb5924f5c92775c31ff52116f09331", &(0x7f0000000580)="475402c1cefe3d94b0a5abc04760d6aa9ea03209d08d24f0d90225482a6c96b3ae72d99e6dcf7143e92c86eaf71aa38d70b4dd324dd6d52879f3fb51ca00a988e3ba5ed99bdf1180d8f547f37be312b7b9e4db2fd56a404fac4d6d8ffabb2133f301456731d9fcd7d17d7ec6387d198f331714cf70db597321ff81d57319011cddbb15236501ef86b7d01d2cec2efa8684a6f6ede0a2ca63deff0e1199e17a1d0de0fe9a7cb918a26caa2abf80e5703515e3b3947be8df1f992315a2602447d6e0155278fe2a182dc2bc28e7ae98ebe0469c0b9ea3bc8200ccc192e15ba6addddd690de0c83afc7324a48a6809d7aee072e708f49e35f2b4b46f328da9da495dec467a7d002dbe4d88db51f89df92d9ef0b22e591fa49b60a390acb5d30d0a7efa9762185d85a14b4ec5cd73b08b843734673a424ea3a986928fd1a20b9d86c98d83a07b64b019fc7ae5480cbcea9ce0c3dcb504243c6e8fa7e6b6f3a94d05647be540844de6c9624cf420119ed57907382a4d7a6a407aea140df4d4e8e3943cdfde6569c6efc08db95352daaa1e05283ec790e1d8299e639d11498491f418ee39a679794c1608f8188619033d7283ecbafa1810343b7bb17515ddaedf460b380e644afbc1b6b48d53c086229c39645cf80187eb7ecc898bda88ecd932b43bb75748bc05de5a6f9d7aeed13b23a7941ee40ca76a6d3083bfa3c2d91943af087c9f7c8dcdfafbc450823a029334aa907155629b9177b6819aff64d99d298e469de7ecd4c6fa3aba8e8e1a25262be680c311e64fd087924bc537c15b5daab56cff534c4f167d391c9832692dfbafe7f7abbf57aa163f84a63b126a787ae9ab97e435c59d840362d11e3452a7fe547ff8a304aeee111171d6a364723d4b7e3588277a11c8ba4adb8463169bf7ebee8b7105f0bc10b33f9c183981b4a51ddb53a7e9e29da02cc0eaaa7758e404c467a3abd2d215d54ee38d66b446851614be5fa576eeff624aea31124d2ef3db162bf9d63f502234bbd71b2ad58dd596fa3c9d5541170e24eded6e53405cf8b4d9072d3bbf5e4d359ca7a8bd4e9c88006b1c9dc4a2ffe2a6242485d2ef69cd825afeb4e41e5f521108b6da1b5e7398dc62b77b817087a8db9abc90e44356274c8835156e8c39f38a77837d3b864f20fb80ccd8c35e2c1ec7180b83067069c12964345896dee75c40ee4b70eed00864f7d6d6f945e3f13ad4ab43fed12e1664631673164a8896631fbd299ec274afe1077a0b5ffef23b67c64c96b3bd256832e5edd6026cbc8eb554165ef36216f3e83d03897555ff88913875645898921ec9c1620777346ac598a2c5682e79515d0fd8ad126d0826b7139a2234adefb3a96697b4ea3767dda13b7acc8b641b265b23c8c3f9c035b51db58cfaab97a9e429dfb0401842c59409a8effd178bd1f052a57c46cd201c7565d7c782b3afa1d5d5b68b3edda0897e9d18f3da5f9f364804477c61a10aecf383a94ed3bf6a676f1ffaba799c1cd77a710f945966461bbfcc42017f3c71cdc5d4f6f868d1f31bb575215b1f2860f6a86ad38934488e42a93343da6d133dd4355a74293be910c1710b0af72b81676a9a468ccb4c61c498d093f0028ca4b9b332746b2a1af8e32d508ed50733608c220fd88b384ddee279f4e6c38f8fa24302c009decbd2507a8c948020e4edea8020145633a778f90a94abfd9743aa0d9f5b6a30631da5273a4daea3040d2c2d0a100dd4a524ab940a505425e6b115e9725fe1ef69f6c4a70fc832c2530fb74f6bc525712e69cb96c3d02a99cefd8b93bf2ba832aad4afe7c1022ad4566ae4ea79f2ef8b3b25aa101964e75beccb4a9d8217777eff62dd0c71ed653be05ea75a774a3d16b76525eeea3ff444b5f4f716f25def8896fd81c8b98778b7811c08ac78302b130992a0118f41b83d758d78bced03f58a10f8aeba1b7dac77b59ed922f85c33886c7ddf15056e3509e86dafa602d7f243212787dc4608eef8e07838a21245ed25fee2ad98336a7c718a56d40b24ea4f2e9fa343d1e452e3b60f28c4e83821ea1c49cc17423e4b95f977f7bae62f64124e2bdeea76cb39ab1060adb7c15827f2cd4f214644eaaffd90ab7f198c2bfc4c759bf1bb5f522fb9860ad38718562fee96438054b80a26bb1aff56982da56a4eb7aaa3cd242e56eff35a300503c829f141d46f3dde61126039ad037c51f39fa902255e5a57ffcd0d4df2a1b5810560b8b3f8cbed422898488904a357688f2d68f2a2b110bc98ce69d4f4f50c39dc8667977893140c9aa9d91d33c7e928c8ee9602da8c4650b264176fc9b46a19466ca00e7deb574df16382f4f3173fe40eecdfddd63f3d497d758d2fc36109cb7e7c4901d77b8dcef805d431f95fb5a96fd71ae31d67b4a0b3e9e09eccaa7e3502cd5423b8d4ecd2148e8626907d3c02bc6e7c5f4585b62703b0569ff0a2782151caab9f1a7740af0e9ccd9c12ed5170748a9b5df8691a2a713a3dd298dee0a6ae3bd5d7ade9d09dd846167c169a76cb1b1639cc6216d1cf449ea6dbfeec41194db9c0815f229dd7b8da538637043ea45f325a555e7a97772c0fb66547da31866200744f27d1f265a854f2f3fe078b27e1e75022aabd73fc0a5a5a9b98bcf3c32db59f965c6d47d48cc26738d28089cc6585b9116c277bd50fc47e2f8717b2621ab879d128859c5fb49abf033a1352ed31beea9f705bf8c93b579f62529b72b72e4b029643fb2e278972b94223bb78fc296d05e0ff5844475570bc564d020c2ed99beb2376be7943e26b26562b45666c38f857651b668e0750c1053bc56a9f345ef0f6e8dc259abc9539b93f0da0497bf9430dcdc6a25486b8fd94ad144a8f63b662b09a40a5024e95eeacc8286cea0590fe6a747bf1bbb5f0bbfc25a5da82afec0532839979590f1ad9971dd2b9d2707e6008eb604a99681163eab333eec597cb5100a977a5be812629a062e561665c83ae761041e230459561dafdc6861fe257cf7d94a3ff757d22c6755af230e9982d7b6d493a2991762a7bb5c168d78352f656c78d81a906dce870fd2b330369a502c4ba9f2f82dc9c2dc1e7b1a5ef95574dea71e36b5d9d206183e0a306aa0302e4963ea54753b7c6f5f346ae3830f4558290047d741365def12e8ef01d372ad51c709ec5afbc0e2ca8fadaf00a955fadd8d806d55172b4806ad2b5f853054fae203dcecd271a6e173123687da0176cc7f84345e44854704d8b8d2e8e0ccaf3ff3bd046cd01f446b537758d7872a7a1ecd2e521224967c4cf4476e28da3e1dd3f1d696478084fa05dc0717988c04bdb243b29002263a0f9a704defffca0855e3a2167aef81391d030bc64fc3841c5071498588624f91180098babdef0973c513af8919ce0aa74cfb91cc9a17446334a3752edfdcc6cd7014a507d02ecc5a77be28450ac2608182132eb9fd54406648acba67713e27022e885f01fb5e6b93017763e9e0c1ca0df5aa87abc1f7960f96d30b8842d9b128f2844885c2b182fc1fc5adb3ba270a5efe974a26f5d1508d099458d9641c64a4c1cc2c667fd14035c83906bc2787631493befd709350894c5bc7dfa23d311c95541f889eb658b3818139634fe24443c8c9bc5bd48e37c9018f8cd9a27f3bc8c7b3829205ecbb8bed913d9e52a4b3c88d86e149049b1a7f842163b301451419da20c369679b0862909c7d56748f6c6c4b726b1a5998b144730e9149dd101ef9e15df661e682d25a42bcb971202cd0215b4c770c488d183cb1aeb3e402b1435590384ea93b3e6742d19a3c8975ad95d16053f12ad3b3136db8b3e473485fa23ccc69a485c8c01baa56cc10e7a1c8754c5a1677de6ca1c7b6dd9126e46bc32af1b155d7d6eef1611a949919aac25cd67c4a40552c03e1e94f0b214f3b0a2c9231aabccd1e4a09b901971769c094835704927e84984ad19a30399b4d17adda5e4d4ce699d72b8ad3bb297c7a11439c81b65811b36ecd0999ebb2d6e9626397b9857a16b8cf34c3901b4baed153d38eca3799aa7e023fb4ed64e1d86ebb2ebff9caf3c58d8e7464204ac47f03779fee1795b0cba3d59fef6519d95d0bf19ac2d3f1a3404b23fd32798df3a2f25e5e39f03e3e5cb16dbabe1a0cc46189d7d34241669da840be6a7157465a85a09a7a5a41c85f960445b0c3ca7c0093ddff1977c3dfd10ad43f1ad37d1bb39c660afe27e0db49df757ad58c44280ad8059660041816645aaf328c4bbb4b8be140bffe29cdc24ebcf794610645d44f480e388a9f13a3ec5ee56cfc32ae43b6b9598435dc9d13b3bdeb870bae4a1f4a43d1c131d2aa69331acd8693994d3d31b10f26f87f946c42f77e35a92310d3420c87f2541d4dbaa8dc5a39317e9c960b88749d1c8a9218841160dfc506241d14e007bac7eff37f0965c6d4821105232d1adf2ae2b6230e5eb2b30e21c4ed6ca69c4ea5b4c10abcf9d054428bf8a2f6ab02b05bd3df169cbb6f9c2fb2250b7b1d707c94cd99f2b7f1c0eeb75a764a07ae020fec7c871aceed8ee1455984f0db67be48a1df9e641bf9130f6bd0c9365b087dfa527e75e40f424c252dd7cc27f02a44e6332b1d11d23940316c0da7d696d4b44935c340356352db66f7bf94887cfa4fd54371418f6e0a8d5632c2d859277e8bc183e6207083f7dd79c9100f9066f7ab3c91e3d809598d6833a4472748a0eb5b2b7399b72f047faaf92a385b501ace68a56afa137155b21ace5d371a3db56c6bb74a4f3a89880afdf86e2b1abd97c74ab38eb9bebc3cc5413fbad98e17bb247ea0ac3e2ef485fd8dfe11b61c414ebe6a328cf541037ff4e899ee98f57016e910ad9232367752cebd3f115c25d455cd847523e39d6490b3642ed0f342304729fed4501397c19c626fc31e7c37eb2bd01ccd3e9c76421e947b1d65a989dfc54a7b35d88ff73424e7acf89f4b45d31fb8147f85254267975f9d701260415a1b931c93346d2b5b502eeabdfc2a27b4aaf86e9c1c8804a6c31b9399c17906ead3029ada5f9db309def40ec317069d4459bb5c7adb0ba9f0418ecc1c94ac9d2b43f35da62ac9c4b35328f2d309308b4f5378f0f19b87a1cd836f2eed7575f3a6dbfc0f189384b7e5b002b9af3f637cee8cfd7aa441e962de65d6f06af490d95e745110def95b46d27ffab0c83b5923ad620ef64fe27ee88837a0bb1481aaf35972ffbd912afc89ad4667732e3301b9c8c2136112f1af7ff1102f18f6608fe8bbdfee321191be75a5e8a22443f3e7175f552731a99c301706daf22934552f715b0846bf37afe4cf84a0c147893f2a86f676519910eaa98ab42df53bef7487fe4c7e22786053543bef22f6fbcd22376bcc679c1fa150ce6fe34d210da20872642f52acf84b089392d394520ce8e35669e252914b3cb9ee01df02f1f37aa3d03ce85cd7a5aef950ffb9429da3e9e450c48d4588e980c147eba6eca35a5ee0b107122407c236b4dbbd15206ec6269d1a0e60912bd14289e50415e03d58ec7207bc946d18bf0e8a6259e"}}, &(0x7f0000001600)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid_for_children\x00') sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x2) 8.049121945s ago: executing program 4 (id=3777): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x80010, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 7.634088714s ago: executing program 5 (id=3778): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c50)=0xf9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.28950366s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 3.976411254s ago: executing program 5 (id=3779): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 3.975296794s ago: executing program 1 (id=3780): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb08000300010000", 0x33) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x3400c8d4) close(0x4) 3.974683074s ago: executing program 4 (id=3781): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid_for_children\x00') 3.835895881s ago: executing program 4 (id=3782): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r2, 0x0, 0x10040800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x2000c800) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 3.263134768s ago: executing program 1 (id=3783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) 3.012333179s ago: executing program 5 (id=3784): open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000040008"], 0x98}, 0x1, 0x7}, 0x14) 2.250143435s ago: executing program 1 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x450082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x5, 0x8, 0x40, 0x13400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xc}, {0x1, 0xfff1}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40028c5}, 0x840) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x2000000000005, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0xa1016b00, 0x0, 0x0, 0x0, 0x0, 0x0) 1.867599643s ago: executing program 5 (id=3786): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x100000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) dup2(r2, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1\n', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/reg0\x00', 0x1ff) 324.142475ms ago: executing program 1 (id=3787): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c50)=0xf9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 206.56294ms ago: executing program 5 (id=3788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x5) 0s ago: executing program 6 (id=3611): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) kernel console output (not intermixed with test programs): speed USB device number 19 using dummy_hcd [ 1033.844966][T19377] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1033.878259][T19377] comedi comedi3: mpc624: I/O port conflict (0x1f,16) [ 1034.007333][T13198] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1034.211109][T13198] usb 3-1: not running at top speed; connect to a high speed hub [ 1034.235670][T13198] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1034.269180][T13198] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1034.304309][T13198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.327212][T13198] usb 3-1: Product: syz [ 1034.331600][T13198] usb 3-1: Manufacturer: syz [ 1034.352508][T13198] usb 3-1: SerialNumber: syz [ 1034.383550][T13198] oti6858 3-1:1.0: oti6858 converter detected [ 1034.433131][T13198] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1034.541579][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1034.569356][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1034.586931][ T9] usb 4-1: can't read configurations, error -71 [ 1034.843877][T13198] usb 3-1: USB disconnect, device number 51 [ 1034.879360][ T28] audit: type=1326 audit(1789704272.461:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19409 comm="syz.0.2755" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fd99e159 code=0x0 [ 1034.920213][T13198] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1034.978960][T13198] oti6858 3-1:1.0: device disconnected [ 1037.380027][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 1038.419270][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1038.734023][T19485] netlink: 'syz.1.2766': attribute type 28 has an invalid length. [ 1038.742495][T19485] netlink: 'syz.1.2766': attribute type 3 has an invalid length. [ 1038.750404][T19485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1040.177272][ T28] audit: type=1326 audit(1789704277.791:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19481 comm="syz.3.2765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd0d9e159 code=0x0 [ 1040.216174][T12775] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1040.459862][T12775] usb 3-1: not running at top speed; connect to a high speed hub [ 1040.478401][T12775] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1040.512264][T12775] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1040.529204][T12775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.552650][T12775] usb 3-1: Product: syz [ 1040.563278][T12775] usb 3-1: Manufacturer: syz [ 1040.612551][T12775] usb 3-1: SerialNumber: syz [ 1040.654548][T12775] oti6858 3-1:1.0: oti6858 converter detected [ 1040.746129][T12775] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1040.844327][T19517] netlink: 'syz.3.2769': attribute type 1 has an invalid length. [ 1040.852985][T19517] netlink: 'syz.3.2769': attribute type 2 has an invalid length. [ 1041.877349][T12775] usb 3-1: USB disconnect, device number 52 [ 1041.909053][T12775] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1041.950100][T12775] oti6858 3-1:1.0: device disconnected [ 1044.788791][ T28] audit: type=1326 audit(1789704282.471:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.1.2777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1048.287325][ T23] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1048.488569][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 1048.498341][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1048.517081][ T23] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1048.536764][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.579470][ T23] usb 3-1: Product: syz [ 1048.583949][ T23] usb 3-1: Manufacturer: syz [ 1048.614892][ T23] usb 3-1: SerialNumber: syz [ 1048.792894][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.803256][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.125003][ T23] oti6858 3-1:1.0: oti6858 converter detected [ 1052.326052][ T23] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1052.339656][ T23] usb 3-1: USB disconnect, device number 53 [ 1052.351349][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1052.360237][ T23] oti6858 3-1:1.0: device disconnected [ 1053.898134][T19633] input: syz0 as /devices/virtual/input/input65 [ 1054.812463][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.962981][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.098525][ T5837] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1055.776696][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.792320][ T5837] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1055.810042][ T5837] usb 3-1: can't read configurations, error -71 [ 1056.622092][T19664] fuse: Unknown parameter 'user_i00000000000000000000' [ 1057.017596][ T23] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1057.069567][T19690] netlink: 'syz.1.2797': attribute type 28 has an invalid length. [ 1057.077624][T19690] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 1057.085436][T19690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1057.252911][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 1057.335496][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1057.475355][ T23] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1057.617036][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.709213][ T23] usb 4-1: Product: syz [ 1057.755585][ T23] usb 4-1: Manufacturer: syz [ 1057.884214][ T23] usb 4-1: SerialNumber: syz [ 1057.916579][ T23] oti6858 4-1:1.0: oti6858 converter detected [ 1057.956479][ T23] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1058.554898][T13198] usb 4-1: USB disconnect, device number 21 [ 1058.885724][T13198] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1058.909367][T13198] oti6858 4-1:1.0: device disconnected [ 1059.284871][T19717] input: syz0 as /devices/virtual/input/input66 [ 1060.350664][T19672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.810684][ T5837] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1061.020920][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1061.031956][ T5837] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1061.057207][ T5837] usb 2-1: can't read configurations, error -71 [ 1063.238417][T13196] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1063.417443][T13196] usb 3-1: device descriptor read/64, error -71 [ 1063.717483][T13196] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1063.810427][T19763] fuse: Unknown parameter 'user_i00000000000000000000' [ 1063.897227][T13196] usb 3-1: device descriptor read/64, error -71 [ 1064.024569][T13196] usb usb3-port1: attempt power cycle [ 1064.935074][T13196] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1065.339057][T19760] null_blk: disk rnullb0 created [ 1065.390957][T13196] usb 3-1: device not accepting address 58, error -71 [ 1065.399555][ T5837] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1065.616028][ T5837] usb 4-1: not running at top speed; connect to a high speed hub [ 1065.628786][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1065.661041][ T5837] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1065.674008][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.692349][ T5837] usb 4-1: Product: syz [ 1065.699745][ T5837] usb 4-1: Manufacturer: syz [ 1065.704480][ T5837] usb 4-1: SerialNumber: syz [ 1065.726872][ T5837] oti6858 4-1:1.0: oti6858 converter detected [ 1065.990304][T19798] input: syz0 as /devices/virtual/input/input67 [ 1066.060032][T19800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.076559][T19800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.204366][ T5837] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1067.224080][T19775] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1067.248301][T19775] pimreg1: linktype set to 778 [ 1067.369082][ T9] usb 4-1: USB disconnect, device number 22 [ 1067.529341][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1067.643316][ T9] oti6858 4-1:1.0: device disconnected [ 1067.980223][ T5837] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1068.474135][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1068.659682][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.804733][ T5837] usb 2-1: Product: syz [ 1068.869325][ T5837] usb 2-1: Manufacturer: syz [ 1068.936497][ T5837] usb 2-1: SerialNumber: syz [ 1071.565019][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1071.580079][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1071.595438][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1071.609049][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1071.619609][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1071.638238][ T5837] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1071.699434][ T5837] usb 2-1: USB disconnect, device number 59 [ 1071.754599][T19866] fuse: Unknown parameter 'user_i00000000000000000000' [ 1072.187328][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1072.416312][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.437806][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1072.455628][ T9] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1072.476269][ T9] usb 4-1: Product: syz [ 1072.489055][ T9] usb 4-1: Manufacturer: syz [ 1072.507655][ T9] usb 4-1: SerialNumber: syz [ 1072.527016][ T9] usb 4-1: config 0 descriptor?? [ 1072.543205][ T9] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 1072.564649][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1072.591611][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 1072.619890][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1072.646032][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1072.670872][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1072.694455][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1072.732219][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1072.772278][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1072.798658][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1072.811565][ T9] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1072.838913][ T9] usb 4-1: USB disconnect, device number 23 [ 1072.890047][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1072.935780][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1072.990876][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1073.006960][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1073.025959][ T9] keyspan 4-1:0.0: device disconnected [ 1073.547272][T12775] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1073.749336][T12775] usb 2-1: not running at top speed; connect to a high speed hub [ 1073.762623][T12775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1073.779986][T12775] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1073.794895][T12775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.803310][T12775] usb 2-1: Product: syz [ 1073.808491][T12775] usb 2-1: Manufacturer: syz [ 1073.813194][T12775] usb 2-1: SerialNumber: syz [ 1073.937986][T12775] oti6858 2-1:1.0: oti6858 converter detected [ 1073.954392][T12775] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 1074.124796][T19954] fuse: Unknown parameter 'user_id00000000000000000000' [ 1074.303599][T19957] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1074.309560][T19957] pimreg1: linktype set to 778 [ 1075.139069][ T23] usb 2-1: USB disconnect, device number 60 [ 1075.171189][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1075.189324][ T23] oti6858 2-1:1.0: device disconnected [ 1076.922199][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1077.246373][T20004] fuse: Unknown parameter 'user_id00000000000000000000' [ 1078.742654][T20025] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2841'. [ 1078.808822][T20025] input: syz0 as /devices/virtual/input/input68 [ 1080.061240][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1080.271555][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1081.646469][ T9] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 1081.654951][ T9] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1081.658005][T12775] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1081.665190][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1081.681908][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1081.693364][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1081.704142][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1081.727218][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1081.779228][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1082.009400][ T9] usb 3-1: string descriptor 0 read error: -71 [ 1082.015794][ T9] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1082.808548][T12775] usb 4-1: not running at top speed; connect to a high speed hub [ 1082.838496][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.850043][T12775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1082.867859][ T9] usb 3-1: can't set config #1, error -71 [ 1082.897638][T12775] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1082.899137][ T9] usb 3-1: USB disconnect, device number 60 [ 1082.936080][T12775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.936257][T20065] fuse: Unknown parameter 'user_id00000000000000000000' [ 1082.954418][T12775] usb 4-1: Product: syz [ 1082.964553][T12775] usb 4-1: Manufacturer: syz [ 1082.985887][T12775] usb 4-1: SerialNumber: syz [ 1083.035223][T12775] oti6858 4-1:1.0: oti6858 converter detected [ 1083.097914][T12775] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1083.167858][T12775] usb 4-1: USB disconnect, device number 24 [ 1083.188098][T12775] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1083.196905][T12775] oti6858 4-1:1.0: device disconnected [ 1084.688046][T20099] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 1084.696230][T20099] netlink: 'syz.3.2851': attribute type 2 has an invalid length. [ 1087.587445][ T8] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1088.196317][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1088.233280][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1088.266292][ T8] usb 2-1: can't read configurations, error -71 [ 1089.194835][T20104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1089.279358][T20142] fuse: Bad value for 'fd' [ 1089.624802][T20149] autofs4:pid:20149:autofs_fill_super: called with bogus options [ 1090.446071][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.458067][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.478880][T20154] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1090.484662][T20154] pimreg1: linktype set to 778 [ 1093.406108][T20190] fuse: Bad value for 'fd' [ 1095.007390][T12775] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1095.222617][T12775] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1095.245709][T12775] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1095.256347][T12775] usb 4-1: can't read configurations, error -71 [ 1096.328059][T20182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1098.672561][T20239] fuse: Bad value for 'fd' [ 1099.288170][T20258] syzkaller0: entered promiscuous mode [ 1099.302362][T20258] syzkaller0: entered allmulticast mode [ 1099.347485][T12775] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1099.587596][T12775] usb 4-1: Using ep0 maxpacket: 16 [ 1099.655488][T12775] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1099.739338][T12775] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1099.848470][T12775] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.896110][T12775] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1099.937608][T12775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.970180][T12775] usb 4-1: config 0 descriptor?? [ 1099.978069][T20250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1100.029966][T12775] pxrc 4-1:0.0: Could not find endpoint [ 1100.063676][T12775] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1100.245372][T12775] usb 4-1: USB disconnect, device number 27 [ 1103.947827][T20304] fuse: Unknown parameter '0x0000000000000003' [ 1107.264290][T20325] netlink: 'syz.2.2897': attribute type 1 has an invalid length. [ 1107.272138][T20325] netlink: 'syz.2.2897': attribute type 2 has an invalid length. [ 1108.089449][T20334] lo: entered allmulticast mode [ 1108.710069][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1112.157847][T20358] fuse: Unknown parameter '0x0000000000000003' [ 1112.258494][T20331] lo: left allmulticast mode [ 1112.565559][T20367] syzkaller0: entered promiscuous mode [ 1112.598834][T20367] syzkaller0: entered allmulticast mode [ 1112.639365][T20370] tipc: Enabled bearer , priority 0 [ 1112.677575][T20366] tipc: Resetting bearer [ 1112.769193][T20366] tipc: Disabling bearer [ 1116.027440][T20407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1116.361858][T20407] input: syz0 as /devices/virtual/input/input71 [ 1116.372041][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.378469][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.063328][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1117.947900][ T5837] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1118.150090][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1118.164056][ T5837] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 1118.172704][ T5837] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1118.183198][ T5837] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1118.192895][ T5837] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1118.205755][ T5837] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1118.216431][ T5837] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1118.227538][ T5837] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1118.238577][ T5837] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1118.260077][ T5837] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1118.279357][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.295281][ T5837] usb 4-1: Product: syz [ 1118.301379][ T5837] usb 4-1: Manufacturer: syz [ 1118.306137][ T5837] usb 4-1: SerialNumber: syz [ 1119.088258][T20434] input: syz0 as /devices/virtual/input/input72 [ 1119.991989][ T5837] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1120.147391][ T5837] usb 4-1: USB disconnect, device number 28 [ 1120.409150][T19232] udevd[19232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.517230][ T5818] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1124.417324][ T5818] usb 4-1: device descriptor read/64, error -71 [ 1124.521642][T20503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.547720][T20503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.687203][ T5818] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1125.703334][T14205] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9 [ 1125.710528][T14205] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 1126.598049][T20522] input: syz0 as /devices/virtual/input/input73 [ 1127.037333][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1127.246956][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1127.260727][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1127.269142][ T9] usb 2-1: can't read configurations, error -71 [ 1128.874318][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1132.717470][ T8] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1132.880438][ T8] usb 3-1: device descriptor read/64, error -71 [ 1135.936113][T20601] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 1136.003536][T20601] netlink: 'syz.3.2935': attribute type 2 has an invalid length. [ 1137.524674][T20614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.546506][T20614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.351046][T20607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1138.404516][T20607] input: syz0 as /devices/virtual/input/input74 [ 1138.615536][T20630] syzkaller0: entered promiscuous mode [ 1138.622740][T20630] syzkaller0: entered allmulticast mode [ 1138.640407][T20630] tipc: Enabled bearer , priority 0 [ 1138.652797][T20629] tipc: Resetting bearer [ 1138.698736][T20629] tipc: Disabling bearer [ 1138.707594][ T5894] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1138.902179][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1139.127860][ T5894] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 1139.136268][ T5894] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1139.150979][ T5894] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1139.161539][ T5894] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1139.174307][ T5894] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1139.882784][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1140.017501][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1143.018179][ T5894] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1143.110438][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 1143.116815][ T5894] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1143.166908][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.239070][ T5894] usb 3-1: can't set config #1, error -71 [ 1143.267849][ T5894] usb 3-1: USB disconnect, device number 63 [ 1143.469874][T20674] syzkaller0: entered promiscuous mode [ 1143.476068][T20674] syzkaller0: entered allmulticast mode [ 1143.477927][T20678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.488233][T20674] tipc: Started in network mode [ 1143.495468][T20674] tipc: Node identity d617705d5fe8, cluster identity 4711 [ 1143.503645][T20674] tipc: Enabled bearer , priority 0 [ 1143.513537][T20673] tipc: Resetting bearer [ 1143.541342][T20678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.560535][T20673] tipc: Disabling bearer [ 1146.336404][T20709] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2959'. [ 1146.394587][T20709] input: syz0 as /devices/virtual/input/input75 [ 1148.117481][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1148.244294][T20735] syzkaller0: entered promiscuous mode [ 1148.251895][T20735] syzkaller0: entered allmulticast mode [ 1148.355604][T20735] tipc: Enabled bearer , priority 0 [ 1148.381154][T20734] tipc: Resetting bearer [ 1148.453116][T20734] tipc: Disabling bearer [ 1148.517150][ T9] usb 3-1: device not accepting address 64, error -71 [ 1149.695256][T20757] overlayfs: failed to resolve './file2': -2 [ 1149.826728][T20757] ceph: No mds server is up or the cluster is laggy [ 1149.881765][ T8075] libceph: connect (1)[c::]:6789 error -101 [ 1149.934068][ T8075] libceph: mon0 (1)[c::]:6789 connect error [ 1150.551925][T20758] autofs4:pid:20758:autofs_fill_super: called with bogus options [ 1151.127259][ T5894] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1151.227236][ T8075] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1151.280752][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1151.297359][ T5837] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1151.409913][ T8075] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1151.427192][ T8075] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1151.436894][ T8075] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1151.468339][ T8075] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.477509][ T8075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1151.485660][ T8075] usb 4-1: SerialNumber: syz [ 1151.495639][ T8075] hub 4-1:1.0: bad descriptor, ignoring hub [ 1151.499608][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.507165][ T8075] hub: probe of 4-1:1.0 failed with error -5 [ 1151.521726][ T5837] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1151.526535][ T8075] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1151.541465][ T5837] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1151.557407][ T5894] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1151.558524][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.717170][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1151.837355][ T5894] usb usb2-port1: attempt power cycle [ 1152.257272][ T5894] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1152.287879][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1152.562171][ T5894] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1152.601424][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1152.729886][ T5894] usb usb2-port1: unable to enumerate USB device [ 1154.077447][T20828] autofs4:pid:20828:autofs_fill_super: called with bogus options [ 1154.088891][ T5837] usb 4-1: USB disconnect, device number 31 [ 1154.887492][ T5837] usb 3-1: USB disconnect, device number 66 [ 1156.230627][T20869] netlink: 'syz.1.2985': attribute type 1 has an invalid length. [ 1156.240300][T20869] netlink: 'syz.1.2985': attribute type 2 has an invalid length. [ 1156.921493][T20879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.934176][T20879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.302428][T20888] autofs4:pid:20888:autofs_fill_super: called with bogus options [ 1158.736678][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 1159.800250][T20908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.811114][T20908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.902194][T20911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.933702][T20911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.475721][T20933] autofs4:pid:20933:autofs_fill_super: called with bogus options [ 1165.104607][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 1169.376996][T21001] autofs4:pid:21001:autofs_fill_super: called with bogus options [ 1171.184292][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'. [ 1172.854415][T21028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.897002][T21028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.631976][T21045] autofs4:pid:21045:autofs_fill_super: called with bogus options [ 1175.617825][ T5837] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1176.321450][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'. [ 1177.481578][ T5837] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1177.527168][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.536408][ T5837] usb 3-1: Product: syz [ 1177.541542][ T5837] usb 3-1: Manufacturer: syz [ 1177.546334][ T5837] usb 3-1: SerialNumber: syz [ 1177.691820][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.698482][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.861000][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1177.881258][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1177.928699][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1177.988841][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1178.014465][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1178.039106][ T5837] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1178.065631][ T5837] usb 3-1: USB disconnect, device number 67 [ 1178.704367][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1180.952831][T21109] autofs4:pid:21109:autofs_fill_super: called with bogus options [ 1183.514885][T14205] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 1183.521902][T14205] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1183.621351][T21176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.633839][T21176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.982169][T21183] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1184.149680][T21183] input: syz0 as /devices/virtual/input/input76 [ 1185.752920][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1187.187173][T13196] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1187.320414][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 1191.074194][T14205] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 1191.081455][T14205] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 1191.167556][T21250] autofs4:pid:21250:autofs_fill_super: called with bogus options [ 1192.367225][ T5894] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1192.552103][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.576718][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1192.713492][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.895411][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1193.015694][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.986273][ T28] audit: type=1326 audit(1789704431.631:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.1.3047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1194.875841][ T28] audit: type=1800 audit(1789704432.291:131): pid=21287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3048" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1195.652792][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 1196.489615][ T5837] usb 3-1: USB disconnect, device number 68 [ 1197.770072][T21323] autofs4:pid:21323:autofs_fill_super: called with bogus options [ 1198.724324][T21328] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1198.816373][T21330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1199.020628][T21334] xt_hashlimit: size too large, truncated to 1048576 [ 1200.726675][ T28] audit: type=1326 audit(1789704438.401:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21344 comm="syz.1.3059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1201.456676][T21356] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3061'. [ 1201.492131][T21356] input: syz0 as /devices/virtual/input/input77 [ 1201.653880][T21359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.664618][T21359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.043467][T21374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1205.662586][T21386] autofs4:pid:21386:autofs_fill_super: called with bogus options [ 1208.946443][T21418] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3071'. [ 1208.980159][T21418] input: syz0 as /devices/virtual/input/input78 [ 1210.017225][ T5837] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1210.754934][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1210.863818][ T5837] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 1210.874707][ T5837] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1210.885193][ T5837] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1210.895534][ T5837] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1210.906501][ T5837] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1210.917228][ T5837] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1210.929123][ T5837] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1210.940258][ T5837] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1210.956652][ T5837] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1210.973456][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.981728][ T5837] usb 2-1: Product: syz [ 1210.985926][ T5837] usb 2-1: Manufacturer: syz [ 1210.997179][ T5837] usb 2-1: SerialNumber: syz [ 1211.277272][ T5837] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1211.326741][ T5837] usb 2-1: USB disconnect, device number 70 [ 1211.402592][T21459] autofs4:pid:21459:autofs_fill_super: called with bogus options [ 1211.962291][ T28] audit: type=1326 audit(1789704449.531:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21445 comm="syz.0.3073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fd99e159 code=0x0 [ 1212.342847][T20418] udevd[20418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.754301][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 1217.487395][ T28] audit: type=1326 audit(1789704455.171:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21525 comm="syz.2.3084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1218.207789][T21530] autofs4:pid:21530:autofs_fill_super: called with bogus options [ 1221.721500][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1223.637389][ T28] audit: type=1326 audit(1789704461.131:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.2.3095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1224.403183][T21597] autofs4:pid:21597:autofs_fill_super: called with bogus options [ 1229.586106][ T28] audit: type=1326 audit(1789704467.271:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.1.3104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1230.324324][T21644] lo: entered allmulticast mode [ 1230.367260][T21644] lo: left allmulticast mode [ 1231.964497][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1233.833378][T21680] fuse: Unknown parameter 'group_i00000000000000000000' [ 1234.884431][ T28] audit: type=1326 audit(1789704472.221:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21687 comm="syz.0.3115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fd99e159 code=0x0 [ 1236.639180][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1239.130690][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.137265][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.053812][T21733] fuse: Unknown parameter 'group_id00000000000000000000' [ 1242.561646][T21757] input: syz0 as /devices/virtual/input/input79 [ 1242.641193][T21759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.656463][T21759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.648286][T21774] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1244.682532][T21774] input: syz0 as /devices/virtual/input/input80 [ 1245.737193][ T8] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1246.610067][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1246.643487][ T8] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 1246.699316][ T8] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1246.782769][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1248.227868][ T8] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1248.271886][ T8] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1248.283119][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1248.294602][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1248.306976][ T8] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1248.324176][ T8] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1248.334698][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.348562][ T8] usb 3-1: Product: syz [ 1248.352854][ T8] usb 3-1: Manufacturer: syz [ 1248.360943][ T8] usb 3-1: SerialNumber: syz [ 1248.463574][T21798] loop0: detected capacity change from 0 to 32768 [ 1248.597515][ T8] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1248.655145][ T8] usb 3-1: USB disconnect, device number 69 [ 1248.957959][T21833] udevd[21833]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.124172][T21863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.219855][T21863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.766138][T21885] input: syz0 as /devices/virtual/input/input81 [ 1255.767803][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1256.551134][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1256.562311][ T8] usb 4-1: no configurations [ 1256.571777][ T8] usb 4-1: can't read configurations, error -22 [ 1261.337205][ T5837] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1261.535161][T21958] fuse: Bad value for 'user_id' [ 1261.553898][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1261.573991][ T5837] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1261.599656][ T5837] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1261.608704][T21960] loop0: detected capacity change from 0 to 32768 [ 1261.629062][ T5837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1261.653832][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1261.671990][ T5837] usb 4-1: SerialNumber: syz [ 1261.690185][ T5837] hub 4-1:1.0: bad descriptor, ignoring hub [ 1261.696189][ T5837] hub: probe of 4-1:1.0 failed with error -5 [ 1261.707901][ T5837] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1263.133499][T21982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.144164][T21982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.776250][T21999] fuse: Bad value for 'user_id' [ 1263.884983][T22002] loop0: detected capacity change from 0 to 32768 [ 1264.766464][ T5894] usb 4-1: USB disconnect, device number 34 [ 1268.405924][T22042] fuse: Bad value for 'fd' [ 1268.619129][T22045] loop0: detected capacity change from 0 to 32768 [ 1269.117147][T12775] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1269.257196][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1269.306315][T12775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1269.330064][T12775] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1269.341549][T12775] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1269.358942][T12775] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.377156][T12775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1269.386248][T12775] usb 4-1: SerialNumber: syz [ 1269.408670][T12775] hub 4-1:1.0: bad descriptor, ignoring hub [ 1269.414657][T12775] hub: probe of 4-1:1.0 failed with error -5 [ 1269.421335][T12775] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1269.481303][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1269.490610][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.500222][ T8] usb 3-1: Product: syz [ 1269.504426][ T8] usb 3-1: Manufacturer: syz [ 1269.509100][ T8] usb 3-1: SerialNumber: syz [ 1269.577196][T13196] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1269.721609][ T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1269.735612][ T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1269.748394][ T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1269.760339][ T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1269.770400][ T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1269.780592][ T8] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1269.795133][T13196] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.807612][ T8] usb 3-1: USB disconnect, device number 70 [ 1269.813974][T13196] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1269.831032][T13196] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1269.843169][T13196] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1269.858819][T13196] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1269.868010][T13196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.235000][ T8] usb 4-1: USB disconnect, device number 35 [ 1273.815001][ T8] usb 2-1: USB disconnect, device number 71 [ 1274.315845][T22118] loop0: detected capacity change from 0 to 32768 [ 1276.277373][T12775] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1276.316764][T22151] fuse: Bad value for 'fd' [ 1276.472158][T12775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1276.495775][T12775] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1277.657344][T22157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1277.965475][T12775] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1277.998079][T22165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.012188][T22165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.065099][T12775] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.084432][T12775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1278.093248][T12775] usb 2-1: SerialNumber: syz [ 1278.104973][T12775] hub 2-1:1.0: bad descriptor, ignoring hub [ 1278.113261][T12775] hub: probe of 2-1:1.0 failed with error -5 [ 1278.120448][T12775] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1278.339593][ T5837] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1278.531891][ T5837] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1278.546514][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.555211][ T5837] usb 3-1: Product: syz [ 1278.564909][ T5837] usb 3-1: Manufacturer: syz [ 1278.569946][ T5837] usb 3-1: SerialNumber: syz [ 1278.782578][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1278.812764][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1278.834948][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1278.851432][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1278.861367][ T5837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1278.872860][ T5837] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1278.894528][ T5837] usb 3-1: USB disconnect, device number 71 [ 1280.260840][T22206] fuse: Bad value for 'fd' [ 1280.498537][ T5894] usb 2-1: USB disconnect, device number 72 [ 1280.910385][T22222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.925634][T22222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.167391][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 1283.447140][ T5894] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1283.651375][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1283.687257][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.707449][ T5894] usb 4-1: Product: syz [ 1283.711686][ T5894] usb 4-1: Manufacturer: syz [ 1283.716312][ T5894] usb 4-1: SerialNumber: syz [ 1283.868956][ T28] audit: type=1800 audit(1789704521.551:138): pid=22262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3213" name="c_srate" dev="configfs" ino=39292 res=0 errno=0 [ 1283.904625][T22263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.923327][T22263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.985862][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1284.005965][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1284.026200][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1284.040364][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1284.051631][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1284.073355][ T5894] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1284.097108][ T5894] usb 4-1: USB disconnect, device number 36 [ 1284.897421][ T5894] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1285.194261][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 1285.207819][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.218308][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1285.228812][ T5894] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1285.238632][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1285.263345][ T5894] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1285.379047][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.152573][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'. [ 1287.651957][T12775] usb 4-1: USB disconnect, device number 37 [ 1289.265010][T22358] loop0: detected capacity change from 0 to 32768 [ 1289.487155][T21414] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1289.680603][T21414] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1289.707261][T21414] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1289.716988][T21414] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1289.751939][T21414] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.823507][T21414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1289.922976][T21414] usb 2-1: SerialNumber: syz [ 1290.230078][T21414] hub 2-1:1.0: bad descriptor, ignoring hub [ 1290.346796][T21414] hub: probe of 2-1:1.0 failed with error -5 [ 1290.582072][T21414] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1292.069090][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1293.897623][ T8] usb 2-1: USB disconnect, device number 73 [ 1294.555656][ T28] audit: type=1326 audit(1789704532.091:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.0.3235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64fd99e159 code=0x0 [ 1295.418716][T22434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.427629][T22434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.442914][T22436] fuse: Bad value for 'fd' [ 1298.737479][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1300.698642][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.705358][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.657319][ T28] audit: type=1326 audit(1789704539.301:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.1.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1302.982832][T22516] lo: entered allmulticast mode [ 1303.303588][T22515] lo: left allmulticast mode [ 1305.397268][T21414] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1305.621300][T21414] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1305.657118][T21414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.665196][T21414] usb 3-1: Product: syz [ 1305.687538][T21414] usb 3-1: Manufacturer: syz [ 1305.692225][T21414] usb 3-1: SerialNumber: syz [ 1305.934445][T21414] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1306.222175][T21414] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1306.388600][T21414] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1306.674005][T21414] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1306.743584][T21414] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1306.890569][T21414] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1306.933826][T21414] usb 3-1: USB disconnect, device number 72 [ 1307.417385][ T5894] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1308.094060][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.113797][ T5894] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1308.135849][ T5894] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1308.189016][ T5894] usb 2-1: Product: syz [ 1308.193214][ T5894] usb 2-1: Manufacturer: syz [ 1308.220726][T22578] lo: entered allmulticast mode [ 1308.235803][ T5894] usb 2-1: SerialNumber: syz [ 1308.251747][ T5894] usb 2-1: config 0 descriptor?? [ 1308.271011][T22578] lo: left allmulticast mode [ 1308.288993][ T5894] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 1308.325853][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1309.097273][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 1309.141674][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1309.217164][ T5894] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1309.288328][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1310.225492][ T5894] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1310.266712][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1310.338358][ T5894] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1310.376829][ T5894] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1310.395518][ T5894] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1310.424176][ T5894] usb 2-1: USB disconnect, device number 74 [ 1310.446366][ T5894] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1310.473138][ T5894] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1310.541424][ T5894] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1311.404436][ T5894] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1311.415124][ T5894] keyspan 2-1:0.0: device disconnected [ 1312.888282][T22645] fuse: Invalid rootmode [ 1313.069141][T22654] lo: entered allmulticast mode [ 1313.078821][T22654] lo: left allmulticast mode [ 1314.572531][T22667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.585868][T22667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.787114][ T8075] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1315.809209][ T8075] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1315.836209][ T8075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.853081][ T8075] usb 4-1: Product: syz [ 1315.875502][ T8075] usb 4-1: Manufacturer: syz [ 1315.974829][ T8075] usb 4-1: SerialNumber: syz [ 1316.763545][ T8075] usb 4-1: can't set config #1, error -71 [ 1316.910117][ T8075] usb 4-1: USB disconnect, device number 38 [ 1317.018969][T22697] fuse: Bad value for 'rootmode' [ 1318.604059][T22713] lo: entered allmulticast mode [ 1318.627461][T22713] lo: left allmulticast mode [ 1318.643328][ T28] audit: type=1800 audit(1789704556.331:141): pid=22715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3285" name="c_srate" dev="configfs" ino=38851 res=0 errno=0 [ 1319.220225][ T8] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1320.181633][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.225994][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1320.346585][ T8] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1320.359801][T22734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.369672][T22734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.536529][ T8] usb 4-1: Product: syz [ 1320.655379][ T8] usb 4-1: Manufacturer: syz [ 1320.728981][ T8] usb 4-1: SerialNumber: syz [ 1320.856060][T22740] fuse: Bad value for 'rootmode' [ 1320.901602][ T8] usb 4-1: config 0 descriptor?? [ 1320.929834][ T8] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 1320.938401][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1320.959854][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 1320.990562][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1321.013748][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1321.052949][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1321.084447][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1322.026627][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1322.037825][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1322.048498][ T8] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1322.067247][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1322.096651][T13196] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1322.126425][ T8] usb 4-1: USB disconnect, device number 39 [ 1322.178480][ T8] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1322.248438][ T8] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1322.302842][T13196] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1322.327237][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.335956][T13196] usb 3-1: Product: syz [ 1322.347577][T13196] usb 3-1: Manufacturer: syz [ 1322.352233][T13196] usb 3-1: SerialNumber: syz [ 1322.484659][ T8] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1323.038919][T13196] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1323.062984][T13196] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1323.075489][ T8] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1323.222592][ T8] keyspan 4-1:0.0: device disconnected [ 1323.231628][T13196] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1323.277198][T13196] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1323.297455][T13196] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1323.319855][T13196] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1323.367438][T13196] usb 3-1: USB disconnect, device number 73 [ 1323.403180][T21833] udevd[21833]: setting owner of /dev/bus/usb/003/073 to uid=0, gid=0 failed: No such file or directory [ 1324.296247][T22811] lo: entered allmulticast mode [ 1324.304104][T22811] lo: left allmulticast mode [ 1326.061209][T22823] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3301'. [ 1326.089733][T22823] input: syz0 as /devices/virtual/input/input82 [ 1328.133898][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1328.251309][T22840] lo: entered allmulticast mode [ 1328.600933][T22847] lo: left allmulticast mode [ 1329.247874][T22852] lo: entered allmulticast mode [ 1335.577348][ T8075] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1335.802449][ T8075] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1335.822034][ T8075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.840391][ T8075] usb 2-1: Product: syz [ 1335.847673][ T8075] usb 2-1: Manufacturer: syz [ 1335.857250][ T8075] usb 2-1: SerialNumber: syz [ 1335.902175][T22890] syzkaller0: entered promiscuous mode [ 1335.921900][T22890] syzkaller0: entered allmulticast mode [ 1336.055877][T22899] netlink: 'syz.0.3312': attribute type 1 has an invalid length. [ 1336.063869][T22899] netlink: 'syz.0.3312': attribute type 2 has an invalid length. [ 1336.078980][ T8075] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1336.928300][ T8075] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1336.941593][ T8075] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1336.953905][ T8075] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1336.964276][ T8075] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1337.013778][ T8075] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1337.032477][ T8075] usb 2-1: USB disconnect, device number 75 [ 1337.171807][T22916] lo: entered allmulticast mode [ 1337.199178][T22916] lo: left allmulticast mode [ 1338.538023][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 1338.617494][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1341.509418][T22957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.663948][T22957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.325921][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.357408][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.499419][T22972] netlink: 'syz.0.3328': attribute type 1 has an invalid length. [ 1344.507323][T22972] netlink: 'syz.0.3328': attribute type 2 has an invalid length. [ 1344.939869][T22976] 9pnet_fd: Insufficient options for proto=fd [ 1346.844518][ T8075] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1347.187407][ T8075] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1347.206846][ T8075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.229222][ T8075] usb 3-1: Product: syz [ 1347.233697][ T8075] usb 3-1: Manufacturer: syz [ 1347.238774][ T8075] usb 3-1: SerialNumber: syz [ 1347.538335][ T8075] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1347.562779][ T8075] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1347.584771][ T8075] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1347.606076][ T8075] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1347.624473][ T8075] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1347.646248][ T8075] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1347.656878][ T8075] usb 3-1: USB disconnect, device number 74 [ 1349.892027][T23022] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 1349.899876][T23022] netlink: 'syz.2.3339': attribute type 2 has an invalid length. [ 1350.149068][T23025] 9pnet_fd: Insufficient options for proto=fd [ 1351.823192][T23032] lo: entered allmulticast mode [ 1351.855257][T23032] lo: left allmulticast mode [ 1352.792476][T13196] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1353.011521][T13196] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1353.149465][T13196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.277719][T13196] usb 2-1: Product: syz [ 1353.347929][T13196] usb 2-1: Manufacturer: syz [ 1353.448460][T13196] usb 2-1: SerialNumber: syz [ 1355.342439][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1355.379859][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1355.419709][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1355.453878][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1355.488317][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1356.285227][T13196] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1356.328671][T13196] usb 2-1: USB disconnect, device number 76 [ 1356.760702][T13196] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1357.572418][T23095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1357.589136][T23095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1357.606011][T23095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1357.640425][T23095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1357.657061][T23095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1357.670056][T23095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1357.707140][T13196] usb 2-1: Using ep0 maxpacket: 16 [ 1357.742574][T13196] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1357.768445][T13196] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 72, changing to 10 [ 1357.780953][T13196] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1357.787955][T13196] usb 2-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 1357.797425][T13196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.813548][T13196] usb 2-1: config 0 descriptor?? [ 1358.664564][T11750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.849377][T11750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.036731][T13196] wacom 0003:056A:037A.0005: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 1359.070342][T11750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.335320][ T28] audit: type=1326 audit(1789704596.921:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.3353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1359.765627][T13196] wacom 0003:056A:037A.0005: hidraw0: USB HID v0.02 Device [HID 056a:037a] on usb-dummy_hcd.1-1/input0 [ 1359.779402][T13196] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:037A.0005/input/input83 [ 1359.797312][T14205] Bluetooth: hci1: command tx timeout [ 1360.154998][T11750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.379002][ T5787] usb 2-1: USB disconnect, device number 77 [ 1361.476720][T23149] fido_id[23149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1361.847159][T14205] Bluetooth: hci1: command tx timeout [ 1362.048191][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.065405][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.317801][ T28] audit: type=1800 audit(1789704599.981:143): pid=23219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3357" name="c_srate" dev="configfs" ino=43059 res=0 errno=0 [ 1363.332800][T23091] chnl_net:caif_netlink_parms(): no params data found [ 1363.556150][T11750] tipc: Left network mode [ 1363.574897][T23269] autofs4:pid:23269:autofs_fill_super: called with bogus options [ 1365.027155][T14205] Bluetooth: hci1: command tx timeout [ 1365.617192][ T8] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1365.707523][ T28] audit: type=1326 audit(1789704603.371:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23295 comm="syz.2.3361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1366.364605][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1366.438559][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.522369][ T8] usb 2-1: Product: syz [ 1366.565641][ T8] usb 2-1: Manufacturer: syz [ 1366.625850][ T8] usb 2-1: SerialNumber: syz [ 1367.047242][T14205] Bluetooth: hci1: command tx timeout [ 1369.557202][ T8] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1369.621551][ T8] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1369.801790][ T8] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1369.943694][ T8] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1370.107249][ T8] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1370.348827][ T8] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1370.518891][ T8] usb 2-1: USB disconnect, device number 78 [ 1371.347820][T23091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.417117][T23091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.474612][T23091] bridge_slave_0: entered allmulticast mode [ 1371.557851][T23091] bridge_slave_0: entered promiscuous mode [ 1371.582851][T23091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.598035][T23091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.612925][T23091] bridge_slave_1: entered allmulticast mode [ 1371.646416][T23091] bridge_slave_1: entered promiscuous mode [ 1373.321288][T23091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.468010][T23091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.706795][T23091] team0: Port device team_slave_0 added [ 1373.867249][T23091] team0: Port device team_slave_1 added [ 1375.064334][T23091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.077152][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.116073][T23091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.225228][T23091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.240645][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.245084][T23468] autofs4:pid:23468:autofs_fill_super: called with bogus options [ 1375.279884][T23091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.388366][T11750] hsr_slave_0: left promiscuous mode [ 1375.405835][T11750] hsr_slave_1: left promiscuous mode [ 1375.415266][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.425465][T11750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.436496][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.450415][T11750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.461648][T11750] bridge_slave_1: left allmulticast mode [ 1375.487388][T11750] bridge_slave_1: left promiscuous mode [ 1375.493218][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.518485][T11750] bridge_slave_0: left allmulticast mode [ 1375.524254][T11750] bridge_slave_0: left promiscuous mode [ 1375.541628][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.649162][T11750] veth1_macvtap: left promiscuous mode [ 1375.670531][T11750] veth0_macvtap: left promiscuous mode [ 1375.682405][T11750] veth1_vlan: left promiscuous mode [ 1375.704649][T11750] veth0_vlan: left promiscuous mode [ 1375.934054][ T28] audit: type=1326 audit(1789704613.611:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23480 comm="syz.2.3372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1377.415059][T11750] team0 (unregistering): Port device team_slave_1 removed [ 1377.513791][T11750] team0 (unregistering): Port device team_slave_0 removed [ 1377.667505][T11750]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.801391][T11750]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.439261][T11750]  (unregistering): Released all slaves [ 1378.765685][T23091] hsr_slave_0: entered promiscuous mode [ 1378.798967][T23091] hsr_slave_1: entered promiscuous mode [ 1378.830023][T23091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.849860][T23091] Cannot create hsr debugfs directory [ 1380.374904][T23563] autofs4:pid:23563:autofs_fill_super: called with bogus options [ 1382.442265][T11750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.454463][T23095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1382.473928][T23095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1382.479365][T23091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1382.490579][T23095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1382.502491][T23095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1382.510870][T23095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1382.519229][T23095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1382.566342][T23091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1382.576917][T23091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1382.589508][T23091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1382.691196][T11750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.887977][T11750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.005054][T11750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.567217][T23095] Bluetooth: hci0: command tx timeout [ 1384.895447][T23091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.093311][T11750] tipc: Left network mode [ 1385.223434][T23091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.110291][T23651] chnl_net:caif_netlink_parms(): no params data found [ 1386.667955][T23095] Bluetooth: hci0: command tx timeout [ 1386.885954][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.893198][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.039783][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.047074][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.316701][T23651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.327325][T23651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.334789][T23651] bridge_slave_0: entered allmulticast mode [ 1387.351073][T23651] bridge_slave_0: entered promiscuous mode [ 1387.376865][T23651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.392370][T23651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.402219][T23651] bridge_slave_1: entered allmulticast mode [ 1387.419198][T23651] bridge_slave_1: entered promiscuous mode [ 1387.690423][ T28] audit: type=1326 audit(1789704625.361:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.2.3382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1388.200158][T23651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.320755][T23651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.466605][T23849] autofs4:pid:23849:autofs_fill_super: called with bogus options [ 1388.737331][T23095] Bluetooth: hci0: command tx timeout [ 1388.784452][T23651] team0: Port device team_slave_0 added [ 1389.113519][T23651] team0: Port device team_slave_1 added [ 1389.306794][T23651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.332776][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.384655][T23651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.435457][T23651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.507538][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.579228][T23651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.583660][T11750] hsr_slave_0: left promiscuous mode [ 1390.597655][T11750] hsr_slave_1: left promiscuous mode [ 1390.614828][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.627931][T11750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.656059][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.697172][T11750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.725971][T11750] bridge_slave_1: left allmulticast mode [ 1390.755168][T11750] bridge_slave_1: left promiscuous mode [ 1390.785765][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.818392][T11750] bridge_slave_0: left allmulticast mode [ 1390.824109][T11750] bridge_slave_0: left promiscuous mode [ 1390.835482][T23095] Bluetooth: hci0: command tx timeout [ 1390.871338][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.171738][T11750] veth1_macvtap: left promiscuous mode [ 1391.263413][T11750] veth0_macvtap: left promiscuous mode [ 1391.369724][T11750] veth1_vlan: left promiscuous mode [ 1391.548741][T11750] veth0_vlan: left promiscuous mode [ 1391.982188][T11750] bond1 (unregistering): Released all slaves [ 1392.000778][T23941] syz.1.3393: attempt to access beyond end of device [ 1392.000778][T23941] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1392.027832][T23941] F2FS-fs (nbd1): Unable to read 1th superblock [ 1392.052848][T23941] syz.1.3393: attempt to access beyond end of device [ 1392.052848][T23941] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1392.083068][T23941] F2FS-fs (nbd1): Unable to read 2th superblock [ 1392.891713][ T28] audit: type=1326 audit(1789704630.491:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23946 comm="syz.2.3394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1393.453318][T11750] team0 (unregistering): Port device team_slave_1 removed [ 1393.505450][T11750] team0 (unregistering): Port device team_slave_0 removed [ 1393.558772][T11750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.633007][T11750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.984553][T11750] bond0 (unregistering): Released all slaves [ 1394.321567][T23091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.414742][T23651] hsr_slave_0: entered promiscuous mode [ 1394.439036][T23651] hsr_slave_1: entered promiscuous mode [ 1394.458943][T23651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1394.466575][T23651] Cannot create hsr debugfs directory [ 1394.758562][T23985] autofs4:pid:23985:autofs_fill_super: called with bogus options [ 1398.226606][T23651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1398.252502][T23651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1398.286697][T23651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1398.324097][T23651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1398.523200][T23091] veth0_vlan: entered promiscuous mode [ 1398.579614][T23091] veth1_vlan: entered promiscuous mode [ 1398.653858][T23651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.725004][T23651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.736283][T23091] veth0_macvtap: entered promiscuous mode [ 1398.762290][T23091] veth1_macvtap: entered promiscuous mode [ 1398.792803][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.800007][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.854512][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.861805][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.920294][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.935512][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.946089][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.962507][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.974402][T23091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.006345][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.025130][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.038211][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.058454][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.071313][T23091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.112667][T23091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.144739][T23091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.213061][T23091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.232171][T23091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.576849][ T28] audit: type=1326 audit(1789704637.261:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24108 comm="syz.1.3401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1eff9e159 code=0x0 [ 1400.159700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.244504][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.316409][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.360350][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.855672][T24131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1400.885965][T24131] input: syz0 as /devices/virtual/input/input86 [ 1401.937129][ T5818] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1402.154708][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1402.161129][T23651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.175763][ T5818] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 1402.197169][ T5818] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1402.237709][ T5818] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1402.247603][ T5818] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1402.259828][ T5818] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1402.270906][ T5818] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1402.282353][ T5818] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1402.306840][ T5818] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1402.337247][ T5818] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1402.357057][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.377188][ T5818] usb 2-1: Product: syz [ 1402.381467][ T5818] usb 2-1: Manufacturer: syz [ 1402.386093][ T5818] usb 2-1: SerialNumber: syz [ 1402.649700][ T5818] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1402.719657][ T5818] usb 2-1: USB disconnect, device number 79 [ 1402.894273][T23967] udevd[23967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.157800][T23651] veth0_vlan: entered promiscuous mode [ 1403.199751][T23651] veth1_vlan: entered promiscuous mode [ 1403.417939][T23651] veth0_macvtap: entered promiscuous mode [ 1403.454476][T23651] veth1_macvtap: entered promiscuous mode [ 1403.603475][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.614719][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.625125][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.636466][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.657176][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.682364][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.718857][T23651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.225779][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.376464][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.538298][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.592138][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.744825][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.787686][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.598614][T23651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.672396][T23651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.800818][T23651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.810482][T23651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.820023][T23651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.179165][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.222302][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.374507][ T28] audit: type=1326 audit(1789704644.061:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24224 comm="syz.4.3408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79c0d9e159 code=0x0 [ 1407.011289][T11750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.067118][T11750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.548017][T24253] autofs4:pid:24253:autofs_fill_super: called with bogus options [ 1409.848025][T13196] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1410.069243][T13196] usb 6-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1410.082754][T13196] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1410.103003][T13196] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1410.133427][T13196] usb 6-1: Manufacturer: syz [ 1410.145239][T13196] usb 6-1: SerialNumber: syz [ 1412.594785][ T28] audit: type=1326 audit(1789704650.281:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24315 comm="syz.2.3417" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8a539e159 code=0x0 [ 1414.712969][T24343] autofs4:pid:24343:autofs_fill_super: called with bogus options [ 1416.761168][T13196] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1417.426551][T24357] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3424'. [ 1417.456565][T24357] input: syz0 as /devices/virtual/input/input87 [ 1418.509131][ T8] usb 6-1: USB disconnect, device number 2 [ 1418.518388][T13196] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1418.769204][T13196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1418.797261][T13196] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 1418.826341][T13196] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1418.854720][T13196] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1419.588580][T13196] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1419.599766][T13196] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1419.601003][T24382] 9pnet: Found fid 0 not clunked [ 1419.613210][T13196] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1419.649589][T13196] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1419.676124][T13196] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1419.699471][T13196] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1419.737095][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.745163][T13196] usb 3-1: Product: syz [ 1419.763122][T13196] usb 3-1: Manufacturer: syz [ 1419.777514][T13196] usb 3-1: SerialNumber: syz [ 1420.087547][T13196] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1420.155973][T13196] usb 3-1: USB disconnect, device number 75 [ 1420.578305][T23966] udevd[23966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.718117][T24452] autofs4:pid:24452:autofs_fill_super: called with bogus options [ 1421.987466][T13196] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1422.237105][T13196] usb 5-1: Using ep0 maxpacket: 16 [ 1422.258508][T13196] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1422.269669][T13196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.307968][T13196] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1422.327148][T13196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.329999][T13196] usb 5-1: Product: syz [ 1423.334236][T13196] usb 5-1: Manufacturer: syz [ 1423.387084][T13196] usb 5-1: SerialNumber: syz [ 1423.455022][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.461591][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.648443][T13196] usb 5-1: USB disconnect, device number 2 [ 1425.053842][ T28] audit: type=1800 audit(1789704662.741:151): pid=24504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3438" name="c_srate" dev="configfs" ino=45304 res=0 errno=0 [ 1429.868343][T24541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1431.943762][T24573] netlink: 'syz.1.3442': attribute type 28 has an invalid length. [ 1431.951810][T24573] netlink: 'syz.1.3442': attribute type 3 has an invalid length. [ 1431.959705][T24573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1434.020142][ T5837] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1434.542502][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.690225][ T5837] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1434.703639][ T5837] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1434.713034][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.733054][ T5837] pegasus 2-1:1.0: Missing or invalid endpoints [ 1437.031313][ T5787] usb 2-1: USB disconnect, device number 80 [ 1437.667381][ T5787] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1437.877394][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 1437.901707][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1437.924000][ T5787] usb 2-1: no configurations [ 1437.935047][ T5787] usb 2-1: can't read configurations, error -22 [ 1440.203218][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1440.419320][T24688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.428820][T24688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.437734][T24688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.446469][T24688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.533402][T24688] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.542684][T24688] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.552975][T24688] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.562254][T24688] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.047279][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1441.279126][ T5894] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1441.305583][ T5894] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1441.333565][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.361324][T24690] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1441.391191][ T5894] opticon 5-1:1.0: opticon converter detected [ 1441.418498][ T5894] usb 5-1: opticon converter now attached to ttyUSB0 [ 1444.402695][ T5787] usb 5-1: USB disconnect, device number 3 [ 1444.473655][ T5787] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1444.516775][ T5787] opticon 5-1:1.0: device disconnected [ 1444.939814][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1446.098149][ T28] audit: type=1326 audit(1789704683.671:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24760 comm="syz.4.3473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79c0d9e159 code=0x0 [ 1446.939285][T24774] lo: entered allmulticast mode [ 1446.975596][T24774] lo: left allmulticast mode [ 1448.882969][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1449.609579][T24794] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1454.435025][T24858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1455.984345][T24874] lo: entered allmulticast mode [ 1456.042684][T24874] lo: left allmulticast mode [ 1460.815686][T24914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1462.037352][T24923] netlink: 'syz.2.3501': attribute type 28 has an invalid length. [ 1462.045324][T24923] netlink: 'syz.2.3501': attribute type 3 has an invalid length. [ 1462.053251][T24923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1473.471791][T25021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1474.406075][T25035] lo: entered allmulticast mode [ 1474.452215][T25035] lo: left allmulticast mode [ 1476.118429][T25063] lo: entered allmulticast mode [ 1476.134188][T25062] lo: left allmulticast mode [ 1477.013434][T25079] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 1477.566881][T25098] netlink: 'syz.5.3528': attribute type 28 has an invalid length. [ 1477.575665][T25098] netlink: 'syz.5.3528': attribute type 3 has an invalid length. [ 1477.583486][T25098] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1479.908065][T25123] lo: entered allmulticast mode [ 1480.032652][T25122] lo: left allmulticast mode [ 1481.124155][T25139] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1482.082340][T14205] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.662599][T25152] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 1485.185437][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.198696][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.129595][T25214] lo: entered allmulticast mode [ 1486.187667][T25214] lo: left allmulticast mode [ 1486.196851][T25215] autofs4:pid:25215:autofs_fill_super: called with bogus options [ 1487.552684][T25242] netlink: 'syz.5.3552': attribute type 28 has an invalid length. [ 1487.560674][T25242] netlink: 'syz.5.3552': attribute type 3 has an invalid length. [ 1487.568481][T25242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3552'. [ 1488.560732][ T28] audit: type=1800 audit(1789704726.251:153): pid=25220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3548" name="syzkaller0" dev="sda1" ino=2057 res=0 errno=0 [ 1488.683586][T25245] lo: entered allmulticast mode [ 1490.442188][T25289] autofs4:pid:25289:autofs_fill_super: called with bogus options [ 1494.540049][T25326] lo: entered allmulticast mode [ 1495.813062][T25332] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR [ 1495.819919][T25335] autofs4:pid:25335:autofs_fill_super: called with bogus options [ 1498.707690][T25359] loop0: detected capacity change from 0 to 32768 [ 1498.973741][T25373] netlink: 'syz.2.3565': attribute type 28 has an invalid length. [ 1498.981767][T25373] netlink: 'syz.2.3565': attribute type 3 has an invalid length. [ 1498.989652][T25373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3565'. [ 1501.687137][ T5787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1501.840739][T25398] autofs4:pid:25398:autofs_fill_super: called with bogus options [ 1501.930348][ T5787] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1501.958432][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.984269][ T5787] usb 6-1: Product: syz [ 1502.007255][ T5787] usb 6-1: Manufacturer: syz [ 1502.011935][ T5787] usb 6-1: SerialNumber: syz [ 1502.055838][ T5787] usb 6-1: config 0 descriptor?? [ 1502.084500][ T5787] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1502.197801][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1502.230147][ T5787] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1502.283275][ T5787] usb 6-1: media controller created [ 1502.391908][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1502.645442][T25420] autofs4:pid:25420:autofs_fill_super: called with bogus options [ 1502.740888][ T5787] DVB: Unable to find symbol mt352_attach() [ 1502.865089][ T5787] DVB: Unable to find symbol nxt6000_attach() [ 1502.884746][ T5787] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1502.941634][ T5787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input88 [ 1503.424264][ T5787] dvb-usb: schedule remote query interval to 1000 msecs. [ 1503.635363][ T5787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1503.667439][T25437] loop0: detected capacity change from 0 to 32768 [ 1503.868415][ T5787] dvb-usb: bulk message failed: -22 (7/0) [ 1503.936577][ T5787] dvb-usb: bulk message failed: -22 (7/0) [ 1503.987238][ T5787] usb 6-1: USB disconnect, device number 3 [ 1505.261714][ T5787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1505.324989][T25468] netlink: 'syz.1.3585': attribute type 28 has an invalid length. [ 1505.333098][T25468] netlink: 'syz.1.3585': attribute type 3 has an invalid length. [ 1505.340980][T25468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1507.128112][ T5787] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1507.580630][T25499] autofs4:pid:25499:autofs_fill_super: called with bogus options [ 1507.702366][T14205] Bluetooth: hci0: command 0x0406 tx timeout [ 1509.650599][T25519] loop0: detected capacity change from 0 to 32768 [ 1510.176897][T25536] netlink: 'syz.1.3595': attribute type 28 has an invalid length. [ 1510.185769][T25536] netlink: 'syz.1.3595': attribute type 3 has an invalid length. [ 1510.193879][T25536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1512.276164][T25548] autofs4:pid:25548:autofs_fill_super: called with bogus options [ 1516.163971][T25585] netlink: 'syz.5.3605': attribute type 28 has an invalid length. [ 1516.172115][T25585] netlink: 'syz.5.3605': attribute type 3 has an invalid length. [ 1516.180834][T25585] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3605'. [ 1517.014043][T25591] autofs4:pid:25591:autofs_fill_super: called with bogus options [ 1519.938610][T25609] loop0: detected capacity change from 0 to 32768 [ 1521.626250][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1521.642188][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1521.656091][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1521.682092][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1521.690489][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1521.698352][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1521.787977][T25636] autofs4:pid:25636:autofs_fill_super: called with bogus options [ 1522.695468][T25661] netlink: 'syz.4.3616': attribute type 28 has an invalid length. [ 1522.703430][T25661] netlink: 'syz.4.3616': attribute type 3 has an invalid length. [ 1522.711239][T25661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1524.470199][T25672] loop0: detected capacity change from 0 to 32768 [ 1525.940345][T25689] autofs4:pid:25689:autofs_fill_super: called with bogus options [ 1526.811493][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1526.825553][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1526.835760][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1526.844368][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1526.852856][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1526.861774][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1529.033799][T25727] netlink: 'syz.1.3631': attribute type 28 has an invalid length. [ 1529.041892][T25727] netlink: 'syz.1.3631': attribute type 3 has an invalid length. [ 1529.049920][T25727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3631'. [ 1532.689999][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1532.705402][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1532.722893][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1532.868255][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1532.876137][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1532.884291][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1533.846564][T25770] autofs4:pid:25770:autofs_fill_super: called with bogus options [ 1534.827319][T25774] loop0: detected capacity change from 0 to 32768 [ 1535.022165][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1535.033310][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1535.042199][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1535.055552][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1535.070360][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1535.211200][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1536.531517][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1536.869065][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.990143][ T8] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1537.017466][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.076759][ T8] usb 6-1: Product: syz [ 1537.097024][ T8] usb 6-1: Manufacturer: syz [ 1537.122182][ T8] usb 6-1: SerialNumber: syz [ 1537.189295][ T8] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1537.247057][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 1537.254976][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 1537.266239][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1537.285626][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 1537.297193][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1537.305389][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1537.326141][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 1537.334553][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 1537.344478][ T8] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1537.355030][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 1537.362902][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1537.376108][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 1537.383919][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 1537.391624][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 1537.399408][ T8] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1537.410451][ T8] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1537.510368][ T8] usb 6-1: USB disconnect, device number 5 [ 1537.525786][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1537.551959][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1537.562260][ T8] keyspan 6-1:1.0: device disconnected [ 1540.461204][T25856] autofs4:pid:25856:autofs_fill_super: called with bogus options [ 1541.237776][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1541.257236][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1541.266798][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1541.299758][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1541.318828][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1541.326344][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1543.623462][T25881] block device autoloading is deprecated and will be removed. [ 1543.650441][T25881] syz.1.3645: attempt to access beyond end of device [ 1543.650441][T25881] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1545.046588][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.065371][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.075609][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.085161][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.093219][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1545.100878][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.429206][ T8075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1546.297039][ T8075] usb 5-1: device descriptor read/64, error -71 [ 1546.342423][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.349315][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.567264][ T8075] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1546.717060][ T8075] usb 5-1: device descriptor read/64, error -71 [ 1546.837234][ T8075] usb usb5-port1: attempt power cycle [ 1547.573247][T25930] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3655'. [ 1548.461947][T25932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.476161][T25932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.527904][ T8075] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1550.097447][ T8075] usb 5-1: device not accepting address 6, error -71 [ 1550.595518][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1550.617543][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1550.632182][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1550.667559][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1550.713008][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1550.721641][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1550.817525][T25961] Bluetooth: MGMT ver 1.22 [ 1551.294906][T25976] autofs4:pid:25976:autofs_fill_super: called with bogus options [ 1554.777185][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1554.966036][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.976840][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.988835][ T8] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1554.999987][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1555.007129][ T8] usb 6-1: config 1 has no interface number 0 [ 1555.016555][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1555.024896][ T8] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1555.037916][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1555.045386][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1555.067005][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.076447][ T8] usb 6-1: Product: syz [ 1555.081164][ T8] usb 6-1: Manufacturer: syz [ 1555.086575][ T8] usb 6-1: SerialNumber: syz [ 1555.307300][T25992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.330734][T25992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.418427][ T8] usb 6-1: 3:1 : does not exist [ 1555.423381][ T8] usb 6-1: 3:2 : does not exist [ 1555.546074][ T8] usb 6-1: USB disconnect, device number 6 [ 1557.973176][T26057] autofs4:pid:26057:autofs_fill_super: called with bogus options [ 1558.910779][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1558.931729][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1558.941387][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1558.954579][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1558.965948][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1558.973867][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1562.727304][ T5894] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1562.925205][ T5894] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 1562.941091][ T5894] usb 5-1: config 1 has no interface number 0 [ 1562.979323][ T5894] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1563.004413][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.031576][ T5894] usb 5-1: Product: syz [ 1563.054201][ T5894] usb 5-1: Manufacturer: syz [ 1563.069944][T26103] autofs4:pid:26103:autofs_fill_super: called with bogus options [ 1563.116025][ T5894] usb 5-1: SerialNumber: syz [ 1563.887103][ T5894] usb 5-1: 3:1 : does not exist [ 1563.893136][ T5894] usb 5-1: 3:2 : does not exist [ 1564.091474][ T5894] usb 5-1: USB disconnect, device number 8 [ 1564.118334][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1564.129465][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1564.139011][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1564.157271][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1564.167075][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1564.200416][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1564.201428][T24959] udevd[24959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1568.528579][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1568.568178][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1568.579905][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1568.596426][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1568.604760][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1568.617786][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1568.888679][T26185] autofs4:pid:26185:autofs_fill_super: called with bogus options [ 1569.997071][T13196] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1570.182494][T13196] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1570.207151][T13196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.217343][T13196] usb 2-1: Product: syz [ 1570.221547][T13196] usb 2-1: Manufacturer: syz [ 1570.226137][T13196] usb 2-1: SerialNumber: syz [ 1570.461568][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1570.494802][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1570.530041][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1570.541918][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1570.560497][T13196] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1570.579211][T13196] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1570.631791][T13196] usb 2-1: USB disconnect, device number 83 [ 1572.700312][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1574.775000][T26235] autofs4:pid:26235:autofs_fill_super: called with bogus options [ 1575.679731][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.718650][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.728505][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.737345][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.744893][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1575.759698][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1576.407244][T13196] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1576.587142][T13196] usb 6-1: Using ep0 maxpacket: 8 [ 1576.597462][T13196] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1576.606567][T13196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.614783][T13196] usb 6-1: Product: syz [ 1576.619034][T13196] usb 6-1: Manufacturer: syz [ 1576.623654][T13196] usb 6-1: SerialNumber: syz [ 1576.630269][T13196] usb 6-1: config 0 descriptor?? [ 1576.840179][T13196] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1577.442351][T13196] usb write operation failed. (-71) [ 1577.458081][T13196] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1577.469946][T13196] dvbdev: DVB: registering new adapter (Terratec H7) [ 1577.476666][T13196] usb 6-1: media controller created [ 1577.482669][T13196] usb read operation failed. (-71) [ 1577.489705][T13196] usb write operation failed. (-71) [ 1577.503027][T13196] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 1577.514611][T13196] usb 6-1: USB disconnect, device number 7 [ 1584.410726][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1584.431229][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1584.439617][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1584.455070][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1584.464440][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1584.472123][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1585.372760][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1586.590598][T26324] autofs4:pid:26324:autofs_fill_super: called with bogus options [ 1588.003596][T21414] libceph: connect (1)[c::]:6789 error -101 [ 1588.025324][T26335] ceph: No mds server is up or the cluster is laggy [ 1588.105039][T21414] libceph: mon0 (1)[c::]:6789 connect error [ 1595.620561][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1595.643938][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1595.659694][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1595.669210][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1595.687418][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1595.707362][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1596.970299][ T8075] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1597.169340][ T8075] usb 5-1: Using ep0 maxpacket: 32 [ 1597.176870][ T8075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.188033][ T8075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1597.199293][ T8075] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1597.208489][T21414] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1597.216061][ T8075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.226805][ T8075] usb 5-1: config 0 descriptor?? [ 1597.234418][T26460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1597.244087][ T8075] hub 5-1:0.0: USB hub found [ 1597.409452][T21414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.420583][T21414] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1597.429727][T21414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.442664][T21414] usb 6-1: config 0 descriptor?? [ 1597.461669][ T8075] hub 5-1:0.0: 1 port detected [ 1597.665614][ T8075] hub 5-1:0.0: hub_hub_status failed (err = 0) [ 1597.665865][T21414] usbhid 6-1:0.0: can't add hid device: -71 [ 1597.678427][ T8075] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 1597.701346][T21414] usbhid: probe of 6-1:0.0 failed with error -71 [ 1597.712704][T21414] usb 6-1: USB disconnect, device number 8 [ 1598.072801][ T8075] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 1598.081935][ T8075] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 1599.632564][T21414] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1600.089708][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1600.127856][T21414] usb 6-1: device descriptor read/all, error -71 [ 1600.159796][ T5818] usb 5-1: USB disconnect, device number 9 [ 1600.237710][T26552] autofs4:pid:26552:autofs_fill_super: called with bogus options [ 1601.173345][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1604.027827][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 1604.110940][T26577] team0: No ports can be present during mode change [ 1604.129033][T26577] netlink: 'syz.1.3727': attribute type 10 has an invalid length. [ 1604.148387][T26577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.155838][T26577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.195732][T26577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.203023][T26577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.212090][T26577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.219345][T26577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.270844][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1604.284815][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1604.294087][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1604.304234][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1604.312865][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1604.318132][T26577] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1604.329109][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1604.366218][T26578] netlink: 'syz.1.3727': attribute type 10 has an invalid length. [ 1604.506320][T26578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.567971][T26578] team0: Port device bond0 added [ 1604.579664][T26583] vlan0: entered promiscuous mode [ 1604.649705][T26583] team0: Port device vlan0 added [ 1604.677614][T26584] tipc: Enabled bearer , priority 0 [ 1606.552267][T13196] tipc: Node number set to 2315219037 [ 1607.772197][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.778682][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.466064][T26616] autofs4:pid:26616:autofs_fill_super: called with bogus options [ 1611.374786][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1611.387443][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1611.417983][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1611.428448][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1611.442848][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1611.451548][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1612.257269][T26638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 1618.038062][T26814] autofs4:pid:26814:autofs_fill_super: called with bogus options [ 1619.025346][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1619.041707][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1619.051908][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1619.069997][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1619.091830][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1619.102073][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1619.725778][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1625.516389][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1625.527679][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1625.538388][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1626.880984][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1626.917390][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1626.924855][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1627.473662][T27028] autofs4:pid:27028:autofs_fill_super: called with bogus options [ 1633.254004][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1633.266836][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1633.277159][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1633.301289][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1633.310578][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1633.483864][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1634.535559][T27298] autofs4:pid:27298:autofs_fill_super: called with bogus options [ 1641.119449][T14205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1641.130904][T14205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1641.140466][T14205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1641.155082][T14205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1641.163018][T14205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1641.170811][T14205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1644.959238][T27542] autofs4:pid:27542:autofs_fill_super: called with bogus options [ 1647.443552][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 1648.555864][T23095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1648.575015][T23095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1648.586248][T23095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1648.595345][T23095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1648.604278][T23095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1648.612968][T23095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=3611 state=3 status=67 (errno 9: Bad file descriptor) [ 1650.059223][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.324290][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.499604][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.725827][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.022689][ T42] hsr_slave_0: left promiscuous mode [ 1652.028918][ T42] hsr_slave_1: left promiscuous mode [ 1652.034848][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1652.042546][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1652.050684][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1652.058486][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.066596][ T42] bridge_slave_1: left allmulticast mode [ 1652.073098][ T42] bridge_slave_1: left promiscuous mode [ 1652.079331][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.095064][ T42] bridge_slave_0: left allmulticast mode [ 1652.101484][ T42] bridge_slave_0: left promiscuous mode [ 1652.107984][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.131116][ T42] veth1_macvtap: left promiscuous mode [ 1652.136665][ T42] veth0_macvtap: left promiscuous mode [ 1652.142393][ T42] veth1_vlan: left promiscuous mode [ 1652.149922][ T42] veth0_vlan: left promiscuous mode [ 1652.850053][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1652.917400][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1652.981212][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.060476][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.482679][ T42] bond0 (unregistering): Released all slaves [ 1653.941026][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.020901][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.089137][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.166844][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.317620][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.391881][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.446121][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.546146][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.737603][ T42] tipc: Disabling bearer [ 1654.755236][ T42] tipc: Left network mode [ 1656.044463][ T42] hsr_slave_0: left promiscuous mode [ 1656.051400][ T42] hsr_slave_1: left promiscuous mode [ 1656.061257][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.069114][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.077604][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.085064][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.093367][ T42] bridge_slave_1: left allmulticast mode [ 1656.100869][ T42] bridge_slave_1: left promiscuous mode [ 1656.106650][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.116844][ T42] bridge_slave_0: left allmulticast mode [ 1656.129091][ T42] bridge_slave_0: left promiscuous mode [ 1656.134878][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.152707][ T42] hsr_slave_0: left promiscuous mode [ 1656.159380][ T42] hsr_slave_1: left promiscuous mode [ 1656.165523][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.175312][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.183942][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.191555][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.202477][ T42] bridge_slave_1: left allmulticast mode [ 1656.209052][ T42] bridge_slave_1: left promiscuous mode [ 1656.214836][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.227945][ T42] bridge_slave_0: left allmulticast mode [ 1656.233634][ T42] bridge_slave_0: left promiscuous mode [ 1656.239541][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.300061][ T42] veth1_macvtap: left promiscuous mode [ 1656.305625][ T42] veth0_macvtap: left promiscuous mode [ 1656.312513][ T42] veth1_vlan: left promiscuous mode [ 1656.324826][ T42] veth1_macvtap: left promiscuous mode [ 1656.332947][ T42] veth0_macvtap: left promiscuous mode [ 1656.339107][ T42] veth1_vlan: left promiscuous mode [ 1656.344419][ T42] veth0_vlan: left promiscuous mode [ 1656.764456][ T42] team0 (unregistering): Port device vlan0 removed [ 1657.142083][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1657.201273][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1657.263921][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.326048][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.683345][ T42] team0 (unregistering): Port device bond0 removed [ 1657.725911][ T42] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1657.734682][ T42] bond0 (unregistering): Released all slaves [ 1657.819545][ T42] lo (unregistering): left allmulticast mode [ 1658.444877][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1658.502452][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1658.553736][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.607733][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.986009][ T42] bond0 (unregistering): Released all slaves [ 1659.128477][ T42] lo (unregistering): left allmulticast mode