last executing test programs: 3m35.540248518s ago: executing program 32 (id=421): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x90, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0x5c2, 0xffffffff, 0xb, 0x1fd, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x5, r4, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000440)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 3m19.348381915s ago: executing program 33 (id=454): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x800, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x1, 0x6, 0x4c11b0c5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0x7}) 2m22.130496312s ago: executing program 34 (id=597): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000111000/0x6000)=nil, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5523, &(0x7f000001e840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1000000002020002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e3affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000628000480240001800b00010065787468647200001400028008000640003d860108000740000000150900010073797a30000000000900020073797a3200000000060007400a2d0000140000001100010000000000000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x10010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = memfd_secret(0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000004) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x40010, r3, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$unix(0x1, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x4001, 0x120) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a00)={'veth1_to_hsr\x00', &(0x7f0000000080)=@ethtool_eeprom={0xc, 0x5, 0x8, 0x1f, "12c7a4ac9e2ecb8b29f725c5e7df34f5ccaa73d73fa04b470e133c7b664518"}}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x5832, 0x0) 2m19.410905044s ago: executing program 6 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/heartbeat/mode\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='gl', 0x2) 2m18.955750069s ago: executing program 6 (id=637): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3}, {0xe, 0x5}, {0xc, 0x5}, {0x7, 0x2}, {0x6, 0x4}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000540)=""/115, 0x60, 0x73, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x12, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m18.530829211s ago: executing program 6 (id=639): syz_open_dev$usbmon(0x0, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x221000, 0x1800, 0x10000, 0x1}, 0x1c) 2m18.039820708s ago: executing program 6 (id=640): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x1, 0x1, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r3, r3, 0x0, 0x200000) 2m17.008505893s ago: executing program 6 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 2m12.912175918s ago: executing program 35 (id=617): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x800, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x1, 0x6, 0x4c11b0c5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0x7}) 2m12.888547171s ago: executing program 4 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)='3', 0x1) 2m10.468747588s ago: executing program 6 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 2m10.390053355s ago: executing program 4 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x8c, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x952, 0x3ff}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfe, 0xfff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x8c}}, 0x4008010) 2m7.960224151s ago: executing program 4 (id=657): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0], 0x30}}, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) close(0xffffffffffffffff) io_uring_enter(r6, 0x215e, 0x4d74, 0x4, 0x0, 0x0) 2m7.471127339s ago: executing program 4 (id=658): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r1, 0xfe}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) 2m7.035875614s ago: executing program 4 (id=660): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@nodelalloc}]}, 0xfe, 0x278, &(0x7f0000000840)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x112) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) 2m5.016389567s ago: executing program 4 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 2m4.672140349s ago: executing program 3 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 2m0.27820502s ago: executing program 36 (id=649): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m59.427381066s ago: executing program 3 (id=666): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r2, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 1m55.688969538s ago: executing program 3 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0) 1m55.357277453s ago: executing program 3 (id=668): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0], 0x30}}, 0x0) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) close(0xffffffffffffffff) io_uring_enter(r7, 0x215e, 0x4d74, 0x4, 0x0, 0x0) 1m55.191565614s ago: executing program 37 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 1m54.451782398s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) write(0xffffffffffffffff, &(0x7f0000000440)='255', 0x3) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) close(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='3', 0x1) 1m54.35213069s ago: executing program 8 (id=671): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r1, 0xfe}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) 1m53.94167977s ago: executing program 8 (id=672): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x500}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 1m53.880036473s ago: executing program 3 (id=673): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r0, 0x4020744f, 0x0) 1m53.527950908s ago: executing program 8 (id=674): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@nodelalloc}]}, 0xfe, 0x278, &(0x7f0000000840)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x112) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) 1m51.531510433s ago: executing program 8 (id=675): mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 1m49.873133906s ago: executing program 38 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 1m47.4786675s ago: executing program 8 (id=678): pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r1, 0xa) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.079423272s ago: executing program 8 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 1m37.974274547s ago: executing program 39 (id=673): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r0, 0x4020744f, 0x0) 1m31.193036167s ago: executing program 40 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) socket$inet(0x2, 0xa, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000019080)={0x9b36, 0x2, [{0x1}, {0x1}]}) socket$inet_tcp(0x2, 0x1, 0x0) 24.49025955s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}}, 0x0) setns(0xc9, 0x0) getpid() process_madvise(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x9, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000140)="6e89555a6479f2bdfe09ad2dafd99a73f1268a7be4339c6dafa87675ef80fe51f22940bb4635", 0x26, 0x10008080, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x5, 0x1, 0x6, 0x4, 0x5]}, &(0x7f0000000380)=0x54) 23.971951247s ago: executing program 0 (id=856): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x500}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 23.698817304s ago: executing program 0 (id=857): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x221000, 0x1800, 0x10000, 0x1}, 0x1c) 20.980085848s ago: executing program 2 (id=860): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d0000", 0x6, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x23, 0x0, 0xffffffffffffff22}, 0x40002020) 17.249909711s ago: executing program 2 (id=869): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x500}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 17.237118438s ago: executing program 0 (id=870): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0', 0x1) pwrite64(r3, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0], 0x30}}, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) close(0xffffffffffffffff) io_uring_enter(r6, 0x215e, 0x4d74, 0x4, 0x0, 0x0) 16.732679402s ago: executing program 1 (id=873): socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 16.607263857s ago: executing program 5 (id=874): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 14.571788068s ago: executing program 0 (id=875): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='\x00', 0x1211000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xead}}], [{@smackfsroot={'smackfsroot', 0x3d, 'hT^\x19\x04\xb2\x9b\xb7\x1c\x9b\xeaS\xdaa-\x8bz^\xf0u\xdd\x1bT)\x82X\xc5eE\xca\x96\xa1u0[Y\x8e\a\xad\x84i8\xda\xb7\xce@3\x9fC\x02}\xaa\xa5\x93G\x1b3\x05H\xbd\xd7\x11\xf6\xeb\x83\x88\x9f\xc9\x89\x94\vD\xce\xda\xdak\v\xf3\xd67\x92\x0fD\xc4\xfe\xf0\xeb\xdfX\x87\xb9\xf7\x89!Y\xcf\xbcm\xe9[\ny\xbf\x88&\xe2\xc3\x02\x10N\xcf1\xd9\b\xaa\x00\x00\x00\'$\xed\x80{\xf1\xc3\x0e\x93\xd3\x1f\xc9\x80\xf4-mp\xc1\x05\xd69\xb2j\xd0b)\x1e\x99\xa7J\x16b\xdcYP\xe8\"\xbf\xf8Q\x0fC&\xcc\xbb\x90\x051\x8af\x0f\xb5\vi\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/fuse\x00'}}]}}, 0x1, 0x0, &(0x7f0000000240)="9eccb743aa8a45117daf30734040ba8abdcce1c8e4e2b96bf15eabcee3210d7491afff994954ae347ac6bb0266b421d71f904190c19c780bf3fa880186dd314e05edaf1b03f2034a2f9488e9ad8af6fa4b7ab51315e114946e5dc267c1b5fe7abd75cc7f99b07753317b5996468128dfeb9273c14a93f39652cd") faccessat(r1, &(0x7f00000005c0)='\x00', 0x1) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4004000000000, {0x0, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2b, 0x6, 0x0, {0x0, 0x5, 0x2, 0x0, 'fd'}}, 0x2b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc1, 0x0, 0x4, "05000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x81, 0xa, &(0x7f0000002000)="0a000100010000000001") syz_usb_ep_write(r4, 0x82, 0xb, &(0x7f0000002100)="0b00020002000000000000") syz_usb_ep_write(r4, 0x3, 0x5, &(0x7f0000002200)="0900030020") nanosleep(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f0000000180)="3158953c", 0x4, 0x1279c00000000}]) 14.299751136s ago: executing program 1 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 14.278765796s ago: executing program 9 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='3', 0x1) 14.039928928s ago: executing program 2 (id=879): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.95427483s ago: executing program 5 (id=881): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d0000", 0x6, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x23, 0x0, 0xffffffffffffff22}, 0x40002020) 13.794231055s ago: executing program 9 (id=882): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$kcm(0x1e, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r6, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r7, 0x6, 0x800, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) 13.640397887s ago: executing program 7 (id=883): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x558, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r1, 0xfe}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) 13.624577633s ago: executing program 1 (id=884): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$FIOCLEX(r1, 0x5451) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) r3 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 13.167966109s ago: executing program 7 (id=885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='512', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='255', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) close(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='3', 0x1) 12.864994816s ago: executing program 5 (id=886): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x40088c0}], 0x2, 0x40800) 12.742653389s ago: executing program 7 (id=887): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r2, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r4, 0x40000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 10.83188068s ago: executing program 5 (id=888): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3}, {0xe, 0x5}, {0xc, 0x5}, {0x7, 0x2}, {0x6, 0x4}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000540)=""/115, 0x50, 0x73, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x12, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x2, 0x5003) close(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xde}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 10.817617636s ago: executing program 9 (id=889): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='/', 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000400028"], 0x40, 0x20000000}], 0x1, 0x40800) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000140)=@filename='./security/ima/policy\x00', r4, &(0x7f00000006c0)) umount2(&(0x7f00000002c0)='./file0\x00', 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x51, 0x7, {0x7, 0x0, "81d65dce3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x8, 0x7d, {0x7d, 0xc, "8e07939d6aee76e23735b083b4cca06a6262b76da713775c1d55879499fa0172b40809fd89c77697e0282dd9a241d4ac1e245d1cfcf41ee066e25f62292c2cb2bcdecc529a7edae82e6243b45092a8735970b2bb158710daa0f3f9e7a9de16f72f8572e3e962404af36c7280c11d29e13d301d1ae4fe699aacb519"}}, 0x0, 0x0, 0x0}, 0x0) 8.906173959s ago: executing program 0 (id=890): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='/', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000400028"], 0x40, 0x20000000}], 0x1, 0x40800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) umount2(&(0x7f00000002c0)='./file0\x00', 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x51, 0x7, {0x7, 0x0, "81d65dce3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x8, 0x7d, {0x7d, 0xc, "8e07939d6aee76e23735b083b4cca06a6262b76da713775c1d55879499fa0172b40809fd89c77697e0282dd9a241d4ac1e245d1cfcf41ee066e25f62292c2cb2bcdecc529a7edae82e6243b45092a8735970b2bb158710daa0f3f9e7a9de16f72f8572e3e962404af36c7280c11d29e13d301d1ae4fe699aacb519"}}, 0x0, 0x0, 0x0}, 0x0) 8.876416051s ago: executing program 1 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x410}, {r0, 0x40}], 0x2, &(0x7f0000000400), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r1, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x68c782, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r3, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 8.806344121s ago: executing program 7 (id=892): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 6.648933178s ago: executing program 5 (id=893): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.586950441s ago: executing program 9 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) close(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='3', 0x1) 4.585363162s ago: executing program 7 (id=895): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYBLOB="000700000000040014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.502267681s ago: executing program 1 (id=896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 4.469577079s ago: executing program 2 (id=897): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade5026"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.151723839s ago: executing program 7 (id=898): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d0000000000", 0x9, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x23, 0x0, 0xffffffffffffff22}, 0x40002020) 4.040053262s ago: executing program 9 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='512', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='255', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) close(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='3', 0x1) 2.882620182s ago: executing program 5 (id=900): openat$zero(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0)=0xfffffffe, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x0, 0x5, {0x2, @usage=0x3, 0x0, 0x3, 0xc32, 0x5, 0x4, 0x2, 0x20, @usage=0x80, 0x1000, 0xa3, [0x81, 0x7, 0x0, 0xe0, 0x0, 0xe]}, {0x10000, @struct={0x0, 0x2}, 0x0, 0x4, 0x9, 0x8, 0x660, 0x7ff, 0x42, @usage=0x355eebae, 0x8, 0x7fffffff, [0x380000000000, 0x4, 0xff, 0x8000000000000001, 0x7, 0x1]}, {0x8, @usage=0x564, 0x0, 0x80000000, 0x3ff, 0x9, 0x2, 0x482cb979, 0x80, @struct={0x4, 0x9}, 0x1, 0xf4, [0xfffffffffffffff9, 0x9, 0x55e1, 0x7, 0x5, 0x7]}, {0x9, 0x1, 0x8000000000000000}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000000100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) epoll_create1(0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) r7 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001b40)={0x9, 0x5, {0x3, @usage=0x8, 0x0, 0x5, 0xc32, 0x5, 0x4, 0x2, 0x0, @struct={0xf, 0x6}, 0x1002, 0xa3, [0x7, 0x7, 0x0, 0xe0, 0x0, 0xc]}, {0x10000, @usage=0x6, 0x0, 0x4, 0x9, 0x8, 0x660, 0x7ff, 0x42, @struct={0x6a, 0xa8c}, 0x8, 0x7fffffff, [0x380000000000, 0x4, 0xff, 0x8000000000000001, 0x7, 0x1]}, {0x6, @struct={0xb, 0x5}, r4, 0x80000000, 0x3ff, 0x9, 0x2, 0x200000000000, 0x80, @usage=0x8, 0x1, 0xf4, [0xfffffffffffffff9, 0x80000009, 0x8000055e1, 0x7, 0x8, 0x3]}, {0x9, 0x1, 0x8000000000000000}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000a40)={{r1}, r8, 0x4, @inherit={0x50, &(0x7f0000001f40)=ANY=[@ANYBLOB="0100000000000000010000000000000007000000e5b24720c7c012b8a8000000000600000000005c17a85af0cb2811f026904456bad2f800020100000000000000ed030000000000000001000000000000ff0f00000000000044c055d9fa95d0bc34ce2ccef637297fde1a5254e074f403d4e5cf367df0c817c7e4b38b4e93e58b521ee6936494260eeed2c3bebba95a24a65d0a16d44a934b6e434d4a2f913d7937ec801c6270fdea51d96bdaf3f7"]}, @devid=r9}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"eb80c810500524dc0c7de9ef129fde81", r3, r8, {0x7, 0x7f}, {0xff, 0x6}, 0x4, [0x8001, 0x59, 0x6, 0x1, 0x5, 0x0, 0x9, 0x7, 0x7, 0x34, 0x0, 0x2, 0x8, 0xe, 0x6, 0x8]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000001ac0)="f27b4c9a031f475d6e28ccf9e83804a19be8bf6551d6c20e9552f91337b8705a22ab59674ee4297e58ad894c158eec5b6ba43a4e3d1bc13bb522ff4b3665cfed6b4fa9aa814bcabcd60bbb0a30972338d61c8b4bf2f66459b5dd87df542f921771f099454d8f20e68930254625", 0x5b0, r10}, 0x38) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)="626173653d3078323030c9a0bcfbc8d4e1abf426771e0000", 0x18) ioctl$LOOP_SET_FD(r11, 0x4c00, r11) 2.279993332s ago: executing program 2 (id=901): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x40088c0}], 0x2, 0x40800) 2.13160266s ago: executing program 1 (id=902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000600)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x13}, 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.85170606s ago: executing program 9 (id=903): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$FIOCLEX(r1, 0x5451) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) r3 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 0s ago: executing program 2 (id=904): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000300)={0x0, 0x8, 0x7d, {0x7d, 0xc, "8e07939d6aee76e23735b083b4cca06a6262b76da713775c1d55879499fa0172b40809fd89c77697e0282dd9a241d4ac1e245d1cfcf41ee066e25f62292c2cb2bcdecc529a7edae82e6243b45092a8735970b2bb158710daa0f3f9e7a9de16f72f8572e3e962404af36c7280c11d29e13d301d1ae4fe699aacb519"}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): e=failed comm="syz.3.554" name="dev" dev="configfs" ino=16130 res=0 errno=0 [ 264.455965][ T7593] (syz.3.554,7593,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 264.456081][ T7593] (syz.3.554,7593,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 264.456145][ T7593] (syz.3.554,7593,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 265.028732][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.185758][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.189092][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.200941][ T9] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 265.200968][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.200987][ T9] usb 4-1: Product: syz [ 265.201001][ T9] usb 4-1: Manufacturer: syz [ 265.201015][ T9] usb 4-1: SerialNumber: syz [ 265.234918][ T9] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 265.274103][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 265.301582][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 265.823234][ T7243] veth0_vlan: entered promiscuous mode [ 265.930413][ T7243] veth1_vlan: entered promiscuous mode [ 266.803952][ T7609] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 268.308359][ T191] usb 4-1: USB disconnect, device number 11 [ 268.409786][ T191] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 268.412824][ T7243] veth0_macvtap: entered promiscuous mode [ 268.441531][ T191] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 268.442288][ T191] ti_usb_3410_5052 4-1:2.0: device disconnected [ 268.470353][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.475717][ T7243] veth1_macvtap: entered promiscuous mode [ 268.634821][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.679839][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.735157][ T5971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.736649][ T5976] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.736683][ T5976] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.736713][ T5976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.931855][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 120 seconds [ 268.981926][ T7634] pim6reg: entered allmulticast mode [ 269.022575][ T7628] pim6reg: left allmulticast mode [ 269.293276][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.293298][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.612822][ T31] audit: type=1800 audit(1786024684.008:155): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="ipv4_address" dev="configfs" ino=16476 res=0 errno=0 [ 269.626190][ T31] audit: type=1800 audit(1786024684.028:156): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="ipv4_port" dev="configfs" ino=16480 res=0 errno=0 [ 269.641206][ T31] audit: type=1800 audit(1786024684.038:157): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="num" dev="configfs" ino=16498 res=0 errno=0 [ 269.646152][ T31] audit: type=1800 audit(1786024684.048:158): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="local" dev="configfs" ino=16499 res=0 errno=0 [ 269.665222][ T31] audit: type=1800 audit(1786024684.068:159): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="blocks" dev="configfs" ino=16502 res=0 errno=0 [ 269.673635][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.673653][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.679214][ T31] audit: type=1800 audit(1786024684.078:160): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="start_block" dev="configfs" ino=16504 res=0 errno=0 [ 269.692609][ T31] audit: type=1800 audit(1786024684.088:161): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="dev" dev="configfs" ino=16509 res=0 errno=0 [ 269.703765][ T7645] (syz.3.568,7645,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 269.703875][ T7645] (syz.3.568,7645,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 269.703937][ T7645] (syz.3.568,7645,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 270.609307][ T31] audit: type=1800 audit(1786024685.008:162): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.575" name="mode" dev="configfs" ino=16623 res=0 errno=0 [ 270.749980][ T7357] veth0_vlan: entered promiscuous mode [ 270.897327][ T7357] veth1_vlan: entered promiscuous mode [ 271.103186][ T7357] veth0_macvtap: entered promiscuous mode [ 271.130595][ T7357] veth1_macvtap: entered promiscuous mode [ 271.239851][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.266338][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.515722][ T5978] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.515765][ T5978] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.515795][ T5978] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.589667][ T5971] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.691442][ T31] audit: type=1800 audit(1786024686.088:163): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.581" name="ipv4_address" dev="configfs" ino=16746 res=0 errno=0 [ 271.724083][ T31] audit: type=1800 audit(1786024686.118:164): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.581" name="ipv4_port" dev="configfs" ino=16767 res=0 errno=0 [ 271.814687][ T7679] (syz.0.581,7679,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 271.814810][ T7679] (syz.0.581,7679,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 271.814873][ T7679] (syz.0.581,7679,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 271.925519][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.925540][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.438653][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.438674][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.517575][ T7686] (syz.0.584,7686,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 274.517694][ T7686] (syz.0.584,7686,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 274.517756][ T7686] (syz.0.584,7686,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 276.779591][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 276.779608][ T31] audit: type=1800 audit(1786024691.178:178): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="ipv4_address" dev="configfs" ino=17039 res=0 errno=0 [ 276.795958][ T31] audit: type=1800 audit(1786024691.188:179): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="ipv4_port" dev="configfs" ino=17041 res=0 errno=0 [ 276.811953][ T31] audit: type=1800 audit(1786024691.208:180): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="num" dev="configfs" ino=17042 res=0 errno=0 [ 276.833314][ T31] audit: type=1800 audit(1786024691.228:181): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="local" dev="configfs" ino=17043 res=0 errno=0 [ 276.833782][ T31] audit: type=1800 audit(1786024691.228:182): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="block_bytes" dev="configfs" ino=17045 res=0 errno=0 [ 276.857376][ T31] audit: type=1800 audit(1786024691.248:183): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="blocks" dev="configfs" ino=17054 res=0 errno=0 [ 276.864585][ T31] audit: type=1800 audit(1786024691.268:184): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="start_block" dev="configfs" ino=17056 res=0 errno=0 [ 276.879389][ T31] audit: type=1800 audit(1786024691.278:185): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="dev" dev="configfs" ino=17057 res=0 errno=0 [ 277.155396][ T191] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.307604][ T191] usb 5-1: Using ep0 maxpacket: 32 [ 277.315746][ T191] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.315773][ T191] usb 5-1: config 0 has no interface number 0 [ 277.315808][ T191] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.315830][ T191] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.315864][ T191] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 277.315885][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.374052][ T191] usb 5-1: config 0 descriptor?? [ 277.491976][ T31] audit: type=1800 audit(1786024691.878:186): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.595" name="ipv4_address" dev="configfs" ino=17101 res=0 errno=0 [ 277.496558][ T31] audit: type=1800 audit(1786024691.898:187): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.595" name="ipv4_port" dev="configfs" ino=17102 res=0 errno=0 [ 277.616028][ T7715] (syz.7.595,7715,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 277.616163][ T7715] (syz.7.595,7715,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 277.616228][ T7715] (syz.7.595,7715,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 277.707454][ T6977] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.016920][ T7722] loop1: detected capacity change from 0 to 40427 [ 278.097102][ T7722] F2FS-fs (loop1): invalid crc value [ 278.112707][ T7722] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 13 [ 278.113690][ T7722] loop1: lost filesystem error report for type 5 error -117 [ 278.113716][ T7722] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 278.119353][ T6977] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 278.119379][ T6977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.119397][ T6977] usb 1-1: Product: syz [ 278.119410][ T6977] usb 1-1: Manufacturer: syz [ 278.119424][ T6977] usb 1-1: SerialNumber: syz [ 278.240046][ T191] uclogic 0003:28BD:0094.0002: failed retrieving string descriptor #100: -71 [ 278.240146][ T191] uclogic 0003:28BD:0094.0002: failed retrieving pen parameters: -71 [ 278.240170][ T191] uclogic 0003:28BD:0094.0002: pen probing failed: -71 [ 278.240186][ T191] uclogic 0003:28BD:0094.0002: failed probing parameters: -71 [ 278.240294][ T191] uclogic 0003:28BD:0094.0002: probe with driver uclogic failed with error -71 [ 278.301812][ T191] usb 5-1: USB disconnect, device number 11 [ 278.958294][ C0] usb 1-1: invalid arpc response id received: 11 [ 279.947679][ T6977] usb 1-1: failed to set cport flags for port 0 [ 279.947785][ T6977] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 280.379675][ T6977] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 280.896917][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 280.976103][ T9] usb 1-1: USB disconnect, device number 8 [ 281.468245][ T7742] (syz.4.604,7742,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 281.468361][ T7742] (syz.4.604,7742,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 281.468427][ T7742] (syz.4.604,7742,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 284.010753][ T7750] ima: Unable to open file: / (-22) [ 284.021474][ T7749] ima: policy update failed [ 284.024949][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 284.024964][ T31] audit: type=1802 audit(1786024698.418:200): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.607" res=0 errno=0 [ 284.268171][ T7756] pim6reg: entered allmulticast mode [ 284.303332][ T7745] pim6reg: left allmulticast mode [ 284.329632][ T31] audit: type=1800 audit(1786024698.728:201): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="ipv4_address" dev="configfs" ino=17234 res=0 errno=0 [ 284.333412][ T31] audit: type=1800 audit(1786024698.728:202): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="ipv4_port" dev="configfs" ino=17235 res=0 errno=0 [ 284.335095][ T31] audit: type=1800 audit(1786024698.728:203): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="num" dev="configfs" ino=17237 res=0 errno=0 [ 284.356187][ T31] audit: type=1800 audit(1786024698.758:204): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="local" dev="configfs" ino=17238 res=0 errno=0 [ 284.363051][ T31] audit: type=1800 audit(1786024698.758:205): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="block_bytes" dev="configfs" ino=17239 res=0 errno=0 [ 284.363540][ T31] audit: type=1800 audit(1786024698.758:206): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="blocks" dev="configfs" ino=17240 res=0 errno=0 [ 284.372703][ T31] audit: type=1800 audit(1786024698.768:207): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="start_block" dev="configfs" ino=17241 res=0 errno=0 [ 284.377788][ T31] audit: type=1800 audit(1786024698.778:208): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.610" name="dev" dev="configfs" ino=17242 res=0 errno=0 [ 284.382959][ T7758] (syz.3.610,7758,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 284.387039][ T7758] (syz.3.610,7758,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 284.387114][ T7758] (syz.3.610,7758,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 285.200214][ T7766] loop4: detected capacity change from 0 to 64 [ 286.927666][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 289.782676][ T31] audit: type=1800 audit(1786024704.178:209): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="ipv4_address" dev="configfs" ino=17363 res=0 errno=0 [ 289.783200][ T31] audit: type=1800 audit(1786024704.178:210): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="ipv4_port" dev="configfs" ino=17364 res=0 errno=0 [ 289.796595][ T31] audit: type=1800 audit(1786024704.198:211): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="num" dev="configfs" ino=17365 res=0 errno=0 [ 289.799738][ T31] audit: type=1800 audit(1786024704.198:212): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="local" dev="configfs" ino=17366 res=0 errno=0 [ 289.806560][ T31] audit: type=1800 audit(1786024704.208:213): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="block_bytes" dev="configfs" ino=17367 res=0 errno=0 [ 289.829943][ T31] audit: type=1800 audit(1786024704.228:214): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="blocks" dev="configfs" ino=17368 res=0 errno=0 [ 289.841209][ T31] audit: type=1800 audit(1786024704.238:215): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="start_block" dev="configfs" ino=17369 res=0 errno=0 [ 289.841253][ T31] audit: type=1800 audit(1786024704.238:216): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.624" name="dev" dev="configfs" ino=17370 res=0 errno=0 [ 289.855572][ T7793] (syz.3.624,7793,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 289.855684][ T7793] (syz.3.624,7793,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 289.855746][ T7793] (syz.3.624,7793,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 292.393909][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.558060][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.560530][ T9] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.564741][ T9] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 292.564766][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.564785][ T9] usb 4-1: Product: syz [ 292.564798][ T9] usb 4-1: Manufacturer: syz [ 292.564812][ T9] usb 4-1: SerialNumber: syz [ 292.600498][ T9] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 292.637950][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 293.331984][ T9] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 295.009614][ T6977] usb 4-1: USB disconnect, device number 12 [ 295.096239][ T6977] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 295.169917][ T6977] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 295.170694][ T6977] ti_usb_3410_5052 4-1:2.0: device disconnected [ 295.363138][ T7820] ima: Unable to open file: / (-22) [ 295.378316][ T7819] ima: policy update failed [ 295.378461][ T31] audit: type=1802 audit(1786024709.778:217): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.634" res=0 errno=0 [ 295.551836][ T7823] pim6reg: entered allmulticast mode [ 295.628719][ T7813] pim6reg: left allmulticast mode [ 295.675344][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.681921][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.682762][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.683622][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.690108][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.303396][ T31] audit: type=1800 audit(1786024710.698:218): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="ipv4_address" dev="configfs" ino=17507 res=0 errno=0 [ 296.311878][ T31] audit: type=1800 audit(1786024710.708:219): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="ipv4_port" dev="configfs" ino=17510 res=0 errno=0 [ 296.319576][ T31] audit: type=1800 audit(1786024710.718:220): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="num" dev="configfs" ino=17511 res=0 errno=0 [ 296.333007][ T31] audit: type=1800 audit(1786024710.728:221): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="local" dev="configfs" ino=17514 res=0 errno=0 [ 296.343347][ T31] audit: type=1800 audit(1786024710.738:222): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="block_bytes" dev="configfs" ino=17515 res=0 errno=0 [ 296.350184][ T31] audit: type=1800 audit(1786024710.748:223): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="blocks" dev="configfs" ino=17516 res=0 errno=0 [ 296.350233][ T31] audit: type=1800 audit(1786024710.748:224): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="start_block" dev="configfs" ino=17517 res=0 errno=0 [ 296.364471][ T31] audit: type=1800 audit(1786024710.768:225): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="dev" dev="configfs" ino=17518 res=0 errno=0 [ 297.408262][ T6977] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.577199][ T6977] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 297.577231][ T6977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.577250][ T6977] usb 4-1: Product: syz [ 297.577264][ T6977] usb 4-1: Manufacturer: syz [ 297.577278][ T6977] usb 4-1: SerialNumber: syz [ 297.811164][ T5630] Bluetooth: hci7: command tx timeout [ 298.012628][ T31] audit: type=1800 audit(1786024712.408:226): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.646" name="ipv4_address" dev="configfs" ino=17580 res=0 errno=0 [ 298.137953][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 298.232957][ C0] usb 4-1: invalid arpc response id received: 11 [ 298.300099][ T7862] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 298.307520][ T9] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.308470][ T9] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.310392][ T9] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 298.310417][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.310435][ T9] usb 7-1: Product: syz [ 298.310449][ T9] usb 7-1: Manufacturer: syz [ 298.310483][ T9] usb 7-1: SerialNumber: syz [ 298.332877][ T9] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 298.369213][ T6977] usb 4-1: failed to set cport flags for port 0 [ 298.369260][ T6977] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 298.380956][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 298.383340][ T6977] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 298.408744][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 298.595794][ T7862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.996761][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 150 seconds [ 299.463090][ T9] usb 4-1: USB disconnect, device number 13 [ 300.410684][ T5630] Bluetooth: hci7: command tx timeout [ 302.434236][ T51] Bluetooth: hci7: command tx timeout [ 304.074279][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 304.074298][ T31] audit: type=1800 audit(1786024718.468:234): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="ipv4_address" dev="configfs" ino=17715 res=0 errno=0 [ 304.080308][ T31] audit: type=1800 audit(1786024718.478:235): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="ipv4_port" dev="configfs" ino=17716 res=0 errno=0 [ 304.080372][ T31] audit: type=1800 audit(1786024718.478:236): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="num" dev="configfs" ino=17717 res=0 errno=0 [ 304.087624][ T31] audit: type=1800 audit(1786024718.488:237): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="local" dev="configfs" ino=17718 res=0 errno=0 [ 304.088090][ T31] audit: type=1800 audit(1786024718.488:238): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="block_bytes" dev="configfs" ino=17719 res=0 errno=0 [ 304.093804][ T31] audit: type=1800 audit(1786024718.488:239): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="blocks" dev="configfs" ino=17720 res=0 errno=0 [ 304.104508][ T31] audit: type=1800 audit(1786024718.508:240): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="start_block" dev="configfs" ino=17721 res=0 errno=0 [ 304.131693][ T31] audit: type=1800 audit(1786024718.528:241): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="dev" dev="configfs" ino=17722 res=0 errno=0 [ 304.187786][ T9] usb 7-1: USB disconnect, device number 2 [ 304.351027][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.351119][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.351341][ T7824] bridge_slave_0: entered allmulticast mode [ 304.356048][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 304.374384][ T7824] bridge_slave_0: entered promiscuous mode [ 304.389085][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 304.389873][ T9] ti_usb_3410_5052 7-1:2.0: device disconnected [ 304.399848][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.399943][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.400179][ T7824] bridge_slave_1: entered allmulticast mode [ 304.429106][ T7824] bridge_slave_1: entered promiscuous mode [ 304.621383][ T51] Bluetooth: hci7: command tx timeout [ 306.427426][ T5630] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 306.458466][ T5630] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 306.460283][ T5630] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 306.461179][ T5630] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 306.462087][ T5630] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 306.590027][ T7900] bond2: (slave vlan2): making interface the new active one [ 306.592743][ T7900] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 306.597116][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.611879][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.788200][ T7824] team0: Port device team_slave_0 added [ 306.790743][ T7824] team0: Port device team_slave_1 added [ 307.116049][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.116083][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.116107][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.136719][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.136738][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.136763][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.455733][ T7824] hsr_slave_0: entered promiscuous mode [ 307.456867][ T7824] hsr_slave_1: entered promiscuous mode [ 307.460495][ T7824] debugfs: 'hsr0' already exists in 'hsr' [ 307.460518][ T7824] Cannot create hsr debugfs directory [ 307.798645][ T7919] loop4: detected capacity change from 0 to 128 [ 307.912605][ T7919] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.932413][ T7919] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.204259][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 308.357757][ T9] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 308.357785][ T9] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 308.357805][ T9] usb 5-1: config 150 has no interface number 0 [ 308.357838][ T9] usb 5-1: config 150 interface 204 has no altsetting 0 [ 308.367442][ T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 308.367469][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.367487][ T9] usb 5-1: Product: syz [ 308.367502][ T9] usb 5-1: Manufacturer: syz [ 308.367515][ T9] usb 5-1: SerialNumber: syz [ 308.518345][ T5630] Bluetooth: hci8: command tx timeout [ 308.588841][ T9] xr_serial 5-1:150.204: skipping garbage [ 308.588892][ T9] xr_serial 5-1:150.204: xr_serial converter detected [ 308.987104][ T9] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 308.987159][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 308.996041][ T9] usb 5-1: USB disconnect, device number 12 [ 309.026258][ T9] xr_serial 5-1:150.204: device disconnected [ 309.357270][ T7824] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.373954][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.375532][ T7824] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 309.468334][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.508020][ T7931] loop3: detected capacity change from 0 to 64 [ 309.633578][ T7824] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 309.665839][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.666762][ T7824] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.683299][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.751646][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.183403][ T5630] Bluetooth: hci8: command tx timeout [ 312.312713][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.344426][ T191] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 312.495978][ T191] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.496893][ T191] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.498882][ T191] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 312.498907][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.498925][ T191] usb 4-1: Product: syz [ 312.498945][ T191] usb 4-1: Manufacturer: syz [ 312.498959][ T191] usb 4-1: SerialNumber: syz [ 312.515062][ T191] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 312.529695][ T191] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 312.541047][ T191] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 312.558085][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.570662][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.570750][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.571147][ T7901] bridge_slave_0: entered allmulticast mode [ 312.577628][ T7901] bridge_slave_0: entered promiscuous mode [ 312.598702][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.598786][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.600172][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.600256][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.600377][ T7901] bridge_slave_1: entered allmulticast mode [ 312.607200][ T7901] bridge_slave_1: entered promiscuous mode [ 312.762327][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.762413][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.779846][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.782968][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.885463][ T7901] team0: Port device team_slave_0 added [ 312.888732][ T7901] team0: Port device team_slave_1 added [ 312.978088][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.978107][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.978130][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.992479][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.992495][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.992518][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.153059][ T7901] hsr_slave_0: entered promiscuous mode [ 313.157721][ T7901] hsr_slave_1: entered promiscuous mode [ 313.158356][ T7901] debugfs: 'hsr0' already exists in 'hsr' [ 313.160362][ T7901] Cannot create hsr debugfs directory [ 313.237019][ T5630] Bluetooth: hci8: command tx timeout [ 314.078141][ T7901] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 314.091583][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.092949][ T7901] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 314.101712][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.113511][ T7901] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 314.137941][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.140363][ T7901] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 314.164607][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.501654][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.650066][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.722419][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.739727][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.739814][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.752849][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.752931][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.993089][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 314.998953][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 314.999763][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 315.009849][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 315.010494][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 315.217434][ T191] usb 4-1: USB disconnect, device number 14 [ 315.336629][ T51] Bluetooth: hci8: command tx timeout [ 315.342356][ T191] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 315.369857][ T191] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 315.370672][ T191] ti_usb_3410_5052 4-1:2.0: device disconnected [ 317.074355][ T51] Bluetooth: hci9: command tx timeout [ 318.140454][ T7824] veth0_vlan: entered promiscuous mode [ 318.183230][ T7824] veth1_vlan: entered promiscuous mode [ 318.220374][ T7993] pim6reg: entered allmulticast mode [ 318.280217][ T7983] pim6reg: left allmulticast mode [ 318.372618][ T7824] veth0_macvtap: entered promiscuous mode [ 318.408998][ T7824] veth1_macvtap: entered promiscuous mode [ 318.473150][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.561750][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.586623][ T5974] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.588991][ T5974] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.589024][ T5974] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.589054][ T5974] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.845405][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.845456][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.981047][ T5974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.981069][ T5974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.155023][ T51] Bluetooth: hci9: command tx timeout [ 319.190730][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.190751][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.875526][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 319.987919][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.153589][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.632'. [ 320.492130][ T31] audit: type=1800 audit(1786024734.888:242): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="ipv4_address" dev="configfs" ino=19045 res=0 errno=0 [ 320.498336][ T31] audit: type=1800 audit(1786024734.898:243): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="ipv4_port" dev="configfs" ino=19048 res=0 errno=0 [ 320.510836][ T31] audit: type=1800 audit(1786024734.908:244): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="num" dev="configfs" ino=19050 res=0 errno=0 [ 320.525803][ T31] audit: type=1800 audit(1786024734.928:245): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="local" dev="configfs" ino=19051 res=0 errno=0 [ 320.526373][ T31] audit: type=1800 audit(1786024734.928:246): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="block_bytes" dev="configfs" ino=19052 res=0 errno=0 [ 320.541769][ T31] audit: type=1800 audit(1786024734.938:247): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="start_block" dev="configfs" ino=19057 res=0 errno=0 [ 320.551691][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 320.555346][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 320.556063][ T5630] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 320.558524][ T5630] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 320.570926][ T5630] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 320.604500][ T31] audit: type=1800 audit(1786024734.998:248): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.670" name="dev" dev="configfs" ino=19059 res=0 errno=0 [ 320.605696][ T8022] (syz.3.670,8022,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 320.605778][ T8022] (syz.3.670,8022,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 321.235049][ T5630] Bluetooth: hci9: command tx timeout [ 321.322816][ T8040] loop8: detected capacity change from 0 to 128 [ 321.422683][ T8040] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.425065][ T8040] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.709832][ T6977] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 321.773481][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.773570][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.773718][ T7974] bridge_slave_0: entered allmulticast mode [ 321.779741][ T7974] bridge_slave_0: entered promiscuous mode [ 321.799194][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.799282][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.799412][ T7974] bridge_slave_1: entered allmulticast mode [ 321.802825][ T7974] bridge_slave_1: entered promiscuous mode [ 321.902126][ T6977] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 321.902153][ T6977] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 321.902172][ T6977] usb 9-1: config 150 has no interface number 0 [ 321.902204][ T6977] usb 9-1: config 150 interface 204 has no altsetting 0 [ 321.915187][ T6977] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 321.915212][ T6977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.915231][ T6977] usb 9-1: Product: syz [ 321.915245][ T6977] usb 9-1: Manufacturer: syz [ 321.915258][ T6977] usb 9-1: SerialNumber: syz [ 321.942768][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.012504][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.033209][ T7901] veth0_vlan: entered promiscuous mode [ 322.124674][ T6977] xr_serial 9-1:150.204: skipping garbage [ 322.126198][ T6977] xr_serial 9-1:150.204: xr_serial converter detected [ 322.147770][ T7974] team0: Port device team_slave_0 added [ 322.148345][ T7901] veth1_vlan: entered promiscuous mode [ 322.179721][ T7974] team0: Port device team_slave_1 added [ 322.306449][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.306468][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.306512][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.311636][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.311651][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.311675][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.435040][ T7901] veth0_macvtap: entered promiscuous mode [ 322.439617][ T7901] veth1_macvtap: entered promiscuous mode [ 322.528688][ T6977] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 322.528743][ T6977] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 322.540855][ T6977] usb 9-1: USB disconnect, device number 2 [ 322.560008][ T6977] xr_serial 9-1:150.204: device disconnected [ 322.568278][ T7974] hsr_slave_0: entered promiscuous mode [ 322.571134][ T7974] hsr_slave_1: entered promiscuous mode [ 322.587242][ T7974] debugfs: 'hsr0' already exists in 'hsr' [ 322.587266][ T7974] Cannot create hsr debugfs directory [ 322.677477][ T5630] Bluetooth: hci10: command tx timeout [ 322.740597][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.842006][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.178193][ T7824] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.315701][ T51] Bluetooth: hci9: command tx timeout [ 323.345788][ T3260] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.346778][ T3260] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.346878][ T3260] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.457219][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.507418][ T7974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.664434][ T6977] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 323.671194][ T7974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.743904][ T7974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.801573][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.801597][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.833585][ T6977] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.842459][ T6977] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.847914][ T6977] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 323.847945][ T6977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.847963][ T6977] usb 9-1: Product: syz [ 323.847977][ T6977] usb 9-1: Manufacturer: syz [ 323.847991][ T6977] usb 9-1: SerialNumber: syz [ 323.853680][ T6977] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 323.862779][ T6977] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 323.867671][ T7974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.936755][ T6977] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 324.188915][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.188956][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.754708][ T51] Bluetooth: hci10: command tx timeout [ 324.878946][ T7974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.143993][ T7974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.145399][ T7974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.834758][ T51] Bluetooth: hci10: command tx timeout [ 327.045788][ T7974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.068678][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.068767][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.069271][ T8021] bridge_slave_0: entered allmulticast mode [ 327.075631][ T8021] bridge_slave_0: entered promiscuous mode [ 327.092753][ T7974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.133470][ T7974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.139700][ T7974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.166091][ T6977] usb 9-1: USB disconnect, device number 3 [ 327.171800][ T7974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.218420][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.218511][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.218776][ T8021] bridge_slave_1: entered allmulticast mode [ 327.233019][ T8021] bridge_slave_1: entered promiscuous mode [ 327.240591][ T6977] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 327.331340][ T6977] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 327.332128][ T6977] ti_usb_3410_5052 9-1:2.0: device disconnected [ 327.351625][ T8067] pim6reg: entered allmulticast mode [ 327.541515][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.588197][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.636396][ T8067] pim6reg: left allmulticast mode [ 327.763780][ T5630] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 327.769031][ T5630] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 327.769957][ T5630] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 327.771201][ T5630] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 327.772136][ T5630] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 329.036948][ T5630] Bluetooth: hci10: command tx timeout [ 329.091209][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 180 seconds [ 329.877914][ T51] Bluetooth: hci11: command tx timeout [ 329.940327][ T8021] team0: Port device team_slave_0 added [ 329.976245][ T8021] team0: Port device team_slave_1 added [ 330.129799][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.129817][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.129841][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.182486][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.182504][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.182528][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.367525][ T8021] hsr_slave_0: entered promiscuous mode [ 330.386252][ T8021] hsr_slave_1: entered promiscuous mode [ 330.390539][ T8021] debugfs: 'hsr0' already exists in 'hsr' [ 330.390559][ T8021] Cannot create hsr debugfs directory [ 330.501234][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.680'. [ 330.699957][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.867334][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.230029][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.230118][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.266913][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.267077][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.642685][ T51] Bluetooth: hci11: command tx timeout [ 333.162380][ T8021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.457434][ T8021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.633569][ T8021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.801752][ T8021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.976469][ T5768] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 334.182004][ T5768] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.184924][ T5768] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.191339][ T5768] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 334.191364][ T5768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.191383][ T5768] usb 10-1: Product: syz [ 334.191396][ T5768] usb 10-1: Manufacturer: syz [ 334.191410][ T5768] usb 10-1: SerialNumber: syz [ 334.218113][ T5768] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 334.280506][ T5768] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 334.308367][ T5768] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 334.674907][ T51] Bluetooth: hci11: command tx timeout [ 335.078916][ T8021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.102468][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.206396][ T8021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.233946][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.235139][ T8021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.279295][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.369558][ T8021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.388466][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.660078][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.660174][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.660377][ T8080] bridge_slave_0: entered allmulticast mode [ 335.665524][ T8080] bridge_slave_0: entered promiscuous mode [ 335.679319][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.679409][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.679682][ T8080] bridge_slave_1: entered allmulticast mode [ 335.692208][ T8080] bridge_slave_1: entered promiscuous mode [ 335.897710][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.903308][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.926252][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.051524][ T8080] team0: Port device team_slave_0 added [ 336.072781][ T8080] team0: Port device team_slave_1 added [ 336.222859][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.222879][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.222950][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.232103][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.232122][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.232145][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.452855][ T8080] hsr_slave_0: entered promiscuous mode [ 336.453972][ T8080] hsr_slave_1: entered promiscuous mode [ 336.457393][ T8080] debugfs: 'hsr0' already exists in 'hsr' [ 336.457414][ T8080] Cannot create hsr debugfs directory [ 336.760471][ T51] Bluetooth: hci11: command tx timeout [ 336.843427][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.896641][ T5782] usb 10-1: USB disconnect, device number 2 [ 336.926407][ T5782] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 336.989269][ T5782] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 336.990083][ T5782] ti_usb_3410_5052 10-1:2.0: device disconnected [ 339.250155][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.529119][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.529237][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.539102][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.539195][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.557681][ T5630] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 339.561477][ T5630] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 339.562028][ T5630] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 339.563121][ T5630] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 339.567031][ T5630] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 339.749666][ T8152] pim6reg: entered allmulticast mode [ 339.803679][ T8147] pim6reg: left allmulticast mode [ 339.926596][ T8080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.013803][ T7974] veth0_vlan: entered promiscuous mode [ 340.055623][ T7974] veth1_vlan: entered promiscuous mode [ 340.225945][ T8080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.553629][ T8080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.563055][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.690'. [ 340.769103][ T8080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.901624][ T7974] veth0_macvtap: entered promiscuous mode [ 340.972135][ T7974] veth1_macvtap: entered promiscuous mode [ 341.101129][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.146803][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.221929][ T5965] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.222176][ T5965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.222239][ T5965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.222269][ T5965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.653047][ T5630] Bluetooth: hci12: command tx timeout [ 343.630577][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.630599][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.714272][ T5630] Bluetooth: hci12: command tx timeout [ 344.005703][ T8080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.035057][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.040506][ T8080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.047966][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.108423][ T8080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.108835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.108852][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.142149][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.143001][ T8080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.153636][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.173587][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 344.181877][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 344.182461][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 344.183615][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 344.184340][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 344.245882][ T5768] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 344.401933][ T5768] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.416998][ T5768] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.424597][ T5768] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 344.424625][ T5768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.424643][ T5768] usb 10-1: Product: syz [ 344.424657][ T5768] usb 10-1: Manufacturer: syz [ 344.424671][ T5768] usb 10-1: SerialNumber: syz [ 344.503259][ T5768] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 344.545537][ T5768] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 344.577470][ T5768] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 344.987040][ T31] audit: type=1800 audit(1786024759.388:249): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="ipv4_address" dev="configfs" ino=21095 res=0 errno=0 [ 344.998600][ T31] audit: type=1800 audit(1786024759.398:250): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="ipv4_port" dev="configfs" ino=21096 res=0 errno=0 [ 345.046398][ T31] audit: type=1800 audit(1786024759.438:251): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="num" dev="configfs" ino=21097 res=0 errno=0 [ 345.046448][ T31] audit: type=1800 audit(1786024759.448:252): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="local" dev="configfs" ino=21098 res=0 errno=0 [ 345.055839][ T31] audit: type=1800 audit(1786024759.448:253): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="block_bytes" dev="configfs" ino=21099 res=0 errno=0 [ 345.070040][ T31] audit: type=1800 audit(1786024759.468:254): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="blocks" dev="configfs" ino=21100 res=0 errno=0 [ 345.070750][ T31] audit: type=1800 audit(1786024759.468:255): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="start_block" dev="configfs" ino=21101 res=0 errno=0 [ 345.085995][ T31] audit: type=1800 audit(1786024759.488:256): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.665" name="dev" dev="configfs" ino=21102 res=0 errno=0 [ 345.520211][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.646403][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.789616][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.797132][ T5630] Bluetooth: hci12: command tx timeout [ 345.900135][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.900224][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.097385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.097509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.199176][ T8021] veth0_vlan: entered promiscuous mode [ 346.274666][ T5630] Bluetooth: hci13: command tx timeout [ 346.416451][ T8021] veth1_vlan: entered promiscuous mode [ 346.501128][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.502910][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.503113][ T8149] bridge_slave_0: entered allmulticast mode [ 346.507394][ T8149] bridge_slave_0: entered promiscuous mode [ 346.518464][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 346.615685][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.615821][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.616030][ T8149] bridge_slave_1: entered allmulticast mode [ 346.618370][ T8149] bridge_slave_1: entered promiscuous mode [ 346.790865][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.883823][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.990381][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.699'. [ 347.118156][ T9] usb 10-1: USB disconnect, device number 3 [ 347.163655][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 347.168585][ T8149] team0: Port device team_slave_0 added [ 347.199096][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 347.206312][ T9] ti_usb_3410_5052 10-1:2.0: device disconnected [ 347.385448][ T8149] team0: Port device team_slave_1 added [ 347.530662][ T8021] veth0_macvtap: entered promiscuous mode [ 347.878034][ T51] Bluetooth: hci12: command tx timeout [ 348.640238][ T51] Bluetooth: hci13: command tx timeout [ 349.166539][ T8021] veth1_macvtap: entered promiscuous mode [ 349.241132][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.241152][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.241177][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.243612][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.243628][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.243651][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.361952][ T8235] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.749128][ T31] audit: type=1800 audit(1786024764.148:257): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.706" name="ipv4_address" dev="configfs" ino=21407 res=0 errno=0 [ 349.749698][ T31] audit: type=1800 audit(1786024764.148:258): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.706" name="ipv4_port" dev="configfs" ino=21408 res=0 errno=0 [ 349.802361][ T8149] hsr_slave_0: entered promiscuous mode [ 349.811177][ T8149] hsr_slave_1: entered promiscuous mode [ 349.820007][ T8149] debugfs: 'hsr0' already exists in 'hsr' [ 349.820032][ T8149] Cannot create hsr debugfs directory [ 349.829802][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.912546][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.171259][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.9.709'. [ 350.414840][ T5782] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 350.583664][ T5782] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.585776][ T5782] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.595336][ T5782] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 350.595365][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.595384][ T5782] usb 6-1: Product: syz [ 350.595419][ T5782] usb 6-1: Manufacturer: syz [ 350.595433][ T5782] usb 6-1: SerialNumber: syz [ 350.608004][ T3289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.608933][ T3289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.609095][ T3289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.609244][ T3289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.616232][ T5782] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 350.674672][ T5630] Bluetooth: hci13: command tx timeout [ 350.675144][ T5782] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 350.701596][ T5782] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 352.232190][ T8149] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.568472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.568517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.542622][ T5630] Bluetooth: hci13: command tx timeout [ 354.088071][ T5782] usb 6-1: USB disconnect, device number 5 [ 354.140475][ T5782] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 356.047621][ T5782] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 356.048492][ T5782] ti_usb_3410_5052 6-1:2.0: device disconnected [ 356.409424][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.409516][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.409768][ T8183] bridge_slave_0: entered allmulticast mode [ 356.422443][ T8183] bridge_slave_0: entered promiscuous mode [ 356.748866][ T8149] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.821560][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.821659][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.821941][ T8183] bridge_slave_1: entered allmulticast mode [ 356.829567][ T8183] bridge_slave_1: entered promiscuous mode [ 356.917997][ T3289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.918019][ T3289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.928068][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.987488][ T8279] pim6reg: entered allmulticast mode [ 357.179476][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 357.179506][ T31] audit: type=1800 audit(1786024771.578:265): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="ipv4_address" dev="configfs" ino=21802 res=0 errno=0 [ 357.181350][ T8149] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.183707][ T31] audit: type=1800 audit(1786024771.578:266): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="ipv4_port" dev="configfs" ino=21803 res=0 errno=0 [ 357.189026][ T31] audit: type=1800 audit(1786024771.588:267): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="num" dev="configfs" ino=21804 res=0 errno=0 [ 357.190044][ T31] audit: type=1800 audit(1786024771.588:268): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="local" dev="configfs" ino=21805 res=0 errno=0 [ 357.201520][ T31] audit: type=1800 audit(1786024771.598:269): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="block_bytes" dev="configfs" ino=21806 res=0 errno=0 [ 357.201563][ T31] audit: type=1800 audit(1786024771.598:270): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="blocks" dev="configfs" ino=21807 res=0 errno=0 [ 357.204654][ T31] audit: type=1800 audit(1786024771.598:271): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="start_block" dev="configfs" ino=21808 res=0 errno=0 [ 357.217148][ T31] audit: type=1800 audit(1786024771.618:272): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.716" name="dev" dev="configfs" ino=21809 res=0 errno=0 [ 357.217339][ T8281] (syz.5.716,8281,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 357.217445][ T8281] (syz.5.716,8281,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 357.217509][ T8281] (syz.5.716,8281,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 357.230835][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.230894][ T8273] pim6reg: left allmulticast mode [ 357.284651][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.359146][ T8149] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.585202][ T8183] team0: Port device team_slave_0 added [ 359.438722][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 210 seconds [ 359.457337][ T8183] team0: Port device team_slave_1 added [ 359.787697][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.787716][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.787739][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.843544][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.843565][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.843589][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.851838][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 359.936449][ T8080] veth0_vlan: entered promiscuous mode [ 360.211144][ T8183] hsr_slave_0: entered promiscuous mode [ 360.212139][ T8183] hsr_slave_1: entered promiscuous mode [ 360.233320][ T8183] debugfs: 'hsr0' already exists in 'hsr' [ 360.233343][ T8183] Cannot create hsr debugfs directory [ 360.355344][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 360.502187][ T8080] veth1_vlan: entered promiscuous mode [ 360.516091][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 360.521233][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.521256][ T9] usb 10-1: config 0 has no interface number 0 [ 360.521289][ T9] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.521311][ T9] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.521343][ T9] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 360.521364][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.526324][ T9] usb 10-1: config 0 descriptor?? [ 360.707057][ T8149] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.725656][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.881870][ T8149] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.907109][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.947289][ T9] usbhid 10-1:0.1: can't add hid device: -71 [ 360.947388][ T9] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 360.960022][ T9] usb 10-1: USB disconnect, device number 4 [ 361.249864][ T8149] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 362.207614][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 362.597139][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.598101][ T8149] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 362.613743][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.105683][ T31] audit: type=1800 audit(1786024777.508:273): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="ipv4_address" dev="configfs" ino=22171 res=0 errno=0 [ 363.108424][ T31] audit: type=1800 audit(1786024777.508:274): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="ipv4_port" dev="configfs" ino=22172 res=0 errno=0 [ 363.120905][ T31] audit: type=1800 audit(1786024777.518:275): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="num" dev="configfs" ino=22173 res=0 errno=0 [ 363.126206][ T31] audit: type=1800 audit(1786024777.528:276): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="local" dev="configfs" ino=22174 res=0 errno=0 [ 363.126254][ T31] audit: type=1800 audit(1786024777.528:277): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="block_bytes" dev="configfs" ino=22175 res=0 errno=0 [ 363.130491][ T31] audit: type=1800 audit(1786024777.528:278): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="blocks" dev="configfs" ino=22176 res=0 errno=0 [ 363.131121][ T31] audit: type=1800 audit(1786024777.528:279): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="start_block" dev="configfs" ino=22177 res=0 errno=0 [ 363.141100][ T31] audit: type=1800 audit(1786024777.538:280): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.725" name="dev" dev="configfs" ino=22180 res=0 errno=0 [ 363.158697][ T8312] (syz.9.725,8312,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 363.158813][ T8312] (syz.9.725,8312,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 363.158875][ T8312] (syz.9.725,8312,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 363.308586][ T5628] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 363.370734][ T8080] veth0_macvtap: entered promiscuous mode [ 363.488654][ T8080] veth1_macvtap: entered promiscuous mode [ 363.581690][ T5628] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.676442][ T5628] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.858439][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.926613][ T5628] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 363.926645][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.926663][ T5628] usb 3-1: Product: syz [ 363.926677][ T5628] usb 3-1: Manufacturer: syz [ 363.926691][ T5628] usb 3-1: SerialNumber: syz [ 364.009883][ T5628] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 364.048993][ T5628] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 364.060113][ T5628] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 364.183267][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 364.469124][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.498896][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.699505][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.705185][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.304399][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.304658][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.719745][ T6977] usb 3-1: USB disconnect, device number 5 [ 366.744114][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.763220][ T6977] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 366.789195][ T6977] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 366.790015][ T6977] ti_usb_3410_5052 3-1:2.0: device disconnected [ 366.902330][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.904318][ T5782] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 367.067458][ T5782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 367.067490][ T5782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 367.067512][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.067534][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 367.067587][ T5782] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 367.067607][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.071992][ T8337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 367.072090][ T8337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 367.120273][ T51] Bluetooth: hci14: urb ffff888053268600 submission failed (90) [ 367.283364][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.283450][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.288137][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.288155][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.323983][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.324099][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.361870][ T8341] Bluetooth: MGMT ver 1.23 [ 367.701847][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.701870][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.733746][ T31] audit: type=1800 audit(1786024782.128:281): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.736" name="ipv4_address" dev="configfs" ino=22737 res=0 errno=0 [ 367.740825][ T31] audit: type=1800 audit(1786024782.138:282): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.736" name="ipv4_port" dev="configfs" ino=22739 res=0 errno=0 [ 367.749539][ T8183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.789788][ T8343] (syz.9.736,8343,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 367.789916][ T8343] (syz.9.736,8343,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 367.789980][ T8343] (syz.9.736,8343,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 367.867150][ T8183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.891653][ T8183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.913507][ T8183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.920544][ T8183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.999346][ T8183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.003062][ T8183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.045948][ T8183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.207613][ T8351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.292455][ T5768] usb 6-1: USB disconnect, device number 6 [ 368.748765][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.740'. [ 368.761403][ T6977] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 368.916271][ T6977] usb 2-1: Using ep0 maxpacket: 32 [ 368.919353][ T6977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.919376][ T6977] usb 2-1: config 0 has no interface number 0 [ 368.919409][ T6977] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.919440][ T6977] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 368.919461][ T6977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.926769][ T6977] usb 2-1: config 0 descriptor?? [ 369.011347][ T6977] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 369.286639][ T8183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.411703][ T8183] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.448886][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.448982][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.520265][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.520352][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.707199][ T5782] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 369.883783][ T5782] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.887074][ T5782] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.889381][ T5782] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 369.889407][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.889425][ T5782] usb 6-1: Product: syz [ 369.889439][ T5782] usb 6-1: Manufacturer: syz [ 369.889453][ T5782] usb 6-1: SerialNumber: syz [ 369.975523][ T5782] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 370.015993][ T5782] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 370.055954][ T5782] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 370.513714][ T8387] ima: Unable to open file: / (-22) [ 370.538647][ T8386] ima: policy update failed [ 370.538927][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 370.538937][ T31] audit: type=1802 audit(1786024784.938:289): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.746" res=0 errno=0 [ 370.996852][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.329203][ T31] audit: type=1800 audit(1786024785.728:290): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="ipv4_address" dev="configfs" ino=23001 res=0 errno=0 [ 371.336472][ T31] audit: type=1800 audit(1786024785.738:291): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="ipv4_port" dev="configfs" ino=23002 res=0 errno=0 [ 371.352359][ T31] audit: type=1800 audit(1786024785.748:292): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="num" dev="configfs" ino=23003 res=0 errno=0 [ 371.373390][ T31] audit: type=1800 audit(1786024785.768:293): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="block_bytes" dev="configfs" ino=23004 res=0 errno=0 [ 371.373443][ T31] audit: type=1800 audit(1786024785.768:294): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="blocks" dev="configfs" ino=23005 res=0 errno=0 [ 371.379784][ T31] audit: type=1800 audit(1786024785.778:295): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="start_block" dev="configfs" ino=23006 res=0 errno=0 [ 371.388884][ T31] audit: type=1800 audit(1786024785.788:296): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.747" name="dev" dev="configfs" ino=23007 res=0 errno=0 [ 371.417562][ T8401] (syz.9.747,8401,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 371.421332][ T8401] (syz.9.747,8401,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 371.421408][ T8401] (syz.9.747,8401,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 371.463335][ T10] usb 2-1: USB disconnect, device number 9 [ 372.270803][ T8183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.385838][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.9.751'. [ 372.496942][ T8415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.610812][ T10] usb 6-1: USB disconnect, device number 7 [ 372.621848][ T8419] 9p: Bad value for 'rfdno' [ 372.692757][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 372.729157][ T8183] veth0_vlan: entered promiscuous mode [ 372.747817][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 372.748649][ T10] ti_usb_3410_5052 6-1:2.0: device disconnected [ 372.825910][ T8183] veth1_vlan: entered promiscuous mode [ 373.161351][ T8183] veth0_macvtap: entered promiscuous mode [ 373.263944][ T8183] veth1_macvtap: entered promiscuous mode [ 373.419952][ T8149] veth0_vlan: entered promiscuous mode [ 373.531167][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.539182][ T8149] veth1_vlan: entered promiscuous mode [ 373.620516][ T8183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.625551][ T6977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 373.779359][ T6977] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 373.779390][ T6977] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 373.779412][ T6977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.779447][ T6977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 373.779479][ T6977] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 373.779499][ T6977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.788817][ T8427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 373.788937][ T8427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 373.818007][ T31] audit: type=1800 audit(1786024788.218:297): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.759" name="ipv4_address" dev="configfs" ino=23225 res=0 errno=0 [ 373.825413][ T5760] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 373.825831][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.826365][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.826510][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.826542][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.831543][ T31] audit: type=1800 audit(1786024788.228:298): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.759" name="ipv4_port" dev="configfs" ino=23231 res=0 errno=0 [ 373.869554][ T51] Bluetooth: hci14: urb ffff88808c047b00 submission failed (90) [ 373.891372][ T8149] veth0_macvtap: entered promiscuous mode [ 373.923300][ T8183] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 373.931096][ T8434] (syz.9.759,8434,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 373.936721][ T8434] (syz.9.759,8434,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 373.936794][ T8434] (syz.9.759,8434,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 373.971056][ T8149] veth1_macvtap: entered promiscuous mode [ 373.974491][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 373.979362][ T5760] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.979384][ T5760] usb 2-1: config 0 has no interface number 0 [ 373.979418][ T5760] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.979440][ T5760] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.979473][ T5760] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 373.979493][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.981884][ T5760] usb 2-1: config 0 descriptor?? [ 374.075413][ T51] Bluetooth: hci9: unexpected cc 0x2029 length: 100 > 1 [ 374.131219][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.131262][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.167888][ T8183] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 374.333758][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.341954][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.341973][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.381705][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.437216][ T5760] usbhid 2-1:0.1: can't add hid device: -71 [ 374.437306][ T5760] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 374.459334][ T5760] usb 2-1: USB disconnect, device number 10 [ 374.477847][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.478594][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.478629][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.478662][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.779727][ T8149] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 374.966079][ T5974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.966101][ T5974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.993525][ T8149] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 375.017917][ T191] usb 6-1: USB disconnect, device number 8 [ 375.278227][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.278250][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.578656][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.9.763'. [ 375.672526][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 375.857162][ T5628] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 376.027800][ T5628] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 376.027830][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.027848][ T5628] usb 2-1: Product: syz [ 376.027862][ T5628] usb 2-1: Manufacturer: syz [ 376.027875][ T5628] usb 2-1: SerialNumber: syz [ 376.040269][ T5628] usb 2-1: config 0 descriptor?? [ 376.072382][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 376.072399][ T31] audit: type=1800 audit(1786024790.468:304): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.766" name="ipv4_address" dev="configfs" ino=23794 res=0 errno=0 [ 376.089162][ T31] audit: type=1800 audit(1786024790.488:305): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.766" name="ipv4_port" dev="configfs" ino=23797 res=0 errno=0 [ 376.103247][ T31] audit: type=1800 audit(1786024790.498:306): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.766" name="num" dev="configfs" ino=23798 res=0 errno=0 [ 376.123323][ T31] audit: type=1800 audit(1786024790.518:307): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.766" name="local" dev="configfs" ino=23799 res=0 errno=0 [ 376.123899][ T31] audit: type=1800 audit(1786024790.518:308): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.766" name="dev" dev="configfs" ino=23800 res=0 errno=0 [ 376.580603][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.620065][ T5628] usb 2-1: Firmware version (0.0) predates our first public release. [ 376.620091][ T5628] usb 2-1: Please update to version 0.2 or newer [ 376.628813][ T5628] usb 2-1: Firmware: build [ 376.660456][ T31] audit: type=1800 audit(1786024791.058:309): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.770" name="ipv4_address" dev="configfs" ino=23867 res=0 errno=0 [ 376.679373][ T31] audit: type=1800 audit(1786024791.078:310): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.770" name="ipv4_port" dev="configfs" ino=23869 res=0 errno=0 [ 376.690173][ T31] audit: type=1800 audit(1786024791.088:311): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.770" name="num" dev="configfs" ino=23871 res=0 errno=0 [ 376.701861][ T31] audit: type=1800 audit(1786024791.098:312): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.770" name="block_bytes" dev="configfs" ino=23872 res=0 errno=0 [ 376.710552][ T31] audit: type=1800 audit(1786024791.108:313): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.770" name="blocks" dev="configfs" ino=23873 res=0 errno=0 [ 376.736469][ T8469] (syz.9.770,8469,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 376.736588][ T8469] (syz.9.770,8469,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 376.736652][ T8469] (syz.9.770,8469,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 377.111739][ T5628] usb 2-1: USB disconnect, device number 11 [ 377.365933][ T6977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 377.436752][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 377.514241][ T6977] usb 1-1: Using ep0 maxpacket: 32 [ 377.516251][ T6977] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.516275][ T6977] usb 1-1: config 0 has no interface number 0 [ 377.516309][ T6977] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.516331][ T6977] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.516363][ T6977] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 377.516383][ T6977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.754604][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 377.754637][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.754656][ T9] usb 6-1: Product: syz [ 377.754669][ T9] usb 6-1: Manufacturer: syz [ 377.754684][ T9] usb 6-1: SerialNumber: syz [ 377.798547][ T6977] usb 1-1: config 0 descriptor?? [ 380.089494][ T6977] usbhid 1-1:0.1: can't add hid device: -71 [ 380.089628][ T6977] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 380.101653][ T6977] usb 1-1: USB disconnect, device number 9 [ 380.207588][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 380.253799][ C0] usb 6-1: invalid arpc response id received: 11 [ 380.303550][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.303603][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.306311][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 380.465068][ T9] usb 6-1: failed to set cport flags for port 0 [ 380.465260][ T9] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 380.470959][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 380.470988][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 380.471010][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.471118][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 380.471150][ T10] usb 10-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 380.471170][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.511803][ T9] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 380.571627][ T8492] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 380.571724][ T8492] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 380.663201][ T9] usb 6-1: USB disconnect, device number 9 [ 380.937540][ T51] Bluetooth: hci8: unexpected cc 0x2029 length: 100 > 1 [ 380.998712][ T51] Bluetooth: hci14: urb ffff888083969900 submission failed (90) [ 381.119387][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 381.119404][ T31] audit: type=1800 audit(1786024795.518:316): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="ipv4_address" dev="configfs" ino=23983 res=0 errno=0 [ 381.130250][ T31] audit: type=1800 audit(1786024795.528:317): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="ipv4_port" dev="configfs" ino=23984 res=0 errno=0 [ 381.136969][ T31] audit: type=1800 audit(1786024795.538:318): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="num" dev="configfs" ino=23985 res=0 errno=0 [ 381.140275][ T31] audit: type=1800 audit(1786024795.538:319): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="local" dev="configfs" ino=23986 res=0 errno=0 [ 381.157072][ T31] audit: type=1800 audit(1786024795.558:320): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="dev" dev="configfs" ino=23987 res=0 errno=0 [ 381.377699][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 381.528375][ T31] audit: type=1800 audit(1786024795.928:321): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="ipv4_address" dev="configfs" ino=24002 res=0 errno=0 [ 381.539029][ T31] audit: type=1800 audit(1786024795.938:322): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="ipv4_port" dev="configfs" ino=24004 res=0 errno=0 [ 381.539527][ T31] audit: type=1800 audit(1786024795.938:323): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="num" dev="configfs" ino=24005 res=0 errno=0 [ 381.546201][ T9] usb 3-1: device descriptor read/64, error -71 [ 381.587967][ T31] audit: type=1800 audit(1786024795.988:324): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="local" dev="configfs" ino=24010 res=0 errno=0 [ 381.605602][ T31] audit: type=1800 audit(1786024796.008:325): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="block_bytes" dev="configfs" ino=24013 res=0 errno=0 [ 381.713519][ T8509] (syz.5.784,8509,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 381.713635][ T8509] (syz.5.784,8509,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 381.713700][ T8509] (syz.5.784,8509,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 381.796164][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 381.808370][ T5760] usb 10-1: USB disconnect, device number 5 [ 381.865370][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 382.018894][ T8515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.075398][ T9] usb 3-1: device descriptor read/64, error -71 [ 382.209829][ T9] usb usb3-port1: attempt power cycle [ 382.554368][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 382.695858][ T9] usb 3-1: device descriptor read/8, error -71 [ 382.945102][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.792'. [ 382.945370][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 383.040203][ T9] usb 3-1: device descriptor read/8, error -71 [ 383.155653][ T9] usb usb3-port1: unable to enumerate USB device [ 383.338850][ T8538] 9p: Bad value for 'rfdno' [ 383.495219][ T8540] loop7: detected capacity change from 0 to 1024 [ 383.496256][ T8540] ext2: Unknown parameter 'seclabel' [ 386.649065][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 386.649082][ T31] audit: type=1800 audit(1786024801.048:354): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="ipv4_address" dev="configfs" ino=24191 res=0 errno=0 [ 386.692379][ T31] audit: type=1800 audit(1786024801.088:355): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="ipv4_port" dev="configfs" ino=24192 res=0 errno=0 [ 386.692961][ T31] audit: type=1800 audit(1786024801.088:356): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="num" dev="configfs" ino=24193 res=0 errno=0 [ 386.726836][ T31] audit: type=1800 audit(1786024801.128:357): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="local" dev="configfs" ino=24194 res=0 errno=0 [ 386.727539][ T31] audit: type=1800 audit(1786024801.128:358): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="block_bytes" dev="configfs" ino=24195 res=0 errno=0 [ 386.748671][ T31] audit: type=1800 audit(1786024801.148:359): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="blocks" dev="configfs" ino=24196 res=0 errno=0 [ 386.761095][ T31] audit: type=1800 audit(1786024801.158:360): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="start_block" dev="configfs" ino=24197 res=0 errno=0 [ 386.764306][ T5760] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.770502][ T31] audit: type=1800 audit(1786024801.168:361): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.803" name="dev" dev="configfs" ino=24201 res=0 errno=0 [ 386.919475][ T5760] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 386.919527][ T5760] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 386.919549][ T5760] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.919571][ T5760] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 386.919604][ T5760] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 386.919625][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.927844][ T8557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.927965][ T8557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.938219][ T8562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.059461][ T51] Bluetooth: hci14: urb ffff88803f2bbb00 submission failed (90) [ 387.218269][ T51] Bluetooth: hci13: unexpected cc 0x2029 length: 100 > 1 [ 387.231936][ T8566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.736687][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.808'. [ 387.970561][ T31] audit: type=1800 audit(1786024802.368:362): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.811" name="ipv4_address" dev="configfs" ino=24284 res=0 errno=0 [ 388.214265][ T6977] usb 1-1: USB disconnect, device number 10 [ 389.241970][ T31] audit: type=1800 audit(1786024803.638:363): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.811" name="ipv4_port" dev="configfs" ino=24299 res=0 errno=0 [ 390.021337][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 240 seconds [ 391.301729][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 392.730020][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 392.730037][ T31] audit: type=1800 audit(1786024807.128:369): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="ipv4_address" dev="configfs" ino=24360 res=0 errno=0 [ 392.733590][ T31] audit: type=1800 audit(1786024807.128:370): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="ipv4_port" dev="configfs" ino=24361 res=0 errno=0 [ 392.752530][ T31] audit: type=1800 audit(1786024807.148:371): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="num" dev="configfs" ino=24363 res=0 errno=0 [ 392.766682][ T31] audit: type=1800 audit(1786024807.168:372): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="local" dev="configfs" ino=24364 res=0 errno=0 [ 392.767131][ T31] audit: type=1800 audit(1786024807.168:373): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="block_bytes" dev="configfs" ino=24366 res=0 errno=0 [ 393.077879][ T31] audit: type=1800 audit(1786024807.478:374): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="blocks" dev="configfs" ino=24367 res=0 errno=0 [ 393.991353][ T31] audit: type=1800 audit(1786024808.388:375): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="start_block" dev="configfs" ino=24370 res=0 errno=0 [ 394.418275][ T31] audit: type=1800 audit(1786024808.818:376): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.817" name="dev" dev="configfs" ino=24371 res=0 errno=0 [ 395.441486][ T8598] pim6reg: entered allmulticast mode [ 395.497176][ T8598] pim6reg: left allmulticast mode [ 395.604217][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.691302][ T8635] netlink: 'syz.5.830': attribute type 1 has an invalid length. [ 400.847643][ T31] audit: type=1800 audit(1786024815.248:377): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="ipv4_address" dev="configfs" ino=24498 res=0 errno=0 [ 400.853876][ T31] audit: type=1800 audit(1786024815.248:378): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="ipv4_port" dev="configfs" ino=24499 res=0 errno=0 [ 400.874084][ T31] audit: type=1800 audit(1786024815.268:379): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="num" dev="configfs" ino=24500 res=0 errno=0 [ 400.878617][ T31] audit: type=1800 audit(1786024815.278:380): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="local" dev="configfs" ino=24501 res=0 errno=0 [ 400.890791][ T31] audit: type=1800 audit(1786024815.288:381): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="block_bytes" dev="configfs" ino=24502 res=0 errno=0 [ 400.903258][ T31] audit: type=1800 audit(1786024815.298:382): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="blocks" dev="configfs" ino=24503 res=0 errno=0 [ 400.922952][ T31] audit: type=1800 audit(1786024815.318:383): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.832" name="dev" dev="configfs" ino=24509 res=0 errno=0 [ 400.936463][ T8639] (syz.1.832,8639,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 400.936578][ T8639] (syz.1.832,8639,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 400.936640][ T8639] (syz.1.832,8639,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 401.072738][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 401.200851][ T31] audit: type=1800 audit(1786024815.588:384): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.834" name="ipv4_address" dev="configfs" ino=24526 res=0 errno=0 [ 401.204330][ T10] usb 8-1: device descriptor read/64, error -71 [ 401.206467][ T31] audit: type=1800 audit(1786024815.608:385): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.834" name="ipv4_port" dev="configfs" ino=24527 res=0 errno=0 [ 401.234469][ T31] audit: type=1800 audit(1786024815.618:386): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.834" name="num" dev="configfs" ino=24528 res=0 errno=0 [ 401.322431][ T8644] (syz.9.834,8644,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 401.322547][ T8644] (syz.9.834,8644,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 401.322610][ T8644] (syz.9.834,8644,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 401.365040][ T8635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.465532][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 401.498481][ T8651] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 401.601316][ T10] usb 8-1: device descriptor read/64, error -71 [ 401.704844][ T10] usb usb8-port1: attempt power cycle [ 401.841534][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.046431][ T8489] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 402.047381][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 402.066780][ T10] usb 8-1: device descriptor read/8, error -71 [ 402.209996][ T8489] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 402.210024][ T8489] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 402.210042][ T8489] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 402.210061][ T8489] usb 10-1: config 150 has no interface number 0 [ 402.210086][ T8489] usb 10-1: config 150 interface 204 has no altsetting 0 [ 402.217668][ T8489] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 402.217695][ T8489] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.217713][ T8489] usb 10-1: Product: syz [ 402.217727][ T8489] usb 10-1: Manufacturer: syz [ 402.217741][ T8489] usb 10-1: SerialNumber: syz [ 402.305337][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 402.432015][ T6977] usb 10-1: USB disconnect, device number 6 [ 402.515051][ T10] usb 8-1: device not accepting address 6, error -71 [ 402.515315][ T10] usb usb8-port1: unable to enumerate USB device [ 407.860480][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 407.860497][ T31] audit: type=1800 audit(1786024822.258:392): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="ipv4_address" dev="configfs" ino=24654 res=0 errno=0 [ 407.876526][ T31] audit: type=1800 audit(1786024822.278:393): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="ipv4_port" dev="configfs" ino=24655 res=0 errno=0 [ 407.886782][ T31] audit: type=1800 audit(1786024822.288:394): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="num" dev="configfs" ino=24656 res=0 errno=0 [ 408.841124][ T31] audit: type=1800 audit(1786024823.238:395): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="local" dev="configfs" ino=24660 res=0 errno=0 [ 408.843662][ T31] audit: type=1800 audit(1786024823.238:396): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="block_bytes" dev="configfs" ino=24661 res=0 errno=0 [ 408.858914][ T31] audit: type=1800 audit(1786024823.258:397): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="blocks" dev="configfs" ino=24662 res=0 errno=0 [ 409.892919][ T31] audit: type=1800 audit(1786024824.288:398): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.848" name="dev" dev="configfs" ino=24664 res=0 errno=0 [ 410.231565][ T31] audit: type=1800 audit(1786024824.628:399): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.849" name="ipv4_address" dev="configfs" ino=24687 res=0 errno=0 [ 410.245611][ T31] audit: type=1800 audit(1786024824.648:400): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.849" name="ipv4_port" dev="configfs" ino=24689 res=0 errno=0 [ 410.260219][ T31] audit: type=1800 audit(1786024824.658:401): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.849" name="num" dev="configfs" ino=24690 res=0 errno=0 [ 410.286790][ T8690] (syz.7.849,8690,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 410.286910][ T8690] (syz.7.849,8690,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 410.286973][ T8690] (syz.7.849,8690,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 410.988908][ T8702] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 411.014356][ T6977] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 411.044274][ T8489] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 411.165385][ T6977] usb 6-1: Using ep0 maxpacket: 32 [ 411.182728][ T6977] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.182755][ T6977] usb 6-1: config 0 has no interface number 0 [ 411.183839][ T6977] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.183865][ T6977] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.183899][ T6977] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 411.183919][ T6977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.204914][ T8489] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.204940][ T8489] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.210754][ T8489] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 411.210780][ T8489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.210798][ T8489] usb 8-1: Product: syz [ 411.210812][ T8489] usb 8-1: Manufacturer: syz [ 411.210826][ T8489] usb 8-1: SerialNumber: syz [ 411.229375][ T6977] usb 6-1: config 0 descriptor?? [ 411.231496][ T8489] usb 8-1: config 0 descriptor?? [ 412.351935][ T8489] usb 8-1: USB disconnect, device number 7 [ 413.595714][ T6977] usbhid 6-1:0.1: can't add hid device: -71 [ 413.595809][ T6977] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 413.616140][ T6977] usb 6-1: USB disconnect, device number 10 [ 413.841938][ T8715] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 416.714721][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 416.714740][ T31] audit: type=1800 audit(1786024831.108:407): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="ipv4_address" dev="configfs" ino=24818 res=0 errno=0 [ 416.724961][ T31] audit: type=1800 audit(1786024831.128:408): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="ipv4_port" dev="configfs" ino=24819 res=0 errno=0 [ 416.731138][ T31] audit: type=1800 audit(1786024831.128:409): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="num" dev="configfs" ino=24820 res=0 errno=0 [ 416.740149][ T31] audit: type=1800 audit(1786024831.138:410): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="local" dev="configfs" ino=24822 res=0 errno=0 [ 416.750121][ T31] audit: type=1800 audit(1786024831.148:411): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="block_bytes" dev="configfs" ino=24823 res=0 errno=0 [ 416.750171][ T31] audit: type=1800 audit(1786024831.148:412): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="blocks" dev="configfs" ino=24824 res=0 errno=0 [ 416.759930][ T31] audit: type=1800 audit(1786024831.158:413): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.864" name="dev" dev="configfs" ino=24825 res=0 errno=0 [ 416.774902][ T8730] pim6reg: entered allmulticast mode [ 416.848417][ T8719] pim6reg: left allmulticast mode [ 417.495677][ T31] audit: type=1800 audit(1786024831.898:414): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.867" name="ipv4_address" dev="configfs" ino=24868 res=0 errno=0 [ 417.507713][ T31] audit: type=1800 audit(1786024831.908:415): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.867" name="ipv4_port" dev="configfs" ino=24869 res=0 errno=0 [ 417.522897][ T31] audit: type=1800 audit(1786024831.918:416): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.867" name="num" dev="configfs" ino=24871 res=0 errno=0 [ 417.597015][ T8738] (syz.1.867,8738,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 417.597124][ T8738] (syz.1.867,8738,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 417.597206][ T8738] (syz.1.867,8738,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 417.957394][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 419.136508][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 420.024317][ T8748] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 420.597864][ T5871] block nbd0: Possible stuck request ffff8880271f7000: control (read@0,4096B). Runtime 270 seconds [ 420.954790][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 421.022157][ T8772] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 421.132664][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 421.132719][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.132737][ T10] usb 1-1: Product: syz [ 421.132752][ T10] usb 1-1: Manufacturer: syz [ 421.132766][ T10] usb 1-1: SerialNumber: syz [ 421.468745][ T8774] 9p: Could not find request transport: fd0x0000000000000004 [ 421.740917][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 421.740957][ T31] audit: type=1800 audit(1786024836.138:433): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.885" name="blocks" dev="configfs" ino=25046 res=0 errno=0 [ 421.741924][ T31] audit: type=1800 audit(1786024836.138:434): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.885" name="start_block" dev="configfs" ino=25047 res=0 errno=0 [ 421.751239][ T31] audit: type=1800 audit(1786024836.148:435): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.885" name="dev" dev="configfs" ino=25048 res=0 errno=0 [ 421.752875][ C0] usb 1-1: invalid arpc response id received: 11 [ 421.763920][ T8785] (syz.7.885,8785,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 421.764063][ T8785] (syz.7.885,8785,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 421.764129][ T8785] (syz.7.885,8785,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 421.938321][ T10] usb 1-1: failed to set cport flags for port 0 [ 421.938389][ T10] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 421.958299][ T10] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 422.016189][ T10] usb 1-1: USB disconnect, device number 11 [ 428.006504][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 428.208998][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 428.433302][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.433332][ T10] usb 10-1: config 0 has no interface number 0 [ 428.433369][ T10] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.433406][ T10] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 428.433427][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.465357][ T10] usb 10-1: config 0 descriptor?? [ 430.082100][ T10] usb 10-1: can't set config #0, error -71 [ 430.135908][ T10] usb 10-1: USB disconnect, device number 7 [ 430.234342][ T5628] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 430.336818][ T31] audit: type=1800 audit(1786024844.738:436): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="ipv4_address" dev="configfs" ino=25143 res=0 errno=0 [ 430.342932][ T31] audit: type=1800 audit(1786024844.738:437): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="ipv4_port" dev="configfs" ino=25146 res=0 errno=0 [ 430.353000][ T31] audit: type=1800 audit(1786024844.748:438): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="num" dev="configfs" ino=25148 res=0 errno=0 [ 430.353753][ T31] audit: type=1800 audit(1786024844.748:439): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="local" dev="configfs" ino=25149 res=0 errno=0 [ 430.375992][ T31] audit: type=1800 audit(1786024844.778:440): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="block_bytes" dev="configfs" ino=25150 res=0 errno=0 [ 430.385900][ T5628] usb 1-1: Using ep0 maxpacket: 32 [ 430.392199][ T31] audit: type=1800 audit(1786024844.788:441): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="blocks" dev="configfs" ino=25151 res=0 errno=0 [ 430.392279][ T5628] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.392299][ T5628] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.392315][ T5628] usb 1-1: config 0 has no interface number 0 [ 430.392372][ T5628] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.392407][ T5628] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 430.392427][ T5628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.398829][ T5628] usb 1-1: config 0 descriptor?? [ 430.407821][ T31] audit: type=1800 audit(1786024844.808:442): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.894" name="dev" dev="configfs" ino=25152 res=0 errno=0 [ 430.417245][ T8813] (syz.9.894,8813,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 430.417355][ T8813] (syz.9.894,8813,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 430.417416][ T8813] (syz.9.894,8813,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 430.475088][ T5628] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 431.779187][ T8806] ima: Unable to open file: / (-22) [ 432.566348][ T31] audit: type=1800 audit(1786024846.968:443): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.899" name="ipv4_address" dev="configfs" ino=25192 res=0 errno=0 [ 432.582225][ T31] audit: type=1800 audit(1786024846.978:444): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.899" name="ipv4_port" dev="configfs" ino=25194 res=0 errno=0 [ 432.592553][ T31] audit: type=1800 audit(1786024846.988:445): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.899" name="local" dev="configfs" ino=25195 res=0 errno=0 [ 432.650905][ T8826] (syz.9.899,8826,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 432.651007][ T8826] (syz.9.899,8826,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 432.651069][ T8826] (syz.9.899,8826,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 433.808956][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 435.317462][ T32] INFO: task syz.1.597:7719 blocked for more than 143 seconds. [ 435.317496][ T32] Tainted: G S L syzkaller #0 [ 435.317509][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.317518][ T32] task:syz.1.597 state:D stack:28240 pid:7719 tgid:7718 ppid:5635 task_flags:0x400040 flags:0x00080002 [ 435.317581][ T32] Call Trace: [ 435.317589][ T32] [ 435.317603][ T32] __schedule+0x17d9/0x56c0 [ 435.317657][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.317684][ T32] ? __lock_acquire+0x683/0x2cf0 [ 435.317723][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.317746][ T32] ? stack_trace_save+0xa9/0x100 [ 435.317772][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 435.317807][ T32] ? __pfx___schedule+0x10/0x10 [ 435.317837][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.317862][ T32] ? schedule+0x90/0x2b0 [ 435.317889][ T32] schedule+0x164/0x2b0 [ 435.317915][ T32] schedule_timeout+0xc0/0x2c0 [ 435.317937][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 435.317962][ T32] ? __lock_acquire+0x683/0x2cf0 [ 435.317994][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318025][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.318052][ T32] __down_common+0x3b7/0x850 [ 435.318090][ T32] ? __pfx___down_common+0x10/0x10 [ 435.318121][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318144][ T32] ? rcu_is_watching+0x15/0xb0 [ 435.318171][ T32] down+0x80/0xd0 [ 435.318200][ T32] console_lock+0x58/0x90 [ 435.318221][ T32] con_install+0x97/0x770 [ 435.318253][ T32] ? __pfx_con_install+0x10/0x10 [ 435.318273][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318305][ T32] ? __kmalloc_cache_noprof+0x32d/0x660 [ 435.318340][ T32] tty_init_dev+0xd7/0x4d0 [ 435.318366][ T32] tty_open+0x7d9/0xcc0 [ 435.318398][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318426][ T32] ? __pfx_tty_open+0x10/0x10 [ 435.318450][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318476][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.318499][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 435.318527][ T32] chrdev_open+0x4d9/0x600 [ 435.318555][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 435.318579][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 435.318606][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 435.318629][ T32] do_dentry_open+0x816/0x1380 [ 435.318667][ T32] vfs_open+0x3b/0x340 [ 435.318691][ T32] ? path_openat+0x2e2d/0x3830 [ 435.318715][ T32] path_openat+0x2e44/0x3830 [ 435.318740][ T32] ? kasan_save_track+0x3e/0x80 [ 435.325203][ T32] ? do_sys_openat2+0xcc/0x200 [ 435.325242][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.325284][ T32] do_file_open+0x23e/0x4a0 [ 435.325310][ T32] ? __pfx_do_file_open+0x10/0x10 [ 435.325351][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.325374][ T32] ? _raw_spin_unlock+0x28/0x50 [ 435.325396][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.325419][ T32] ? alloc_fd+0x651/0x6c0 [ 435.325455][ T32] do_sys_openat2+0x115/0x200 [ 435.325482][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.325507][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.325533][ T32] ? kfree+0x4d/0x640 [ 435.325562][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.325590][ T32] __x64_sys_openat+0x138/0x170 [ 435.325621][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.325642][ T32] do_syscall_64+0x174/0x580 [ 435.325675][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.325696][ T32] RIP: 0033:0x7f36b715e90e [ 435.325715][ T32] RSP: 002b:00007f36b7fd2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.325738][ T32] RAX: ffffffffffffffda RBX: 00007f36b7fd36c0 RCX: 00007f36b715e90e [ 435.325753][ T32] RDX: 0000000000000002 RSI: 00007f36b7fd2c00 RDI: ffffffffffffff9c [ 435.325767][ T32] RBP: 00007f36b7235024 R08: 0000000000000000 R09: 0000000000000000 [ 435.325781][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.325793][ T32] R13: 00007f36b7426038 R14: 00007f36b7425fa0 R15: 00007fffe1b8b4a8 [ 435.325824][ T32] [ 435.325837][ T32] INFO: task syz.7.617:7775 blocked for more than 143 seconds. [ 435.325856][ T32] Tainted: G S L syzkaller #0 [ 435.325867][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.325877][ T32] task:syz.7.617 state:D stack:28424 pid:7775 tgid:7773 ppid:7357 task_flags:0x400140 flags:0x00080002 [ 435.325983][ T32] Call Trace: [ 435.325991][ T32] [ 435.326004][ T32] __schedule+0x17d9/0x56c0 [ 435.326031][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326054][ T32] ? __lock_acquire+0x683/0x2cf0 [ 435.326088][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326124][ T32] ? stack_trace_save+0xa9/0x100 [ 435.326153][ T32] ? __pfx___schedule+0x10/0x10 [ 435.326182][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326208][ T32] ? schedule+0x90/0x2b0 [ 435.326234][ T32] schedule+0x164/0x2b0 [ 435.326260][ T32] schedule_timeout+0xc0/0x2c0 [ 435.326282][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 435.326301][ T32] ? __lock_acquire+0x683/0x2cf0 [ 435.326332][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326359][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326385][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.326412][ T32] __down_common+0x3b7/0x850 [ 435.326449][ T32] ? __pfx___down_common+0x10/0x10 [ 435.326481][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326504][ T32] ? rcu_is_watching+0x15/0xb0 [ 435.326530][ T32] down+0x80/0xd0 [ 435.326559][ T32] console_lock+0x58/0x90 [ 435.326580][ T32] do_fb_ioctl+0x5bb/0x750 [ 435.326616][ T32] ? __pfx_do_fb_ioctl+0x10/0x10 [ 435.326660][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.326702][ T32] ? __fget_files+0x2a/0x420 [ 435.450959][ T8829] ima: policy update failed [ 435.451578][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 435.451591][ T31] audit: type=1802 audit(1786024849.848:450): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.890" res=0 errno=0 [ 435.694834][ T32] ? __fget_files+0x3a2/0x420 [ 435.694871][ T32] ? __fget_files+0x2a/0x420 [ 435.694911][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.694950][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.694974][ T32] ? __pfx_fb_ioctl+0x10/0x10 [ 435.695006][ T32] __se_sys_ioctl+0xfc/0x170 [ 435.695031][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.695053][ T32] do_syscall_64+0x174/0x580 [ 435.695080][ T32] ? trace_irq_disable+0x3b/0x140 [ 435.695133][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.695154][ T32] RIP: 0033:0x7fb0fa19e0d9 [ 435.695172][ T32] RSP: 002b:00007fb0faffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.695194][ T32] RAX: ffffffffffffffda RBX: 00007fb0fa426090 RCX: 00007fb0fa19e0d9 [ 435.695209][ T32] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000005 [ 435.695223][ T32] RBP: 00007fb0fa235024 R08: 0000000000000000 R09: 0000000000000000 [ 435.695237][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.695249][ T32] R13: 00007fb0fa426128 R14: 00007fb0fa426090 R15: 00007ffdfc7fac28 [ 435.695283][ T32] [ 435.695361][ T32] [ 435.695361][ T32] Showing all locks held in the system: [ 435.695374][ T32] 1 lock held by khungtaskd/32: [ 435.695386][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 435.695467][ T32] 4 locks held by kworker/u8:7/1041: [ 435.695504][ T32] 2 locks held by getty/5377: [ 435.695515][ T32] #0: ffff8880361860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.695569][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 435.695643][ T32] 2 locks held by kworker/0:2H/5871: [ 435.695657][ T32] 3 locks held by kworker/u8:21/5978: [ 435.695669][ T32] 1 lock held by udevd/6136: [ 435.695680][ T32] #0: ffff8880270ec350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 435.695745][ T32] 2 locks held by syz.2.454/7232: [ 435.695762][ T32] 2 locks held by syz.1.597/7719: [ 435.695773][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.695830][ T32] #1: ffff8880672f81b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev+0x74/0x4d0 [ 435.695883][ T32] 1 lock held by syz.0.649/7877: [ 435.695894][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.695955][ T32] 1 lock held by syz.6.654/7895: [ 435.695967][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.696023][ T32] 4 locks held by syz-executor/7901: [ 435.696036][ T32] 1 lock held by syz.4.663/7943: [ 435.696047][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.696105][ T32] 1 lock held by syz-executor/8021: [ 435.696116][ T32] 1 lock held by syz.3.673/8035: [ 435.696128][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.696185][ T32] 1 lock held by syz.8.679/8086: [ 435.696196][ T32] #0: ffffffff8f458700 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x204/0xcc0 [ 435.696256][ T32] 1 lock held by syz.7.898/8824: [ 435.696268][ T32] 1 lock held by syz.5.900/8828: [ 435.696280][ T32] 2 locks held by syz.5.900/8832: [ 435.696292][ T32] 1 lock held by syz.1.902/8833: [ 435.696304][ T32] [ 435.696314][ T32] ============================================= [ 435.696314][ T32] [ 436.106279][ T32] NMI backtrace for cpu 0 [ 436.106304][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 436.106330][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 436.106338][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.106348][ T32] Call Trace: [ 436.106359][ T32] [ 436.106368][ T32] dump_stack_lvl+0xe8/0x150 [ 436.106404][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 436.106428][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.106460][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 436.106484][ T32] sys_info+0x135/0x170 [ 436.106501][ T32] watchdog+0xfd7/0x1030 [ 436.106553][ T32] ? watchdog+0x1c7/0x1030 [ 436.106583][ T32] kthread+0x388/0x470 [ 436.106613][ T32] ? __pfx_watchdog+0x10/0x10 [ 436.106635][ T32] ? __pfx_kthread+0x10/0x10 [ 436.106664][ T32] ret_from_fork+0x514/0xb70 [ 436.106696][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 436.106723][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.106744][ T32] ? __switch_to+0xc89/0x1420 [ 436.106772][ T32] ? __pfx_kthread+0x10/0x10 [ 436.106800][ T32] ret_from_fork_asm+0x1a/0x30 [ 436.106833][ T32] [ 436.106845][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 436.106859][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 436.106885][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 436.106893][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.106910][ T32] Call Trace: [ 436.106918][ T32] [ 436.106927][ T32] vpanic+0x56c/0xa60 [ 436.106956][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.106982][ T32] ? __pfx_vpanic+0x10/0x10 [ 436.107009][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.107033][ T32] ? __down_trylock_console_sem+0x6b/0x110 [ 436.107062][ T32] panic+0xc5/0xd0 [ 436.107090][ T32] ? __pfx_panic+0x10/0x10 [ 436.107120][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.107142][ T32] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 436.107166][ T32] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 436.107194][ T32] watchdog+0x1030/0x1030 [ 436.107226][ T32] ? watchdog+0x1c7/0x1030 [ 436.107257][ T32] kthread+0x388/0x470 [ 436.107285][ T32] ? __pfx_watchdog+0x10/0x10 [ 436.107308][ T32] ? __pfx_kthread+0x10/0x10 [ 436.107338][ T32] ret_from_fork+0x514/0xb70 [ 436.107369][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 436.107397][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.107419][ T32] ? __switch_to+0xc89/0x1420 [ 436.107445][ T32] ? __pfx_kthread+0x10/0x10 [ 436.107475][ T32] ret_from_fork_asm+0x1a/0x30 [ 436.107507][ T32] [ 436.107565][ T32] Kernel Offset: disabled