last executing test programs: 14m41.829991428s ago: executing program 4 (id=203): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400c84, &(0x7f00000000c0), 0x1, 0x792, &(0x7f0000000780)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{0x200000b, 0x1}]}]}}, &(0x7f0000001100)=""/4096, 0x2e, 0x1000, 0x1}, 0x28) 14m39.609074255s ago: executing program 4 (id=207): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000980), 0x1, 0x2) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000b80)={0x3, 0x98f904, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='1\n\x00', 0x3) close(0xffffffffffffffff) symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 14m38.298541389s ago: executing program 4 (id=209): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) prlimit64(r1, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x13) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000480)={0xfffffff8, 0x5, 0xfffffc00, 0x1, 0x4e, "0d41810700d43aaa91d75b6b00", 0x8009, 0xfffffffd}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0xd) 14m37.964371743s ago: executing program 4 (id=213): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101c42, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80400) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xfffffee2) ioctl$TCSBRK(r0, 0x5409, 0x5) ftruncate(r0, 0xb) symlink(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknodat$md(0xffffffffffffff9c, &(0x7f0000000540)='./md0\x00', 0x6180, 0x0) syz_clone3(&(0x7f0000000700)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SET_DISK_FAULTY(0xffffffffffffffff, 0x929, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, 0x0, 0x0) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14m36.107987253s ago: executing program 4 (id=219): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000980), 0x1, 0x2) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000b80)={0x3, 0x98f904, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='1\n\x00', 0x3) close(0xffffffffffffffff) symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 14m33.88505227s ago: executing program 4 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 14m33.184796082s ago: executing program 32 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 9m35.692211477s ago: executing program 1 (id=765): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000019d80)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd2bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000019ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019f00)=0x6) socket$inet6(0xa, 0x800, 0x10003) r3 = syz_open_procfs(0x0, &(0x7f0000019f80)='net/rpc\x00') r4 = openat(r3, &(0x7f0000019fc0)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f000001a000)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) msgget$private(0x0, 0x80) 9m34.630315136s ago: executing program 1 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x8, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0xa000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 9m33.112343291s ago: executing program 1 (id=769): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001aa00)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f000001aac0)='nfsd\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 9m31.802390035s ago: executing program 1 (id=773): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000004700)={0x8000001, 0xff92, &(0x7f0000004740), 0x2, 0x8}) 9m29.812825708s ago: executing program 1 (id=775): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x0) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0x801, 0x0, 0x8001}]}) 9m28.221472771s ago: executing program 1 (id=777): sched_setscheduler(0x0, 0x1, &(0x7f00000017c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001880), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_settime(0x6, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC], 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000600)={0xfffffff4, 0x2, 0x0, 'queue0\x00', 0x40}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000006c0)={0x0, 0x0, {0x0, 0x3, 0x0, 0x3, 0x4}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/asound/seq/timer\x00', 0x0, 0x0) 9m12.932861574s ago: executing program 33 (id=777): sched_setscheduler(0x0, 0x1, &(0x7f00000017c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001880), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_settime(0x6, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC], 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000600)={0xfffffff4, 0x2, 0x0, 'queue0\x00', 0x40}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000006c0)={0x0, 0x0, {0x0, 0x3, 0x0, 0x3, 0x4}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/asound/seq/timer\x00', 0x0, 0x0) 8m28.73716618s ago: executing program 3 (id=868): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000019d80)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd2bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000019ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019f00)=0x6) socket$inet6(0xa, 0x800, 0x10003) syz_open_procfs(0x0, &(0x7f0000019f80)='net/rpc\x00') msgget$private(0x0, 0x80) 8m25.588348851s ago: executing program 3 (id=870): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040090}}], 0x1, 0x4044080) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009c", 0x50) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 8m25.354818055s ago: executing program 3 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f00000196c0), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000019700)={0x80000001, 0x1, 0x4}) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) 8m24.209543142s ago: executing program 3 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) dup(r3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0xc0844123, &(0x7f0000000300)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff1c89}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x9, 0x10, 0xfffffffffffffffa, 0x101}, &(0x7f00000001c0)=0x18) 8m19.028892782s ago: executing program 3 (id=882): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040090}}], 0x1, 0x4044080) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009c", 0x50) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 8m18.854916349s ago: executing program 3 (id=885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8002) ioctl(r1, 0x5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x14b102) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8000, r4, 0x0, 0xf2ffffffffffffff}, 0x38) 8m1.994417432s ago: executing program 34 (id=885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8002) ioctl(r1, 0x5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x14b102) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8000, r4, 0x0, 0xf2ffffffffffffff}, 0x38) 2m21.218228851s ago: executing program 6 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) dup(r3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0xc0844123, &(0x7f0000000300)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff1c89}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x9, 0x10, 0xfffffffffffffffa, 0x101}, &(0x7f00000001c0)=0x18) 2m13.899196969s ago: executing program 6 (id=1441): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0xb, 0xac, [@multicast2, @loopback]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m13.729167877s ago: executing program 6 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="00022dbd7000ffdbdf2506000000240009800800020006000000080001000200000008000100c9c70000080001000800000004000280040006805c0001802c0004001400010002004e216401010200000000000000001400020002004e24ac1414270000000000000000040002800d0001007564703a73797a30000000000d0001007564703a73797a3200000000080003000600000004000780ec0001800c00028008000400220c00003800040014000100"], 0x18c}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c0) syz_open_dev$dri(0x0, 0x0, 0x402) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100001040000000000dde40000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 2m11.020497853s ago: executing program 6 (id=1446): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = io_uring_setup(0x3c48, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) connect$x25(r0, &(0x7f00000000c0), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x2000}) 2m8.404682571s ago: executing program 6 (id=1450): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m6.799596585s ago: executing program 6 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) dup(r3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0xc0844123, &(0x7f0000000300)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff1c89}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x9, 0x10, 0xfffffffffffffffa, 0x101}, &(0x7f00000001c0)=0x18) 1m51.352781563s ago: executing program 35 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) dup(r3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0xc0844123, &(0x7f0000000300)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff1c89}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x9, 0x10, 0xfffffffffffffffa, 0x101}, &(0x7f00000001c0)=0x18) 29.56032939s ago: executing program 7 (id=1589): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe2(&(0x7f0000000000), 0x0) fanotify_init(0x40, 0x101000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019480)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019600)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000019640)={0x2020}, 0xfffffd88) 28.809404537s ago: executing program 7 (id=1590): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x8000000) 27.484822442s ago: executing program 7 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1eef34d1141a4022}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0xa28000, &(0x7f0000000bc0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[], 0x34}}, 0x44800) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8882}, 0x4004004) creat(&(0x7f0000000e00)='./file0\x00', 0xa2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1, 0x4, 0x6, 0x40c}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x0, 0x0, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.74470088s ago: executing program 7 (id=1594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x80042, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 24.106069877s ago: executing program 7 (id=1596): syz_open_dev$loop(&(0x7f0000000040), 0x200000002, 0x400) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0x1, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) 21.084239206s ago: executing program 7 (id=1600): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]}) sysfs$3(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x842, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x20000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)='X', 0x34000, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14.628564526s ago: executing program 2 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000052, 0x2000007, 0x810, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000380)=0xffffffff, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200), &(0x7f0000000240), 0x0, &(0x7f00000002c0)={&(0x7f0000000300), 0x8}) 14.601847749s ago: executing program 5 (id=1605): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000005c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000700)=0x4) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 14.344311655s ago: executing program 0 (id=1606): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f000001aac0)='nfsd\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ab00)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 14.277530372s ago: executing program 5 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f00000194c0), 0x0, &(0x7f000001a580), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f000001a7c0)=0xfff, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f000001a840), 0x900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 13.187310793s ago: executing program 0 (id=1608): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfd, 0x1fa, &(0x7f0000019540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019340)='./proc\x00', &(0x7f0000019380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000019400)='27', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019440)={&(0x7f0000019480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x4, [@func_proto, @datasec={0x5, 0x0, 0x0, 0xf, 0x2, [], "6a18"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f000001ac40)=""/129, 0x38, 0x81, 0x1}, 0x28) 11.608535404s ago: executing program 2 (id=1609): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000002a00)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002a40)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002a80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002b00), 0x0, 0x0) read$msr(r3, &(0x7f0000002b40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001bb40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f000001bb80)='./bus\x00', &(0x7f000001bbc0), 0xa14000, &(0x7f000001bc00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.514688274s ago: executing program 5 (id=1610): prlimit64(0x0, 0xe, &(0x7f0000001780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000017c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001880), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0xfffffff4, 0x2, 0x0, 'queue0\x00', 0x40}) 9.884295391s ago: executing program 2 (id=1611): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe2(&(0x7f0000000000), 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019480)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019600)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000019640)={0x2020}, 0xfffffd88) 7.373088397s ago: executing program 5 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 7.362068379s ago: executing program 0 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 6.852267371s ago: executing program 0 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1eef34d1141a4022}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0xa28000, &(0x7f0000000bc0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4], 0x34}}, 0x44800) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8882}, 0x4004004) creat(&(0x7f0000000e00)='./file0\x00', 0xa2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1, 0x4, 0x6, 0x40c}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x0, 0x0, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.767741349s ago: executing program 2 (id=1615): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) 5.677159601s ago: executing program 36 (id=1600): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]}) sysfs$3(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x842, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x20000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)='X', 0x34000, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.603631388s ago: executing program 0 (id=1617): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f000001aac0)='nfsd\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ab00)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 3.884482924s ago: executing program 0 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000052, 0x2000007, 0x810, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000380)=0xffffffff, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200), &(0x7f0000000240), 0x0, &(0x7f00000002c0)={&(0x7f0000000300), 0x8}) 3.843241078s ago: executing program 2 (id=1619): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f00000194c0)=[{0x0}], 0x1, &(0x7f000001a580), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f000001a7c0)=0xfff, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f000001a840), 0x900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 1.972578639s ago: executing program 2 (id=1620): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000002a00)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002a40)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002a80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002b00), 0x0, 0x0) read$msr(r3, &(0x7f0000002b40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001bb40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f000001bb80)='./bus\x00', &(0x7f000001bbc0), 0xa14000, &(0x7f000001bc00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.579159849s ago: executing program 5 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000001780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000017c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001880), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0xfffffff4, 0x2, 0x0, 'queue0\x00', 0x40}) 0s ago: executing program 5 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000011, 0x2000, 0x2f93) kernel console output (not intermixed with test programs): 4] device hsr_slave_1 left promiscuous mode [ 650.111885][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.158536][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.187727][ T6314] device bridge_slave_1 left promiscuous mode [ 650.194061][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.238769][ T6314] device bridge_slave_0 left promiscuous mode [ 650.245048][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.388128][ T8514] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 653.082189][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 653.141300][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 653.194134][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.248483][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.596101][ T6314] bond0 (unregistering): Released all slaves [ 655.544276][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 655.658516][ T8537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 655.678639][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 655.735194][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.865483][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.384277][ T6314] bond0 (unregistering): Released all slaves [ 657.024765][ T8298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 657.045252][ T8298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.166585][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 657.178548][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 657.187568][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 657.200501][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 657.209601][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 657.219940][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 657.229037][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 657.238626][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 657.247878][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 657.256529][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.272460][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 657.283003][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 657.471559][ T8348] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 657.531296][ T8348] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 659.046477][ T8348] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 659.091998][ T8348] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 659.374214][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.465011][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.501697][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.534411][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.585126][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.595868][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.605730][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.612985][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.679214][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.706603][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.726173][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.745581][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.752802][ T4621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.766528][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.845453][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.876842][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.895010][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.932468][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 659.953792][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.994918][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 660.026322][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.049102][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.102400][ T8348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.163864][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.217567][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.236390][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.257632][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.277783][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.305427][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 660.342508][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 661.276348][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.295625][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.325861][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.394050][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 661.428113][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.495016][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.519254][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.535387][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.544032][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.583071][ T8298] device veth0_vlan entered promiscuous mode [ 661.628184][ T8298] device veth1_vlan entered promiscuous mode [ 661.899494][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 661.958256][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 661.999053][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 662.055462][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 662.255455][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.460338][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.632283][ T8298] device veth0_macvtap entered promiscuous mode [ 662.677779][ T8298] device veth1_macvtap entered promiscuous mode [ 662.735936][ T8585] loop5: detected capacity change from 0 to 32768 [ 662.791277][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.831062][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.841048][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.851946][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.862415][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.874176][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.885975][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.895869][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.919237][ T8609] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 662.933119][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.951287][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.964754][ T8585] XFS (loop5): Mounting V5 Filesystem [ 662.982343][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.004298][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.033185][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.044368][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.055519][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.066146][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.077864][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.096811][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.105743][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.549766][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.565817][ T8585] XFS (loop5): Ending clean mount [ 664.622686][ T8298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.643622][ T8298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.691499][ T8298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.724346][ T8298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.747710][ T5226] XFS (loop5): Unmounting Filesystem [ 665.056571][ T4621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.107145][ T4621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.121838][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.192655][ T4621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.222355][ T4621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.265132][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.099698][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.120586][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.211142][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 666.238803][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.286821][ T8348] device veth0_vlan entered promiscuous mode [ 666.301443][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.337944][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.374692][ T8348] device veth1_vlan entered promiscuous mode [ 666.507488][ T8650] Cannot find add_set index 0 as target [ 666.679286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 666.755519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 666.869216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 666.999335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.120558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.263902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.355322][ T8348] device veth0_macvtap entered promiscuous mode [ 668.889423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.906617][ T8348] device veth1_macvtap entered promiscuous mode [ 670.027895][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.038446][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.048743][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.059500][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.069829][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.081168][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.109965][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.120592][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.132305][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.147636][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.163941][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.176481][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.200854][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.227041][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.237855][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.267188][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.287073][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.334098][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.372746][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.403574][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.437899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.454032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.481106][ T8348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.507735][ T8348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.543256][ T8348] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.587129][ T8348] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.215535][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.258170][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.296326][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.377134][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.385082][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.413606][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 673.635801][ T8686] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 675.337118][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 675.337158][ T26] audit: type=1326 audit(1794532459.039:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 675.913745][ T26] audit: type=1326 audit(1794532459.039:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 675.939723][ T26] audit: type=1326 audit(1794532459.659:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 675.965045][ T26] audit: type=1326 audit(1794532459.659:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 675.989152][ T26] audit: type=1326 audit(1794532459.659:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 676.057276][ T26] audit: type=1326 audit(1794532459.659:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 676.183132][ T26] audit: type=1326 audit(1794532459.659:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 676.277094][ T26] audit: type=1326 audit(1794532459.659:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.6.1052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 676.335106][ T8697] loop0: detected capacity change from 0 to 49152 [ 676.395205][ T8697] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 676.494660][ T8697] EXT4-fs (loop0): mounted filesystem with ordered data mode. Quota mode: journalled. [ 676.703890][ T8697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.1050: bg 0: bad block bitmap checksum [ 677.695932][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 679.147991][ T8738] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 681.689177][ T8758] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 681.876731][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1065'. [ 685.774277][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.780813][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.020736][ T8794] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 687.539010][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 690.737505][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 690.822216][ T8813] device hsr_slave_1 left promiscuous mode [ 692.074172][ T8846] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 696.375243][ T26] audit: type=1326 audit(1794532480.149:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 696.890363][ T26] audit: type=1326 audit(1794532480.629:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.341586][ T26] audit: type=1326 audit(1794532480.629:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.416620][ T26] audit: type=1326 audit(1794532480.629:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.504632][ T26] audit: type=1326 audit(1794532480.999:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.557265][ T4383] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 697.637090][ T26] audit: type=1326 audit(1794532480.999:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.677250][ T26] audit: type=1326 audit(1794532480.999:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 697.852443][ T26] audit: type=1326 audit(1794532481.009:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8344369d0e code=0x7ffc0000 [ 697.877803][ T4383] usb 8-1: Using ep0 maxpacket: 16 [ 698.437667][ T8904] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (comedi_parport) [ 698.457405][ T26] audit: type=1326 audit(1794532481.009:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83443a916b code=0x7ffc0000 [ 698.497059][ T4383] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 698.511172][ T26] audit: type=1326 audit(1794532481.009:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.7.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83443a916b code=0x7ffc0000 [ 698.537637][ T4383] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 698.547893][ T4383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.556066][ T4383] usb 8-1: Product: syz [ 698.560648][ T4383] usb 8-1: Manufacturer: syz [ 698.565359][ T4383] usb 8-1: SerialNumber: syz [ 698.586197][ T4383] usb 8-1: config 0 descriptor?? [ 698.650008][ T4383] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 698.661345][ T4383] usb 8-1: Detected FT232R [ 699.932506][ T4383] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 699.957271][ T4383] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 699.987844][ T4383] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 700.012811][ T4383] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 700.078497][ T4383] usb 8-1: USB disconnect, device number 2 [ 700.089077][ T4383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 700.158116][ T4383] ftdi_sio 8-1:0.0: device disconnected [ 700.332368][ T8923] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1109'. [ 700.480674][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1109'. [ 703.881454][ T4383] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 704.777304][ T4383] usb 7-1: Using ep0 maxpacket: 32 [ 704.785179][ T4383] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 704.866425][ T4383] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 704.924410][ T4383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.945232][ T4383] usb 7-1: Product: syz [ 704.964924][ T4383] usb 7-1: Manufacturer: syz [ 704.979642][ T4383] usb 7-1: SerialNumber: syz [ 705.004797][ T4383] usb 7-1: config 0 descriptor?? [ 705.113718][ T4383] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 705.219896][ T4383] dvb-usb: bulk message failed: -22 (2/0) [ 705.552900][ T4383] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.713737][ T4383] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 705.821421][ T4383] usb 7-1: media controller created [ 705.911074][ T4383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.009922][ T4383] usb 7-1: selecting invalid altsetting 7 [ 706.030879][ T4383] cxusb: set interface failed [ 706.035644][ T4383] dvb-usb: bulk message failed: -22 (1/0) [ 707.286128][ T4383] DVB: Unable to find symbol lgdt330x_attach() [ 707.295346][ T4383] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 707.332802][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 708.317469][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.337159][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 708.377228][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 708.422609][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.507138][ T4383] rc_core: IR keymap rc-dvico-portable not found [ 708.519165][ T4383] Registered IR keymap rc-empty [ 708.560451][ T4383] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 708.607687][ T4383] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input9 [ 708.634737][ T9010] loop6: detected capacity change from 0 to 64 [ 708.653665][ T4383] dvb-usb: schedule remote query interval to 100 msecs. [ 708.685060][ T7] dvbdev: DVB: registering new adapter (DEC2000-t) [ 708.709057][ T7] usb 3-1: DVB: registering adapter 2 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 708.733381][ T4383] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 708.775783][ T4383] usb 7-1: USB disconnect, device number 2 [ 708.886461][ T7] ttusb_dec_send_command: command bulk message failed: error -71 [ 708.945728][ T7] usb 3-1: USB disconnect, device number 12 [ 708.953525][ T4383] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 710.266761][ T4370] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 710.475217][ T9031] overlayfs: failed to resolve './file0': -2 [ 711.279904][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.289405][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.328152][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.329634][ T9043] loop0: detected capacity change from 0 to 256 [ 711.338456][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.347423][ T4370] usb 6-1: Using ep0 maxpacket: 32 [ 711.355671][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.366833][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.378654][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.387901][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.397171][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.406318][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 711.514657][ T9043] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 711.533190][ T4370] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 711.556315][ T4370] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 711.566601][ T4370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.575349][ T4370] usb 6-1: Product: syz [ 711.584369][ T4370] usb 6-1: Manufacturer: syz [ 711.589086][ T4370] usb 6-1: SerialNumber: syz [ 711.605312][ T4370] usb 6-1: config 0 descriptor?? [ 711.617427][ T4370] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 711.625162][ T4370] dvb-usb: bulk message failed: -22 (2/0) [ 711.683932][ T4370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.697312][ T4370] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 711.736315][ T4370] usb 6-1: media controller created [ 711.882960][ T9024] dvb-usb: bulk message failed: -22 (3/0) [ 711.920003][ T4370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.741911][ T4370] usb 6-1: selecting invalid altsetting 7 [ 712.757102][ T4370] cxusb: set interface failed [ 712.767515][ T4363] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 712.777043][ T4370] dvb-usb: bulk message failed: -22 (1/0) [ 712.937566][ T9058] device macsec1 entered promiscuous mode [ 712.967041][ T4363] usb 1-1: Using ep0 maxpacket: 32 [ 712.974342][ T4363] usb 1-1: config index 0 descriptor too short (expected 58651, got 27) [ 712.993473][ T4363] usb 1-1: config 192 has an invalid interface number: 231 but max is -1 [ 713.020452][ T4363] usb 1-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 713.048258][ T4363] usb 1-1: config 192 has no interface number 0 [ 713.064849][ T4363] usb 1-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 713.085589][ T4370] DVB: Unable to find symbol lgdt330x_attach() [ 713.096657][ T4363] usb 1-1: config 192 interface 231 has no altsetting 0 [ 713.103824][ T4370] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 713.120613][ T4363] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 713.137276][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.182035][ T4363] usb 1-1: Product: syz [ 713.204747][ T4363] usb 1-1: Manufacturer: syz [ 713.217287][ T4363] usb 1-1: SerialNumber: syz [ 713.541754][ T4370] rc_core: IR keymap rc-dvico-portable not found [ 713.561433][ T4370] Registered IR keymap rc-empty [ 713.585798][ T4370] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 713.624927][ T4370] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input10 [ 713.705817][ T4370] dvb-usb: schedule remote query interval to 100 msecs. [ 713.728519][ T4370] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 713.795141][ T4370] usb 6-1: USB disconnect, device number 8 [ 713.917160][ T4370] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 714.447357][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 714.447376][ T26] audit: type=1326 audit(1794532498.139:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 714.540612][ T4363] usb 1-1: Found UVC 0.00 device syz (05ac:8600) [ 714.550805][ T4363] usb 1-1: No valid video chain found. [ 715.166097][ T22] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 715.265786][ T4363] usb 1-1: USB disconnect, device number 8 [ 715.284323][ T26] audit: type=1326 audit(1794532498.139:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 715.322287][ T26] audit: type=1326 audit(1794532498.139:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 715.397253][ T22] usb 8-1: device descriptor read/64, error -71 [ 715.397705][ T26] audit: type=1326 audit(1794532498.139:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 715.757120][ T22] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 715.783470][ T26] audit: type=1326 audit(1794532498.139:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 715.937241][ T22] usb 8-1: device descriptor read/64, error -71 [ 716.054007][ T26] audit: type=1326 audit(1794532498.139:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 716.080274][ T26] audit: type=1326 audit(1794532498.139:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 716.104760][ T22] usb usb8-port1: attempt power cycle [ 716.110652][ T26] audit: type=1326 audit(1794532498.139:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 716.135444][ T26] audit: type=1326 audit(1794532498.139:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x7ffc0000 [ 716.160603][ T26] audit: type=1326 audit(1794532498.139:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.7.1152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8344369d0e code=0x7ffc0000 [ 716.227808][ T4283] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 716.417308][ T4283] usb 3-1: Using ep0 maxpacket: 32 [ 716.432751][ T4283] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 716.458692][ T4283] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 716.469786][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.478169][ T4283] usb 3-1: Product: syz [ 716.482468][ T4283] usb 3-1: Manufacturer: syz [ 716.488033][ T4283] usb 3-1: SerialNumber: syz [ 716.532860][ T4283] usb 3-1: config 0 descriptor?? [ 716.538236][ T22] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 716.586751][ T4283] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 716.648481][ T4283] dvb-usb: bulk message failed: -22 (2/0) [ 716.654793][ T22] usb 8-1: device descriptor read/8, error -71 [ 716.712931][ T4283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.729746][ T4283] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 716.753308][ T4283] usb 3-1: media controller created [ 716.877750][ T9112] dvb-usb: bulk message failed: -22 (3/0) [ 716.896282][ T4283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.937114][ T22] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 717.008223][ T22] usb 8-1: device descriptor read/8, error -71 [ 717.038815][ T4283] usb 3-1: selecting invalid altsetting 7 [ 717.044915][ T4283] cxusb: set interface failed [ 717.097765][ T4283] dvb-usb: bulk message failed: -22 (1/0) [ 717.127677][ T22] usb usb8-port1: unable to enumerate USB device [ 717.566555][ T9136] loop0: detected capacity change from 0 to 256 [ 717.608845][ T4283] DVB: Unable to find symbol lgdt330x_attach() [ 717.615746][ T4283] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 717.644237][ T9136] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 718.880292][ T9139] loop7: detected capacity change from 0 to 4096 [ 719.647318][ T4363] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 719.753484][ T9156] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 719.897470][ T4363] usb 1-1: Using ep0 maxpacket: 32 [ 719.906368][ T4363] usb 1-1: config index 0 descriptor too short (expected 58651, got 27) [ 719.957175][ T4283] rc_core: IR keymap rc-dvico-portable not found [ 719.963604][ T4283] Registered IR keymap rc-empty [ 719.975088][ T4283] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 719.987185][ T4363] usb 1-1: config 192 has an invalid interface number: 231 but max is -1 [ 720.016684][ T4283] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 720.046820][ T4363] usb 1-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 720.061544][ T4283] dvb-usb: schedule remote query interval to 100 msecs. [ 720.074886][ T9139] NILFS (loop7): nilfs_sufile_do_free: segment 13 is already clean [ 720.088700][ T4363] usb 1-1: config 192 has no interface number 0 [ 720.097300][ T4283] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 720.115605][ T4363] usb 1-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 720.145565][ T4283] usb 3-1: USB disconnect, device number 13 [ 720.194088][ T4363] usb 1-1: config 192 interface 231 has no altsetting 0 [ 720.240616][ T4363] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 720.279946][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.306398][ T4363] usb 1-1: Product: syz [ 720.321327][ T4363] usb 1-1: Manufacturer: syz [ 720.340633][ T4283] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 720.343151][ T4363] usb 1-1: SerialNumber: syz [ 720.580696][ T4363] usb 1-1: Found UVC 0.00 device syz (05ac:8600) [ 720.662569][ T4363] usb 1-1: No valid video chain found. [ 720.708685][ T4363] usb 1-1: USB disconnect, device number 9 [ 723.080841][ T9181] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.117398][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 723.117413][ T26] audit: type=1326 audit(1794532506.899:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 723.235639][ T26] audit: type=1326 audit(1794532506.939:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 723.321441][ T26] audit: type=1326 audit(1794532506.939:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 723.410355][ T26] audit: type=1326 audit(1794532506.939:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 723.440948][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 723.498010][ T26] audit: type=1326 audit(1794532506.939:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 723.582670][ T4363] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 723.607748][ T22] usb 1-1: device descriptor read/64, error -71 [ 725.460832][ T26] audit: type=1326 audit(1794532506.939:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 725.505728][ T26] audit: type=1326 audit(1794532506.939:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fbba94d9 code=0x7ffc0000 [ 725.546403][ T26] audit: type=1326 audit(1794532506.939:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87fbb69d0e code=0x7ffc0000 [ 725.597244][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 725.627078][ T26] audit: type=1326 audit(1794532506.939:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87fbba916b code=0x7ffc0000 [ 725.651252][ T4363] usb 3-1: Using ep0 maxpacket: 32 [ 725.677570][ T4363] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 725.694832][ T4363] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 725.732534][ T4363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.742272][ T26] audit: type=1326 audit(1794532506.939:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87fbba916b code=0x7ffc0000 [ 725.757205][ T22] usb 1-1: device descriptor read/64, error -71 [ 725.784258][ T4363] usb 3-1: Product: syz [ 725.795331][ T4363] usb 3-1: Manufacturer: syz [ 725.806777][ T4363] usb 3-1: SerialNumber: syz [ 725.857875][ T4363] usb 3-1: config 0 descriptor?? [ 725.897586][ T4363] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 725.905246][ T4363] dvb-usb: bulk message failed: -22 (2/0) [ 725.927244][ T22] usb usb1-port1: attempt power cycle [ 725.986065][ T4363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 726.046348][ T4363] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 726.054597][ T4363] usb 3-1: media controller created [ 726.073166][ T9188] dvb-usb: bulk message failed: -22 (3/0) [ 726.135746][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 726.347219][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 726.418512][ T22] usb 1-1: device descriptor read/8, error -71 [ 726.984456][ T4363] usb 3-1: selecting invalid altsetting 7 [ 726.990343][ T4363] cxusb: set interface failed [ 726.995073][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 728.563001][ T4363] DVB: Unable to find symbol lgdt330x_attach() [ 728.571693][ T4363] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 728.599402][ T9232] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.957052][ T4363] rc_core: IR keymap rc-dvico-portable not found [ 729.973889][ T4363] Registered IR keymap rc-empty [ 730.009899][ T4363] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 730.063211][ T4363] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 730.121560][ T4363] dvb-usb: schedule remote query interval to 100 msecs. [ 730.147869][ T4363] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 730.207614][ T4363] usb 3-1: USB disconnect, device number 14 [ 731.810677][ T4363] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 736.459903][ T9286] overlayfs: failed to resolve './file0': -2 [ 738.478126][ T9297] tmpfs: Bad value for 'mpol' [ 740.166806][ T4665] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 740.377123][ T4665] usb 8-1: Using ep0 maxpacket: 32 [ 740.384769][ T4665] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 740.438431][ T4665] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 740.487072][ T4665] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.515522][ T4665] usb 8-1: Product: syz [ 740.525726][ T4665] usb 8-1: Manufacturer: syz [ 740.545945][ T4665] usb 8-1: SerialNumber: syz [ 740.586712][ T4665] usb 8-1: config 0 descriptor?? [ 740.613792][ T4665] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 740.672282][ T4665] dvb-usb: bulk message failed: -22 (2/0) [ 740.702237][ T4665] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.732516][ T4665] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 740.767048][ T4665] usb 8-1: media controller created [ 740.813307][ T9303] dvb-usb: bulk message failed: -22 (3/0) [ 740.844312][ T4665] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.975162][ T4665] usb 8-1: selecting invalid altsetting 7 [ 741.467234][ T4665] cxusb: set interface failed [ 741.472003][ T4665] dvb-usb: bulk message failed: -22 (1/0) [ 743.028416][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 743.028433][ T26] audit: type=1326 audit(1794532526.749:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 743.181696][ T26] audit: type=1326 audit(1794532526.759:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 743.247143][ T22] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 743.404697][ T26] audit: type=1326 audit(1794532526.759:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 743.457224][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 743.475531][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 743.550290][ T22] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 743.614159][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.632664][ T26] audit: type=1326 audit(1794532526.759:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 743.704114][ T22] usb 3-1: Product: syz [ 743.717194][ T4665] DVB: Unable to find symbol lgdt330x_attach() [ 743.723417][ T4665] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 743.736155][ T22] usb 3-1: Manufacturer: syz [ 743.774541][ T22] usb 3-1: SerialNumber: syz [ 743.814548][ T26] audit: type=1326 audit(1794532526.759:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 743.866357][ T22] usb 3-1: config 0 descriptor?? [ 743.903241][ T22] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 743.967310][ T22] usb 3-1: Detected FT232R [ 744.042496][ T26] audit: type=1326 audit(1794532526.759:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdde369d0e code=0x7ffc0000 [ 744.094636][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.787154][ T26] audit: type=1326 audit(1794532526.759:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdde3a916b code=0x7ffc0000 [ 745.807983][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.608859][ T26] audit: type=1326 audit(1794532526.759:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdde3a916b code=0x7ffc0000 [ 746.632996][ T26] audit: type=1326 audit(1794532526.799:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdde3a916b code=0x7ffc0000 [ 746.657170][ T26] audit: type=1326 audit(1794532526.799:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.1208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdde3a916b code=0x7ffc0000 [ 746.687987][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 746.697682][ T22] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 746.704953][ T22] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 746.714315][ T22] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 746.725326][ T22] usb 3-1: USB disconnect, device number 15 [ 746.742941][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 746.760392][ T22] ftdi_sio 3-1:0.0: device disconnected [ 747.191966][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.221052][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.929323][ T9370] hugetlbfs: syz.2.1215 (9370): Using mlock ulimits for SHM_HUGETLB is obsolete [ 748.957167][ T4665] rc_core: IR keymap rc-dvico-portable not found [ 748.963653][ T4665] Registered IR keymap rc-empty [ 749.027372][ T4665] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 749.083712][ T4665] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input13 [ 749.132255][ T4665] dvb-usb: schedule remote query interval to 100 msecs. [ 749.169290][ T4665] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 749.224647][ T4665] usb 8-1: USB disconnect, device number 7 [ 749.267179][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 749.319216][ T4665] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 749.397112][ T4363] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 749.510489][ T9385] tmpfs: Bad value for 'mpol' [ 749.607050][ T4363] usb 1-1: Using ep0 maxpacket: 32 [ 749.618277][ T4363] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 749.695787][ T4363] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 749.845246][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.043872][ T4363] usb 1-1: Product: syz [ 750.107768][ T4363] usb 1-1: Manufacturer: syz [ 750.112443][ T4363] usb 1-1: SerialNumber: syz [ 750.169997][ T4363] usb 1-1: config 0 descriptor?? [ 750.230922][ T4363] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 750.257546][ T4363] dvb-usb: bulk message failed: -22 (2/0) [ 750.312734][ T4363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 750.353884][ T4363] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 750.377184][ T4363] usb 1-1: media controller created [ 750.389808][ T9371] dvb-usb: bulk message failed: -22 (3/0) [ 750.486579][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.555277][ T4363] usb 1-1: selecting invalid altsetting 7 [ 750.579213][ T4363] cxusb: set interface failed [ 751.115797][ T9403] netlink: 'syz.6.1221': attribute type 1 has an invalid length. [ 751.123839][ T9403] netlink: 'syz.6.1221': attribute type 2 has an invalid length. [ 752.060403][ T4363] dvb-usb: bulk message failed: -22 (1/0) [ 752.193713][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 752.193732][ T26] audit: type=1800 audit(1794532535.969:183): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1220" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 752.517986][ T9409] syz.7.1220 (9409) used greatest stack depth: 19856 bytes left [ 753.039427][ T4363] DVB: Unable to find symbol lgdt330x_attach() [ 753.052463][ T4363] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 754.444810][ T26] audit: type=1326 audit(1794532538.219:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 754.558386][ T26] audit: type=1326 audit(1794532538.229:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 754.587336][ T4363] rc_core: IR keymap rc-dvico-portable not found [ 754.597967][ T4363] Registered IR keymap rc-empty [ 754.634561][ T4363] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 754.866607][ T4363] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 754.868288][ T26] audit: type=1326 audit(1794532538.229:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 754.911282][ T26] audit: type=1326 audit(1794532538.229:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 755.249822][ T4363] dvb-usb: schedule remote query interval to 100 msecs. [ 755.257723][ T4363] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 755.283657][ T4363] usb 1-1: USB disconnect, device number 14 [ 755.625005][ T4363] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 755.678439][ T26] audit: type=1326 audit(1794532538.229:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 755.729306][ T26] audit: type=1326 audit(1794532538.229:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 755.756051][ T26] audit: type=1326 audit(1794532538.229:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 755.882599][ T26] audit: type=1326 audit(1794532538.239:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 756.248882][ T26] audit: type=1326 audit(1794532538.239:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.2.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 760.539388][ T9481] loop5: detected capacity change from 0 to 256 [ 762.139439][ T4363] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 762.992175][ T9508] gfs2: path_lookup on c::: returned error -2 [ 763.138881][ T4363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.192380][ T4363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.368832][ T4363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 763.463983][ T4363] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.840785][ T4363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.086781][ T9517] overlayfs: failed to resolve './file0': -2 [ 765.902044][ T4363] usb 1-1: config 0 descriptor?? [ 766.430361][ T4363] usb 1-1: can't set config #0, error -71 [ 766.758169][ T9528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 767.128953][ T4363] usb 1-1: USB disconnect, device number 15 [ 771.075220][ T9569] gfs2: path_lookup on c::: returned error -2 [ 785.073437][ T9643] gfs2: path_lookup on c::: returned error -2 [ 787.410330][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 787.410346][ T26] audit: type=1326 audit(1794532571.189:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.7.1261" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x0 [ 789.836338][ T9654] overlayfs: failed to resolve './file0': -2 [ 803.316415][ T26] audit: type=1326 audit(1794532587.089:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.6.1287" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x0 [ 803.357170][ T4411] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 803.416549][ T9746] gfs2: path_lookup on c::: returned error -2 [ 803.549372][ T4411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.574225][ T4411] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.596090][ T4411] usb 3-1: New USB device found, idVendor=d96d, idProduct=c295, bcdDevice= 0.15 [ 803.627943][ T4411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.668273][ T4411] usb 3-1: config 0 descriptor?? [ 804.836233][ T27] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 804.887166][ T27] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 806.530636][ T22] usb 3-1: USB disconnect, device number 16 [ 806.676648][ T9759] fido_id[9759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 808.630256][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.637563][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.689507][ T9793] overlayfs: failed to resolve './file0': -2 [ 816.403431][ T9855] loop6: detected capacity change from 0 to 16 [ 816.492471][ T9855] erofs: (device loop6): mounted with root inode @ nid 36. [ 818.550912][ T9874] loop7: detected capacity change from 0 to 2048 [ 818.667004][ T9874] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 818.711522][ T9874] UDF-fs: Scanning with blocksize 512 failed [ 818.780371][ T9874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 820.267205][ T26] audit: type=1800 audit(1794532604.039:206): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1316" name="attr_allow_any_host" dev="configfs" ino=54606 res=0 errno=0 [ 820.381316][ T26] audit: type=1800 audit(1794532604.149:207): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1316" name="addr_trtype" dev="configfs" ino=53446 res=0 errno=0 [ 820.799279][ T26] audit: type=1326 audit(1794532604.579:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 820.862998][ T26] audit: type=1326 audit(1794532604.579:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 820.950911][ T26] audit: type=1326 audit(1794532604.609:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.005828][ T26] audit: type=1326 audit(1794532604.609:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.094480][ T26] audit: type=1326 audit(1794532604.609:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.222973][ T26] audit: type=1326 audit(1794532604.609:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.249802][ T9897] loop2: detected capacity change from 0 to 16 [ 821.309438][ T9897] erofs: (device loop2): mounted with root inode @ nid 36. [ 821.357935][ T26] audit: type=1326 audit(1794532604.609:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.421755][ T9897] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 821.447074][ T26] audit: type=1326 audit(1794532604.609:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 821.513550][ T9897] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89 [ 821.577015][ T9897] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 821.628014][ T9897] syz.2.1322: attempt to access beyond end of device [ 821.628014][ T9897] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 821.709312][ T9897] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89 [ 821.777789][ T9897] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584] [ 821.807065][ T9897] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 821.906971][ C0] net_ratelimit: 250 callbacks suppressed [ 827.276989][ C1] net_ratelimit: 47 callbacks suppressed [ 829.933437][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 829.933450][ T26] audit: type=1326 audit(1794532613.709:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.140781][ T26] audit: type=1326 audit(1794532613.809:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.176393][ T26] audit: type=1326 audit(1794532613.809:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.251542][ T26] audit: type=1326 audit(1794532613.809:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.282688][ T26] audit: type=1326 audit(1794532613.809:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.328736][ T26] audit: type=1326 audit(1794532613.809:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.401511][ T26] audit: type=1326 audit(1794532613.809:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 830.459062][ T26] audit: type=1326 audit(1794532613.809:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 831.403555][ T26] audit: type=1326 audit(1794532613.809:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 832.181829][ T9985] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 832.189828][ T9985] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 833.091898][ C1] net_ratelimit: 54 callbacks suppressed [ 833.108436][ T26] audit: type=1326 audit(1794532613.809:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.6.1332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01851a94d9 code=0x7ffc0000 [ 838.156968][ C1] net_ratelimit: 62 callbacks suppressed [ 838.849842][T10016] tmpfs: Bad value for 'mpol' [ 840.820429][ T4288] Bluetooth: hci2: link tx timeout [ 840.825870][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 842.273423][ T26] audit: type=1326 audit(1794532626.049:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 842.357346][ T26] audit: type=1326 audit(1794532626.119:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 842.477119][ T26] audit: type=1326 audit(1794532626.119:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 843.029282][T10035] netlink: 'syz.5.1349': attribute type 1 has an invalid length. [ 843.037310][T10035] netlink: 'syz.5.1349': attribute type 2 has an invalid length. [ 843.963275][ C0] net_ratelimit: 48 callbacks suppressed [ 843.970597][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 844.177087][ T26] audit: type=1326 audit(1794532626.119:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 844.274686][ T26] audit: type=1326 audit(1794532626.119:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 845.415718][ T26] audit: type=1326 audit(1794532626.119:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 845.615289][ T26] audit: type=1326 audit(1794532626.119:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 845.784749][ T26] audit: type=1326 audit(1794532626.119:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 846.960364][ T26] audit: type=1326 audit(1794532626.119:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 847.097440][ T26] audit: type=1326 audit(1794532626.119:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.2.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x7ffc0000 [ 849.347027][ C1] net_ratelimit: 81 callbacks suppressed [ 852.084986][T10089] tmpfs: Bad value for 'mpol' [ 853.908112][T10095] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 853.916044][T10095] netlink: 'syz.2.1360': attribute type 2 has an invalid length. [ 854.832237][ C1] net_ratelimit: 35 callbacks suppressed [ 860.387013][ C1] net_ratelimit: 55 callbacks suppressed [ 860.479285][T10127] loop2: detected capacity change from 0 to 256 [ 860.572294][T10127] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 862.017108][ T4659] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 862.217050][ T4659] usb 3-1: Using ep0 maxpacket: 32 [ 862.224683][ T4659] usb 3-1: config index 0 descriptor too short (expected 58651, got 27) [ 862.367014][ T4659] usb 3-1: config 192 has an invalid interface number: 231 but max is -1 [ 862.375587][ T4659] usb 3-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 864.047278][ T4659] usb 3-1: config 192 has no interface number 0 [ 864.053632][ T4659] usb 3-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 864.125636][ T4659] usb 3-1: config 192 interface 231 has no altsetting 0 [ 864.157050][ T4659] usb 3-1: string descriptor 0 read error: -71 [ 864.183801][ T4659] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 864.213452][ T4659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.262097][ T4659] usb 3-1: can't set config #192, error -71 [ 864.323024][ T4659] usb 3-1: USB disconnect, device number 17 [ 865.377830][T10155] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 865.385613][T10155] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 865.645551][ C0] net_ratelimit: 71 callbacks suppressed [ 870.437581][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.446980][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.347244][ T6314] net_ratelimit: 57 callbacks suppressed [ 872.041072][ T4288] Bluetooth: hci1: hcon ffff88807a6f2000 sent 1 < count 8667 [ 873.567345][T10219] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 873.575217][T10219] netlink: 'syz.2.1384': attribute type 2 has an invalid length. [ 876.387359][ C1] net_ratelimit: 59 callbacks suppressed [ 876.869339][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 876.882323][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 876.889932][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 876.897673][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 876.905140][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 876.913035][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 876.922646][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 876.930725][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 876.938762][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 876.946752][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 876.956042][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 876.966211][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 876.978970][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 876.989184][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 876.998373][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 877.006816][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 877.015333][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 877.024015][T10244] infiniband rxe0: set active [ 877.030088][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 877.042268][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 877.051503][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 877.059770][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 877.068148][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 877.080043][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 877.088645][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 877.097143][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 877.113181][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 877.124788][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 877.133130][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 877.141493][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 877.149726][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 877.159859][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 877.170804][ T4363] rxe_eth0 speed is unknown, defaulting to 1000 [ 881.587008][ C1] net_ratelimit: 45 callbacks suppressed [ 885.027359][T10280] netlink: 'syz.7.1395': attribute type 1 has an invalid length. [ 885.035122][T10280] netlink: 'syz.7.1395': attribute type 2 has an invalid length. [ 886.673936][ C0] net_ratelimit: 57 callbacks suppressed [ 890.346204][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 890.358929][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 890.367972][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 890.376235][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 890.384247][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 890.399441][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 890.408594][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 890.417151][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 890.425220][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 890.439462][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 890.450751][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 890.459489][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 890.469291][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 890.477938][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 890.486305][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 890.495250][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 890.503714][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 890.512751][T10313] infiniband rxe0: set active [ 890.518790][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 890.533299][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 890.544732][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 890.561723][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 890.571271][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 890.583726][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 890.592149][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 890.600470][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 890.608811][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 890.620897][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 890.629320][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 890.637881][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 890.646309][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 890.664765][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 890.697820][ T6175] rxe_eth0 speed is unknown, defaulting to 1000 [ 891.827248][ T4883] net_ratelimit: 36 callbacks suppressed [ 895.884850][T10327] netlink: 'syz.7.1406': attribute type 1 has an invalid length. [ 895.893105][T10327] netlink: 'syz.7.1406': attribute type 2 has an invalid length. [ 897.025569][ C0] net_ratelimit: 44 callbacks suppressed [ 899.167621][T10355] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 899.500304][T10361] Need at least one configuration in g1. [ 899.506701][T10361] udc dummy_udc.0: failed to start g1: -22 [ 899.512816][T10361] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 899.524645][T10361] UDC core: g1: couldn't find an available UDC or it's busy [ 899.535847][ T26] audit: type=1800 audit(1794532683.269:241): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1413" name="c_chmask" dev="configfs" ino=55213 res=0 errno=0 [ 900.506827][ T26] audit: type=1800 audit(1794532683.279:242): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1413" name="UDC" dev="configfs" ino=55214 res=0 errno=0 [ 900.589036][ T26] audit: type=1800 audit(1794532684.329:243): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1415" name="attr_allow_any_host" dev="configfs" ino=53943 res=0 errno=0 [ 900.850499][ T4291] Bluetooth: hci2: link tx timeout [ 900.855702][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 900.874247][ T4291] Bluetooth: hci2: link tx timeout [ 900.879501][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.919561][ T4291] Bluetooth: hci2: link tx timeout [ 900.924875][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 900.932712][ T4291] Bluetooth: hci2: link tx timeout [ 900.937882][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.149277][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1416'. [ 901.167546][ T4291] Bluetooth: hci2: link tx timeout [ 901.172867][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 901.180605][ T4291] Bluetooth: hci2: link tx timeout [ 901.185746][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.829702][ T4291] Bluetooth: hci2: link tx timeout [ 901.835467][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 901.844124][ T4291] Bluetooth: hci2: link tx timeout [ 901.849300][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.787000][ C1] net_ratelimit: 58 callbacks suppressed [ 902.907333][T10396] netlink: 'syz.7.1419': attribute type 1 has an invalid length. [ 902.915290][T10396] netlink: 'syz.7.1419': attribute type 2 has an invalid length. [ 903.167102][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 903.173395][ T4291] Bluetooth: hci2: link tx timeout [ 903.178671][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 903.186562][ T4291] Bluetooth: hci2: link tx timeout [ 903.193190][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 903.389591][ T4291] Bluetooth: hci2: link tx timeout [ 903.394778][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 903.403436][ T4291] Bluetooth: hci2: link tx timeout [ 903.408720][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 904.778620][ T26] audit: type=1800 audit(1794532688.559:244): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1424" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 905.329589][T10421] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 907.954913][ C0] net_ratelimit: 51 callbacks suppressed [ 908.038952][ T26] audit: type=1800 audit(1794532691.819:245): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1427" name="attr_allow_any_host" dev="configfs" ino=54027 res=0 errno=0 [ 908.156787][ T26] audit: type=1326 audit(1794532691.929:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.5.1428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13031a94d9 code=0x0 [ 909.497315][T10448] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 909.505099][T10448] netlink: 'syz.0.1431': attribute type 2 has an invalid length. [ 910.036620][T10454] loop5: detected capacity change from 0 to 256 [ 910.209280][T10454] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 910.876819][ T3603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 911.116977][ T3603] usb 6-1: Using ep0 maxpacket: 32 [ 911.138771][ T3603] usb 6-1: config index 0 descriptor too short (expected 58651, got 27) [ 911.177136][ T3603] usb 6-1: config 192 has an invalid interface number: 231 but max is -1 [ 911.185636][ T3603] usb 6-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 911.263847][ T3603] usb 6-1: config 192 has no interface number 0 [ 911.324345][ T3603] usb 6-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 911.486992][ T3603] usb 6-1: config 192 interface 231 has no altsetting 0 [ 911.520844][ T3603] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 911.577281][ T3603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.593893][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1429'. [ 911.607720][ T3603] usb 6-1: Product: syz [ 911.611921][ T3603] usb 6-1: Manufacturer: syz [ 911.638182][ T3603] usb 6-1: SerialNumber: syz [ 913.088673][ T3603] usb 6-1: Found UVC 0.00 device syz (05ac:8600) [ 913.190449][ T3603] usb 6-1: No valid video chain found. [ 913.230737][ T3603] usb 6-1: USB disconnect, device number 9 [ 913.906974][ C1] net_ratelimit: 62 callbacks suppressed [ 916.838603][ T3603] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 917.050200][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 917.207164][ T3603] usb 1-1: device descriptor read/64, error -32 [ 917.477362][ T3603] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 918.018430][T10514] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 918.026462][T10514] netlink: 'syz.2.1442': attribute type 2 has an invalid length. [ 918.995235][ C1] net_ratelimit: 41 callbacks suppressed [ 919.127544][ T3603] usb 1-1: Using ep0 maxpacket: 32 [ 919.212079][ T3603] usb 1-1: device descriptor read/all, error -71 [ 919.229122][ T3603] usb usb1-port1: attempt power cycle [ 919.251195][T10520] loop0: detected capacity change from 0 to 256 [ 919.511605][T10520] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 920.373958][ T4288] Bluetooth: hci2: link tx timeout [ 920.379356][ T4288] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 920.387371][ T4288] Bluetooth: hci2: link tx timeout [ 920.392622][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 920.407022][ T4383] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 920.607110][ T4383] usb 1-1: Using ep0 maxpacket: 32 [ 920.614611][ T4383] usb 1-1: config index 0 descriptor too short (expected 58651, got 27) [ 920.647332][ T4383] usb 1-1: config 192 has an invalid interface number: 231 but max is -1 [ 920.655838][ T4383] usb 1-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 920.705465][ T4291] Bluetooth: hci2: link tx timeout [ 920.711090][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 920.719094][ T4291] Bluetooth: hci2: link tx timeout [ 920.724268][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 920.746049][ T4383] usb 1-1: config 192 has no interface number 0 [ 920.795301][ T4383] usb 1-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 920.861351][ T4383] usb 1-1: config 192 interface 231 has no altsetting 0 [ 922.468574][ T4383] usb 1-1: string descriptor 0 read error: -71 [ 922.474941][ T4383] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 922.521605][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.574860][ T4383] usb 1-1: can't set config #192, error -71 [ 922.657365][ T4383] usb 1-1: USB disconnect, device number 19 [ 924.323417][ C0] net_ratelimit: 50 callbacks suppressed [ 924.923648][T10554] overlayfs: failed to resolve './file0': -2 [ 925.872054][ T26] audit: type=1800 audit(1794532709.649:247): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1440" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 926.296630][ T26] audit: type=1326 audit(1794532710.069:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.2.1444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdde3a94d9 code=0x0 [ 927.758971][T10573] netlink: 'syz.5.1454': attribute type 1 has an invalid length. [ 927.766990][T10573] netlink: 'syz.5.1454': attribute type 2 has an invalid length. [ 929.746949][ C1] net_ratelimit: 43 callbacks suppressed [ 932.678006][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.684351][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.138063][ T4366] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 935.377747][ T4366] usb 6-1: Using ep0 maxpacket: 32 [ 935.413969][ T4366] usb 6-1: config index 0 descriptor too short (expected 58651, got 27) [ 935.511867][ T4366] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 935.635453][ T4366] usb 6-1: config 192 has no interfaces? [ 935.648662][ T4366] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 935.666930][ C1] net_ratelimit: 41 callbacks suppressed [ 935.697630][ T4366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.731070][ T4366] usb 6-1: Product: syz [ 935.735309][ T4366] usb 6-1: Manufacturer: syz [ 935.770881][ T4366] usb 6-1: SerialNumber: syz [ 936.572206][T10624] loop7: detected capacity change from 0 to 256 [ 936.610117][T10624] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 938.291673][ T4366] usb 6-1: USB disconnect, device number 10 [ 938.898869][T10639] overlayfs: failed to resolve './file0': -2 [ 940.414589][T10644] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 940.422604][T10644] netlink: 'syz.5.1465': attribute type 2 has an invalid length. [ 941.395688][ T4383] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 941.397795][ C1] net_ratelimit: 48 callbacks suppressed [ 942.758779][T10656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 942.837955][T10656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 942.848504][T10656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.650805][T10656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.659484][T10656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 943.667236][T10656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.092042][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.380896][T10656] Bluetooth: hci2: link tx timeout [ 944.386081][T10656] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 944.397001][T10656] Bluetooth: hci2: link tx timeout [ 944.402235][T10656] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 944.412689][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.466079][T10656] Bluetooth: hci2: link tx timeout [ 944.471509][T10656] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 944.479256][T10656] Bluetooth: hci2: link tx timeout [ 944.484415][T10655] rxe_eth0 speed is unknown, defaulting to 1000 [ 944.484584][T10656] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 944.686173][T10656] Bluetooth: hci2: link tx timeout [ 944.691568][T10656] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 944.699338][T10656] Bluetooth: hci2: link tx timeout [ 944.704455][T10656] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 944.825891][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.072416][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.817518][ C0] net_ratelimit: 54 callbacks suppressed [ 946.826037][T10656] Bluetooth: hci4: command 0x0409 tx timeout [ 948.037011][ T9431] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 948.227145][ T9431] usb 3-1: Using ep0 maxpacket: 32 [ 948.237478][ T9431] usb 3-1: config index 0 descriptor too short (expected 58651, got 27) [ 948.276946][ T9431] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 948.359919][ T9431] usb 3-1: config 192 has no interfaces? [ 950.009509][T10656] Bluetooth: hci4: command 0x041b tx timeout [ 950.065989][ T9431] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 950.121664][ T9431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.178106][ T9431] usb 3-1: Product: syz [ 950.202912][ T9431] usb 3-1: Manufacturer: syz [ 950.235264][ T9431] usb 3-1: SerialNumber: syz [ 951.850513][ C1] net_ratelimit: 33 callbacks suppressed [ 951.924603][ T9431] usb 3-1: USB disconnect, device number 18 [ 952.008999][T10655] chnl_net:caif_netlink_parms(): no params data found [ 952.021817][T10714] loop2: detected capacity change from 0 to 256 [ 952.077522][T10656] Bluetooth: hci4: command 0x040f tx timeout [ 952.148630][T10714] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 953.277121][ T4366] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 953.483810][ T4366] usb 3-1: Using ep0 maxpacket: 32 [ 953.491683][ T4366] usb 3-1: config index 0 descriptor too short (expected 58651, got 27) [ 953.514027][ T4366] usb 3-1: config 192 has an invalid interface number: 231 but max is -1 [ 953.526974][ T4366] usb 3-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 953.537079][ T4366] usb 3-1: config 192 has no interface number 0 [ 953.544345][ T4366] usb 3-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 953.554525][ T4366] usb 3-1: config 192 interface 231 has no altsetting 0 [ 953.564890][ T4366] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 953.584529][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.603474][ T4366] usb 3-1: Product: syz [ 953.616948][ T4366] usb 3-1: Manufacturer: syz [ 953.621699][ T4366] usb 3-1: SerialNumber: syz [ 953.861475][ T4366] usb 3-1: Found UVC 0.00 device syz (05ac:8600) [ 953.880050][ T4366] usb 3-1: No valid video chain found. [ 953.927019][ T4366] usb 3-1: USB disconnect, device number 19 [ 954.122819][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.130211][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.147460][T10656] Bluetooth: hci4: command 0x0419 tx timeout [ 954.192735][T10655] device bridge_slave_0 entered promiscuous mode [ 955.863843][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.887376][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.917217][T10655] device bridge_slave_1 entered promiscuous mode [ 956.014827][ T4291] Bluetooth: hci2: link tx timeout [ 956.020794][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 956.031288][ T4291] Bluetooth: hci2: link tx timeout [ 956.036447][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 956.581193][T10745] netlink: 'syz.5.1477': attribute type 1 has an invalid length. [ 956.589179][T10745] netlink: 'syz.5.1477': attribute type 2 has an invalid length. [ 957.523159][ C1] net_ratelimit: 43 callbacks suppressed [ 957.772053][ T4291] Bluetooth: hci2: link tx timeout [ 957.777394][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 957.785125][ T4291] Bluetooth: hci2: link tx timeout [ 957.791535][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 957.843632][ T4291] Bluetooth: hci2: link tx timeout [ 957.849235][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 957.857487][ T4291] Bluetooth: hci2: link tx timeout [ 957.862664][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 959.810288][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.896614][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.559747][T10655] team0: Port device team_slave_0 added [ 961.608332][T10655] team0: Port device team_slave_1 added [ 961.893174][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.920695][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.626909][ C1] net_ratelimit: 63 callbacks suppressed [ 962.932659][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.036577][ T30] device hsr_slave_0 left promiscuous mode [ 963.065330][ T30] device hsr_slave_1 left promiscuous mode [ 963.101638][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.141771][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.149080][ T4366] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 963.191778][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.214186][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.239958][ T30] device bridge_slave_1 left promiscuous mode [ 963.263546][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.308430][ T30] device bridge_slave_0 left promiscuous mode [ 963.331902][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.357053][ T4366] usb 3-1: Using ep0 maxpacket: 32 [ 963.364872][ T4366] usb 3-1: config index 0 descriptor too short (expected 58651, got 27) [ 963.405235][ T4366] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 963.429155][ T26] audit: type=1326 audit(1794532747.209:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10799 comm="syz.5.1492" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13031a94d9 code=0x0 [ 963.452822][ T4366] usb 3-1: config 192 has no interfaces? [ 963.471578][ T4366] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 963.481054][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.481081][ T4366] usb 3-1: Product: syz [ 963.481097][ T4366] usb 3-1: Manufacturer: syz [ 963.481114][ T4366] usb 3-1: SerialNumber: syz [ 963.744209][ T30] device veth1_macvtap left promiscuous mode [ 963.759569][ T30] device veth0_macvtap left promiscuous mode [ 964.078380][ T30] device veth1_vlan left promiscuous mode [ 964.113431][ T30] device veth0_vlan left promiscuous mode [ 964.212763][T10809] gfs2: path_lookup on c::: returned error -2 [ 964.912494][ T4366] usb 3-1: USB disconnect, device number 20 [ 967.746904][ C1] net_ratelimit: 72 callbacks suppressed [ 969.556551][ T3603] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 969.817044][ T3603] usb 8-1: Using ep0 maxpacket: 32 [ 969.846711][ T3603] usb 8-1: config index 0 descriptor too short (expected 58651, got 27) [ 969.895834][ T3603] usb 8-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 969.907725][ T3603] usb 8-1: config 192 has no interfaces? [ 969.930271][ T3603] usb 8-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 969.959855][ T3603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.066031][ T3603] usb 8-1: Product: syz [ 970.088319][ T3603] usb 8-1: Manufacturer: syz [ 970.114916][ T3603] usb 8-1: SerialNumber: syz [ 970.829043][ T30] team0 (unregistering): Port device team_slave_1 removed [ 971.615263][T10853] gfs2: path_lookup on c::: returned error -2 [ 971.690667][ T30] team0 (unregistering): Port device team_slave_0 removed [ 971.804577][ T3603] usb 8-1: USB disconnect, device number 9 [ 971.982690][ T26] audit: type=1326 audit(1794532755.759:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x0 [ 972.561432][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.684793][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.877100][ C0] net_ratelimit: 34 callbacks suppressed [ 975.211688][T10875] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 975.276187][ T26] audit: type=1800 audit(1794532759.049:251): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1515" name="attr_allow_any_host" dev="configfs" ino=55954 res=0 errno=0 [ 975.332796][T10875] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1514'. [ 975.368105][ T26] audit: type=1800 audit(1794532759.089:252): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1515" name="addr_trtype" dev="configfs" ino=55957 res=0 errno=0 [ 975.512039][T10883] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1510'. [ 975.784830][ T30] bond0 (unregistering): Released all slaves [ 976.471067][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.810283][ T4368] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 977.038475][ T4368] usb 6-1: Using ep0 maxpacket: 32 [ 977.062448][ T4368] usb 6-1: config index 0 descriptor too short (expected 58651, got 27) [ 977.126363][ T4368] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 977.214058][ T4368] usb 6-1: config 192 has no interfaces? [ 977.304634][ T4368] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 977.376377][ T4368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.394890][ T4368] usb 6-1: Product: syz [ 977.403517][ T4368] usb 6-1: Manufacturer: syz [ 977.415609][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.454664][ T4368] usb 6-1: SerialNumber: syz [ 977.522550][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.624679][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1517'. [ 977.644968][ T4291] Bluetooth: hci2: link tx timeout [ 977.651814][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 977.661410][ T4291] Bluetooth: hci2: link tx timeout [ 977.668936][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 977.701730][T10880] loop7: detected capacity change from 0 to 32768 [ 977.985210][T10880] XFS (loop7): Mounting V5 Filesystem [ 978.366057][T10880] XFS (loop7): Ending clean mount [ 978.472033][T10655] device hsr_slave_0 entered promiscuous mode [ 978.668011][ C1] net_ratelimit: 39 callbacks suppressed [ 980.076544][ T4368] usb 6-1: USB disconnect, device number 11 [ 980.143432][T10655] device hsr_slave_1 entered promiscuous mode [ 980.143846][ T8348] XFS (loop7): Unmounting Filesystem [ 981.784690][T10655] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 981.872939][ T26] audit: type=1800 audit(1794532765.649:253): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1525" name="attr_allow_any_host" dev="configfs" ino=56762 res=0 errno=0 [ 981.947031][T10655] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 981.988598][ T26] audit: type=1800 audit(1794532765.679:254): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1525" name="addr_trtype" dev="configfs" ino=56763 res=0 errno=0 [ 982.129361][T10655] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 982.222114][T10655] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 982.309739][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 982.318768][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 982.326183][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 982.333628][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 982.340859][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 982.348129][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 982.355293][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 982.362653][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 982.369941][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 982.377222][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 982.384460][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 982.392006][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 982.399368][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 982.406765][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 982.414235][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 982.422083][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 982.429569][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 982.437352][T10933] infiniband rxe0: set active [ 982.442281][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 982.450467][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 982.458003][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 982.465437][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 982.473160][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 982.481450][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 982.489079][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 982.496587][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 982.504120][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 982.513097][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 982.520673][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 982.528439][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 982.536082][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 982.543918][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 982.552446][ T22] rxe_eth0 speed is unknown, defaulting to 1000 [ 982.567516][ T4291] Bluetooth: hci2: link tx timeout [ 982.572660][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 982.572703][ T4291] Bluetooth: hci2: link tx timeout [ 982.572713][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 982.597610][ T4291] Bluetooth: hci2: link tx timeout [ 982.602785][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 982.610598][ T4291] Bluetooth: hci2: link tx timeout [ 982.615749][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 983.036106][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.140421][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 983.175753][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 983.318096][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.358044][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 983.378188][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 983.432934][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.440207][ T4883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.547572][ T4381] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 983.642702][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 983.677925][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 983.712034][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 983.734846][ T4381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.750426][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.757663][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.775086][ T4381] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 984.301843][T10955] overlayfs: failed to resolve './file0': -2 [ 985.175757][ C1] net_ratelimit: 38 callbacks suppressed [ 985.206214][ T4381] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 985.246158][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.287007][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.316594][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1529'. [ 985.440261][ T4381] usb 3-1: Found UVC 1.00 device (046d:0825) [ 985.517151][ T4381] usb 3-1: No valid video chain found. [ 985.531317][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.542841][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 985.586594][ T4381] usb 3-1: USB disconnect, device number 21 [ 985.666677][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 987.155776][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 987.189392][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 987.229129][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 987.261328][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.299836][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 987.368545][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.428523][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 987.489563][T10655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 989.088675][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.096263][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.153486][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.668388][ T9431] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 989.857084][ T9431] usb 1-1: Using ep0 maxpacket: 32 [ 990.166051][ T9431] usb 1-1: config index 0 descriptor too short (expected 58651, got 27) [ 990.177087][ T9431] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 990.204299][ T9431] usb 1-1: config 192 has no interfaces? [ 990.226890][ C1] net_ratelimit: 35 callbacks suppressed [ 990.280231][ T9431] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 990.316939][ T9431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.325146][ T9431] usb 1-1: Product: syz [ 990.329477][ T9431] usb 1-1: Manufacturer: syz [ 990.355431][ T9431] usb 1-1: SerialNumber: syz [ 992.657319][ T9431] usb 1-1: USB disconnect, device number 20 [ 992.812170][T11013] file system registered [ 992.951164][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.957571][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.139112][ T26] audit: type=1326 audit(1794532776.919:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.7.1539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83443a94d9 code=0x0 [ 994.090373][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1541'. [ 995.402811][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 995.413786][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.835755][ C1] net_ratelimit: 41 callbacks suppressed [ 995.935263][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 995.972663][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.994503][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 996.067928][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 996.088747][T10655] device veth0_vlan entered promiscuous mode [ 996.150466][T10655] device veth1_vlan entered promiscuous mode [ 996.410362][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 996.438701][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 996.777017][ T4383] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 997.309026][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 997.374422][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 997.421351][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.457141][ T4383] usb 8-1: Using ep0 maxpacket: 32 [ 997.470187][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.480247][ T4383] usb 8-1: config index 0 descriptor too short (expected 58651, got 27) [ 997.519379][ T4383] usb 8-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 997.537450][T10655] device veth0_macvtap entered promiscuous mode [ 997.564174][ T4383] usb 8-1: config 192 has no interfaces? [ 997.587424][T10655] device veth1_macvtap entered promiscuous mode [ 997.598179][ T4383] usb 8-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 997.648123][ T4383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.656182][ T4383] usb 8-1: Product: syz [ 997.697014][ T4383] usb 8-1: Manufacturer: syz [ 997.712269][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.726924][ T4383] usb 8-1: SerialNumber: syz [ 997.754304][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.797877][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.872014][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.931958][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.976322][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.997973][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.025984][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.052317][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.073496][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 998.091716][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.116319][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.130552][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.143895][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.154925][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.169339][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.192830][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.210343][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.229448][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.248717][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.261443][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 998.300881][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 999.888891][ T4383] usb 8-1: USB disconnect, device number 10 [ 1000.032024][T10655] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.116947][T10655] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.142703][T10655] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.866911][ C1] net_ratelimit: 40 callbacks suppressed [ 1001.487337][T10655] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.649074][ T26] audit: type=1326 audit(1794532785.429:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.0.1554" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87fbba94d9 code=0x0 [ 1004.091910][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1004.108260][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1004.118334][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1004.132355][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1004.143619][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1004.151451][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1004.355690][ T5529] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.042616][ T5529] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.263619][T11106] rxe_eth0 speed is unknown, defaulting to 1000 [ 1006.743672][ C1] net_ratelimit: 25 callbacks suppressed [ 1006.753861][T10656] Bluetooth: hci4: command 0x0409 tx timeout [ 1006.901067][ T5529] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.481942][T11128] overlayfs: failed to resolve './file0': -2 [ 1008.788932][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 1009.988238][ T5529] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.868008][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 1012.466981][ C1] net_ratelimit: 39 callbacks suppressed [ 1013.829284][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 1014.035607][T11106] chnl_net:caif_netlink_parms(): no params data found [ 1014.514375][ T4291] Bluetooth: hci2: link tx timeout [ 1014.519672][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1014.528554][ T4291] Bluetooth: hci2: link tx timeout [ 1014.533697][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1014.567112][ T4291] Bluetooth: hci2: link tx timeout [ 1014.572279][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1014.580996][ T4291] Bluetooth: hci2: link tx timeout [ 1014.586162][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1015.976931][ T9431] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1016.166981][ T9431] usb 8-1: Using ep0 maxpacket: 32 [ 1016.174416][ T9431] usb 8-1: config index 0 descriptor too short (expected 58651, got 27) [ 1016.213552][ T9431] usb 8-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.244457][ T9431] usb 8-1: config 192 has no interfaces? [ 1016.279083][ T9431] usb 8-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 1016.321242][ T9431] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.346166][ T9431] usb 8-1: Product: syz [ 1016.366615][ T9431] usb 8-1: Manufacturer: syz [ 1016.406523][ T9431] usb 8-1: SerialNumber: syz [ 1016.445165][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.459605][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.506603][T11106] device bridge_slave_0 entered promiscuous mode [ 1016.651950][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.666969][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.698855][T11106] device bridge_slave_1 entered promiscuous mode [ 1017.481543][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.567949][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.666890][ C1] net_ratelimit: 53 callbacks suppressed [ 1017.823398][ T9431] usb 8-1: USB disconnect, device number 12 [ 1018.130168][T11226] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1581'. [ 1018.888829][T11106] team0: Port device team_slave_0 added [ 1021.498995][T11106] team0: Port device team_slave_1 added [ 1021.662579][ T5529] device hsr_slave_0 left promiscuous mode [ 1021.755302][ T5529] device hsr_slave_1 left promiscuous mode [ 1021.831611][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.902570][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.082535][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.273776][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.384024][ T5529] device bridge_slave_1 left promiscuous mode [ 1022.407149][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.479358][ T5529] device bridge_slave_0 left promiscuous mode [ 1022.590262][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.346894][ C0] net_ratelimit: 34 callbacks suppressed [ 1023.737491][ T5529] device veth1_macvtap left promiscuous mode [ 1023.743617][ T5529] device veth0_macvtap left promiscuous mode [ 1023.774181][ T5529] device veth1_vlan left promiscuous mode [ 1023.815479][ T5529] device veth0_vlan left promiscuous mode [ 1024.246171][T11265] Cannot find add_set index 0 as target [ 1024.887285][T11262] FAULT_INJECTION: forcing a failure. [ 1024.887285][T11262] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1024.964068][T11262] CPU: 1 PID: 11262 Comm: syz.5.1593 Not tainted syzkaller #0 [ 1024.971587][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1024.981668][T11262] Call Trace: [ 1024.981681][T11262] [ 1024.981691][T11262] dump_stack_lvl+0x188/0x24e [ 1024.981731][T11262] ? show_regs_print_info+0x12/0x12 [ 1024.981762][T11262] ? load_image+0x410/0x410 [ 1024.981795][T11262] ? get_user_pages_fast_only+0x40/0x40 [ 1024.981833][T11262] should_fail_ex+0x390/0x4c0 [ 1024.981865][T11262] get_futex_key+0x8bd/0xe70 [ 1024.981896][T11262] ? futex_setup_timer+0xc0/0xc0 [ 1024.981927][T11262] futex_wake+0x123/0x4f0 [ 1025.026813][T11262] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1025.032497][T11262] ? futex_wake_mark+0x150/0x150 [ 1025.037476][T11262] do_futex+0x2e2/0x320 [ 1025.037508][T11262] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1025.047887][T11262] ? __might_fault+0xc2/0x120 [ 1025.047920][T11262] mm_release+0x20a/0x330 [ 1025.047945][T11262] ? exit_robust_list+0x2ce/0x2f0 [ 1025.056958][T11262] ? exit_mm_release+0x30/0x30 [ 1025.056983][T11262] ? lockdep_hardirqs_on+0x94/0x140 [ 1025.066819][T11262] exit_mm+0xa0/0x350 [ 1025.066853][T11262] ? sysctl_delayacct+0x220/0x220 [ 1025.076053][T11262] ? do_exit+0x2570/0x2570 [ 1025.085520][T11262] ? mm_trace_rss_stat+0xa7/0x250 [ 1025.085563][T11262] ? sync_mm_rss+0x211/0x350 [ 1025.095205][T11262] do_exit+0x958/0x2570 [ 1025.095266][T11262] ? put_task_struct+0x80/0x80 [ 1025.104171][T11262] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1025.104218][T11262] ? lock_chain_count+0x20/0x20 [ 1025.115065][T11262] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1025.115102][T11262] do_group_exit+0x229/0x2e0 [ 1025.124765][T11262] ? lockdep_hardirqs_on+0x94/0x140 [ 1025.130047][T11262] get_signal+0x1259/0x1340 [ 1025.134647][T11262] arch_do_signal_or_restart+0xc4/0x1310 [ 1025.140337][T11262] ? poll_select_finish+0x261/0x640 [ 1025.145565][T11262] ? pollwake+0x210/0x210 [ 1025.149927][T11262] ? get_sigframe_size+0x10/0x10 [ 1025.154898][T11262] ? sigprocmask+0x190/0x190 [ 1025.159532][T11262] ? do_sched_setscheduler+0xe0/0x370 [ 1025.164949][T11262] ? exit_to_user_mode_loop+0x3b/0x110 [ 1025.170446][T11262] exit_to_user_mode_loop+0x70/0x110 [ 1025.175766][T11262] exit_to_user_mode_prepare+0xee/0x180 [ 1025.181348][T11262] syscall_exit_to_user_mode+0x16/0x40 [ 1025.186840][T11262] do_syscall_64+0x58/0xa0 [ 1025.191296][T11262] ? clear_bhb_loop+0x60/0xb0 [ 1025.196009][T11262] ? clear_bhb_loop+0x60/0xb0 [ 1025.200717][T11262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.206642][T11262] RIP: 0033:0x7f13031a94d9 [ 1025.211082][T11262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.230738][T11262] RSP: 002b:00007f1303fa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1025.239178][T11262] RAX: fffffffffffffdfe RBX: 00007f1303425fa0 RCX: 00007f13031a94d9 [ 1025.247192][T11262] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1025.255181][T11262] RBP: 00007f130323804e R08: 0000000000000000 R09: 00002000000002c0 [ 1025.263201][T11262] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1025.271198][T11262] R13: 00007f1303426038 R14: 00007f1303425fa0 R15: 00007fff51dce118 [ 1025.279231][T11262] [ 1028.928927][T11284] overlayfs: failed to resolve './file0': -2 [ 1029.798787][ C1] net_ratelimit: 46 callbacks suppressed [ 1035.186903][ C0] net_ratelimit: 50 callbacks suppressed [ 1036.713031][ T5529] team0 (unregistering): Port device team_slave_1 removed [ 1036.819077][ T5529] team0 (unregistering): Port device team_slave_0 removed [ 1039.628437][ T5529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.147115][T11327] overlayfs: failed to resolve './file1': -2 [ 1041.152185][ C1] net_ratelimit: 49 callbacks suppressed [ 1041.499610][ T5529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.389749][T11330] loop0: detected capacity change from 0 to 16 [ 1042.440271][T11330] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 1044.468789][ T5529] bond0 (unregistering): Released all slaves [ 1044.644968][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1044.755079][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1045.663395][T11347] fido_id[11347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1045.725132][T10656] Bluetooth: hci2: link tx timeout [ 1045.730395][T10656] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1045.738367][T10656] Bluetooth: hci2: link tx timeout [ 1045.743530][T10656] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1045.752286][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1047.212466][ C1] net_ratelimit: 38 callbacks suppressed [ 1047.229609][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1047.307076][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1047.340549][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1047.376754][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1047.414841][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1047.445865][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1047.473800][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1048.977805][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1048.985723][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1049.010444][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 1049.038856][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 1049.178049][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1049.207274][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1049.214809][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1049.247475][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1049.255019][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1049.288304][T11289] infiniband rxe0: set active [ 1049.297702][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1049.306029][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1049.367545][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1049.375130][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1049.407365][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1049.415756][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1049.507283][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1049.514936][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1049.553385][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1049.584039][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1049.606529][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 1049.626230][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 1051.131311][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 1051.173894][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1051.197855][T11289] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 1051.206598][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.215015][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1051.218505][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.257043][ T4291] Bluetooth: hci2: link tx timeout [ 1051.262214][ T4291] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1051.270312][ T4291] Bluetooth: hci2: link tx timeout [ 1051.275545][ T4291] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.288472][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1051.322986][T11368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1051.331575][T11368] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1051.339871][T11368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1051.469287][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.485407][ T4383] rxe_eth0 speed is unknown, defaulting to 1000 [ 1051.518411][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.525414][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.639959][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.961245][T11362] rxe_eth0 speed is unknown, defaulting to 1000 [ 1052.225204][ C0] net_ratelimit: 34 callbacks suppressed [ 1052.718895][ T22] ================================================================== [ 1052.727049][ T22] BUG: KASAN: use-after-free in hci_chan_del+0x36/0x1a0 [ 1052.734012][ T22] Read of size 8 at addr ffff888055b5f918 by task kworker/1:0/22 [ 1052.741752][ T22] [ 1052.744079][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted syzkaller #0 [ 1052.751367][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1052.761435][ T22] Workqueue: events delayed_fput [ 1052.766385][ T22] Call Trace: [ 1052.769679][ T22] [ 1052.772633][ T22] dump_stack_lvl+0x188/0x24e [ 1052.777340][ T22] ? __lock_acquire+0x7ea0/0x7ea0 [ 1052.782377][ T22] ? show_regs_print_info+0x12/0x12 [ 1052.787590][ T22] ? load_image+0x410/0x410 [ 1052.792105][ T22] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1052.797580][ T22] ? __virt_addr_valid+0x188/0x540 [ 1052.802736][ T22] ? __virt_addr_valid+0x467/0x540 [ 1052.807894][ T22] ? hci_chan_del+0x36/0x1a0 [ 1052.812500][ T22] print_report+0xa8/0x210 [ 1052.816957][ T22] kasan_report+0x10b/0x140 [ 1052.821485][ T22] ? hci_chan_del+0x36/0x1a0 [ 1052.826095][ T22] hci_chan_del+0x36/0x1a0 [ 1052.830542][ T22] l2cap_chan_put+0x1f5/0x300 [ 1052.835231][ T22] l2cap_sock_release+0x179/0x1e0 [ 1052.840287][ T22] sock_close+0xbf/0x210 [ 1052.844542][ T22] ? sock_mmap+0x90/0x90 [ 1052.848882][ T22] __fput+0x20a/0x8b0 [ 1052.852872][ T22] ? process_one_work+0x7b4/0x1160 [ 1052.858003][ T22] delayed_fput+0x54/0x80 [ 1052.862340][ T22] process_one_work+0x8ab/0x1160 [ 1052.867305][ T22] ? worker_detach_from_pool+0x240/0x240 [ 1052.872993][ T22] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1052.878073][ T22] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1052.883637][ T22] ? wq_worker_running+0x97/0x190 [ 1052.888667][ T22] worker_thread+0xaf5/0x12a0 [ 1052.893366][ T22] kthread+0x29d/0x330 [ 1052.897450][ T22] ? worker_clr_flags+0x1a0/0x1a0 [ 1052.902499][ T22] ? kthread_blkcg+0xd0/0xd0 [ 1052.907098][ T22] ret_from_fork+0x1f/0x30 [ 1052.911628][ T22] [ 1052.914666][ T22] [ 1052.917001][ T22] Allocated by task 4288: [ 1052.921361][ T22] kasan_set_track+0x4b/0x70 [ 1052.925963][ T22] __kasan_kmalloc+0x8e/0xa0 [ 1052.930567][ T22] hci_chan_create+0xc5/0x300 [ 1052.935269][ T22] l2cap_conn_add+0x5d/0x910 [ 1052.939871][ T22] l2cap_connect_cfm+0x131/0x1230 [ 1052.944897][ T22] hci_remote_features_evt+0x4cc/0xa10 [ 1052.950392][ T22] hci_event_packet+0x66a/0xe60 [ 1052.955252][ T22] hci_rx_work+0x3eb/0xd40 [ 1052.959680][ T22] process_one_work+0x8ab/0x1160 [ 1052.964624][ T22] worker_thread+0xaf5/0x12a0 [ 1052.969316][ T22] kthread+0x29d/0x330 [ 1052.973394][ T22] ret_from_fork+0x1f/0x30 [ 1052.977864][ T22] [ 1052.980196][ T22] Freed by task 11289: [ 1052.984259][ T22] kasan_set_track+0x4b/0x70 [ 1052.988864][ T22] kasan_save_free_info+0x27/0x40 [ 1052.993893][ T22] ____kasan_slab_free+0x126/0x1f0 [ 1052.999017][ T22] slab_free_freelist_hook+0x133/0x1b0 [ 1053.004482][ T22] __kmem_cache_free+0xb6/0x200 [ 1053.009345][ T22] hci_conn_cleanup+0x171/0x750 [ 1053.014207][ T22] hci_conn_del+0x4df/0x6e0 [ 1053.018716][ T22] hci_conn_hash_flush+0x203/0x290 [ 1053.023839][ T22] hci_dev_close_sync+0x989/0x10a0 [ 1053.028977][ T22] hci_unregister_dev+0x216/0x520 [ 1053.034024][ T22] vhci_release+0x7f/0xd0 [ 1053.038370][ T22] __fput+0x20a/0x8b0 [ 1053.042356][ T22] task_work_run+0x1d0/0x260 [ 1053.046970][ T22] do_exit+0x9d5/0x2570 [ 1053.051152][ T22] do_group_exit+0x229/0x2e0 [ 1053.055754][ T22] get_signal+0x1259/0x1340 [ 1053.060264][ T22] arch_do_signal_or_restart+0xc4/0x1310 [ 1053.065925][ T22] exit_to_user_mode_loop+0x70/0x110 [ 1053.071247][ T22] exit_to_user_mode_prepare+0xee/0x180 [ 1053.071278][ T22] syscall_exit_to_user_mode+0x16/0x40 [ 1053.071302][ T22] do_syscall_64+0x58/0xa0 [ 1053.086735][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.092660][ T22] [ 1053.094992][ T22] Last potentially related work creation: [ 1053.100705][ T22] kasan_save_stack+0x3a/0x60 [ 1053.105394][ T22] __kasan_record_aux_stack+0xb2/0xc0 [ 1053.110789][ T22] kvfree_call_rcu+0x103/0x890 [ 1053.115565][ T22] kernfs_unlink_open_file+0x456/0x500 [ 1053.121034][ T22] kernfs_fop_release+0x12a/0x190 [ 1053.126067][ T22] __fput+0x20a/0x8b0 [ 1053.130068][ T22] task_work_run+0x1d0/0x260 [ 1053.134667][ T22] exit_to_user_mode_loop+0xe6/0x110 [ 1053.139966][ T22] exit_to_user_mode_prepare+0xee/0x180 [ 1053.145540][ T22] syscall_exit_to_user_mode+0x16/0x40 [ 1053.151004][ T22] do_syscall_64+0x58/0xa0 [ 1053.155433][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.161341][ T22] [ 1053.163665][ T22] Second to last potentially related work creation: [ 1053.170245][ T22] kasan_save_stack+0x3a/0x60 [ 1053.174932][ T22] __kasan_record_aux_stack+0xb2/0xc0 [ 1053.180348][ T22] kvfree_call_rcu+0x103/0x890 [ 1053.185142][ T22] kernfs_unlink_open_file+0x456/0x500 [ 1053.190640][ T22] kernfs_fop_release+0x12a/0x190 [ 1053.195709][ T22] __fput+0x20a/0x8b0 [ 1053.199716][ T22] task_work_run+0x1d0/0x260 [ 1053.204346][ T22] exit_to_user_mode_loop+0xe6/0x110 [ 1053.209650][ T22] exit_to_user_mode_prepare+0xee/0x180 [ 1053.215217][ T22] syscall_exit_to_user_mode+0x16/0x40 [ 1053.220683][ T22] do_syscall_64+0x58/0xa0 [ 1053.225111][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.231014][ T22] [ 1053.233339][ T22] The buggy address belongs to the object at ffff888055b5f900 [ 1053.233339][ T22] which belongs to the cache kmalloc-128 of size 128 [ 1053.247412][ T22] The buggy address is located 24 bytes inside of [ 1053.247412][ T22] 128-byte region [ffff888055b5f900, ffff888055b5f980) [ 1053.260610][ T22] [ 1053.262940][ T22] The buggy address belongs to the physical page: [ 1053.269360][ T22] page:ffffea000156d7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055b5f000 pfn:0x55b5f [ 1053.280846][ T22] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1053.288433][ T22] raw: 00fff00000000200 ffffea00015c9d48 ffffea00008da808 ffff8880184418c0 [ 1053.297040][ T22] raw: ffff888055b5f000 000000000010000e 00000001ffffffff 0000000000000000 [ 1053.305637][ T22] page dumped because: kasan: bad access detected [ 1053.312057][ T22] page_owner tracks the page as allocated [ 1053.317795][ T22] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4274, tgid 4274 (syz-executor), ts 85097022492, free_ts 85082952970 [ 1053.336122][ T22] post_alloc_hook+0x173/0x1a0 [ 1053.340905][ T22] get_page_from_freelist+0x206b/0x2180 [ 1053.346463][ T22] __alloc_pages+0x1ec/0x4f0 [ 1053.351153][ T22] alloc_slab_page+0x5d/0x180 [ 1053.355837][ T22] new_slab+0x87/0x2d0 [ 1053.359916][ T22] ___slab_alloc+0xbc5/0x1240 [ 1053.364600][ T22] __kmem_cache_alloc_node+0x126/0x270 [ 1053.370068][ T22] __kmalloc_node_track_caller+0xa0/0x240 [ 1053.375791][ T22] kmemdup+0x27/0x60 [ 1053.379711][ T22] mpls_dev_sysctl_register+0xc2/0x2f0 [ 1053.385183][ T22] mpls_dev_notify+0x247/0x770 [ 1053.389960][ T22] raw_notifier_call_chain+0xcb/0x160 [ 1053.395525][ T22] register_netdevice+0x16a8/0x1b80 [ 1053.400734][ T22] macvlan_common_newlink+0x11af/0x1910 [ 1053.406288][ T22] rtnl_newlink+0x14b3/0x1f90 [ 1053.410990][ T22] rtnetlink_rcv_msg+0x863/0xfb0 [ 1053.415945][ T22] page last free stack trace: [ 1053.420614][ T22] free_unref_page_prepare+0x8e5/0x9e0 [ 1053.426082][ T22] free_unref_page_list+0xbb/0x8e0 [ 1053.427548][T10656] Bluetooth: hci5: command 0x0409 tx timeout [ 1053.431198][ T22] release_pages+0x20d1/0x2340 [ 1053.431231][ T22] tlb_flush_mmu+0x105/0x220 [ 1053.442399][ T22] tlb_finish_mmu+0xf0/0x220 [ 1053.451655][ T22] exit_mmap+0x388/0x970 [ 1053.455922][ T22] __mmput+0x118/0x3a0 [ 1053.455946][ T22] exit_mm+0x24d/0x350 [ 1053.455972][ T22] do_exit+0x958/0x2570 [ 1053.460193][ T22] do_group_exit+0x229/0x2e0 [ 1053.460222][ T22] __x64_sys_exit_group+0x3b/0x40 [ 1053.460249][ T22] do_syscall_64+0x4c/0xa0 [ 1053.460284][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.468655][ T22] [ 1053.468662][ T22] Memory state around the buggy address: [ 1053.478397][ T22] ffff888055b5f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1053.488717][ T22] ffff888055b5f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1053.488733][ T22] >ffff888055b5f900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1053.496692][ T22] ^ [ 1053.496706][ T22] ffff888055b5f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1053.533947][ T22] ffff888055b5fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 1053.542011][ T22] ================================================================== [ 1053.629126][T11106] device hsr_slave_0 entered promiscuous mode [ 1053.647585][T11106] device hsr_slave_1 entered promiscuous mode [ 1054.387888][T11385] overlayfs: failed to resolve './file1': -2 [ 1055.287383][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.293717][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.507142][T10656] Bluetooth: hci5: command 0x041b tx timeout [ 1055.757168][ T26] audit: type=1800 audit(1794532839.529:257): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1622" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1056.503901][ T22] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1056.511292][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted syzkaller #0 [ 1056.518613][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1056.528714][ T22] Workqueue: events delayed_fput [ 1056.533727][ T22] Call Trace: [ 1056.537036][ T22] [ 1056.539997][ T22] dump_stack_lvl+0x188/0x24e [ 1056.544739][ T22] ? memcpy+0x3c/0x60 [ 1056.548768][ T22] ? show_regs_print_info+0x12/0x12 [ 1056.554018][ T22] ? load_image+0x410/0x410 [ 1056.558577][ T22] panic+0x2d3/0x710 [ 1056.562531][ T22] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.568734][ T22] ? bpf_jit_dump+0xd0/0xd0 [ 1056.573285][ T22] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1056.579319][ T22] ? _raw_spin_unlock+0x40/0x40 [ 1056.584223][ T22] check_panic_on_warn+0x80/0xa0 [ 1056.587225][T11380] kcov: kcov_task_exit: t = ffff88802c390000, kcov->t = ffff88802c390000 [ 1056.597642][ T22] ? hci_chan_del+0x36/0x1a0 [ 1056.602285][ T22] end_report+0x66/0x110 [ 1056.606581][ T22] kasan_report+0x118/0x140 [ 1056.611161][ T22] ? hci_chan_del+0x36/0x1a0 [ 1056.615806][ T22] hci_chan_del+0x36/0x1a0 [ 1056.620278][ T22] l2cap_chan_put+0x1f5/0x300 [ 1056.625010][ T22] l2cap_sock_release+0x179/0x1e0 [ 1056.630080][ T22] sock_close+0xbf/0x210 [ 1056.634378][ T22] ? sock_mmap+0x90/0x90 [ 1056.638674][ T22] __fput+0x20a/0x8b0 [ 1056.642700][ T22] ? process_one_work+0x7b4/0x1160 [ 1056.647856][ T22] delayed_fput+0x54/0x80 [ 1056.652231][ T22] process_one_work+0x8ab/0x1160 [ 1056.657250][ T22] ? worker_detach_from_pool+0x240/0x240 [ 1056.662939][ T22] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1056.668050][ T22] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1056.673647][ T22] ? wq_worker_running+0x97/0x190 [ 1056.678711][ T22] worker_thread+0xaf5/0x12a0 [ 1056.683455][ T22] kthread+0x29d/0x330 [ 1056.687562][ T22] ? worker_clr_flags+0x1a0/0x1a0 [ 1056.692632][ T22] ? kthread_blkcg+0xd0/0xd0 [ 1056.697264][ T22] ret_from_fork+0x1f/0x30 [ 1056.701738][ T22] [ 1056.705367][ T22] Kernel Offset: disabled [ 1056.709717][ T22] Rebooting in 86400 seconds..