last executing test programs: 2m49.636576362s ago: executing program 3 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x3, 0x4) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2m44.861680154s ago: executing program 3 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) 2m39.277541885s ago: executing program 3 (id=1505): pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2m38.844706246s ago: executing program 3 (id=1509): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000010, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x3, 0x28b, &(0x7f0000000700)="$eJzs3c9qK1UYAPBvmv+6SBeuRLgDunB1ufUJWuQKYkFQslAXWrwpSCcUWghUxdiVT+AT+DxuxBfwARR3diGOTGaSpmWS/rFtivf32/T0O9+X883MoV3NyRdvjA5eHB7vn377W3S7SWxsx3acNWLR91Hr1z/q4wDAI3eW5/FnXuqUoZOLGa0llc2Ne28OALgXi///190LAPAwPv7k0w92dneff5Sm3YjRD+NBEuXPcn5nP76KLIbxLPrxd0Q+V47fe3/3eTTTwma8NZqMB0Xl6POfq8/f+T1iWr8V/disr99KSwv1k/GgFa9U629nMfzwp+jHa/X179TUx6Adb7+50P/T6McvX8ZhZPGi6m1W/91Wmr6b//jXN58V0aI+mYwHnXleld140AcDAAAAAAAAAAAAAAAAAAAAAMD/2tN0bvPi+Tuzg/9XzK84H2iycD7PszRN86TMP69vxuvNaK7z2gEAAAAAAAAAAAAAAAAAAOCxOD75+mAvy4ZHdzqYvdZfMxX/XIx0IuL2az25aVU0qtayJOJma7WiM628OrlxzX5ioxz0in6GR0kzrtVPEhFX9pzMI73FqSdRrlVEeuVgIfKfN0C3bGy2uw72kqsebrduk9zBIK/Zfo2lVe3LkV51BZeT26s3QPvVW/Wc95dMFY+6Nb+Zqz+ndbf38OH+BgEAAAAAAAAAAAAAAAAAAKXzl35rJk/X0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArMH0+/9nv+xl2fBoGlk9mFT5y3LyRjFoRhWZ5uaNdV0iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL4F/AwAA///zd2Gv") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0x200}}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmsg$netlink(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb304, 0x0, @usage=0x80000000004, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x401, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, @struct={0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @struct}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 2m36.588050074s ago: executing program 3 (id=1512): r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x76) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(r2, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') lseek(r7, 0x8000000010007, 0x0) 2m35.332652936s ago: executing program 3 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000470), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) 2m20.029920384s ago: executing program 32 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000470), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) 14.013196944s ago: executing program 0 (id=1993): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 11.501266138s ago: executing program 0 (id=2000): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x810000a0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x5000180) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r3, 0xe, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 8.562767192s ago: executing program 2 (id=2014): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000121401"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x440c0) 7.699766234s ago: executing program 2 (id=2016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000051915f95", 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.886657135s ago: executing program 2 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.807025797s ago: executing program 0 (id=2019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) fcntl$getflags(r0, 0x40b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @private0, 0x206}, 0x1c) 6.717282679s ago: executing program 4 (id=2020): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b8", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.139887894s ago: executing program 4 (id=2021): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "050000000000"}], 0x18}, 0x0) recvmsg(r0, 0x0, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) 5.945325889s ago: executing program 4 (id=2023): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51", 0x3f}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) 5.336948734s ago: executing program 1 (id=2024): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 4.595698663s ago: executing program 2 (id=2026): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.218529593s ago: executing program 2 (id=2028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x0, 0x1ff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.422420193s ago: executing program 0 (id=2030): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49809, 0x49a01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936", 0x3, 0x40880, 0x0, 0x0) 3.398607884s ago: executing program 1 (id=2031): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b8", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.207669509s ago: executing program 1 (id=2032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.051419303s ago: executing program 0 (id=2034): socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 2.548520335s ago: executing program 1 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 2.019046829s ago: executing program 5 (id=2036): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x10000, 0x0, 0x0) 1.99189871s ago: executing program 4 (id=2037): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.910500512s ago: executing program 0 (id=2038): socket$kcm(0x10, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000ac0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x9, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7f9, 0x17, 0x2, 0x7, 0x80000000, 0x3e, 0x18e, 0x200006, 0x806, 0x454f, 0x6, 0x180004, 0x8, 0x6, 0x80, 0x0, 0xfffffff8, 0x0, 0x8, 0x8000, 0x1, 0x100040], [0x10000405, 0x9, 0x0, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x7c, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0x4, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0xc, 0x3, 0x3, 0x4000009, 0x0, 0x0, 0x3, 0x4, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x5, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x8, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x40034, 0x800003, 0x200, 0x80, 0x8e8, 0x5, 0x2950bfaf, 0x1003, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x4000, 0x2, 0x0, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x7, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x4ec, 0x5, 0x5, 0xc6, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x7, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x5, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x10030, 0xfff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 1.897918532s ago: executing program 1 (id=2039): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) write(0xffffffffffffffff, &(0x7f0000000280)='7', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1', 0x1) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='4', 0x1) 1.819475724s ago: executing program 5 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setgroups(0x0, &(0x7f0000000140)) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x0, 0x4e}, 0x28) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000900)={0x19}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="1400000025000103010000000000000002010000", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ldst={0x3, 0x0, 0x6, 0x0, 0x1, 0x328, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 1.709908226s ago: executing program 1 (id=2041): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x1ff, @private0, 0x206}, 0x1c) 809.826689ms ago: executing program 5 (id=2042): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b8", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 598.700515ms ago: executing program 2 (id=2043): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 503.869157ms ago: executing program 4 (id=2044): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49809, 0x49a01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936", 0x3, 0x40880, 0x0, 0x0) 476.412208ms ago: executing program 5 (id=2045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 334.541781ms ago: executing program 5 (id=2046): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x7) socket$kcm(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f0000000040), 0x2000000000000213) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) 95.162387ms ago: executing program 5 (id=2047): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed510000000000", 0x44}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) 0s ago: executing program 4 (id=2048): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) eventfd(0x5f0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): 5] UDC core: g1: couldn't find an available UDC or it's busy [ 128.965217][ T5287] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 128.996193][ T7] usb 5-1: USB disconnect, device number 5 [ 129.020136][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 129.062113][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 129.081541][ T7] ti_usb_3410_5052 5-1:2.0: device disconnected [ 129.295517][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 130.000546][ T5325] netlink: 116 bytes leftover after parsing attributes in process `syz.0.323'. [ 130.059247][ T33] usb 3-1: USB disconnect, device number 3 [ 130.186123][ T5332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.325'. [ 130.249931][ T5335] netlink: 80 bytes leftover after parsing attributes in process `syz.0.326'. [ 132.344709][ T5357] loop0: detected capacity change from 0 to 256 [ 132.590508][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.596879][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.717579][ T5389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.345'. [ 136.368131][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.670926][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 137.463078][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.497936][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.574134][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 137.620520][ T1046] block nbd4: Attempted send on invalid socket [ 137.630810][ T1046] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.644037][ T5414] FAT-fs (nbd4): unable to read boot sector [ 137.698426][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.731873][ T5415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 137.813433][ T7] usb 4-1: SerialNumber: syz [ 138.461384][ T7] usb 4-1: 0:2 : does not exist [ 138.497953][ T7] usb 4-1: unit 5 not found! [ 138.669649][ T5425] autofs4:pid:5425:autofs_fill_super: called with bogus options [ 140.207967][ T4315] usb 4-1: USB disconnect, device number 5 [ 141.622030][ T5513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 144.619933][ T5567] loop0: detected capacity change from 0 to 256 [ 146.409772][ T5584] syz.4.386 (5584) used greatest stack depth: 17408 bytes left [ 146.793294][ T5597] loop3: detected capacity change from 0 to 256 [ 149.437996][ T5657] loop1: detected capacity change from 0 to 256 [ 151.001222][ T26] audit: type=1800 audit(1785822003.152:31): pid=5672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.418" name="UDC" dev="configfs" ino=40052 res=0 errno=0 [ 151.002308][ T5672] Need at least one configuration in g1. [ 151.053536][ T5672] udc usbip-vudc.0: failed to start g1: -22 [ 151.073402][ T5672] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 151.096936][ T5672] UDC core: g1: couldn't find an available UDC or it's busy [ 151.214479][ T5678] device syzkaller1 entered promiscuous mode [ 152.694047][ T4315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.228202][ T4315] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 153.261807][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.287827][ T4315] usb 5-1: Product: syz [ 153.292034][ T4315] usb 5-1: Manufacturer: syz [ 153.313685][ T4315] usb 5-1: SerialNumber: syz [ 153.338970][ T4315] usb 5-1: config 0 descriptor?? [ 153.352955][ T4315] ch341 5-1:0.0: ch341-uart converter detected [ 153.411063][ T5699] loop2: detected capacity change from 0 to 256 [ 153.588465][ T4315] usb 5-1: failed to receive control message: -121 [ 153.595019][ T4315] ch341-uart: probe of ttyUSB0 failed with error -121 [ 153.808433][ T4317] usb 5-1: USB disconnect, device number 6 [ 153.817366][ T4317] ch341 5-1:0.0: device disconnected [ 153.849448][ T26] audit: type=1800 audit(1785822006.002:32): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.434" name="UDC" dev="configfs" ino=40191 res=0 errno=0 [ 153.871446][ T5706] Need at least one configuration in g1. [ 153.884476][ T5706] udc usbip-vudc.0: failed to start g1: -22 [ 153.895151][ T5706] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 153.910693][ T5706] UDC core: g1: couldn't find an available UDC or it's busy [ 154.471943][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.676984][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 154.727666][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.738746][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.777151][ T4317] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 154.817517][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.826297][ T4317] usb 2-1: SerialNumber: syz [ 154.901734][ T4317] usb 2-1: 0:2 : does not exist [ 155.246015][ T5736] loop4: detected capacity change from 0 to 256 [ 155.406622][ T5744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.449'. [ 155.784312][ T5756] loop3: detected capacity change from 0 to 512 [ 155.825551][ T5756] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.839066][ T5756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.858683][ T5756] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.932681][ T5756] EXT4-fs (loop3): 1 truncate cleaned up [ 156.042631][ T5756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.071342][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 157.629115][ T7] usb 2-1: USB disconnect, device number 2 [ 158.019673][ T5782] Need at least one configuration in g1. [ 158.022251][ T26] audit: type=1800 audit(1785822010.173:33): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.461" name="UDC" dev="configfs" ino=39530 res=0 errno=0 [ 158.025531][ T5782] udc usbip-vudc.0: failed to start g1: -22 [ 158.060579][ T5782] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 158.081083][ T5782] UDC core: g1: couldn't find an available UDC or it's busy [ 158.140208][ T5784] Illegal XDP return value 4292432480 on prog (id 23) dev syz_tun, expect packet loss! [ 158.392500][ T5795] loop3: detected capacity change from 0 to 512 [ 158.413983][ T5795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.813311][ T5795] EXT4-fs (loop3): 1 truncate cleaned up [ 158.843374][ T5795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.433571][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.456404][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 159.554957][ T5805] autofs4:pid:5805:autofs_fill_super: called with bogus options [ 159.910128][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.936639][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.976697][ T7] usb 5-1: Product: syz [ 159.980909][ T7] usb 5-1: Manufacturer: syz [ 159.985536][ T7] usb 5-1: SerialNumber: syz [ 160.085977][ T5816] loop2: detected capacity change from 0 to 256 [ 160.114011][ T5819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.475'. [ 160.135273][ T5817] comedi comedi2: board detection failed [ 160.403790][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 160.539520][ T5829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.478'. [ 161.909938][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 162.033565][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.102348][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 162.111664][ T5838] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 162.142603][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.469671][ T5840] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 162.485346][ T7] lan78xx: probe of 5-1:1.0 failed with error -110 [ 162.703185][ T5851] netlink: 56 bytes leftover after parsing attributes in process `syz.1.486'. [ 163.022771][ T5858] autofs4:pid:5858:autofs_fill_super: called with bogus options [ 163.822892][ T5862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.491'. [ 163.867247][ T4317] usb 5-1: USB disconnect, device number 7 [ 164.623270][ T5883] netlink: 56 bytes leftover after parsing attributes in process `syz.0.498'. [ 164.654387][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 164.697665][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 164.840779][ T5890] loop3: detected capacity change from 0 to 256 [ 165.195644][ T5896] autofs4:pid:5896:autofs_fill_super: called with bogus options [ 166.330708][ T5914] netlink: 48 bytes leftover after parsing attributes in process `syz.2.511'. [ 166.336323][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 166.469624][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 166.496290][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.870245][ T4317] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 167.358150][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.366433][ T4317] usb 5-1: Product: syz [ 167.370685][ T4317] usb 5-1: Manufacturer: syz [ 167.375307][ T4317] usb 5-1: SerialNumber: syz [ 167.389390][ T4317] usb 5-1: config 0 descriptor?? [ 167.399886][ T4317] ch341 5-1:0.0: ch341-uart converter detected [ 169.156541][ T5940] loop3: detected capacity change from 0 to 256 [ 169.247605][ T4317] ch341-uart ttyUSB0: failed to read break control: -71 [ 169.261652][ T4317] ch341-uart: probe of ttyUSB0 failed with error -71 [ 169.412808][ T4317] usb 5-1: USB disconnect, device number 8 [ 170.093867][ T4317] ch341 5-1:0.0: device disconnected [ 170.694674][ T5966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'. [ 170.811862][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.526'. [ 170.850628][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 171.776305][ T4378] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.849688][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.026364][ T4378] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.026507][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.026586][ T4378] usb 2-1: Product: syz [ 172.026665][ T4378] usb 2-1: Manufacturer: syz [ 172.026745][ T4378] usb 2-1: SerialNumber: syz [ 172.080268][ T4378] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.160319][ T4320] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 172.170929][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.184418][ T4320] usb 4-1: Product: syz [ 172.189855][ T4320] usb 4-1: Manufacturer: syz [ 172.243647][ T4320] usb 4-1: SerialNumber: syz [ 172.277508][ T4320] usb 4-1: config 0 descriptor?? [ 172.284850][ T4320] ch341 4-1:0.0: ch341-uart converter detected [ 172.339626][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.538'. [ 172.464796][ T6000] autofs4:pid:6000:autofs_fill_super: called with bogus options [ 172.473748][ T4378] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.686045][ T4317] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.898727][ T4317] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.935987][ T4317] usb 1-1: config 0 has no interface number 0 [ 172.966908][ T4317] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.011206][ T4317] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.043872][ T4317] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 173.096228][ T6016] netlink: 'syz.4.548': attribute type 12 has an invalid length. [ 173.104199][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.138467][ T4317] usb 1-1: config 0 descriptor?? [ 173.151316][ T22] usb 2-1: USB disconnect, device number 3 [ 173.431935][ T4320] ch341-uart ttyUSB0: failed to read break control: -71 [ 173.457570][ T4320] ch341-uart: probe of ttyUSB0 failed with error -71 [ 173.704941][ T4320] usb 4-1: USB disconnect, device number 6 [ 173.788387][ T4378] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 173.796912][ T4378] ath9k_htc: Failed to initialize the device [ 173.805015][ T22] usb 2-1: ath9k_htc: USB layer deinitialized [ 173.892511][ T4317] usbhid 1-1:0.1: can't add hid device: -71 [ 173.920835][ T4317] usbhid: probe of 1-1:0.1 failed with error -71 [ 173.921523][ T4320] ch341 4-1:0.0: device disconnected [ 173.961309][ T4317] usb 1-1: USB disconnect, device number 6 [ 174.464018][ T6026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.551'. [ 174.631323][ T6034] autofs4:pid:6034:autofs_fill_super: called with bogus options [ 175.758562][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.557'. [ 176.532656][ T6102] 9pnet_fd: Insufficient options for proto=fd [ 177.645667][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.653674][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 177.853252][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.863280][ T4320] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 177.883400][ T7] usb 1-1: config 0 has no interface number 0 [ 177.893525][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.908086][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.923384][ T4320] usb 5-1: Product: syz [ 177.926735][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.567'. [ 177.929830][ T4320] usb 5-1: Manufacturer: syz [ 177.947215][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.959373][ T4320] usb 5-1: SerialNumber: syz [ 177.964448][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 177.978365][ T4320] usb 5-1: config 0 descriptor?? [ 177.984905][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.989187][ T4320] ch341 5-1:0.0: ch341-uart converter detected [ 178.023223][ T7] usb 1-1: config 0 descriptor?? [ 178.522159][ T7] usbhid 1-1:0.1: can't add hid device: -71 [ 178.528390][ T7] usbhid: probe of 1-1:0.1 failed with error -71 [ 178.559237][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.572'. [ 178.563890][ T7] usb 1-1: USB disconnect, device number 7 [ 178.802545][ T6134] autofs4:pid:6134:autofs_fill_super: called with bogus options [ 179.195743][ T4320] ch341-uart ttyUSB0: failed to read break control: -71 [ 179.554547][ T4320] ch341-uart: probe of ttyUSB0 failed with error -71 [ 179.578149][ T4320] usb 5-1: USB disconnect, device number 9 [ 179.598480][ T4320] ch341 5-1:0.0: device disconnected [ 180.190563][ T4378] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.431061][ T6197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 180.455494][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 180.481028][ T4378] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 180.640820][ T4378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.657775][ T4378] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 180.672537][ T4378] usb 4-1: config 0 has no interface number 1 [ 180.690745][ T4378] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 180.720075][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.740552][ T4378] usb 4-1: Product: syz [ 180.744757][ T4378] usb 4-1: Manufacturer: syz [ 180.751167][ T4378] usb 4-1: SerialNumber: syz [ 180.768188][ T4378] usb 4-1: config 0 descriptor?? [ 181.199864][ T7] usb 4-1: USB disconnect, device number 7 [ 181.636683][ T6221] autofs4:pid:6221:autofs_fill_super: called with bogus options [ 182.015430][ T4359] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.673019][ T4359] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.037467][ T4359] usb 3-1: config 0 has no interface number 0 [ 183.043609][ T4359] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.427303][ T6266] binder: 6220:6266 ioctl c0306201 0 returned -14 [ 183.665818][ T4359] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.858369][ T4359] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 184.045787][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.242704][ T4359] usb 3-1: config 0 descriptor?? [ 184.394495][ T6277] netlink: 'syz.3.592': attribute type 12 has an invalid length. [ 184.456216][ T6280] loop1: detected capacity change from 0 to 256 [ 184.523694][ T4359] usbhid 3-1:0.1: can't add hid device: -71 [ 184.534323][ T4359] usbhid: probe of 3-1:0.1 failed with error -71 [ 184.588269][ T4359] usb 3-1: USB disconnect, device number 4 [ 184.842318][ T6290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'. [ 185.676018][ T6304] autofs4:pid:6304:autofs_fill_super: called with bogus options [ 185.865243][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 185.871295][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 185.877402][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 185.877432][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 194.450273][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508074][ T6404] loop0: detected capacity change from 0 to 256 [ 198.886233][ T6460] loop0: detected capacity change from 0 to 256 [ 203.050325][ T6508] autofs4:pid:6508:autofs_fill_super: called with bogus options [ 203.864242][ T33] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 204.164284][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 204.210115][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.252290][ T6565] loop3: detected capacity change from 0 to 256 [ 204.312028][ T6566] capability: warning: `syz.0.655' uses 32-bit capabilities (legacy support in use) [ 204.432572][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.550142][ T33] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.712664][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.730517][ T33] usb 2-1: config 0 descriptor?? [ 204.758976][ T6574] loop4: detected capacity change from 0 to 256 [ 204.773422][ T33] hub 2-1:0.0: USB hub found [ 204.944794][ T33] hub 2-1:0.0: 6 ports detected [ 204.952094][ T33] hub 2-1:0.0: insufficient power available to use all downstream ports [ 205.349951][ T33] usb 2-1: USB disconnect, device number 4 [ 205.374224][ T4359] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.568742][ T4359] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 205.588249][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.612445][ T4359] usb 1-1: Product: syz [ 205.620047][ T4359] usb 1-1: Manufacturer: syz [ 205.642322][ T4359] usb 1-1: SerialNumber: syz [ 205.674994][ T4359] usb 1-1: config 0 descriptor?? [ 205.701530][ T4359] ch341 1-1:0.0: ch341-uart converter detected [ 207.169539][ T4359] usb 1-1: failed to receive control message: -110 [ 207.180140][ T4359] ch341-uart: probe of ttyUSB0 failed with error -110 [ 208.285598][ T4378] usb 1-1: USB disconnect, device number 8 [ 208.294190][ T4378] ch341 1-1:0.0: device disconnected [ 208.516719][ T6612] autofs4:pid:6612:autofs_fill_super: called with bogus options [ 210.564207][ T4378] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.787671][ T4378] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.787699][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.787717][ T4378] usb 5-1: Product: syz [ 210.787731][ T4378] usb 5-1: Manufacturer: syz [ 210.787744][ T4378] usb 5-1: SerialNumber: syz [ 210.799160][ T4378] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.810709][ T33] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.248291][ T4378] usb 5-1: USB disconnect, device number 10 [ 211.364456][ T6684] loop0: detected capacity change from 0 to 256 [ 211.922193][ T33] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 211.937815][ T33] ath9k_htc: Failed to initialize the device [ 211.965407][ T4378] usb 5-1: ath9k_htc: USB layer deinitialized [ 213.028093][ T4378] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.216472][ T6698] autofs4:pid:6698:autofs_fill_super: called with bogus options [ 213.237024][ T4378] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.247423][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.255900][ T4378] usb 5-1: Product: syz [ 213.260211][ T4378] usb 5-1: Manufacturer: syz [ 213.265621][ T4378] usb 5-1: SerialNumber: syz [ 213.275884][ T4378] usb 5-1: config 0 descriptor?? [ 213.285816][ T4378] ch341 5-1:0.0: ch341-uart converter detected [ 213.494082][ T4378] usb 5-1: failed to receive control message: -32 [ 213.545602][ T4378] ch341-uart: probe of ttyUSB0 failed with error -32 [ 213.876220][ T6749] loop1: detected capacity change from 0 to 256 [ 215.420980][ T33] usb 5-1: USB disconnect, device number 11 [ 215.439766][ T33] ch341 5-1:0.0: device disconnected [ 216.098598][ T33] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.348307][ T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.053315][ T33] usb 5-1: config 0 has no interfaces? [ 217.076769][ T33] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 217.089415][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.098289][ T33] usb 5-1: Product: syz [ 217.102548][ T33] usb 5-1: Manufacturer: syz [ 217.107757][ T33] usb 5-1: SerialNumber: syz [ 217.128798][ T33] usb 5-1: config 0 descriptor?? [ 217.341849][ T33] usb 5-1: USB disconnect, device number 12 [ 217.733441][ T4433] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.749698][ T6804] loop3: detected capacity change from 0 to 256 [ 217.927174][ T4433] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 217.961138][ T4433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.040804][ T4433] usb 2-1: Product: syz [ 218.057827][ T4433] usb 2-1: Manufacturer: syz [ 218.078975][ T4433] usb 2-1: SerialNumber: syz [ 218.154037][ T4433] usb 2-1: config 0 descriptor?? [ 218.182498][ T4433] ch341 2-1:0.0: ch341-uart converter detected [ 218.380772][ T4433] usb 2-1: failed to receive control message: -32 [ 218.390763][ T4433] ch341-uart: probe of ttyUSB0 failed with error -32 [ 218.803398][ T4378] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.973530][ T4378] usb 3-1: device descriptor read/64, error -71 [ 219.283653][ T4378] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.473613][ T4378] usb 3-1: device descriptor read/64, error -71 [ 219.604298][ T4378] usb usb3-port1: attempt power cycle [ 220.023443][ T4378] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 220.057210][ T4378] usb 3-1: device descriptor read/8, error -71 [ 220.233731][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.343610][ T4378] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 220.385324][ T4378] usb 3-1: device descriptor read/8, error -71 [ 220.504186][ T4378] usb usb3-port1: unable to enumerate USB device [ 220.559894][ T4317] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.570213][ T4317] usb 4-1: config 0 has no interface number 0 [ 220.576813][ T4317] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.588932][ T4317] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.601550][ T4317] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 220.613232][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.643360][ T4317] usb 4-1: config 0 descriptor?? [ 220.714469][ T4433] usb 2-1: USB disconnect, device number 5 [ 220.785990][ T4433] ch341 2-1:0.0: device disconnected [ 221.023300][ T4378] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.221697][ T4378] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 221.250553][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.261777][ T4378] usb 1-1: Product: syz [ 221.272411][ T4378] usb 1-1: Manufacturer: syz [ 221.277442][ T4317] usbhid 4-1:0.1: can't add hid device: -71 [ 221.290611][ T4317] usbhid: probe of 4-1:0.1 failed with error -71 [ 221.297523][ T4378] usb 1-1: SerialNumber: syz [ 221.310073][ T4317] usb 4-1: USB disconnect, device number 8 [ 221.766939][ T4378] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 223.084634][ T26] audit: type=1800 audit(1785822075.246:34): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="UDC" dev="configfs" ino=43542 res=0 errno=0 [ 223.091932][ T6872] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 223.104781][ T6871] UDC core: g1: couldn't find an available UDC or it's busy [ 223.319873][ T4378] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 223.352430][ T4378] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 223.367991][ T4378] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 223.394982][ T4378] lan78xx: probe of 1-1:1.0 failed with error -71 [ 223.661626][ T4378] usb 1-1: USB disconnect, device number 9 [ 224.368499][ T6890] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 224.394549][ T6890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.725'. [ 225.783132][ T4359] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.783533][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.798353][ T4378] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 225.812784][ T26] audit: type=1800 audit(1785822077.966:35): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.731" name="UDC" dev="configfs" ino=43640 res=0 errno=0 [ 225.816313][ T6905] UDC core: g1: couldn't find an available UDC or it's busy [ 225.958908][ T22] usb 5-1: device descriptor read/64, error -71 [ 225.974745][ T4359] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.000718][ T4378] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.011416][ T4359] usb 4-1: config 0 has no interface number 0 [ 226.017977][ T4378] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.023066][ T4359] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.046303][ T4359] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.050711][ T4378] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 226.056347][ T4359] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 226.086729][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.090021][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.112000][ T4359] usb 4-1: config 0 descriptor?? [ 226.134057][ T4378] usb 1-1: Product: syz [ 226.138263][ T4378] usb 1-1: Manufacturer: syz [ 226.154516][ T4378] usb 1-1: SerialNumber: syz [ 226.190967][ T4378] usb 1-1: config 0 descriptor?? [ 226.253033][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 226.473102][ T22] usb 5-1: device descriptor read/64, error -71 [ 226.613599][ T22] usb usb5-port1: attempt power cycle [ 227.270813][ T5946] usb 1-1: USB disconnect, device number 10 [ 227.328375][ T4359] usbhid 4-1:0.1: can't add hid device: -71 [ 227.401609][ T4359] usbhid: probe of 4-1:0.1 failed with error -71 [ 227.577634][ T22] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 227.619025][ T4359] usb 4-1: USB disconnect, device number 9 [ 227.670138][ T22] usb 5-1: device descriptor read/8, error -71 [ 227.977406][ T4315] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.476416][ T4315] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.558616][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.585994][ T4315] usb 3-1: Product: syz [ 228.598414][ T4315] usb 3-1: Manufacturer: syz [ 228.638993][ T4315] usb 3-1: SerialNumber: syz [ 229.078785][ T4315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 230.028947][ T6953] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 230.286793][ T4315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 230.902836][ T4315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 230.913704][ T4315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 230.925134][ T4315] lan78xx: probe of 3-1:1.0 failed with error -71 [ 230.936601][ T4315] usb 3-1: USB disconnect, device number 9 [ 231.892808][ T4315] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 232.073539][ T26] audit: type=1800 audit(1785822084.227:36): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.756" name="UDC" dev="configfs" ino=44311 res=0 errno=0 [ 232.099158][ T6981] UDC core: g1: couldn't find an available UDC or it's busy [ 232.125003][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.210762][ T4315] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.283528][ T4315] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 232.342637][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.402441][ T4315] usb 5-1: Product: syz [ 232.562651][ T4315] usb 5-1: Manufacturer: syz [ 233.033658][ T4315] usb 5-1: SerialNumber: syz [ 233.051419][ T4315] usb 5-1: config 0 descriptor?? [ 233.992772][ T33] usb 5-1: USB disconnect, device number 17 [ 237.361433][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.771'. [ 237.485940][ T7029] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 237.673249][ T7032] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 238.432276][ T4359] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.545886][ T4381] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 238.623862][ T4359] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.675161][ T4359] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 238.702464][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.725746][ T4359] usb 3-1: Product: syz [ 238.737195][ T4359] usb 3-1: Manufacturer: syz [ 238.742706][ T4359] usb 3-1: SerialNumber: syz [ 238.748656][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.758392][ T4359] usb 3-1: config 0 descriptor?? [ 238.780745][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.867551][ T4381] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 238.892573][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.902536][ T4433] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.942634][ T4381] usb 2-1: config 0 descriptor?? [ 239.013177][ T7] usb 3-1: USB disconnect, device number 10 [ 239.105570][ T4433] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 239.121036][ T4433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.131819][ T4433] usb 1-1: Product: syz [ 239.141365][ T4433] usb 1-1: Manufacturer: syz [ 239.147739][ T4433] usb 1-1: SerialNumber: syz [ 239.393397][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.143890][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.152445][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.159257][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.166300][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.173785][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.182261][ T4381] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 240.191284][ T4381] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 240.215338][ T4381] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 240.223078][ T4381] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 240.225094][ T4433] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 240.243062][ T4381] isku: probe of 0003:1E7D:319C.0003 failed with error -71 [ 240.295389][ T4381] usb 2-1: USB disconnect, device number 6 [ 241.174965][ T7071] fido_id[7071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 241.217431][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 241.269730][ T4433] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 241.295906][ T4433] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 241.310495][ T4433] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.953266][ T4433] lan78xx: probe of 1-1:1.0 failed with error -71 [ 242.364898][ T4433] usb 1-1: USB disconnect, device number 11 [ 242.772224][ T4359] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 242.963737][ T4359] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 242.973747][ T4359] usb 5-1: config 127 has no interface number 0 [ 242.980047][ T4359] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 243.103369][ T4359] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 243.122678][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.130714][ T4359] usb 5-1: Product: syz [ 243.547861][ T7118] Bluetooth: MGMT ver 1.22 [ 244.292426][ T4359] usb 5-1: Manufacturer: syz [ 244.297091][ T4359] usb 5-1: SerialNumber: syz [ 244.305650][ T7089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.418114][ T7122] device syzkaller1 entered promiscuous mode [ 244.491625][ T7124] loop1: detected capacity change from 0 to 256 [ 244.846116][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 245.252700][ T7089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.551347][ T4359] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 245.753407][ T4359] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 245.780619][ T4359] asix 5-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 245.833926][ T4359] asix: probe of 5-1:127.57 failed with error -71 [ 245.841963][ T4315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.866309][ T4359] usb 5-1: USB disconnect, device number 18 [ 246.035849][ T4315] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.054157][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.109400][ T4315] usb 2-1: Product: syz [ 246.119376][ T4315] usb 2-1: Manufacturer: syz [ 246.130340][ T4315] usb 2-1: SerialNumber: syz [ 246.562182][ T4315] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 246.596343][ T7166] loop4: detected capacity change from 0 to 256 [ 246.956335][ T7170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 247.654111][ T7180] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 247.656537][ T4315] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 247.758710][ T4315] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.438721][ T4315] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 248.458749][ T4315] lan78xx: probe of 2-1:1.0 failed with error -32 [ 248.470150][ T4315] usb 2-1: USB disconnect, device number 7 [ 248.781769][ T4433] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.994663][ T4433] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.021291][ T4433] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 249.025172][ T7207] loop3: detected capacity change from 0 to 256 [ 249.050118][ T4433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.086847][ T4433] usb 1-1: Product: syz [ 249.217154][ T4433] usb 1-1: Manufacturer: syz [ 249.290892][ T4433] usb 1-1: SerialNumber: syz [ 249.383931][ T4433] usb 1-1: config 0 descriptor?? [ 249.718631][ T4433] usb 1-1: USB disconnect, device number 12 [ 250.262759][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 251.791525][ T33] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 252.498965][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.510240][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.523211][ T33] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.538172][ T33] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.549014][ T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.637482][ T33] usb 1-1: config 0 descriptor?? [ 253.242969][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 253.851808][ T33] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 253.914890][ T7259] loop1: detected capacity change from 0 to 256 [ 255.213780][ T33] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 255.317817][ T33] usb 1-1: USB disconnect, device number 13 [ 255.473226][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.479666][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.136270][ T7272] fido_id[7272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 256.604436][ T7302] loop3: detected capacity change from 0 to 256 [ 256.901039][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 258.689931][ T7335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'. [ 259.899899][ T7345] loop1: detected capacity change from 0 to 256 [ 260.184116][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 262.061327][ T4320] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 262.271030][ T4320] usb 5-1: device descriptor read/64, error -71 [ 262.333895][ T7374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.884'. [ 262.529610][ T7381] loop2: detected capacity change from 0 to 256 [ 262.560987][ T4320] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 263.028836][ T7382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 263.035762][ T7382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.459624][ T4320] usb 5-1: device descriptor read/64, error -71 [ 263.707257][ T7382] vhci_hcd vhci_hcd.0: Device attached [ 263.744471][ T4320] usb usb5-port1: attempt power cycle [ 263.757401][ T7384] vhci_hcd: connection closed [ 263.760481][ T4479] vhci_hcd: stop threads [ 263.803684][ T4479] vhci_hcd: release socket [ 263.808413][ T4479] vhci_hcd: disconnect device [ 263.859806][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 266.797506][ T7425] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 266.800458][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'. [ 266.904647][ T7425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.027670][ T7425] bond1: (slave geneve2): making interface the new active one [ 267.092998][ T7425] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 267.231771][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 268.616095][ T33] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.880654][ T33] usb 3-1: device descriptor read/64, error -71 [ 269.400537][ T4320] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 269.680626][ T33] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.688221][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.840633][ T33] usb 3-1: device descriptor read/64, error -71 [ 270.004268][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.037148][ T4320] usb 5-1: Product: syz [ 270.057439][ T4320] usb 5-1: Manufacturer: syz [ 270.062541][ T4320] usb 5-1: SerialNumber: syz [ 270.110935][ T33] usb usb3-port1: attempt power cycle [ 270.348661][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 270.640706][ T33] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 270.682691][ T33] usb 3-1: device descriptor read/8, error -71 [ 270.829228][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 270.960493][ T33] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 270.992723][ T33] usb 3-1: device descriptor read/8, error -71 [ 271.140284][ T33] usb usb3-port1: unable to enumerate USB device [ 271.851017][ T7460] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 272.035563][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 272.297799][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 272.330954][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 272.340699][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 272.362564][ T4320] lan78xx: probe of 5-1:1.0 failed with error -71 [ 272.404667][ T4320] usb 5-1: USB disconnect, device number 22 [ 273.898202][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 274.940283][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 275.290812][ T7] usb 2-1: device descriptor read/64, error -71 [ 275.474463][ T7519] 9pnet: Could not find request transport: 0xffffffffffffffff [ 275.580364][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 275.743681][ T7] usb 2-1: device descriptor read/64, error -71 [ 275.870664][ T7] usb usb2-port1: attempt power cycle [ 275.890449][ T33] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.463737][ T7532] autofs4:pid:7532:autofs_fill_super: called with bogus options [ 276.523031][ T33] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.670093][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 277.267210][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.270567][ T7] usb 2-1: device descriptor read/8, error -71 [ 277.454606][ T33] usb 3-1: Product: syz [ 277.545900][ T33] usb 3-1: Manufacturer: syz [ 277.580026][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.686865][ T33] usb 3-1: SerialNumber: syz [ 278.015037][ T7] usb 2-1: device descriptor read/8, error -71 [ 278.150280][ T7] usb usb2-port1: unable to enumerate USB device [ 278.227206][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 278.734172][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 279.694691][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 279.744615][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 279.764783][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 279.794705][ T33] lan78xx: probe of 3-1:1.0 failed with error -32 [ 279.839045][ T33] usb 3-1: USB disconnect, device number 15 [ 281.041296][ T7628] autofs4:pid:7628:autofs_fill_super: called with bogus options [ 281.063052][ T7622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 281.069617][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.247105][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 281.253828][ T4378] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.427066][ T7624] vhci_hcd: connection closed [ 281.429520][ T4442] vhci_hcd: stop threads [ 281.536854][ T4381] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 281.548542][ T4378] usb 3-1: device descriptor read/64, error -71 [ 281.664264][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 282.242653][ T4442] vhci_hcd: release socket [ 282.329456][ T4442] vhci_hcd: disconnect device [ 282.359814][ T4378] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 282.569782][ T4378] usb 3-1: device descriptor read/64, error -71 [ 282.759030][ T4378] usb usb3-port1: attempt power cycle [ 283.190015][ T4378] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 283.253701][ T4378] usb 3-1: device descriptor read/8, error -71 [ 283.338744][ T7683] futex_wake_op: syz.1.950 tries to shift op by 144; fix this program [ 284.338942][ T7683] futex_wake_op: syz.1.950 tries to shift op by 144; fix this program [ 284.379793][ T4378] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 284.573137][ T4378] usb 3-1: device descriptor read/8, error -71 [ 284.690565][ T4378] usb usb3-port1: unable to enumerate USB device [ 284.779760][ T33] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.999439][ T33] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.009823][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.018130][ T33] usb 1-1: Product: syz [ 285.027123][ T33] usb 1-1: Manufacturer: syz [ 285.034910][ T33] usb 1-1: SerialNumber: syz [ 285.393635][ T7712] autofs4:pid:7712:autofs_fill_super: called with bogus options [ 285.574828][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 287.440979][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 287.500768][ T4381] vhci_hcd: vhci_device speed not set [ 287.521067][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 287.611328][ T33] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.954711][ T33] lan78xx: probe of 1-1:1.0 failed with error -71 [ 288.014698][ T33] usb 1-1: USB disconnect, device number 14 [ 288.168598][ T7767] loop4: detected capacity change from 0 to 256 [ 289.372224][ T126] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.580962][ T126] usb 1-1: no configurations [ 289.585673][ T126] usb 1-1: can't read configurations, error -22 [ 289.759595][ T126] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 289.950213][ T126] usb 1-1: no configurations [ 289.954854][ T126] usb 1-1: can't read configurations, error -22 [ 289.971493][ T126] usb usb1-port1: attempt power cycle [ 290.389345][ T126] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 290.483551][ T7796] autofs4:pid:7796:autofs_fill_super: called with bogus options [ 290.570410][ T126] usb 1-1: no configurations [ 290.575051][ T126] usb 1-1: can't read configurations, error -22 [ 291.419270][ T126] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 291.810410][ T126] usb 1-1: device descriptor read/8, error -71 [ 291.939512][ T126] usb usb1-port1: unable to enumerate USB device [ 294.041792][ T7845] loop3: detected capacity change from 0 to 256 [ 296.353307][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 297.581677][ T22] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.804187][ T22] usb 3-1: no configurations [ 297.816059][ T22] usb 3-1: can't read configurations, error -22 [ 297.978967][ T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 298.631473][ T22] usb 3-1: no configurations [ 298.680194][ T22] usb 3-1: can't read configurations, error -22 [ 298.771469][ T22] usb usb3-port1: attempt power cycle [ 299.309590][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 299.358703][ T22] usb 3-1: no configurations [ 299.363838][ T22] usb 3-1: can't read configurations, error -22 [ 299.744588][ T22] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.668004][ T22] usb 3-1: device descriptor read/8, error -71 [ 300.870798][ T22] usb usb3-port1: unable to enumerate USB device [ 300.987602][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 303.860272][ T4320] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 305.165732][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.192123][ T4320] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.236134][ T4320] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 305.258030][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.278508][ T4320] usb 2-1: Product: syz [ 305.288792][ T4320] usb 2-1: Manufacturer: syz [ 305.297189][ T4320] usb 2-1: SerialNumber: syz [ 305.310903][ T4320] usb 2-1: config 0 descriptor?? [ 305.980374][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 306.636373][ T4381] usb 2-1: USB disconnect, device number 12 [ 307.134719][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.172190][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.768311][ T5946] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 311.119999][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 311.126907][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.142348][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.152742][ T5946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 311.178136][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.208221][ T5946] usb 5-1: SerialNumber: syz [ 311.241106][ T5946] usb 5-1: 0:2 : does not exist [ 311.587763][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 311.640217][ T5946] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 311.665061][ T5946] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 311.736982][ T5946] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 311.791515][ T5946] usb 5-1: USB disconnect, device number 23 [ 312.080466][ T6577] udevd[6577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.327456][ T8007] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1028'. [ 313.217100][ T8017] device syzkaller0 entered promiscuous mode [ 315.311925][ T8039] loop0: detected capacity change from 0 to 256 [ 315.415302][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 316.901697][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.909830][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.969015][ T8060] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1041'. [ 317.047984][ T33] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 317.729645][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 317.736523][ T33] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.748772][ T33] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.762287][ T33] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 317.771916][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.789179][ T33] usb 3-1: SerialNumber: syz [ 317.817897][ T33] usb 3-1: 0:2 : does not exist [ 317.990388][ T8070] device syzkaller0 entered promiscuous mode [ 318.218355][ T33] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 318.234787][ T33] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 318.268410][ T33] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 318.297243][ T33] usb 3-1: USB disconnect, device number 24 [ 318.347877][ T7] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 319.290995][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.310529][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.320141][ T7] usb 5-1: Product: syz [ 319.398242][ T6577] udevd[6577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.418037][ T7] usb 5-1: Manufacturer: syz [ 319.422669][ T7] usb 5-1: SerialNumber: syz [ 319.536286][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 320.294017][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 320.843954][ T8090] loop2: detected capacity change from 0 to 256 [ 321.780739][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 321.860727][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.943574][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.995686][ T8097] autofs4:pid:8097:autofs_fill_super: called with bogus options [ 322.190027][ T7] lan78xx: probe of 5-1:1.0 failed with error -32 [ 322.631004][ T7] usb 5-1: USB disconnect, device number 24 [ 323.123742][ T8139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1055'. [ 324.200015][ T8144] device syzkaller0 entered promiscuous mode [ 325.486319][ T8162] loop3: detected capacity change from 0 to 256 [ 327.860971][ T4320] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 328.635902][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 328.645535][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.693551][ T4320] usb 5-1: Product: syz [ 328.718255][ T4320] usb 5-1: Manufacturer: syz [ 328.751252][ T4320] usb 5-1: SerialNumber: syz [ 328.753701][ T8188] device syzkaller0 entered promiscuous mode [ 329.185890][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 330.338916][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 330.372818][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 330.413233][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 330.445138][ T4320] lan78xx: probe of 5-1:1.0 failed with error -32 [ 330.481856][ T4320] usb 5-1: USB disconnect, device number 25 [ 330.481873][ T8215] loop0: detected capacity change from 0 to 256 [ 330.587559][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 330.779563][ T14] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.815652][ T14] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 330.852416][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.890559][ T14] usb 2-1: Product: syz [ 330.913462][ T14] usb 2-1: Manufacturer: syz [ 330.952501][ T14] usb 2-1: SerialNumber: syz [ 330.981415][ T14] usb 2-1: config 0 descriptor?? [ 333.383542][ T14] usb 2-1: USB disconnect, device number 13 [ 334.318644][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.389999][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.245002][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 337.326876][ T4378] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 338.022888][ T4378] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.037422][ T4378] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 338.046665][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.054672][ T4378] usb 3-1: Product: syz [ 338.928289][ T4378] usb 3-1: Manufacturer: syz [ 338.932943][ T4378] usb 3-1: SerialNumber: syz [ 339.033782][ T4378] usb 3-1: config 0 descriptor?? [ 340.752960][ T4378] usb 3-1: USB disconnect, device number 25 [ 341.136666][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 341.342843][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.407920][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.558494][ T7] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 341.697892][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.890719][ T7] usb 2-1: Product: syz [ 341.902393][ T7] usb 2-1: Manufacturer: syz [ 341.917130][ T7] usb 2-1: SerialNumber: syz [ 341.923479][ T7] usb 2-1: config 0 descriptor?? [ 342.218191][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 343.854640][ T22] usb 2-1: USB disconnect, device number 14 [ 344.866372][ T33] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.050711][ T33] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 345.101587][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.130336][ T33] usb 4-1: Product: syz [ 345.139290][ T33] usb 4-1: Manufacturer: syz [ 345.154327][ T33] usb 4-1: SerialNumber: syz [ 345.190031][ T33] usb 4-1: config 0 descriptor?? [ 345.212926][ T33] ch341 4-1:0.0: ch341-uart converter detected [ 345.432093][ T33] usb 4-1: failed to receive control message: -32 [ 345.449212][ T33] ch341-uart: probe of ttyUSB0 failed with error -32 [ 345.457912][ T33] usb 4-1: USB disconnect, device number 10 [ 345.491587][ T33] ch341 4-1:0.0: device disconnected [ 346.916675][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 349.505407][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.514161][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.788370][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.799983][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.207378][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 353.445870][ T33] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 353.630285][ T33] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 353.700658][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.325128][ T33] usb 3-1: Product: syz [ 354.334842][ T33] usb 3-1: Manufacturer: syz [ 354.343873][ T33] usb 3-1: SerialNumber: syz [ 355.766311][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 357.252139][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 357.302281][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 357.320727][ T33] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 357.360750][ T33] lan78xx: probe of 3-1:1.0 failed with error -32 [ 357.365703][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 357.403237][ T33] usb 3-1: USB disconnect, device number 26 [ 357.559264][ T7] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 357.572775][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.585262][ T7] usb 4-1: Product: syz [ 357.590220][ T7] usb 4-1: Manufacturer: syz [ 357.629970][ T7] usb 4-1: SerialNumber: syz [ 357.659290][ T7] usb 4-1: config 0 descriptor?? [ 357.746441][ T7] ch341 4-1:0.0: ch341-uart converter detected [ 358.671440][ T7] usb 4-1: failed to receive control message: -32 [ 358.859330][ T7] ch341-uart: probe of ttyUSB0 failed with error -32 [ 358.972600][ T7] usb 4-1: USB disconnect, device number 11 [ 359.166960][ T7] ch341 4-1:0.0: device disconnected [ 360.750859][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 366.348629][ T4378] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 366.916735][ T4378] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.937069][ T4378] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 367.000525][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 367.560082][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.605212][ T4378] usb 5-1: Product: syz [ 367.614055][ T4378] usb 5-1: Manufacturer: syz [ 367.635447][ T4378] usb 5-1: SerialNumber: syz [ 367.849614][ T4378] usb 5-1: config 0 descriptor?? [ 368.035042][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 368.819135][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.844988][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.745346][ T7] usb 2-1: Product: syz [ 369.749565][ T7] usb 2-1: Manufacturer: syz [ 369.845429][ T7] usb 2-1: SerialNumber: syz [ 369.934224][ T14] usb 5-1: USB disconnect, device number 26 [ 370.338907][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 371.211328][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 371.332802][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 371.363240][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 371.407425][ T7] lan78xx: probe of 2-1:1.0 failed with error -32 [ 371.437671][ T7] usb 2-1: USB disconnect, device number 15 [ 373.334181][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 378.336612][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.342998][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.064481][ T4378] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 379.269220][ T4378] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 379.322680][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.357402][ T4378] usb 5-1: Product: syz [ 379.375361][ T4378] usb 5-1: Manufacturer: syz [ 379.397406][ T4378] usb 5-1: SerialNumber: syz [ 379.767850][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 380.519016][ T4378] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 381.162921][ T4378] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 381.220429][ T4378] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 381.275295][ T4378] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 381.334848][ T4378] lan78xx: probe of 5-1:1.0 failed with error -32 [ 382.472318][ T4378] usb 5-1: USB disconnect, device number 27 [ 383.388416][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 385.864086][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 386.177265][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 386.910347][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.928089][ T14] usb 3-1: Product: syz [ 386.932295][ T14] usb 3-1: Manufacturer: syz [ 386.958332][ T14] usb 3-1: SerialNumber: syz [ 387.355491][ T8755] device syzkaller0 entered promiscuous mode [ 387.397946][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 388.119120][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 388.176470][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 388.235741][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 388.791636][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 388.832451][ T14] usb 3-1: USB disconnect, device number 27 [ 389.583899][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 389.857090][ T14] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 389.873816][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.909824][ T14] usb 3-1: Product: syz [ 389.921514][ T14] usb 3-1: Manufacturer: syz [ 389.946151][ T14] usb 3-1: SerialNumber: syz [ 389.961326][ T14] usb 3-1: config 0 descriptor?? [ 389.986035][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 390.000525][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 390.237143][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 391.007249][ T14] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 391.068188][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.128380][ T14] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 391.169928][ T14] usb 3-1: media controller created [ 391.250087][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.593803][ T8795] device syzkaller0 entered promiscuous mode [ 391.672768][ T14] DVB: Unable to find symbol dib7000p_attach() [ 391.687822][ T14] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 392.343656][ T14] rc_core: IR keymap rc-dib0700-rc5 not found [ 392.353048][ T14] Registered IR keymap rc-empty [ 392.401840][ T14] dvb-usb: could not initialize remote control. [ 392.452757][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 392.679246][ T14] usb 3-1: USB disconnect, device number 28 [ 392.918155][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 393.503644][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 393.756836][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.793639][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.925197][ T14] usb 3-1: Product: syz [ 393.929412][ T14] usb 3-1: Manufacturer: syz [ 394.599064][ T14] usb 3-1: SerialNumber: syz [ 395.349652][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 395.839826][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 395.892290][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.929142][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.041343][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 397.110385][ T14] usb 3-1: USB disconnect, device number 29 [ 397.194325][ T8839] device syzkaller0 entered promiscuous mode [ 400.327936][ T8871] loop2: detected capacity change from 0 to 256 [ 400.399435][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 401.299912][ T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 402.556336][ T22] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.571826][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.591747][ T22] usb 4-1: Product: syz [ 402.600271][ T22] usb 4-1: Manufacturer: syz [ 402.612313][ T22] usb 4-1: SerialNumber: syz [ 403.090326][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 403.559780][ T8897] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 403.770250][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 403.829066][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.947208][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 404.028993][ T22] lan78xx: probe of 4-1:1.0 failed with error -32 [ 404.194783][ T22] usb 4-1: USB disconnect, device number 12 [ 405.719398][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 406.285881][ T8919] loop0: detected capacity change from 0 to 256 [ 407.503265][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 409.786502][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 410.382614][ T14] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 410.584389][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 410.610762][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.642633][ T14] usb 3-1: Product: syz [ 410.757247][ T14] usb 3-1: Manufacturer: syz [ 410.761889][ T14] usb 3-1: SerialNumber: syz [ 411.587361][ T8974] loop4: detected capacity change from 0 to 256 [ 412.219001][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 413.136770][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 413.193000][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 413.273458][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 413.756394][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 414.044436][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 414.727342][ T14] usb 3-1: USB disconnect, device number 30 [ 416.193482][ T9019] loop3: detected capacity change from 0 to 256 [ 416.445310][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 417.910835][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.920328][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.342253][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 420.535648][ T9062] loop1: detected capacity change from 0 to 256 [ 422.072102][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 423.811866][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 424.015661][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.038369][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.065225][ T14] usb 3-1: Product: syz [ 424.079686][ T14] usb 3-1: Manufacturer: syz [ 424.086436][ T14] usb 3-1: SerialNumber: syz [ 424.376285][ T9104] loop0: detected capacity change from 0 to 256 [ 424.619685][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 424.640110][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 424.661806][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 424.671308][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 425.062331][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 425.393799][ T9112] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 426.871781][ T7] usb 3-1: USB disconnect, device number 31 [ 428.338707][ T9156] loop4: detected capacity change from 0 to 256 [ 431.051733][ T14] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 431.273409][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 431.292671][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.304347][ T14] usb 3-1: Product: syz [ 431.325444][ T14] usb 3-1: Manufacturer: syz [ 431.332339][ T14] usb 3-1: SerialNumber: syz [ 433.254861][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 433.600650][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 433.665715][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 433.711576][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.742959][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 435.033435][ T9206] loop1: detected capacity change from 0 to 256 [ 435.157230][ T22] usb 3-1: USB disconnect, device number 32 [ 436.139668][ T9209] sctp: failed to load transform for md5: -2 [ 438.839819][ T9260] binder: 9258:9260 ioctl c0205867 200000000840 returned -22 [ 438.904211][ T9263] loop2: detected capacity change from 0 to 256 [ 440.450228][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.456674][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.020956][ T22] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 443.694053][ T22] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.740790][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.748835][ T22] usb 5-1: Product: syz [ 443.852447][ T22] usb 5-1: Manufacturer: syz [ 443.857100][ T22] usb 5-1: SerialNumber: syz [ 443.924730][ T22] usb 5-1: can't set config #1, error -71 [ 443.960961][ T22] usb 5-1: USB disconnect, device number 28 [ 444.053911][ T9296] futex_wake_op: syz.1.1387 tries to shift op by 144; fix this program [ 444.062849][ T9296] futex_wake_op: syz.1.1387 tries to shift op by 144; fix this program [ 445.409262][ T9315] loop1: detected capacity change from 0 to 256 [ 447.190831][ T4378] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 447.411946][ T4378] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 447.720617][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.744108][ T4378] usb 3-1: Product: syz [ 447.784666][ T4378] usb 3-1: Manufacturer: syz [ 447.829593][ T4378] usb 3-1: SerialNumber: syz [ 448.266635][ T4378] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 449.192998][ T4378] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 449.244394][ T4378] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 449.337546][ T4378] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 450.943433][ T4378] lan78xx: probe of 3-1:1.0 failed with error -71 [ 451.115893][ T4378] usb 3-1: USB disconnect, device number 33 [ 453.114881][ T9365] loop0: detected capacity change from 0 to 256 [ 457.255914][ T9393] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 457.322560][ T9393] CIFS: Attempting to mount \\127.0.0.1\share [ 457.413058][ T9393] CIFS: VFS: Error connecting to socket. Aborting operation. [ 457.434721][ T9393] CIFS: VFS: cifs_mount failed w/return code = -4 [ 459.629946][ T4320] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 459.947474][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.973620][ T9427] loop1: detected capacity change from 0 to 256 [ 459.992267][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.049868][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 460.349381][ T9424] IPVS: stopping backup sync thread 6872 ... [ 460.991683][ T4320] usb 5-1: config 0 has no interfaces? [ 461.020259][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.029357][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.070249][ T4320] usb 5-1: config 0 descriptor?? [ 462.195747][ T4320] usb 5-1: can't set config #0, error -71 [ 462.202883][ T4320] usb 5-1: USB disconnect, device number 29 [ 465.548505][ T9471] loop3: detected capacity change from 0 to 256 [ 468.746424][ T9496] futex_wake_op: syz.0.1441 tries to shift op by 144; fix this program [ 468.755423][ T9496] futex_wake_op: syz.0.1441 tries to shift op by 144; fix this program [ 472.063385][ T9529] futex_wake_op: syz.2.1452 tries to shift op by 144; fix this program [ 472.072644][ T9529] futex_wake_op: syz.2.1452 tries to shift op by 144; fix this program [ 475.898721][ T9563] futex_wake_op: syz.3.1464 tries to shift op by 144; fix this program [ 475.907576][ T9563] futex_wake_op: syz.3.1464 tries to shift op by 144; fix this program [ 476.201331][ T9571] loop0: detected capacity change from 0 to 256 [ 480.461909][ T9611] futex_wake_op: syz.0.1476 tries to shift op by 144; fix this program [ 480.472227][ T9611] futex_wake_op: syz.0.1476 tries to shift op by 144; fix this program [ 483.555033][ T9631] loop2: detected capacity change from 0 to 256 [ 490.031600][ T9718] loop4: detected capacity change from 0 to 256 [ 491.849136][ T9731] futex_wake_op: syz.4.1499 tries to shift op by 144; fix this program [ 491.895293][ T9731] futex_wake_op: syz.4.1499 tries to shift op by 144; fix this program [ 496.681059][ T9773] loop3: detected capacity change from 0 to 256 [ 499.387732][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.399154][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.037814][ T7] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 500.087135][ T9808] futex_wake_op: syz.4.1518 tries to shift op by 144; fix this program [ 500.134804][ T9808] futex_wake_op: syz.4.1518 tries to shift op by 144; fix this program [ 500.247601][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 500.255623][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.295194][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.324413][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 500.342486][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 500.352263][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.360541][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1520'. [ 500.378084][ T7] usb 3-1: config 0 descriptor?? [ 500.396337][ T7] hub 3-1:0.0: USB hub found [ 500.406872][ T9810] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 500.591628][ T7] hub 3-1:0.0: 1 port detected [ 500.883119][ T9719] syz.1.1496 (9719): drop_caches: 1 [ 501.004251][ T7] usb 3-1: USB disconnect, device number 34 [ 501.209682][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.216083][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.365677][ T9815] loop1: detected capacity change from 0 to 256 [ 505.112038][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 506.971174][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 507.220345][ T4285] block nbd0: Receive control failed (result -107) [ 507.429737][ T9867] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 507.685966][ T9868] fuse: Bad value for 'fd' [ 509.250592][ T9878] futex_wake_op: syz.0.1536 tries to shift op by 144; fix this program [ 509.298307][ T9878] futex_wake_op: syz.0.1536 tries to shift op by 144; fix this program [ 510.626288][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1543'. [ 513.252817][ T9921] futex_wake_op: syz.0.1553 tries to shift op by 144; fix this program [ 513.287708][ T9921] futex_wake_op: syz.0.1553 tries to shift op by 144; fix this program [ 515.582171][ T9927] capability: warning: `syz.1.1557' uses deprecated v2 capabilities in a way that may be insecure [ 516.463245][ T9941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.480667][ T9941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.493568][ T9941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.507296][ T9941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.514921][ T9941] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 516.522640][ T9941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.521056][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 517.685986][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.693378][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.702465][ T9940] device bridge_slave_0 entered promiscuous mode [ 517.712953][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.720798][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.729325][ T9940] device bridge_slave_1 entered promiscuous mode [ 517.755008][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.770303][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.852027][ T9940] team0: Port device team_slave_0 added [ 518.114223][ T9940] team0: Port device team_slave_1 added [ 518.116612][ T5946] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 518.328194][ T5946] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 518.346263][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.353617][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.353694][ T5946] usb 3-1: Product: syz [ 518.388188][ T5946] usb 3-1: Manufacturer: syz [ 518.392834][ T5946] usb 3-1: SerialNumber: syz [ 518.393721][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.406995][ T5946] usb 3-1: config 0 descriptor?? [ 518.441844][ T5946] ch341 3-1:0.0: ch341-uart converter detected [ 519.174878][ T9941] Bluetooth: hci5: command 0x0409 tx timeout [ 519.217100][ T5946] usb 3-1: failed to receive control message: -71 [ 519.223600][ T5946] ch341-uart: probe of ttyUSB0 failed with error -71 [ 519.246228][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.294097][ T5946] usb 3-1: USB disconnect, device number 35 [ 519.304687][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.315890][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.344244][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.357421][ T5946] ch341 3-1:0.0: device disconnected [ 519.785990][ T9940] device hsr_slave_0 entered promiscuous mode [ 519.806124][ T9940] device hsr_slave_1 entered promiscuous mode [ 519.814987][ T9940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.823933][ T9940] Cannot create hsr debugfs directory [ 520.630278][ T9940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.648445][ T9940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.662622][ T9940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.675297][ T9940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.693356][ T26] audit: type=1326 audit(1785822372.863:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.2.1577" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f3b99e019 code=0x0 [ 520.929193][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.945153][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.959910][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.011568][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.047284][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.066599][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.075292][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.083596][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.113120][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.124379][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.133928][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.144823][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.152000][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.163508][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.182304][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.194003][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.213636][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.222345][ T9941] Bluetooth: hci5: command 0x041b tx timeout [ 521.238687][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.248320][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.267322][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.276048][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.294254][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.313675][ T4317] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 521.333903][ T9940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.346236][ T9940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.356924][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.366137][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.516414][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 521.523709][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.551874][ T4317] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 521.719193][ T4317] usb 5-1: config 9 has no interface number 0 [ 521.725783][ T4317] usb 5-1: config 9 interface 57 has no altsetting 0 [ 521.747392][ T4317] usb 5-1: string descriptor 0 read error: -22 [ 521.753685][ T4317] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 521.763029][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.841852][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 523.039220][ T4317] video4linux radio48: keene_cmd_set failed (-71) [ 523.050006][ T4317] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 523.070485][ T4317] usb 5-1: USB disconnect, device number 30 [ 523.286601][ T9941] Bluetooth: hci5: command 0x040f tx timeout [ 523.370710][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.387558][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.399154][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.329966][T10038] autofs4:pid:10038:autofs_fill_super: called with bogus options [ 524.338086][ T4433] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 524.593852][ T4433] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 524.662858][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 525.234943][ T4433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.249682][ T4433] usb 3-1: Product: syz [ 525.253940][ T4433] usb 3-1: Manufacturer: syz [ 525.258824][ T4433] usb 3-1: SerialNumber: syz [ 525.366716][ T9941] Bluetooth: hci5: command 0x0419 tx timeout [ 525.676192][ T4433] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 526.596840][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.636729][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.687457][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.734242][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.774536][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.794988][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.799518][ T4433] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 526.820413][ T9940] device veth0_vlan entered promiscuous mode [ 526.873761][ T9940] device veth1_vlan entered promiscuous mode [ 526.876197][ T4433] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 526.895394][ T4433] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 526.909706][ T4433] lan78xx: probe of 3-1:1.0 failed with error -32 [ 527.744884][ T4433] usb 3-1: USB disconnect, device number 36 [ 527.763357][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.826921][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.355360][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.404748][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.509783][ T9940] device veth0_macvtap entered promiscuous mode [ 528.527934][ T9940] device veth1_macvtap entered promiscuous mode [ 529.288865][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.468662][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.853863][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.893106][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.906318][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.925881][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.965392][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.025932][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.051331][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.062244][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.075429][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.093232][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.115469][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.126602][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.167236][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 530.234547][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.255090][T10127] autofs4:pid:10127:autofs_fill_super: called with bogus options [ 531.110854][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.195970][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.225118][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.369924][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.110493][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.130902][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.152347][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.172734][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.190545][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.210822][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.265863][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.337646][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.533009][ T9940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.564977][ T9940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.706468][ T9940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.715210][ T9940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.993093][ T4766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.041612][ T4766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.172954][ T5489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.225109][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.230400][ T5489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.324707][T10204] 9pnet_fd: Insufficient options for proto=fd [ 535.343848][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.346007][T10212] autofs4:pid:10212:autofs_fill_super: called with bogus options [ 536.598546][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 537.549907][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1560'. [ 539.965452][ T4320] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 540.178961][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.206409][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 540.286092][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 540.805706][ T4320] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.820095][ T4320] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 540.838011][ T4320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.870264][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.896453][ T4320] usb 5-1: Product: syz [ 540.908117][ T4320] usb 5-1: Manufacturer: syz [ 540.945313][ T4320] usb 5-1: SerialNumber: syz [ 540.959493][T10289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.163865][T10308] binder: 10305:10308 ioctl c0205867 200000000840 returned -22 [ 541.176751][T10289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.263506][T10308] binder_alloc: 10305: binder_alloc_buf, no vma [ 543.732120][ T4320] cdc_ncm 5-1:1.0: bind() failure [ 543.758035][ T4320] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 543.777066][ T4320] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 543.786120][ T4320] usbtest: probe of 5-1:1.1 failed with error -71 [ 543.812258][ T4320] usb 5-1: USB disconnect, device number 31 [ 544.736265][ T26] audit: type=1326 audit(1785822396.914:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.5.1646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a719e019 code=0x0 [ 546.035005][ T4381] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 546.214983][ T4381] usb 5-1: Using ep0 maxpacket: 8 [ 546.222182][ T4381] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.273049][ T4381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.313122][ T4381] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 546.358153][ T4381] usb 5-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 546.782354][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.794967][ T4381] usb 5-1: Product: syz [ 546.799212][ T4381] usb 5-1: Manufacturer: syz [ 546.807976][ T4381] usb 5-1: SerialNumber: syz [ 547.061935][ T4381] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 547.171555][T10356] binder: 10354:10356 ioctl c0205867 200000000840 returned -22 [ 547.196924][ T4381] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 547.223611][T10356] binder: BINDER_SET_CONTEXT_MGR already set [ 547.248335][ T4381] usb 5-1: USB disconnect, device number 32 [ 547.270588][T10356] binder: 10354:10356 ioctl 4018620d 200000004a80 returned -16 [ 547.310002][ T6577] udevd[6577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.492535][T10359] autofs4:pid:10359:autofs_fill_super: called with bogus options [ 549.194864][ T4381] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 549.504817][ T4381] usb 5-1: Using ep0 maxpacket: 16 [ 549.515547][ T4381] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 549.584833][ T4381] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.634764][ T4381] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.713290][ T4381] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.742088][ T4381] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 549.789959][ T4381] usb 5-1: config 0 has no interface number 0 [ 550.174347][ T4381] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 550.187647][ T4381] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 550.199664][ T4381] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 550.215171][ T4381] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.255413][ T4381] usb 5-1: config 0 interface 125 has no altsetting 0 [ 550.271147][ T4381] usb 5-1: config 0 interface 125 has no altsetting 2 [ 550.304085][ T4381] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 550.363906][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.409245][ T26] audit: type=1326 audit(1785822402.585:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.0.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88d559e019 code=0x0 [ 550.446733][ T4381] usb 5-1: Product: syz [ 550.463454][ T4381] usb 5-1: Manufacturer: syz [ 550.483777][ T4381] usb 5-1: SerialNumber: syz [ 550.525484][ T4381] usb 5-1: config 0 descriptor?? [ 550.559749][ T4381] usb 5-1: selecting invalid altsetting 2 [ 550.797718][T10434] binder: 10433:10434 ioctl c0205867 200000000840 returned -22 [ 551.684674][ T4381] get_1284_register timeout [ 551.689516][ C1] usb 5-1: async_complete: urb error -104 [ 551.695403][ C1] usb 5-1: async_complete: urb error -104 [ 553.160744][ T4317] usb 5-1: USB disconnect, device number 33 [ 557.749740][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 560.769294][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.819459][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.131814][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 562.244619][ T4381] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 562.492112][ T4381] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 562.646030][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.653246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.689020][ T4381] usb 3-1: config 0 has no interface number 0 [ 562.717735][ T4381] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 562.738112][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.765608][ T4381] usb 3-1: Product: syz [ 562.775799][ T4381] usb 3-1: Manufacturer: syz [ 562.823449][ T4381] usb 3-1: SerialNumber: syz [ 562.917158][ T4381] usb 3-1: config 0 descriptor?? [ 563.132317][ T4381] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 563.159802][ T4381] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 563.182338][ T4381] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 563.211126][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.224553][ T4381] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 563.251908][ T4381] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 563.253818][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.410736][T10592] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 563.596431][ T4381] usb 3-1: USB disconnect, device number 37 [ 563.623839][ T4381] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 563.642432][ T4381] keyspan 3-1:0.133: device disconnected [ 564.452394][ T5464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.653174][ T5495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.564999][ T4285] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 566.924065][ T4320] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 567.149189][ T4320] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 567.178830][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.553811][ T4317] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 568.757986][ T4317] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 568.803710][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.884197][ T4285] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 568.963488][ T4317] usb 2-1: Product: syz [ 568.996592][ T4317] usb 2-1: Manufacturer: syz [ 569.042156][ T4317] usb 2-1: SerialNumber: syz [ 570.333103][ T6267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.346145][ T4478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.377816][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 570.450323][ T4320] qmi_wwan: probe of 3-1:1.0 failed with error -71 [ 570.507574][ T4320] usb 3-1: USB disconnect, device number 38 [ 570.523685][T10688] autofs4:pid:10688:autofs_fill_super: called with bogus options [ 570.742154][T10695] binder: 10694:10695 ioctl c0205867 200000000840 returned -22 [ 570.756768][T10695] binder: BINDER_SET_CONTEXT_MGR already set [ 570.762874][T10695] binder: 10694:10695 ioctl 4018620d 200000004a80 returned -16 [ 571.063637][ T4320] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 571.218239][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 572.902051][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 573.023473][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 573.034780][ T4320] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 573.043128][ T4320] usb 3-1: config 0 has no interface number 0 [ 573.052447][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 573.094360][ T4320] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 573.142356][ T4320] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 573.201608][ T4320] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.298562][ T4320] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 573.338505][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.358739][ T4320] usb 3-1: Product: syz [ 573.364043][ T4320] usb 3-1: Manufacturer: syz [ 573.368747][ T4320] usb 3-1: SerialNumber: syz [ 573.415406][ T4320] usb 3-1: config 0 descriptor?? [ 573.431084][T10693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 573.451889][ T4317] lan78xx: probe of 2-1:1.0 failed with error -32 [ 573.483678][ T4320] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input8 [ 573.500362][ T4317] usb 2-1: USB disconnect, device number 16 [ 574.158201][ T4318] usb 3-1: USB disconnect, device number 39 [ 574.843532][ T4359] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 575.119004][ T4359] usb 6-1: Using ep0 maxpacket: 32 [ 576.084191][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.101164][ T4442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.607734][ T4359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 577.648225][ T4359] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 577.703441][ T4359] usb 6-1: can't read configurations, error -71 [ 577.757807][T10758] JFS: discard option not supported on device [ 577.788493][ T53] block nbd0: Dead connection, failed to find a fallback [ 577.796226][ T53] block nbd0: shutting down sockets [ 577.801528][ T53] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.864088][ T1046] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.874169][T10758] Mount JFS Failure: -5 [ 577.878338][T10758] jfs_mount failed w/return code = -5 [ 577.908987][T10763] binder: 10762:10763 ioctl c0205867 200000000840 returned -22 [ 577.949591][T10763] binder: BINDER_SET_CONTEXT_MGR already set [ 577.977901][T10763] binder: 10762:10763 ioctl 4018620d 200000004a80 returned -16 [ 578.040069][T10768] futex_wake_op: syz.1.1746 tries to shift op by 144; fix this program [ 578.080108][T10768] futex_wake_op: syz.1.1746 tries to shift op by 144; fix this program [ 578.323203][T10776] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.105592][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 579.803162][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.838742][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.001764][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 580.751893][T10811] binder: 10808:10811 ioctl c0205867 200000000840 returned -22 [ 580.816899][T10811] binder: BINDER_SET_CONTEXT_MGR already set [ 580.823603][T10811] binder: 10808:10811 ioctl 4018620d 200000004a80 returned -16 [ 581.179227][T10825] futex_wake_op: syz.5.1761 tries to shift op by 144; fix this program [ 581.217287][T10825] futex_wake_op: syz.5.1761 tries to shift op by 144; fix this program [ 581.580841][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'. [ 581.843793][ T5495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.844005][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.883019][ T33] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 582.095847][ T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.135200][ T33] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 582.168179][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.179307][ T33] usb 3-1: Product: syz [ 582.189281][ T33] usb 3-1: Manufacturer: syz [ 582.198066][ T33] usb 3-1: SerialNumber: syz [ 582.211107][ T33] usb 3-1: config 0 descriptor?? [ 582.227267][ T33] net1080: probe of 3-1:0.0 failed with error -22 [ 582.432179][ T33] usb 3-1: USB disconnect, device number 40 [ 582.455375][T10857] binder: 10856:10857 ioctl c0205867 200000000840 returned -22 [ 582.880711][T10869] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 583.208526][T10878] futex_wake_op: syz.4.1778 tries to shift op by 144; fix this program [ 583.260864][T10878] futex_wake_op: syz.4.1778 tries to shift op by 144; fix this program [ 583.811697][T10898] binder: 10896:10898 ioctl c0205867 200000000840 returned -22 [ 586.732811][T10940] futex_wake_op: syz.1.1792 tries to shift op by 144; fix this program [ 586.808468][T10940] futex_wake_op: syz.1.1792 tries to shift op by 144; fix this program [ 587.465130][T10959] binder: 10958:10959 ioctl c0205867 200000000840 returned -22 [ 587.604141][ T5499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.615514][ T5495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.457300][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.625859][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.235251][T11002] binder: 10999:11002 ioctl c0205867 200000000840 returned -22 [ 592.643654][ T4817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.723036][ T5495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.949766][T11041] binder: 11040:11041 ioctl c0205867 200000000840 returned -22 [ 598.483871][ T6365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.499625][ T6267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.903930][T11091] binder: 11089:11091 ioctl c0205867 200000000840 returned -22 [ 602.987830][T11108] device veth3 entered promiscuous mode [ 604.245541][ T5500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.256516][ T5469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.301940][ T4320] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 604.595889][ T4320] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 604.609481][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.635424][ T4320] usb 5-1: config 0 descriptor?? [ 604.657672][T11129] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 604.681260][ T4320] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 604.684529][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.731111][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.766271][T11133] binder: 11132:11133 ioctl c0205867 200000000840 returned -22 [ 606.088845][ T4320] gspca_stv06xx: HDCS-1020 sensor detected [ 606.276306][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 606.831136][ T4320] STV06xx: probe of 5-1:0.0 failed with error -71 [ 606.876656][ T4320] usb 5-1: USB disconnect, device number 34 [ 607.105082][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.122461][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.666837][T11166] binder: 11164:11166 ioctl c0205867 200000000840 returned -22 [ 607.884428][T11156] mmap: syz.2.1857 (11156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 608.725110][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 610.005499][ T5476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.696570][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.527923][ T53] block nbd1: Attempted send on invalid socket [ 611.534518][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.544067][T11201] FAT-fs (nbd1): unable to read boot sector [ 611.585904][T11203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1871'. [ 612.640403][T11210] binder: 11209:11210 ioctl c0205867 200000000840 returned -22 [ 612.840929][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1876'. [ 613.631926][T11225] overlayfs: missing 'workdir' [ 614.903596][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 615.787875][T11252] ALSA: mixer_oss: invalid OSS volume 'P' [ 616.412870][ T5476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.481519][ T4442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.692318][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.599084][ T26] audit: type=1800 audit(1785822469.768:40): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1895" name="bus" dev="ramfs" ino=64195 res=0 errno=0 [ 619.845550][T11310] using random self ethernet address [ 619.862494][T11310] using random host ethernet address [ 620.581010][ T4317] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 620.812436][ T4317] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 620.826859][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.862512][ T4317] usb 6-1: config 0 descriptor?? [ 620.887074][ T4317] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 621.031791][ T33] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 621.241060][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 621.249713][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.285465][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.320326][ T33] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 621.340373][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.351096][ T4359] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 621.364013][ T33] usb 5-1: config 0 descriptor?? [ 621.372730][ T33] hub 5-1:0.0: USB hub found [ 621.534799][ T4359] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 621.611036][ T33] hub 5-1:0.0: 1 port detected [ 621.638440][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.275027][ T6093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.287683][ T5498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.315267][ T4359] usb 3-1: Product: syz [ 622.406874][ T4359] usb 3-1: Manufacturer: syz [ 622.416077][ T4359] usb 3-1: SerialNumber: syz [ 622.694335][ T4359] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 622.735597][ T33] hub 5-1:0.0: activate --> -90 [ 622.753487][ T4359] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 622.936334][ T4317] usb 6-1: USB disconnect, device number 4 [ 623.567855][ T33] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 623.568720][ T4320] usb 5-1: USB disconnect, device number 35 [ 623.595251][ T33] usb 5-1-port1: attempt power cycle [ 623.845352][ T4359] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 624.085838][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.102494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.121525][ T4359] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 624.179705][ T4359] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 624.273844][ T4359] lan78xx: probe of 3-1:1.0 failed with error -32 [ 627.330722][ T4359] usb 3-1: USB disconnect, device number 41 [ 627.922726][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.163065][ T4817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.466745][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.475276][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.722160][T11443] netlink: 'syz.0.1953': attribute type 13 has an invalid length. [ 631.931512][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.189586][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.960323][ T33] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 633.173514][ T33] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 633.212366][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.246396][ T33] usb 6-1: Product: syz [ 633.261840][ T33] usb 6-1: Manufacturer: syz [ 633.273309][ T33] usb 6-1: SerialNumber: syz [ 633.345676][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.365094][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.502695][ T33] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 633.526316][ T33] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 633.639042][T11479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.650810][ T5946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.680430][ T6093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.691627][T10188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.767313][T11478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.410821][ T33] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 634.474234][ T33] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 634.596333][ T33] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 634.642654][ T33] lan78xx: probe of 6-1:1.0 failed with error -32 [ 634.676810][ T33] usb 6-1: USB disconnect, device number 5 [ 637.259222][ T4359] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 637.873177][ T4359] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 637.894410][ T4359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.917994][ T4359] usb 6-1: config 0 descriptor?? [ 637.937749][ T4359] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 638.389135][ T4320] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 638.800281][ T5489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.953746][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 638.994918][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.015343][ T4320] usb 5-1: Product: syz [ 639.036099][ T4320] usb 5-1: Manufacturer: syz [ 639.056433][ T4320] usb 5-1: SerialNumber: syz [ 639.332867][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 639.378058][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 640.018555][ T5489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.110750][ T4359] usb 6-1: USB disconnect, device number 6 [ 640.807116][T11564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.817945][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.938637][T11563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.046984][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 641.125810][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 641.176848][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 641.266638][ T4320] lan78xx: probe of 5-1:1.0 failed with error -32 [ 641.345199][ T4320] usb 5-1: USB disconnect, device number 40 [ 642.079664][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 644.059735][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.944753][T11610] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.959857][ T4317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.095939][T11609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.323400][T11623] hub 8-0:1.0: USB hub found [ 645.330474][T11623] hub 8-0:1.0: 1 port detected [ 645.950927][ T5489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.099440][ T4320] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 646.137016][T11633] binder: 11632:11633 ioctl c0205867 200000000840 returned -22 [ 646.292906][ T4320] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 646.374934][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.418866][ T4320] usb 6-1: Product: syz [ 646.457069][ T4320] usb 6-1: Manufacturer: syz [ 646.510923][ T4320] usb 6-1: SerialNumber: syz [ 646.825386][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2014'. [ 646.871647][ T4320] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 647.002644][ T4320] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 648.783554][ T4320] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 648.810541][ T4320] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 648.820802][ T4320] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 648.838648][ T4320] lan78xx: probe of 6-1:1.0 failed with error -32 [ 648.895608][T11664] overlayfs: missing 'workdir' [ 648.911959][ T4320] usb 6-1: USB disconnect, device number 7 [ 649.681445][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.925423][T11675] binder: 11673:11675 ioctl c0205867 200000000840 returned -22 [ 650.368847][T11681] Console: switching to colour VGA+ 80x25 [ 651.628784][ T5493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.237231][T11702] overlayfs: missing 'workdir' [ 654.800152][ T27] INFO: task syz.3.1515:9801 blocked for more than 143 seconds. [ 655.265336][ T27] Not tainted syzkaller #0 [ 655.300759][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.344368][ T27] task:syz.3.1515 state:D stack:27920 pid:9801 ppid:4271 flags:0x00004004 [ 655.386846][ T27] Call Trace: [ 655.415545][ T27] [ 655.437147][ T27] __schedule+0x107f/0x4030 [ 655.449190][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.477503][ T27] ? __sched_text_start+0x8/0x8 [ 655.511919][ T27] ? __mutex_trylock_common+0x86/0x260 [ 655.531107][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 655.539842][ T27] schedule+0xb9/0x180 [ 655.544046][ T27] schedule_preempt_disabled+0xf/0x20 [ 655.550702][ T27] __mutex_lock+0x548/0xae0 [ 655.555388][ T27] ? __mutex_lock+0x3ba/0xae0 [ 655.561390][ T27] ? nfsd_svc+0x61/0xab0 [ 655.566220][ T27] ? mutex_lock_nested+0x10/0x10 [ 655.629034][ T27] ? net_generic+0x1e/0x240 [ 655.645124][ T27] ? net_generic+0x1e/0x240 [ 655.656761][ T27] nfsd_svc+0x61/0xab0 [ 655.665212][ T27] ? qword_get+0x5a5/0x640 [ 655.670664][ T27] write_threads+0x2ea/0x350 [ 655.675838][ T27] ? write_unlock_fs+0x1f0/0x1f0 [ 655.681354][ T27] ? __might_fault+0xc2/0x120 [ 655.686404][ T27] ? _copy_from_user+0x10b/0x170 [ 655.692918][ T27] ? simple_transaction_get+0x119/0x140 [ 655.698638][ T27] nfsctl_transaction_write+0x105/0x150 [ 655.705774][ T27] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 655.712535][ T27] vfs_write+0x2dc/0x9a0 [ 655.717076][ T27] ? file_end_write+0x250/0x250 [ 655.722465][ T27] ? __fget_files+0x28/0x460 [ 655.727189][ T27] ? __fget_files+0x3fc/0x460 [ 655.732363][ T27] ? __fdget_pos+0x2ae/0x360 [ 655.737063][ T27] ? ksys_write+0x70/0x260 [ 655.742960][ T27] ksys_write+0x14d/0x260 [ 655.747384][ T27] ? __ia32_sys_read+0x80/0x80 [ 655.752614][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 655.757926][ T27] do_syscall_64+0x4c/0xa0 [ 655.762806][ T27] ? clear_bhb_loop+0x60/0xb0 [ 655.767635][ T27] ? clear_bhb_loop+0x60/0xb0 [ 655.772745][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.778737][ T27] RIP: 0033:0x7f5535b9e019 [ 655.783782][ T27] RSP: 002b:00007f55369f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.792799][ T27] RAX: ffffffffffffffda RBX: 00007f5535e26090 RCX: 00007f5535b9e019 [ 655.801169][ T27] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000005 [ 655.809968][ T27] RBP: 00007f5535c3500c R08: 0000000000000000 R09: 0000000000000000 [ 655.818015][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.828333][ T27] R13: 00007f5535e26128 R14: 00007f5535e26090 R15: 00007ffe392d4d68 [ 655.837760][ T27] [ 655.841369][ T27] [ 655.841369][ T27] Showing all locks held in the system: [ 655.850480][ T27] 1 lock held by rcu_tasks_kthre/12: [ 655.855887][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 655.867252][ T27] 1 lock held by rcu_tasks_trace/13: [ 655.872880][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 655.884573][ T27] 1 lock held by khungtaskd/27: [ 655.889739][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 655.900496][ T27] 2 locks held by kworker/u4:3/47: [ 655.906021][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 655.917961][ T27] #1: ffffc90000b87d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 655.930408][ T27] 2 locks held by getty/4027: [ 655.935218][ T27] #0: ffff8880300e2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 655.949154][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 655.960176][ T27] 2 locks held by kworker/u4:37/6267: [ 655.965625][ T27] 3 locks held by syz.3.1515/9798: [ 655.971181][ T27] #0: ffff88807c519c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 655.981215][ T27] #1: ffff888074520460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 655.990895][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 656.000680][ T27] 3 locks held by syz.3.1515/9801: [ 656.005977][ T27] #0: ffff888028a83c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 656.016078][ T27] #1: ffff888074520460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 656.025797][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 656.035173][ T27] [ 656.037711][ T27] ============================================= [ 656.037711][ T27] [ 656.052779][ T27] NMI backtrace for cpu 1 [ 656.057179][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 656.064385][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.074434][ T27] Call Trace: [ 656.077700][ T27] [ 656.080622][ T27] dump_stack_lvl+0x188/0x24e [ 656.085296][ T27] ? irq_work_queue+0xb8/0x140 [ 656.090147][ T27] ? show_regs_print_info+0x12/0x12 [ 656.095337][ T27] ? load_image+0x410/0x410 [ 656.099853][ T27] ? vprintk_emit+0x59f/0x6a0 [ 656.104561][ T27] ? printk_sprint+0x460/0x460 [ 656.109332][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 656.114312][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 656.120461][ T27] ? _printk+0xda/0x130 [ 656.124617][ T27] ? load_image+0x410/0x410 [ 656.129113][ T27] ? load_image+0x410/0x410 [ 656.133613][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 656.139678][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 656.145866][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 656.151855][ T27] watchdog+0xf0e/0xf50 [ 656.156015][ T27] ? watchdog+0x1ed/0xf50 [ 656.160346][ T27] kthread+0x29d/0x330 [ 656.164411][ T27] ? hungtask_pm_notify+0x40/0x40 [ 656.169433][ T27] ? kthread_blkcg+0xd0/0xd0 [ 656.174047][ T27] ret_from_fork+0x1f/0x30 [ 656.178493][ T27] [ 656.182216][ T27] Sending NMI from CPU 1 to CPUs 0: [ 656.187457][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 656.196949][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 656.203827][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 656.211027][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.221086][ T27] Call Trace: [ 656.224372][ T27] [ 656.227306][ T27] dump_stack_lvl+0x188/0x24e [ 656.231982][ T27] ? memcpy+0x3c/0x60 [ 656.236022][ T27] ? show_regs_print_info+0x12/0x12 [ 656.241222][ T27] ? load_image+0x410/0x410 [ 656.245785][ T27] panic+0x2d3/0x710 [ 656.249672][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 656.255301][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 656.259794][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 656.265331][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 656.271473][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 656.277611][ T27] watchdog+0xf4d/0xf50 [ 656.281759][ T27] ? watchdog+0x1ed/0xf50 [ 656.286079][ T27] kthread+0x29d/0x330 [ 656.290131][ T27] ? hungtask_pm_notify+0x40/0x40 [ 656.295161][ T27] ? kthread_blkcg+0xd0/0xd0 [ 656.299735][ T27] ret_from_fork+0x1f/0x30 [ 656.304168][ T27] [ 656.307330][ T27] Kernel Offset: disabled [ 656.311640][ T27] Rebooting in 86400 seconds..