last executing test programs: 3m31.478960372s ago: executing program 2 (id=561): r0 = syz_open_dev$usbfs(&(0x7f0000000640), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000700)={0x23, 0x3, 0x7, 0x1, 0x0, 0x3e8, 0x0}) 3m30.786415998s ago: executing program 2 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) socket$xdp(0x2c, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r3, 0x2000000008, 0x0) 3m29.85530752s ago: executing program 2 (id=564): syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 3m28.487854522s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002340)={0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) close(r4) close(0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) 3m14.603653822s ago: executing program 2 (id=592): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x29, 0x10003, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f00000003c0)=""/207) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 3m13.972670008s ago: executing program 2 (id=593): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002340)={0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) close(r4) close(0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) 2m58.529516325s ago: executing program 32 (id=593): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002340)={0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) close(r4) close(0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) 19.951287286s ago: executing program 4 (id=982): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, &(0x7f00000007c0)={"736ef48c3a824d91f3ccdfbe20abf96d1a51a1ac257951b43bfd902f21b7", 0xfffffff7, 0x2, 0x401, 0x0, 0x0, 0x7fff, 0x55b4, 0x0, [0x200, 0x8, 0xfffffffe, 0x7, 0x200, 0x4, 0x4, 0xf24, 0x80000001, 0x7d6af4, 0x3, 0x87e5, 0x6, 0x2, 0x3, 0x0, 0x8, 0x80000000, 0x9]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0xfffdfeff, @mcast1, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e18085e98f8a9906fcf391a9af666c53a05fe082d64759b1dacc756c40cbdd7fd650eac7613e3155b8c5453928413677d7488bd647c5aa11665a028480e6e4d131461"], 0x0) 17.286070309s ago: executing program 4 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r2 = socket(0x10, 0x80002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) sendto$phonet(r2, &(0x7f0000000580)="44e51ea1210b4fc03fb2430b7bf9f2c00e324f9c6f2389b246d2fe6541de2fc1ccaee1b4d0977e7725c96a3e456fe515580d6668f5f7a73b653eff023c29a4b1f7f4c6fdfffe06de2d3ff397781a6d622a9db0a37a586d2c08392bd5213190b99c1531bf8c8e4b5cc56f025af2d1ce84ac85acb73b17f247a12401d48882641aa5cab3f105c83343a5a32dab710169ed077a147410865ba6dd1dee488d865b4e58471b5346b98568347701000000000000005b79a502dddeb53a8f2221ca2de4c78757fc7a56c5fa3cc73efaef1600000000000000df17f820753f78b2be33f2a6fcd9c7957039b8bbf558c256fafc3dd793a3153d3d9c9b74cae9feebc11b54bbec5020a7c6b375d58db565a4371fc0e761f7aff7476da7e0a0a3861428b4be0311fbe9352f31e0c8e7c4fd56ff9d723dc5bb2e1b30023151fc34c15d2ced8a457a4fd4a600318dea34bb1137ef3095eff2ccecefbd4f5f9a7b8f66fa43d7f2e7817c4e39c101bba64fe419b901f50809e941ad3f066427dc6df7d553d4289049da9b2f1c6ff68ff38a0bdf90df13b0b20af53a01989efe52f71e7b4722b6c2", 0x1a0, 0x20000801, &(0x7f00000001c0)={0x23, 0x1, 0x2, 0x8}, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x43, 0xa0, 0x128, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1, 0x400}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x0, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x0, 0x1, 0x1], 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x5, 0xce, 0x1f8, 'snmp\x00', 'syz0\x00', {0xc3e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 11.247941882s ago: executing program 0 (id=999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x6, 0xa}], 0x10}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x20240) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0x0, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x29a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0x6, 'veth1_vlan\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 11.136897095s ago: executing program 1 (id=1000): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 11.065156217s ago: executing program 4 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x18f) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0xf401, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) writev(r5, &(0x7f0000002e80)=[{&(0x7f0000002d40)='F', 0x1}], 0x1) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@filename='./debug\x00', r8, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 10.231356247s ago: executing program 3 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 9.953320933s ago: executing program 0 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) msgget(0x1, 0x140) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r4, 0x0, 0x0, 0x2, 0x2000) msgsnd(r4, &(0x7f0000000200)={0x2}, 0x8, 0x800) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000540)=""/4096) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000000c0)='pipefs\x00', 0x81000, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(r5, &(0x7f0000000140)='prev_state.function ==', 0x16) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x18b541) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000380)={0x3, 0x1, 0x8000000, 0x4, 0x8}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000c0000000033000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000025bd7000000000000a00040000000000000000001c00170000000000000000000000000080000000020000000400000048000100736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000"], 0x15c}}, 0x80) 9.389554566s ago: executing program 3 (id=1005): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4, 0xfb}, 0x0, &(0x7f0000000a00)="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", 0x0) 9.372787787s ago: executing program 5 (id=1006): pipe(&(0x7f0000000240)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1}}], 0x1, 0xc8040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x3, 0x24, 0x4, @generic}], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x4000) 9.084532864s ago: executing program 4 (id=1007): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) 8.40238173s ago: executing program 1 (id=1008): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4cb84d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622241cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16824d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd04dc67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615eb0f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa1082f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a801809b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000180)={0x50, 0x0, 0x1fe, {0x7, 0x29, 0x1, 0x24ff871989b45d65, 0xe87, 0x9, 0xb, 0x7fe, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x7, {0x2, 0x1, 0x0, {0xffffffffffffffff, 0xfffffffffffffffe, 0xd1, 0x1, 0x2, 0x9, 0x1, 0x49, 0x0, 0x2000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 6.908257975s ago: executing program 4 (id=1009): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x2b0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r3, 0x0, 0x0, 0x2, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r5, &(0x7f0000000040)="3c5c413ecd45036a", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002007d00000095003300000000009500b8e32dd312c8b9a50500000000be4a3b58e299de7471470fd0ed67a6ccd1dc605517b0bf9471bec6738e9c5b61112c315dcb19f14b80c20f11cbeb13333b988a5206"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) read(r1, &(0x7f0000001400)=""/4046, 0xffd8) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xa) 6.72329288s ago: executing program 0 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x18f) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) writev(r3, &(0x7f0000002e80)=[{&(0x7f0000002d40)='F', 0x1}], 0x1) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@filename='./debug\x00', r7, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6.639106522s ago: executing program 5 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r2 = socket(0x10, 0x80002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) sendto$phonet(r2, &(0x7f0000000580)="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", 0x1a0, 0x20000801, &(0x7f00000001c0)={0x23, 0x1, 0x2, 0x8}, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x43, 0xa0, 0x128, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1, 0x400}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x0, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x0, 0x1, 0x1], 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x5, 0xce, 0x1f8, 'snmp\x00', 'syz0\x00', {0xc3e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 6.638155111s ago: executing program 1 (id=1012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000280)='tcp', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x4c) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 6.100478665s ago: executing program 3 (id=1013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x6, 0xa}], 0x10}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x20240) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0x0, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x29a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0x6, 'veth1_vlan\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.063981206s ago: executing program 1 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r3, 0x2000000008, 0x0) 6.021327917s ago: executing program 3 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 5.86628943s ago: executing program 3 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) socket$xdp(0x2c, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r3, 0x2000000008, 0x0) 5.286186624s ago: executing program 1 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x18f) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0xf401, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) writev(r5, &(0x7f0000002e80)=[{&(0x7f0000002d40)='F', 0x1}], 0x1) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@filename='./debug\x00', r8, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 5.199075376s ago: executing program 0 (id=1018): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 4.261855848s ago: executing program 5 (id=1019): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) 3.439440268s ago: executing program 4 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) msgget(0x1, 0x140) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r4, 0x0, 0x0, 0x2, 0x2000) msgsnd(r4, &(0x7f0000000200)={0x2}, 0x8, 0x800) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000540)=""/4096) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000000c0)='pipefs\x00', 0x81000, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(r5, &(0x7f0000000140)='prev_state.function ==', 0x16) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x18b541) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000380)={0x3, 0x1, 0x8000000, 0x4, 0x8}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000c0000000033000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000025bd7000000000000a00040000000000000000001c00170000000000000000000000000080000000020000000400000048000100736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000"], 0x15c}}, 0x80) 3.33308509s ago: executing program 5 (id=1021): pipe(&(0x7f0000000240)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1}}], 0x1, 0xc8040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x3, 0x24, 0x4, @generic}], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x4000) 3.182415054s ago: executing program 3 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newqdisc={0x10c, 0x24, 0x401, 0x0, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1, {0x0, 0x1}, {0x1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0xb, 0x4, 0x1, 0x80000001, 0xa6, 0x5}}, {0xe, 0x2, [0x4, 0xfff9, 0x3, 0x10, 0x0]}}, {{0x1c, 0x1, {0x15, 0x0, 0x1, 0x200, 0x2, 0xa, 0x27, 0x3}}, {0xa, 0x2, [0x4, 0x1, 0x9]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffff68, 0x82}}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xe, 0x7, 0xfffffffb, 0x9}, 0x3, 0x0, 0x8, 0x1200000, 0xd0, 0x15, 0x9, 0x1, 0x4, 0x0, {0x15, 0x2, 0x6, 0x4, 0x983c, 0xf}}}}]}, 0x10c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/pool_threads\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) open$dir(&(0x7f0000000400)='./nfsd/pool_threads\x00', 0x2400, 0x49) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 3.063145027s ago: executing program 0 (id=1023): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00b", 0x2ad, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4, 0xfb}, 0x0, &(0x7f0000000a00)="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", 0x0) 1.226493171s ago: executing program 1 (id=1024): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000280)='tcp', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x4c) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 1.214280101s ago: executing program 5 (id=1025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x6, 0xa}], 0x10}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='0', 0x1) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x20240) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0x0, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x29a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0x6, 'veth1_vlan\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 1.099979024s ago: executing program 5 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 0s ago: executing program 0 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r3, 0x2000000008, 0x0) kernel console output (not intermixed with test programs): slave_1) entered blocking state [ 73.365852][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.376876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.400634][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.425162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.435594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.443954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.477807][ T4271] device veth0_vlan entered promiscuous mode [ 73.495276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.509110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.518718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.543569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.552320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.560753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.569639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.578846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.588457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.597338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.607497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.617042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.625498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.638160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.646945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.675058][ T4271] device veth1_vlan entered promiscuous mode [ 73.707355][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.722693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.732877][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.769616][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.783103][ T4272] device veth0_vlan entered promiscuous mode [ 73.817986][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.828166][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.843621][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.859503][ T4272] device veth1_vlan entered promiscuous mode [ 73.918452][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.946672][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.956342][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.972586][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.980052][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.010894][ T4272] device veth0_macvtap entered promiscuous mode [ 74.042377][ T4271] device veth0_macvtap entered promiscuous mode [ 74.056576][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.072603][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.092127][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.101133][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.111616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.120382][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.129647][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.138513][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.149078][ T4272] device veth1_macvtap entered promiscuous mode [ 74.158125][ T4271] device veth1_macvtap entered promiscuous mode [ 74.188062][ T4273] device veth0_vlan entered promiscuous mode [ 74.206870][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.219345][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.231004][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.254847][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.263707][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.274449][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.313032][ T4273] device veth1_vlan entered promiscuous mode [ 74.319722][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.329249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.340843][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.352335][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.367861][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.384255][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.395466][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.419973][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.428761][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.438000][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.449161][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.457897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.466805][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.475759][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.489028][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.504662][ T4282] device veth0_vlan entered promiscuous mode [ 74.514327][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.523250][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532281][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.540981][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.552760][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.572279][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.584256][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.597866][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.607873][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.617145][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.629739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.638684][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.648101][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.656910][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.688933][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697838][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706731][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716489][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.729833][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.742555][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.750307][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.759449][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.769028][ T4282] device veth1_vlan entered promiscuous mode [ 74.797768][ T4273] device veth0_macvtap entered promiscuous mode [ 74.809965][ T4273] device veth1_macvtap entered promiscuous mode [ 74.855139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.864547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.873622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.888580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.936582][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.948489][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.959788][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.970665][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.984096][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.992684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.001053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.010294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.019466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.028133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.036438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.044605][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 75.047167][ T4279] device veth0_vlan entered promiscuous mode [ 75.056790][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 75.057106][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 75.082368][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.094397][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.107718][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.118354][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.128515][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 75.128542][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 75.137901][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.152058][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160884][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.170212][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.179507][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.200798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.210845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.220141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.228968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.239992][ T4282] device veth0_macvtap entered promiscuous mode [ 75.251838][ T4282] device veth1_macvtap entered promiscuous mode [ 75.265707][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.283145][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.284273][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.290972][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.304520][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.320717][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.329580][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.340806][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.350811][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.361353][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.374954][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.387653][ T4279] device veth1_vlan entered promiscuous mode [ 75.395388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.404052][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.412440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.420328][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.428615][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.437841][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.447355][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.464665][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.479727][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489876][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.500592][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.511405][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.522574][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.534124][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.574056][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.579268][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.590042][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.590376][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.614469][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.626161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.638104][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.647045][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.656379][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.665388][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.734083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.747381][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.759477][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.773506][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.787575][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.796715][ T4279] device veth0_macvtap entered promiscuous mode [ 75.829798][ T4279] device veth1_macvtap entered promiscuous mode [ 75.878352][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.887623][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.904084][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.911910][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.929862][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.944204][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.957385][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.970084][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.980496][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.997702][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.031689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.041692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.051692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.071695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.081688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.091688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.101687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.111686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.121690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.158146][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.181856][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.375776][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.627839][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.806566][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.825579][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.870932][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.899342][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.907158][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.917813][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.936171][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.944711][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.969153][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.991878][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.011788][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.025419][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.041861][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.046827][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.064604][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.093326][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.122071][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 77.128228][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 77.132302][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 77.145743][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.162313][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.186592][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.201867][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 77.204207][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.212640][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 77.221239][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.233110][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.242433][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.251114][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.282213][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 77.311534][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.319784][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.391908][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.437852][ T126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.452874][ T126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.469216][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.493350][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.527989][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.529437][ T126] usb 3-1: Product: syz [ 77.549115][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.581705][ T126] usb 3-1: Manufacturer: syz [ 77.585813][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.586328][ T126] usb 3-1: SerialNumber: syz [ 77.596308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.610069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.691444][ T126] usb 3-1: config 0 descriptor?? [ 77.700398][ T4370] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.744117][ T4365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.647760][ T4383] dlm: no local IP address has been set [ 78.653605][ T4383] dlm: cannot start dlm midcomms -107 [ 78.836290][ T4381] loop0: detected capacity change from 0 to 3904 [ 78.902705][ T4381] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 78.945423][ T4381] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 78.954838][ T4381] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 78.970288][ T4381] loop0: [ 79.101924][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.170896][ T4391] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 79.288063][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.295277][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 79.295428][ T4322] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 79.301445][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.310089][ T4319] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 79.365753][ T4319] usb 2-1: config 0 has no interface number 0 [ 79.404166][ T4319] usb 2-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 79.457549][ T4319] usb 2-1: config 0 interface 85 has no altsetting 0 [ 79.476622][ T33] usb 3-1: USB disconnect, device number 2 [ 79.485520][ T4319] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 79.524855][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.547929][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.561761][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.575163][ T4319] usb 2-1: Product: syz [ 79.579367][ T4319] usb 2-1: Manufacturer: syz [ 79.592615][ T4322] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 79.611758][ T4319] usb 2-1: SerialNumber: syz [ 79.625696][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.636389][ T4319] usb 2-1: config 0 descriptor?? [ 79.655954][ T4319] appletouch 2-1:0.85: Could not find int-in endpoint [ 79.679420][ T4322] usb 4-1: config 0 descriptor?? [ 79.685065][ T4319] appletouch: probe of 2-1:0.85 failed with error -5 [ 79.709269][ T4319] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 79.894360][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.903269][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.103506][ T4322] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 80.331451][ T1045] block nbd3: Attempted send on invalid socket [ 80.338205][ T1045] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 81.702769][ T126] usb 2-1: USB disconnect, device number 2 [ 82.769239][ T33] usb 4-1: USB disconnect, device number 2 [ 83.059224][ T4434] tmpfs: Unknown parameter 'usrquota' [ 83.090665][ T4284] Bluetooth: Wrong link type (-71) [ 86.566590][ T14] cfg80211: failed to load regulatory.db [ 90.491558][ T4476] dlm: no local IP address has been set [ 90.497192][ T4476] dlm: cannot start dlm midcomms -107 [ 91.003660][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.512270][ T4322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.552264][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 91.603578][ T4315] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 91.651233][ T4315] usb 1-1: config 0 has no interface number 0 [ 91.952610][ T4315] usb 1-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 91.976688][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 92.024253][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.044248][ T4315] usb 1-1: config 0 interface 85 has no altsetting 0 [ 92.090646][ T4322] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 92.100886][ T4315] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 92.546059][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.555964][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.564889][ T4315] usb 1-1: Product: syz [ 92.735659][ T4315] usb 1-1: Manufacturer: syz [ 92.804639][ T4315] usb 1-1: SerialNumber: syz [ 92.970382][ T4315] usb 1-1: config 0 descriptor?? [ 93.110842][ T4315] usb 1-1: can't set config #0, error -71 [ 93.162796][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.170866][ T4315] usb 1-1: USB disconnect, device number 2 [ 93.177045][ T4322] input input5: Device does not respond to id packet M [ 93.216677][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.308802][ T4322] input input5: Device does not respond to id packet P [ 93.333495][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.340207][ T4322] input input5: Device does not respond to id packet B [ 93.353542][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.359900][ T4322] input input5: Device does not respond to id packet N [ 93.370413][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.379257][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.501829][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.607632][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 93.732038][ T4322] iforce 3-1:1.0: usb_submit_urb failed -90 [ 93.738491][ T4322] iforce 3-1:1.0: usb_submit_urb failed -90 [ 94.050146][ T4322] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 94.185878][ T4523] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 94.245785][ T4322] usb 3-1: USB disconnect, device number 3 [ 94.251745][ C1] iforce 3-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 94.367350][ T4284] Bluetooth: Wrong link type (-71) [ 94.480031][ T4515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.526857][ T4515] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.599500][ T4515] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 95.176492][ T4515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.206540][ T4515] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.255871][ T4515] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 95.315246][ T4515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.352835][ T4515] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.395927][ T4515] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 95.438132][ T4515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.486276][ T4515] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.717686][ T4515] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 96.023544][ T4320] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.076072][ T4515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.082487][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.089658][ T4515] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.133925][ T4515] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 97.756400][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.763932][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.769990][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.083159][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.162505][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 99.358670][ T4278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 99.541984][ T4513] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.735835][ T4513] usb 1-1: Dual-Role OTG device on HNP port [ 99.828602][ T4513] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 99.842047][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 99.848173][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 99.854467][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 99.861762][ T4513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.888816][ T4513] gspca_main: spca501-2.14.0 probing 0000:0000 [ 99.943685][ T4513] gspca_spca501: reg write: error -32 [ 99.949210][ T4513] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 100.003084][ T4513] spca501: probe of 1-1:1.0 failed with error -22 [ 100.036449][ T26] audit: type=1800 audit(1788227590.281:2): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="addr_trtype" dev="configfs" ino=34201 res=0 errno=0 [ 100.113021][ T26] audit: type=1800 audit(1788227590.361:3): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="addr_traddr" dev="configfs" ino=34202 res=0 errno=0 [ 100.161932][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 100.182396][ T26] audit: type=1800 audit(1788227590.431:4): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="addr_trsvcid" dev="configfs" ino=34205 res=0 errno=0 [ 100.206600][ T4567] nvmet_tcp: address family 255 not supported [ 100.482539][ T4579] netlink: 108 bytes leftover after parsing attributes in process `syz.2.51'. [ 102.023917][ T4594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.114555][ T4594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.122009][ T4513] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 104.375354][ T4513] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 104.416609][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.484804][ T4513] usb 2-1: Product: syz [ 104.564419][ T4513] usb 2-1: Manufacturer: syz [ 104.608133][ T4513] usb 2-1: SerialNumber: syz [ 104.884049][ T4278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 104.900938][ T26] audit: type=1800 audit(1788227595.141:5): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.70" name="addr_trtype" dev="configfs" ino=34232 res=0 errno=0 [ 105.696436][ T4620] nvmet_tcp: address family 255 not supported [ 105.705394][ T4513] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 105.712027][ T26] audit: type=1800 audit(1788227595.941:6): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.70" name="addr_traddr" dev="configfs" ino=34235 res=0 errno=0 [ 105.809582][ T26] audit: type=1800 audit(1788227595.941:7): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.70" name="addr_trsvcid" dev="configfs" ino=34236 res=0 errno=0 [ 106.484680][ T4513] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.654790][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.672256][ T4628] ceph: No mds server is up or the cluster is laggy [ 106.714365][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.754030][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.802637][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.703924][ T4513] usb 2-1: USB disconnect, device number 4 [ 108.721579][ T4513] usblp0: removed [ 108.941595][ T26] audit: type=1800 audit(1788227599.181:8): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.81" name="addr_trtype" dev="configfs" ino=35728 res=0 errno=0 [ 108.991905][ T4671] nvmet_tcp: address family 255 not supported [ 109.038911][ T26] audit: type=1800 audit(1788227599.231:9): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.81" name="addr_traddr" dev="configfs" ino=35786 res=0 errno=0 [ 109.117352][ T26] audit: type=1800 audit(1788227599.231:10): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.81" name="addr_trsvcid" dev="configfs" ino=35787 res=0 errno=0 [ 112.767662][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 113.033923][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 113.233172][ T4707] ceph: No mds server is up or the cluster is laggy [ 113.284319][ T4719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.367565][ T4719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.484649][ T4721] xt_policy: output policy not valid in PREROUTING and INPUT [ 114.500656][ T4731] netlink: 352 bytes leftover after parsing attributes in process `syz.1.97'. [ 121.124424][ T4786] netlink: 352 bytes leftover after parsing attributes in process `syz.1.112'. [ 122.343698][ T4802] xt_policy: output policy not valid in PREROUTING and INPUT [ 125.920131][ T4831] netlink: 96 bytes leftover after parsing attributes in process `syz.4.124'. [ 128.344636][ T4857] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.525478][ T4874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.135'. [ 132.348647][ T4899] xt_policy: output policy not valid in PREROUTING and INPUT [ 132.982328][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989704][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.791810][ T126] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.949328][ T26] audit: type=1800 audit(1788227625.191:11): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="addr_trtype" dev="configfs" ino=36425 res=0 errno=0 [ 134.961878][ T4929] nvmet_tcp: address family 255 not supported [ 135.015138][ T126] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 135.100986][ T26] audit: type=1800 audit(1788227625.191:12): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="addr_trsvcid" dev="configfs" ino=36426 res=0 errno=0 [ 135.111226][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.135040][ T126] usb 4-1: Product: syz [ 135.139414][ T126] usb 4-1: Manufacturer: syz [ 135.149473][ T126] usb 4-1: SerialNumber: syz [ 135.231758][ T4933] xt_policy: output policy not valid in PREROUTING and INPUT [ 135.721228][ T126] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 136.269524][ T4950] netlink: 96 bytes leftover after parsing attributes in process `syz.0.150'. [ 136.367864][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.799751][ T4513] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.811548][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.144935][ T126] usb 4-1: USB disconnect, device number 3 [ 138.145706][ T4513] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 138.158500][ T126] usblp0: removed [ 138.197973][ T4513] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.256066][ T4513] usb 2-1: Product: syz [ 138.260285][ T4513] usb 2-1: SerialNumber: syz [ 138.327608][ T4513] usb 2-1: config 0 descriptor?? [ 138.938950][ T26] audit: type=1800 audit(1788227629.181:13): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.166" name="addr_trtype" dev="configfs" ino=37393 res=0 errno=0 [ 138.942332][ T126] usb 2-1: USB disconnect, device number 5 [ 138.967504][ T4971] nvmet_tcp: address family 255 not supported [ 139.209756][ T4974] xt_policy: output policy not valid in PREROUTING and INPUT [ 139.348502][ T26] audit: type=1800 audit(1788227629.221:14): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.166" name="addr_trsvcid" dev="configfs" ino=37394 res=0 errno=0 [ 141.247462][ T4315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.352580][ T5001] netlink: 556 bytes leftover after parsing attributes in process `syz.1.174'. [ 141.453923][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 141.489215][ T4315] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.557809][ T4315] usb 3-1: config 0 has no interface number 0 [ 141.753700][ T4315] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.923269][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.931386][ T4315] usb 3-1: Product: syz [ 141.941604][ T4315] usb 3-1: Manufacturer: syz [ 141.951600][ T4315] usb 3-1: SerialNumber: syz [ 141.984493][ T4315] usb 3-1: config 0 descriptor?? [ 142.053326][ T4315] smsc95xx v2.0.0 [ 142.397137][ T4315] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.959684][ T4315] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.993219][ T4315] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.010673][ T4315] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 143.019931][ T4315] usb 3-1: USB disconnect, device number 4 [ 143.265562][ T26] audit: type=1800 audit(1788227633.511:15): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.180" name="addr_trtype" dev="configfs" ino=37437 res=0 errno=0 [ 143.297625][ T5016] nvmet_tcp: address family 255 not supported [ 143.378069][ T26] audit: type=1800 audit(1788227633.541:16): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.180" name="addr_trsvcid" dev="configfs" ino=37438 res=0 errno=0 [ 147.102568][ T5050] netlink: 556 bytes leftover after parsing attributes in process `syz.4.186'. [ 148.643763][ T26] audit: type=1800 audit(1788227638.891:17): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.192" name="addr_trtype" dev="configfs" ino=37477 res=0 errno=0 [ 148.668424][ T5060] nvmet_tcp: address family 255 not supported [ 148.701831][ T26] audit: type=1800 audit(1788227638.911:18): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.192" name="addr_trsvcid" dev="configfs" ino=37478 res=0 errno=0 [ 149.572038][ T4315] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 150.530832][ T4315] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 150.585339][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.595558][ T4315] usb 3-1: Product: syz [ 150.599824][ T4315] usb 3-1: Manufacturer: syz [ 150.631958][ T4315] usb 3-1: SerialNumber: syz [ 151.150383][ T4315] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 151.273352][ T5090] xt_policy: output policy not valid in PREROUTING and INPUT [ 151.813648][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.823400][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.913008][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.931956][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.582540][ T5107] netlink: 556 bytes leftover after parsing attributes in process `syz.1.201'. [ 153.349516][ T4315] usb 3-1: USB disconnect, device number 5 [ 153.370650][ T4315] usblp0: removed [ 153.475925][ T26] audit: type=1800 audit(1788227643.721:19): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.204" name="addr_trtype" dev="configfs" ino=37652 res=0 errno=0 [ 153.504090][ T5117] nvmet_tcp: address family 255 not supported [ 153.565247][ T26] audit: type=1800 audit(1788227643.741:20): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.204" name="addr_trsvcid" dev="configfs" ino=37653 res=0 errno=0 [ 155.309703][ T5134] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.539578][ T5148] netlink: 556 bytes leftover after parsing attributes in process `syz.4.210'. [ 157.544730][ T26] audit: type=1800 audit(1788227647.791:21): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.217" name="addr_trtype" dev="configfs" ino=37880 res=0 errno=0 [ 158.442728][ T5157] nvmet_tcp: address family 255 not supported [ 158.501856][ T26] audit: type=1800 audit(1788227648.691:22): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.217" name="addr_trsvcid" dev="configfs" ino=37883 res=0 errno=0 [ 158.811840][ T4274] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 159.640467][ T4274] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 159.670545][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.405493][ T4274] usb 4-1: Product: syz [ 160.409716][ T4274] usb 4-1: Manufacturer: syz [ 160.414439][ T4274] usb 4-1: SerialNumber: syz [ 160.757013][ T4274] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 160.804881][ T4274] usb 4-1: USB disconnect, device number 4 [ 161.136905][ T5185] xt_policy: output policy not valid in PREROUTING and INPUT [ 161.217993][ T4274] usblp0: removed [ 161.635674][ T5193] netlink: 556 bytes leftover after parsing attributes in process `syz.4.225'. [ 163.581875][ T26] audit: type=1800 audit(1788227653.821:23): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.228" name="addr_trtype" dev="configfs" ino=38413 res=0 errno=0 [ 163.604778][ T5208] nvmet_tcp: address family 255 not supported [ 163.741757][ T26] audit: type=1800 audit(1788227653.851:24): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.228" name="addr_trsvcid" dev="configfs" ino=38414 res=0 errno=0 [ 165.216463][ T5233] xt_policy: output policy not valid in PREROUTING and INPUT [ 165.888401][ T4315] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 166.085844][ T4315] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 166.161926][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.170006][ T4315] usb 3-1: Product: syz [ 167.106943][ T4315] usb 3-1: Manufacturer: syz [ 167.111603][ T4315] usb 3-1: SerialNumber: syz [ 167.553726][ T4315] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 167.650149][ T5248] netlink: 556 bytes leftover after parsing attributes in process `syz.4.240'. [ 167.882781][ T4278] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 168.018957][ T26] audit: type=1800 audit(1788227658.261:25): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.244" name="addr_trtype" dev="configfs" ino=39147 res=0 errno=0 [ 168.044825][ T5256] nvmet_tcp: address family 255 not supported [ 168.157297][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.178989][ T26] audit: type=1800 audit(1788227658.291:26): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.244" name="addr_trsvcid" dev="configfs" ino=39150 res=0 errno=0 [ 168.203500][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.634631][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.877167][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.990590][ T5265] Zero length message leads to an empty skb [ 169.059179][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 169.073755][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 169.089581][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 169.101620][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 169.144512][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 169.155852][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 169.167530][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 169.287320][ T5269] overlayfs: conflicting options: nfs_export=on,index=off [ 170.008490][ T5274] SET target dimension over the limit! [ 170.759704][ T14] usb 3-1: USB disconnect, device number 6 [ 170.778025][ T14] usblp0: removed [ 171.596769][ T5278] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.213554][ T26] audit: type=1800 audit(1788227664.461:27): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_trtype" dev="configfs" ino=38646 res=0 errno=0 [ 174.223522][ T5305] nvmet_tcp: address family 255 not supported [ 174.261431][ T26] audit: type=1800 audit(1788227664.461:28): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_trsvcid" dev="configfs" ino=38647 res=0 errno=0 [ 175.813897][ T5325] SET target dimension over the limit! [ 176.900178][ T5338] xt_policy: output policy not valid in PREROUTING and INPUT [ 177.469524][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.559878][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 177.582086][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 177.594080][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 177.629250][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 177.640574][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 177.652270][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 177.765049][ T5342] overlayfs: conflicting options: nfs_export=on,index=off [ 181.392902][ T26] audit: type=1800 audit(1788227671.641:29): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.269" name="addr_trtype" dev="configfs" ino=39353 res=0 errno=0 [ 181.422494][ T5357] nvmet_tcp: address family 255 not supported [ 182.097286][ T26] audit: type=1800 audit(1788227671.671:30): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.269" name="addr_trsvcid" dev="configfs" ino=39354 res=0 errno=0 [ 183.374932][ T5388] SET target dimension over the limit! [ 183.612965][ T5389] xt_policy: output policy not valid in PREROUTING and INPUT [ 186.371985][ T4278] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 186.879017][ T26] audit: type=1800 audit(1788227677.121:31): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="addr_trtype" dev="configfs" ino=40152 res=0 errno=0 [ 186.912241][ T5411] nvmet_tcp: address family 255 not supported [ 187.032748][ T26] audit: type=1800 audit(1788227677.151:32): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="addr_trsvcid" dev="configfs" ino=39459 res=0 errno=0 [ 189.282644][ T5435] xt_policy: output policy not valid in PREROUTING and INPUT [ 191.339264][ T5452] SET target dimension over the limit! [ 191.362977][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 191.363406][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 191.842410][ T4278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 191.876433][ T4278] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 191.903693][ T5456] binder_alloc: 5455: binder_alloc_buf, no vma [ 192.061122][ T26] audit: type=1800 audit(1788227682.301:33): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.294" name="addr_trtype" dev="configfs" ino=39602 res=0 errno=0 [ 192.071149][ T5458] nvmet_tcp: address family 255 not supported [ 192.093497][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 192.099573][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 192.126103][ T26] audit: type=1800 audit(1788227682.301:34): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.294" name="addr_trsvcid" dev="configfs" ino=39603 res=0 errno=0 [ 192.680501][ T5473] netlink: 556 bytes leftover after parsing attributes in process `syz.1.297'. [ 194.425790][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.432297][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.501931][ T5494] xt_policy: output policy not valid in PREROUTING and INPUT [ 196.661715][ T4278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 196.907650][ T5512] SET target dimension over the limit! [ 197.618737][ T26] audit: type=1800 audit(1788227687.861:35): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="addr_trtype" dev="configfs" ino=40467 res=0 errno=0 [ 197.813332][ T5513] nvmet_tcp: address family 255 not supported [ 197.878394][ T5521] netlink: 556 bytes leftover after parsing attributes in process `syz.1.310'. [ 198.372169][ T26] audit: type=1800 audit(1788227688.061:36): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="addr_trsvcid" dev="configfs" ino=40468 res=0 errno=0 [ 199.198392][ T5533] binder: 5531:5533 ioctl c0306201 0 returned -14 [ 200.965166][ T5548] xt_policy: output policy not valid in PREROUTING and INPUT [ 201.704445][ T4278] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 201.707393][ T5552] binder_alloc: 5551: binder_alloc_buf, no vma [ 201.784123][ T4278] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 202.346127][ T5568] SET target dimension over the limit! [ 203.292303][ T26] audit: type=1800 audit(1788227693.541:37): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="addr_trtype" dev="configfs" ino=39803 res=0 errno=0 [ 203.626363][ T5575] netlink: 556 bytes leftover after parsing attributes in process `syz.3.323'. [ 204.026417][ T5560] nvmet_tcp: address family 255 not supported [ 204.032752][ T26] audit: type=1800 audit(1788227694.271:38): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="addr_trsvcid" dev="configfs" ino=40864 res=0 errno=0 [ 204.625778][ T5587] binder: 5586:5587 ioctl c0306201 0 returned -14 [ 205.235392][ T5600] xt_policy: output policy not valid in PREROUTING and INPUT [ 206.030887][ T5605] binder_alloc: 5604: binder_alloc_buf, no vma [ 206.046742][ T4286] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 206.571964][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 206.860888][ T5617] SET target dimension over the limit! [ 208.707435][ T5631] binder: 5628:5631 ioctl c0306201 0 returned -14 [ 208.755867][ T26] audit: type=1800 audit(1788227699.001:39): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.337" name="addr_trtype" dev="configfs" ino=42005 res=0 errno=0 [ 208.804254][ T5633] nvmet_tcp: address family 255 not supported [ 208.972367][ T4286] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.031174][ T26] audit: type=1800 audit(1788227699.051:40): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.337" name="addr_trsvcid" dev="configfs" ino=42007 res=0 errno=0 [ 209.058468][ T5641] netlink: 556 bytes leftover after parsing attributes in process `syz.2.339'. [ 210.097185][ T5658] xt_policy: output policy not valid in PREROUTING and INPUT [ 210.327794][ T4286] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 210.487372][ T5655] binder: BINDER_SET_CONTEXT_MGR already set [ 210.604244][ T5655] binder: 5651:5655 ioctl 4018620d 200000004a80 returned -16 [ 211.167740][ T5671] netlink: 556 bytes leftover after parsing attributes in process `syz.0.348'. [ 211.877677][ T5676] SET target dimension over the limit! [ 213.976352][ T26] audit: type=1800 audit(1788227704.221:41): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.352" name="addr_trtype" dev="configfs" ino=41232 res=0 errno=0 [ 213.979975][ T5684] nvmet_tcp: address family 255 not supported [ 214.075065][ T4286] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 214.118383][ T26] audit: type=1800 audit(1788227704.221:42): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.352" name="addr_trsvcid" dev="configfs" ino=41233 res=0 errno=0 [ 214.830325][ T5696] netlink: 556 bytes leftover after parsing attributes in process `syz.2.356'. [ 214.851026][ T5702] xt_policy: output policy not valid in PREROUTING and INPUT [ 214.909970][ T5700] capability: warning: `syz.3.359' uses 32-bit capabilities (legacy support in use) [ 215.762190][ T5714] netlink: 556 bytes leftover after parsing attributes in process `syz.0.361'. [ 216.923534][ T5730] SET target dimension over the limit! [ 217.637365][ T26] audit: type=1800 audit(1788227707.881:43): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.366" name="addr_trtype" dev="configfs" ino=42305 res=0 errno=0 [ 217.676279][ T5731] nvmet_tcp: address family 255 not supported [ 217.751792][ T26] audit: type=1800 audit(1788227707.921:44): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.366" name="addr_trsvcid" dev="configfs" ino=42308 res=0 errno=0 [ 217.859219][ T4286] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 218.652605][ T5758] xt_policy: output policy not valid in PREROUTING and INPUT [ 218.963157][ T5759] netlink: 556 bytes leftover after parsing attributes in process `syz.0.373'. [ 220.450107][ T26] audit: type=1800 audit(1788227710.691:45): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="addr_trtype" dev="configfs" ino=42534 res=0 errno=0 [ 220.473507][ T5776] nvmet_tcp: address family 255 not supported [ 220.586753][ T26] audit: type=1800 audit(1788227710.721:46): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="addr_trsvcid" dev="configfs" ino=42535 res=0 errno=0 [ 221.227966][ T5795] netlink: 556 bytes leftover after parsing attributes in process `syz.1.383'. [ 221.385162][ T5790] SET target dimension over the limit! [ 222.797209][ T5811] xt_policy: output policy not valid in PREROUTING and INPUT [ 223.267959][ T5812] sched: RT throttling activated [ 224.955142][ T5828] netlink: 556 bytes leftover after parsing attributes in process `syz.2.389'. [ 227.125339][ T5845] netlink: 556 bytes leftover after parsing attributes in process `syz.1.397'. [ 227.456826][ T5859] SET target dimension over the limit! [ 227.998045][ T5861] xt_policy: output policy not valid in PREROUTING and INPUT [ 230.877646][ T5881] netlink: 556 bytes leftover after parsing attributes in process `syz.4.404'. [ 232.067623][ T5901] netlink: 556 bytes leftover after parsing attributes in process `syz.4.411'. [ 233.036727][ T5914] xt_policy: output policy not valid in PREROUTING and INPUT [ 234.142749][ T5915] SET target dimension over the limit! [ 234.353290][ T5921] Bluetooth: MGMT ver 1.22 [ 234.654558][ T5930] netlink: 556 bytes leftover after parsing attributes in process `syz.4.418'. [ 236.407396][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.413794][ T4286] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.679722][ T5961] netlink: 556 bytes leftover after parsing attributes in process `syz.3.424'. [ 242.331524][ T4278] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 242.687941][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 242.695615][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 242.717838][ T5985] binder_alloc: 5984: binder_alloc_buf, no vma [ 243.165695][ T5994] netlink: 556 bytes leftover after parsing attributes in process `syz.3.431'. [ 245.801758][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.073652][ T6018] netlink: 556 bytes leftover after parsing attributes in process `syz.1.439'. [ 246.111438][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 246.179583][ T4321] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 246.331332][ T4321] usb 4-1: config 0 has no interface number 0 [ 246.443506][ T4321] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 246.600854][ T4321] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 246.790926][ T4321] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 246.805383][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.818819][ T4321] usb 4-1: Product: syz [ 246.824351][ T4321] usb 4-1: Manufacturer: syz [ 247.590323][ T4321] usb 4-1: SerialNumber: syz [ 247.599471][ T4321] usb 4-1: config 0 descriptor?? [ 247.821612][ T4321] radio-si470x 4-1:0.35: this is not a si470x device. [ 247.955466][ T6042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.371483][ T4321] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 249.450869][ T6045] process 'syz.1.443' launched '/dev/fd/-1/./cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 249.891484][ T6047] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 250.169639][ T4321] usb 4-1: USB disconnect, device number 5 [ 250.324239][ T4286] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 250.342001][ T6058] binder_alloc: 6056: binder_alloc_buf, no vma [ 251.524515][ T6069] netlink: 556 bytes leftover after parsing attributes in process `syz.2.448'. [ 251.712022][ T33] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.936573][ T33] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.042218][ T33] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 252.091821][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.125852][ T33] usb 2-1: config 0 descriptor?? [ 252.157330][ T33] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 252.510968][ T33] pwc: send_video_command error -71 [ 252.516351][ T33] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 252.542609][ T33] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 252.567336][ T33] usb 2-1: USB disconnect, device number 6 [ 254.080408][ T6089] netlink: 556 bytes leftover after parsing attributes in process `syz.2.453'. [ 255.523909][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530254][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925020][ T6104] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 258.351639][ T4286] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 258.357032][ T6121] binder_alloc: 6120: binder_alloc_buf, no vma [ 261.265465][ T6152] netlink: 556 bytes leftover after parsing attributes in process `syz.2.466'. [ 263.729410][ T4286] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 263.779889][ T6174] binder_alloc: 6172: binder_alloc_buf, no vma [ 263.852192][ T4321] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 264.064539][ T4321] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 264.632038][ T4321] usb 3-1: config 0 has no interface number 0 [ 264.670877][ T4321] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 264.712633][ T4321] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 264.749917][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.766138][ T4321] usb 3-1: Product: syz [ 264.775320][ T4321] usb 3-1: Manufacturer: syz [ 264.779964][ T4321] usb 3-1: SerialNumber: syz [ 264.810034][ T4321] usb 3-1: config 0 descriptor?? [ 264.827655][ T6175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.850279][ T4321] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 264.915805][ T4321] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 266.071888][ T4321] usb 3-1: USB disconnect, device number 7 [ 266.102338][ T4321] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 266.136720][ T4321] cyberjack 3-1:0.69: device disconnected [ 270.270637][ T6215] netlink: 556 bytes leftover after parsing attributes in process `syz.2.480'. [ 271.103802][ T4286] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 271.105129][ T6226] binder: BINDER_SET_CONTEXT_MGR already set [ 271.203159][ T6226] binder: 6225:6226 ioctl 4018620d 200000004a80 returned -16 [ 277.387548][ T6264] binder_alloc: 6263: binder_alloc_buf, no vma [ 277.401908][ T4286] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 277.442895][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.457216][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.862371][ T6295] netlink: 556 bytes leftover after parsing attributes in process `syz.4.502'. [ 283.245335][ T6316] capability: warning: `syz.1.510' uses deprecated v2 capabilities in a way that may be insecure [ 283.442050][ T4321] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 284.062105][ T4321] usb 3-1: Using ep0 maxpacket: 32 [ 284.080555][ T4321] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 284.134423][ T4321] usb 3-1: config 0 has no interface number 0 [ 284.169636][ T4321] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 284.200464][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.232423][ T4321] usb 3-1: Product: syz [ 285.237106][ T4321] usb 3-1: Manufacturer: syz [ 285.242120][ T4321] usb 3-1: SerialNumber: syz [ 285.652249][ T4321] usb 3-1: config 0 descriptor?? [ 286.618938][ T4321] smsc95xx v2.0.0 [ 286.841388][ T4321] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 286.852101][ T4321] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 286.863004][ T4321] usb 3-1: USB disconnect, device number 8 [ 290.083972][ T6375] SET target dimension over the limit! [ 291.185381][ T6385] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 293.308883][ T6395] 9pnet_virtio: no channels available for device syz [ 293.468023][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 297.421912][ T4274] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 297.621856][ T4274] usb 3-1: Using ep0 maxpacket: 32 [ 297.628754][ T4274] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 297.658556][ T4274] usb 3-1: config 0 has no interface number 0 [ 297.667512][ T4274] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 297.686872][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.700303][ T4274] usb 3-1: Product: syz [ 297.705960][ T4274] usb 3-1: Manufacturer: syz [ 297.710686][ T4274] usb 3-1: SerialNumber: syz [ 297.742586][ T4274] usb 3-1: config 0 descriptor?? [ 297.750187][ T6435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.542'. [ 297.771885][ T4274] smsc95xx v2.0.0 [ 298.533569][ T4274] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 298.599100][ T4274] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 299.200189][ T4274] usb 3-1: USB disconnect, device number 9 [ 302.866150][ T6464] binder_alloc: 6463: binder_alloc_buf, no vma [ 306.370844][ T6487] xt_hashlimit: size too large, truncated to 1048576 [ 307.673969][ T26] audit: type=1326 audit(1788227797.921:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51f0d9e159 code=0x0 [ 309.855308][ T6503] binder_alloc: 6502: binder_alloc_buf, no vma [ 316.578388][ T6562] dlm: no local IP address has been set [ 316.584096][ T6562] dlm: cannot start dlm midcomms -107 [ 316.591248][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.599884][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.609351][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.617941][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.968201][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.985346][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.490410][ T4321] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 324.508994][ T6613] binder: BINDER_SET_CONTEXT_MGR already set [ 324.541765][ T6613] binder: 6612:6613 ioctl 4018620d 200000004a80 returned -16 [ 324.549430][ T6605] ceph: No mds server is up or the cluster is laggy [ 326.239902][ T6627] dlm: no local IP address has been set [ 326.245603][ T6627] dlm: cannot start dlm midcomms -107 [ 329.458872][ T6639] dlm: no local IP address has been set [ 329.464509][ T6639] dlm: cannot start dlm midcomms -107 [ 329.742377][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 330.451945][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 330.458944][ T22] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 330.503979][ T22] usb 2-1: config 0 has no interface number 0 [ 330.547683][ T22] usb 2-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 330.620493][ T22] usb 2-1: config 0 interface 85 has no altsetting 0 [ 330.635034][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 330.671204][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.694191][ T22] usb 2-1: Product: syz [ 330.699198][ T22] usb 2-1: Manufacturer: syz [ 330.708703][ T22] usb 2-1: SerialNumber: syz [ 330.761359][ T22] usb 2-1: config 0 descriptor?? [ 331.650770][ T26] audit: type=1800 audit(1788227821.891:48): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="addr_trtype" dev="configfs" ino=45656 res=0 errno=0 [ 331.693913][ T6656] nvmet_tcp: address family 255 not supported [ 331.985918][ T26] audit: type=1800 audit(1788227821.931:49): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="addr_traddr" dev="configfs" ino=45657 res=0 errno=0 [ 332.957117][ T26] audit: type=1800 audit(1788227821.931:50): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="addr_trsvcid" dev="configfs" ino=45658 res=0 errno=0 [ 336.558375][ T6698] dlm: no local IP address has been set [ 336.564053][ T6698] dlm: cannot start dlm midcomms -107 [ 336.573495][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.582814][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.962044][ T22] usb 2-1: can't set config #0, error -110 [ 337.669305][ T4315] usb 2-1: USB disconnect, device number 7 [ 339.593722][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.692282][ T6717] Can't find a SQUASHFS superblock on nullb0 [ 341.455100][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.346124][ T26] audit: type=1800 audit(1788227832.591:51): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.612" name="addr_trtype" dev="configfs" ino=46391 res=0 errno=0 [ 342.391562][ T6725] nvmet_tcp: address family 255 not supported [ 342.541027][ T26] audit: type=1800 audit(1788227832.631:52): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.612" name="addr_traddr" dev="configfs" ino=46392 res=0 errno=0 [ 342.843849][ T26] audit: type=1800 audit(1788227832.631:53): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.612" name="addr_trsvcid" dev="configfs" ino=46393 res=0 errno=0 [ 345.340237][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.354740][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.366592][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.437783][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.446198][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.453690][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.903683][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 346.117377][ T6746] ceph: No mds server is up or the cluster is laggy [ 346.558165][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 346.680297][ T6759] dlm: no local IP address has been set [ 346.686016][ T6759] dlm: cannot start dlm midcomms -107 [ 346.973139][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 347.202972][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 347.242740][ T4320] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 347.258880][ T4320] usb 2-1: config 0 has no interface number 0 [ 347.265414][ T4320] usb 2-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 347.288479][ T4320] usb 2-1: config 0 interface 85 has no altsetting 0 [ 347.317972][ T4320] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 347.333819][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.346182][ T4320] usb 2-1: Product: syz [ 347.350372][ T4320] usb 2-1: Manufacturer: syz [ 347.357308][ T4320] usb 2-1: SerialNumber: syz [ 347.396378][ T4320] usb 2-1: config 0 descriptor?? [ 347.427700][ T4320] appletouch 2-1:0.85: Could not find int-in endpoint [ 347.441717][ T4320] appletouch: probe of 2-1:0.85 failed with error -5 [ 347.449164][ T4320] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 347.601755][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 348.982004][ T4436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.040948][ T6743] chnl_net:caif_netlink_parms(): no params data found [ 349.221081][ T4436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.913396][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 349.935105][ T33] usb 2-1: USB disconnect, device number 8 [ 350.075962][ T4436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.309376][ T26] audit: type=1800 audit(1788227840.551:54): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.633" name="addr_trtype" dev="configfs" ino=45909 res=0 errno=0 [ 350.361526][ T6796] nvmet_tcp: address family 255 not supported [ 350.400365][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.407154][ T26] audit: type=1800 audit(1788227840.591:55): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.633" name="addr_traddr" dev="configfs" ino=45910 res=0 errno=0 [ 350.428833][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.445779][ T6743] device bridge_slave_0 entered promiscuous mode [ 350.471280][ T6799] batman_adv: batadv0: Adding interface: wlan0 [ 350.474643][ T26] audit: type=1800 audit(1788227840.601:56): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.633" name="addr_trsvcid" dev="configfs" ino=45911 res=0 errno=0 [ 350.501862][ T6799] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.551985][ T6799] batman_adv: batadv0: Interface activated: wlan0 [ 350.569223][ T6802] xt_hashlimit: size too large, truncated to 1048576 [ 350.746673][ T4436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.859802][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.867069][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.875646][ T6743] device bridge_slave_1 entered promiscuous mode [ 351.083372][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.102664][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.239201][ T6743] team0: Port device team_slave_0 added [ 351.340175][ T6743] team0: Port device team_slave_1 added [ 351.559028][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.610871][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.719556][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.922692][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 352.538342][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.639513][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.893729][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.331878][ T6840] dlm: no local IP address has been set [ 353.337556][ T6840] dlm: cannot start dlm midcomms -107 [ 353.622570][ T4322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 353.871884][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 353.882954][ T4322] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 353.951824][ T4322] usb 2-1: config 0 has no interface number 0 [ 353.957972][ T4322] usb 2-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 354.001818][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 354.007974][ T4322] usb 2-1: config 0 interface 85 has no altsetting 0 [ 354.035007][ T4322] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 354.084339][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.101881][ T4322] usb 2-1: Product: syz [ 354.106080][ T4322] usb 2-1: Manufacturer: syz [ 354.110687][ T4322] usb 2-1: SerialNumber: syz [ 354.145354][ T4322] usb 2-1: config 0 descriptor?? [ 354.169983][ T4322] appletouch 2-1:0.85: Could not find int-in endpoint [ 354.200292][ T4322] appletouch: probe of 2-1:0.85 failed with error -5 [ 354.222933][ T4322] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 354.298494][ T6743] device hsr_slave_0 entered promiscuous mode [ 354.329822][ T6743] device hsr_slave_1 entered promiscuous mode [ 354.362927][ T6743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.982997][ T6743] Cannot create hsr debugfs directory [ 356.379812][ T4320] usb 2-1: USB disconnect, device number 9 [ 356.568495][ T6743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.639297][ T26] audit: type=1800 audit(1788227846.881:57): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.646" name="addr_trtype" dev="configfs" ino=47276 res=0 errno=0 [ 356.670756][ T6867] nvmet_tcp: address family 255 not supported [ 356.897215][ T26] audit: type=1800 audit(1788227846.911:58): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.646" name="addr_traddr" dev="configfs" ino=47277 res=0 errno=0 [ 356.943504][ T6743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.135842][ T6743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.354752][ T26] audit: type=1800 audit(1788227846.911:59): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.646" name="addr_trsvcid" dev="configfs" ino=47278 res=0 errno=0 [ 357.422305][ T6869] fuse: Bad value for 'fd' [ 358.718296][ T6743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.050891][ T4436] device hsr_slave_0 left promiscuous mode [ 359.138405][ T4436] device hsr_slave_1 left promiscuous mode [ 359.153534][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.162008][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.208466][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.257963][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.283993][ T4436] device bridge_slave_1 left promiscuous mode [ 359.334561][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.347200][ T4436] device bridge_slave_0 left promiscuous mode [ 359.353512][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.578200][ T4436] device veth1_macvtap left promiscuous mode [ 359.639566][ T6903] dlm: no local IP address has been set [ 359.645461][ T6903] dlm: cannot start dlm midcomms -107 [ 360.250218][ T4436] device veth0_macvtap left promiscuous mode [ 360.274127][ T4436] device veth1_vlan left promiscuous mode [ 360.280430][ T4436] device veth0_vlan left promiscuous mode [ 360.716441][ T4274] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 360.915736][ T4274] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 360.933499][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.955965][ T4274] usb 4-1: Product: syz [ 360.970098][ T4274] usb 4-1: Manufacturer: syz [ 360.988775][ T4274] usb 4-1: SerialNumber: syz [ 361.022151][ T4274] usb 4-1: config 0 descriptor?? [ 361.059041][ T4274] hub 4-1:0.0: bad descriptor, ignoring hub [ 361.080400][ T4274] hub: probe of 4-1:0.0 failed with error -5 [ 361.299213][ T4274] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 361.471466][ T4274] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 361.493208][ T4274] dib0700: firmware download failed at 7 with -22 [ 361.735636][ T4436] team0 (unregistering): Port device team_slave_1 removed [ 361.790409][ T4436] team0 (unregistering): Port device team_slave_0 removed [ 361.801865][ T33] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 361.844498][ T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 361.874668][ T4436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.928030][ T4436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.003376][ T33] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 362.023372][ T33] usb 2-1: config 0 has no interface number 0 [ 362.029827][ T33] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 362.040245][ T33] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.061365][ T33] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 362.080081][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.088428][ T33] usb 2-1: Product: syz [ 362.092722][ T33] usb 2-1: Manufacturer: syz [ 362.097375][ T33] usb 2-1: SerialNumber: syz [ 362.110753][ T33] usb 2-1: config 0 descriptor?? [ 362.123972][ T6917] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 362.132437][ T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 362.144820][ T33] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 362.174823][ T33] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 362.314160][ T6919] ceph: No mds server is up or the cluster is laggy [ 362.561326][ T126] usb 2-1: USB disconnect, device number 10 [ 362.588012][ T126] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 362.614787][ T4436] bond0 (unregistering): Released all slaves [ 362.614926][ T126] cyberjack 2-1:0.69: device disconnected [ 362.759131][ T6905] device bond0 entered promiscuous mode [ 362.772931][ T6905] device bond_slave_0 entered promiscuous mode [ 362.783623][ T6905] device bond_slave_1 entered promiscuous mode [ 362.804800][ T6905] device batadv0 entered promiscuous mode [ 362.822846][ T6905] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 362.830360][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 363.066657][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.162670][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.172128][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.178231][ T22] usb 4-1: USB disconnect, device number 6 [ 363.212557][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.253932][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.271169][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.370228][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.377451][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.714466][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.898226][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.034226][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.177815][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.185000][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.498779][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.582139][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.592943][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.754588][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.760748][ T4278] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 365.354504][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.555570][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.641465][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.658412][ T6743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.729479][ T6743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.938174][ T26] audit: type=1800 audit(1788227856.181:60): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.668" name="addr_trtype" dev="configfs" ino=47421 res=0 errno=0 [ 365.972528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.986042][ T6964] nvmet_tcp: address family 255 not supported [ 366.048418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.277089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.316279][ T26] audit: type=1800 audit(1788227856.211:61): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.668" name="addr_traddr" dev="configfs" ino=47422 res=0 errno=0 [ 366.463025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.712210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.728907][ T26] audit: type=1800 audit(1788227856.221:62): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.668" name="addr_trsvcid" dev="configfs" ino=47423 res=0 errno=0 [ 367.085077][ T26] audit: type=1804 audit(1788227857.331:63): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.671" name="/newroot/134/nfsd/pool_threads" dev="nfsd" ino=9 res=1 errno=0 [ 367.867770][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.896043][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.977556][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.907243][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 369.043675][ T6992] ceph: No mds server is up or the cluster is laggy [ 370.940900][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.951091][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.015603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.045124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.075088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.105312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.153781][ T6743] device veth0_vlan entered promiscuous mode [ 371.184232][ T6743] device veth1_vlan entered promiscuous mode [ 371.265052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.295330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.344527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.402543][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.458473][ T6743] device veth0_macvtap entered promiscuous mode [ 371.497958][ T6743] device veth1_macvtap entered promiscuous mode [ 372.084073][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.155587][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.203840][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.242590][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.281876][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.341709][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.364271][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.431872][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.521740][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.603790][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.726369][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.792278][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.858061][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.926900][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.008564][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.096324][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.160620][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.220848][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.271835][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.303756][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.387629][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.455007][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.645274][ T6743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.842805][ T6743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.868946][ T6743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.889720][ T6743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.025179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.157866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.015849][ T6743] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 375.166209][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.292132][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.340475][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.397256][ T4260] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 375.446655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.523633][ T7077] ceph: No mds server is up or the cluster is laggy [ 375.554098][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.641482][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.699390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.138800][ T7105] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups) [ 378.412693][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.420143][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.905379][ T7139] kAFS: No cell specified [ 383.276861][ T7144] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 383.353012][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.676406][ T7157] dlm: no local IP address has been set [ 383.682174][ T7157] dlm: cannot start dlm midcomms -107 [ 387.627221][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 387.712856][ T7154] batman_adv: batadv0: Interface deactivated: wlan0 [ 388.148417][ T7189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 389.009273][ T33] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 389.406818][ T7204] ceph: No mds server is up or the cluster is laggy [ 389.552536][ T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 392.769571][ T7224] dlm: no local IP address has been set [ 392.775359][ T7224] dlm: cannot start dlm midcomms -107 [ 394.030680][ T7235] CIFS: Attempting to mount \\127.0.0.1\share [ 394.115557][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 394.151961][ T7236] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 394.397777][ T7235] CIFS: VFS: cifs_mount failed w/return code = -112 [ 395.439142][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 396.282109][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 396.307158][ T14] usb 4-1: config 0 has no interfaces? [ 396.313611][ T26] audit: type=1326 audit(1788227886.561:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 396.358108][ T14] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 396.405946][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.445787][ T26] audit: type=1326 audit(1788227886.581:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 396.484589][ T14] usb 4-1: config 0 descriptor?? [ 396.603918][ T26] audit: type=1326 audit(1788227886.581:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 396.771915][ T26] audit: type=1326 audit(1788227886.581:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 396.803492][ T4260] usb 4-1: USB disconnect, device number 7 [ 397.005116][ T26] audit: type=1326 audit(1788227886.581:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 397.602687][ T26] audit: type=1326 audit(1788227886.581:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 397.829528][ T26] audit: type=1326 audit(1788227886.581:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 398.196600][ T26] audit: type=1326 audit(1788227886.581:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 398.472615][ T26] audit: type=1326 audit(1788227886.581:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 398.551531][ T7292] dlm: no local IP address has been set [ 398.557831][ T7292] dlm: cannot start dlm midcomms -107 [ 398.568743][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.578111][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.865545][ T26] audit: type=1326 audit(1788227886.581:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.1.732" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dcb9e159 code=0x7ffc0000 [ 399.892359][ T7296] dlm: no local IP address has been set [ 399.898805][ T7296] dlm: cannot start dlm midcomms -107 [ 404.871763][ T4322] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.031867][ T4322] usb 6-1: device descriptor read/64, error -71 [ 405.356162][ T4322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 405.522280][ T4322] usb 6-1: device descriptor read/64, error -71 [ 405.652774][ T4322] usb usb6-port1: attempt power cycle [ 406.062356][ T4322] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 406.110266][ T4322] usb 6-1: device descriptor read/8, error -71 [ 406.391869][ T4322] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 406.425177][ T4322] usb 6-1: device descriptor read/8, error -71 [ 406.563641][ T4322] usb usb6-port1: unable to enumerate USB device [ 406.748286][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 409.456547][ T7385] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 411.348408][ T7424] kAFS: No cell specified [ 412.171052][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.767'. [ 414.915361][ T7465] dlm: no local IP address has been set [ 414.920959][ T7465] dlm: cannot start dlm midcomms -107 [ 416.208278][ T7464] kAFS: No cell specified [ 419.898633][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 421.416969][ T7522] overlayfs: overlapping lowerdir path [ 421.467790][ T7520] ======================================================= [ 421.467790][ T7520] WARNING: The mand mount option has been deprecated and [ 421.467790][ T7520] and is ignored by this kernel. Remove the mand [ 421.467790][ T7520] option from the mount to silence this warning. [ 421.467790][ T7520] ======================================================= [ 421.559681][ T7525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 421.817971][ T7521] netlink: 108 bytes leftover after parsing attributes in process `syz.3.778'. [ 422.769079][ T7535] Cannot find add_set index 0 as target [ 424.976269][ T7559] SET target dimension over the limit! [ 425.602297][ T4260] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 425.942085][ T4260] usb 4-1: device descriptor read/64, error -71 [ 426.216888][ T4260] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 427.001813][ T4321] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 427.267479][ T4260] usb 4-1: device descriptor read/64, error -71 [ 427.824547][ T4260] usb usb4-port1: attempt power cycle [ 428.081818][ T4321] usb 6-1: Using ep0 maxpacket: 32 [ 428.089573][ T7590] netlink: 108 bytes leftover after parsing attributes in process `syz.1.803'. [ 428.105691][ T4321] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 428.145757][ T4321] usb 6-1: config 0 has no interface number 0 [ 428.168199][ T4321] usb 6-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 428.186846][ T4321] usb 6-1: config 0 interface 85 has no altsetting 0 [ 428.200862][ T4321] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 428.345241][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.353926][ T4321] usb 6-1: Product: syz [ 428.358124][ T4321] usb 6-1: Manufacturer: syz [ 428.363477][ T4321] usb 6-1: SerialNumber: syz [ 428.379659][ T4321] usb 6-1: config 0 descriptor?? [ 428.390559][ T4321] appletouch 6-1:0.85: Could not find int-in endpoint [ 428.399095][ T4321] appletouch: probe of 6-1:0.85 failed with error -5 [ 428.406865][ T4321] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 429.026740][ T7611] SET target dimension over the limit! [ 430.142484][ T4322] usb 6-1: USB disconnect, device number 6 [ 431.598196][ T7633] dlm: no local IP address has been set [ 431.604005][ T7633] dlm: cannot start dlm midcomms -107 [ 431.902132][ T4322] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 432.127151][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.172811][ T4322] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.201832][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.324736][ T4322] usb 6-1: config 0 descriptor?? [ 432.761926][ T7651] SET target dimension over the limit! [ 433.111948][ T4321] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 433.452104][ T4321] usb 4-1: device descriptor read/64, error -71 [ 433.506816][ T7655] netlink: 108 bytes leftover after parsing attributes in process `syz.0.817'. [ 434.621932][ T4321] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 434.792328][ T4321] usb 4-1: device descriptor read/64, error -71 [ 434.922158][ T4321] usb usb4-port1: attempt power cycle [ 435.045899][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.101009][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.186874][ T7672] kAFS: No cell specified [ 435.448602][ T4321] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 435.457240][ T4322] usbhid 6-1:0.0: can't add hid device: -71 [ 435.466607][ T4322] usbhid: probe of 6-1:0.0 failed with error -71 [ 435.479653][ T4322] usb 6-1: USB disconnect, device number 7 [ 435.512521][ T4321] usb 4-1: device descriptor read/8, error -71 [ 436.985225][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 436.992526][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 437.132247][ T4315] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 437.341846][ T4315] usb 6-1: Using ep0 maxpacket: 32 [ 437.353780][ T4315] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 437.362629][ T4315] usb 6-1: config 0 has no interface number 0 [ 437.368935][ T4315] usb 6-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 437.382814][ T4315] usb 6-1: config 0 interface 85 has no altsetting 0 [ 437.409392][ T4315] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 437.440806][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.463688][ T7695] SET target dimension over the limit! [ 437.479508][ T4315] usb 6-1: Product: syz [ 437.494316][ T4315] usb 6-1: Manufacturer: syz [ 437.513122][ T4315] usb 6-1: SerialNumber: syz [ 437.530282][ T4315] usb 6-1: config 0 descriptor?? [ 437.583588][ T4315] appletouch 6-1:0.85: Could not find int-in endpoint [ 437.603831][ T4315] appletouch: probe of 6-1:0.85 failed with error -5 [ 437.637863][ T4315] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 438.884973][ T126] usb 6-1: USB disconnect, device number 8 [ 438.961867][ T4278] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 439.125579][ T7729] netlink: 108 bytes leftover after parsing attributes in process `syz.0.830'. [ 439.775346][ T7734] kAFS: No cell specified [ 439.847269][ T7739] SET target dimension over the limit! [ 439.901241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.907587][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.915009][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.923565][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.797190][ T7762] Cannot find add_set index 0 as target [ 442.886963][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'. [ 444.256254][ T7785] kAFS: No cell specified [ 445.956951][ T4503] Bluetooth: hci0: Frame reassembly failed (-84) [ 447.340408][ T7795] dlm: no local IP address has been set [ 447.346024][ T7795] dlm: cannot start dlm midcomms -107 [ 447.906850][ T4315] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 448.002060][ T4286] Bluetooth: hci0: command 0x1003 tx timeout [ 448.011630][ T4278] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 448.027267][ T4321] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 448.037962][ T7821] SET target dimension over the limit! [ 448.091760][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 448.098793][ T4315] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 448.151387][ T4315] usb 4-1: config 0 has no interface number 0 [ 448.362735][ T126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.545884][ T7814] ceph: No mds server is up or the cluster is laggy [ 448.571888][ T126] usb 6-1: device descriptor read/64, error -71 [ 448.871900][ T126] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 448.993233][ T4315] usb 4-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 449.004352][ T4315] usb 4-1: config 0 interface 85 has no altsetting 0 [ 449.020353][ T33] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 449.030453][ T4315] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 449.039775][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.047912][ T4315] usb 4-1: Product: syz [ 449.052373][ T4315] usb 4-1: Manufacturer: syz [ 449.056989][ T4315] usb 4-1: SerialNumber: syz [ 449.061922][ T126] usb 6-1: device descriptor read/64, error -71 [ 449.064302][ T4315] usb 4-1: config 0 descriptor?? [ 449.076866][ T4315] appletouch 4-1:0.85: Could not find int-in endpoint [ 449.083790][ T4315] appletouch: probe of 4-1:0.85 failed with error -5 [ 449.091206][ T4315] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 449.204327][ T126] usb usb6-port1: attempt power cycle [ 449.281350][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.290211][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.328176][ T14] usb 4-1: USB disconnect, device number 15 [ 449.346477][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 449.692346][ T126] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 450.335679][ T126] usb 6-1: device descriptor read/8, error -71 [ 450.403186][ T7844] SET target dimension over the limit! [ 450.612162][ T126] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 450.662647][ T126] usb 6-1: device descriptor read/8, error -71 [ 450.803776][ T126] usb usb6-port1: unable to enumerate USB device [ 453.886246][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 453.886301][ T26] audit: type=1800 audit(1788227944.131:86): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.860" name="addr_trtype" dev="configfs" ino=48978 res=0 errno=0 [ 453.924897][ T7875] nvmet_tcp: address family 255 not supported [ 455.601944][ T26] audit: type=1800 audit(1788227944.161:87): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.860" name="addr_traddr" dev="configfs" ino=48979 res=0 errno=0 [ 455.622862][ T26] audit: type=1800 audit(1788227944.171:88): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.860" name="addr_trsvcid" dev="configfs" ino=48980 res=0 errno=0 [ 456.812151][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 456.905116][ T7893] SET target dimension over the limit! [ 456.943785][ T14] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 457.070163][ T7903] SET target dimension over the limit! [ 457.205121][ T126] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 457.226559][ T7907] dlm: no local IP address has been set [ 457.232309][ T7907] dlm: cannot start dlm midcomms -107 [ 457.341825][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 457.362987][ T4278] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 457.363032][ T4275] Bluetooth: hci0: command 0x1003 tx timeout [ 457.749109][ T7894] ceph: No mds server is up or the cluster is laggy [ 458.021732][ T14] usb 6-1: device descriptor read/64, error -71 [ 458.111770][ T4274] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 458.321770][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 458.328866][ T4274] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 458.347140][ T4274] usb 4-1: config 0 has no interface number 0 [ 458.406478][ T7926] dlm: no local IP address has been set [ 458.412199][ T7926] dlm: cannot start dlm midcomms -107 [ 458.970691][ T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 459.001843][ T4274] usb 4-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 459.015246][ T4274] usb 4-1: config 0 interface 85 has no altsetting 0 [ 459.044972][ T4274] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 459.061837][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.080258][ T4274] usb 4-1: Product: syz [ 459.085169][ T4274] usb 4-1: Manufacturer: syz [ 459.090379][ T7928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 459.100576][ T4274] usb 4-1: SerialNumber: syz [ 459.116719][ T4274] usb 4-1: config 0 descriptor?? [ 459.129221][ T4274] appletouch 4-1:0.85: Could not find int-in endpoint [ 459.136546][ T4274] appletouch: probe of 4-1:0.85 failed with error -5 [ 459.144593][ T4274] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 459.161899][ T14] usb 6-1: device descriptor read/64, error -71 [ 459.291971][ T14] usb usb6-port1: attempt power cycle [ 459.333858][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.343490][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.872075][ T14] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 459.944843][ T14] usb 6-1: device descriptor read/8, error -71 [ 460.467078][ T4322] usb 4-1: USB disconnect, device number 16 [ 460.790731][ T7964] Cannot find add_set index 0 as target [ 464.259886][ T26] audit: type=1800 audit(1788227954.501:89): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.889" name="addr_trtype" dev="configfs" ino=49081 res=0 errno=0 [ 464.290010][ T7988] nvmet_tcp: address family 255 not supported [ 464.487917][ T26] audit: type=1800 audit(1788227954.531:90): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.889" name="addr_traddr" dev="configfs" ino=49082 res=0 errno=0 [ 464.522870][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 465.046797][ T26] audit: type=1800 audit(1788227954.531:91): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.889" name="addr_trsvcid" dev="configfs" ino=49083 res=0 errno=0 [ 465.422528][ T8002] SET target dimension over the limit! [ 465.731757][ T4260] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 466.309062][ T8011] dlm: no local IP address has been set [ 466.314801][ T8011] dlm: cannot start dlm midcomms -107 [ 466.381432][ T4260] usb 6-1: device descriptor read/64, error -71 [ 467.225438][ T4260] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 467.391899][ T4260] usb 6-1: device descriptor read/64, error -71 [ 467.469193][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.885'. [ 467.533917][ T4260] usb usb6-port1: attempt power cycle [ 468.271806][ T4260] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 469.294677][ T4260] usb 6-1: device not accepting address 19, error -71 [ 469.318866][ T26] audit: type=1800 audit(1788227959.561:92): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="addr_trtype" dev="configfs" ino=49839 res=0 errno=0 [ 469.349223][ T8043] nvmet_tcp: address family 255 not supported [ 470.821788][ T26] audit: type=1800 audit(1788227959.591:93): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="addr_traddr" dev="configfs" ino=49840 res=0 errno=0 [ 470.952858][ T8051] Cannot find add_set index 0 as target [ 471.162536][ T26] audit: type=1800 audit(1788227959.591:94): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="addr_trsvcid" dev="configfs" ino=49841 res=0 errno=0 [ 473.265514][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.908'. [ 474.376664][ T8084] SET target dimension over the limit! [ 474.711924][ T4274] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 474.911932][ T4274] usb 6-1: device descriptor read/64, error -71 [ 475.191881][ T4274] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 475.409050][ T26] audit: type=1800 audit(1788227965.651:95): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="addr_trtype" dev="configfs" ino=49907 res=0 errno=0 [ 475.437844][ T8094] nvmet_tcp: address family 255 not supported [ 475.991790][ T26] audit: type=1800 audit(1788227965.681:96): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="addr_traddr" dev="configfs" ino=49908 res=0 errno=0 [ 476.101838][ T4274] usb 6-1: device descriptor read/64, error -71 [ 476.138636][ T26] audit: type=1800 audit(1788227965.681:97): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="addr_trsvcid" dev="configfs" ino=49909 res=0 errno=0 [ 476.242875][ T4274] usb usb6-port1: attempt power cycle [ 476.520434][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.904'. [ 476.650164][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.922'. [ 478.023976][ T26] audit: type=1800 audit(1788227968.271:98): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.925" name="addr_trtype" dev="configfs" ino=50297 res=0 errno=0 [ 478.059362][ T8141] nvmet_tcp: address family 255 not supported [ 478.753815][ T8129] SET target dimension over the limit! [ 478.787528][ T8143] netlink: 'syz.5.927': attribute type 1 has an invalid length. [ 478.851645][ T26] audit: type=1800 audit(1788227968.301:99): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.925" name="addr_traddr" dev="configfs" ino=50298 res=0 errno=0 [ 478.948074][ T26] audit: type=1800 audit(1788227968.301:100): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.925" name="addr_trsvcid" dev="configfs" ino=50299 res=0 errno=0 [ 479.072997][ T8158] SET target dimension over the limit! [ 479.179407][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.933'. [ 479.511800][ T33] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 480.141798][ T33] usb 6-1: device descriptor read/64, error -71 [ 480.411798][ T33] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 481.215795][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.936'. [ 481.302000][ T33] usb 6-1: device descriptor read/64, error -71 [ 481.423286][ T33] usb usb6-port1: attempt power cycle [ 481.548596][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564e2800: rx timeout, send abort [ 481.842185][ T33] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 481.882856][ T33] usb 6-1: device descriptor read/8, error -71 [ 482.060286][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054018800: rx timeout, send abort [ 482.068743][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564e2800: abort rx timeout. Force session deactivation [ 482.284833][ T8196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 482.388259][ T26] audit: type=1800 audit(1788227972.631:101): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.944" name="addr_trtype" dev="configfs" ino=50098 res=0 errno=0 [ 482.442174][ T8198] nvmet_tcp: address family 255 not supported [ 482.568717][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054018800: abort rx timeout. Force session deactivation [ 483.029193][ T26] audit: type=1800 audit(1788227972.681:102): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.944" name="addr_traddr" dev="configfs" ino=50099 res=0 errno=0 [ 483.062742][ T26] audit: type=1800 audit(1788227972.681:103): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.944" name="addr_trsvcid" dev="configfs" ino=50100 res=0 errno=0 [ 483.172644][ T8200] Cannot find add_set index 0 as target [ 485.361903][ T4274] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 486.167847][ T8231] kAFS: No cell specified [ 486.178230][ T4274] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 486.190707][ T4274] usb 4-1: config 0 has no interface number 0 [ 486.217253][ T4274] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 486.237651][ T4274] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.278328][ T4274] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 486.425477][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.956'. [ 488.205180][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.351783][ T4274] usb 4-1: Product: syz [ 488.356008][ T4274] usb 4-1: Manufacturer: syz [ 488.420467][ T4274] usb 4-1: SerialNumber: syz [ 488.491002][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 488.496260][ T4274] usb 4-1: config 0 descriptor?? [ 488.519400][ T4274] usb 4-1: can't set config #0, error -71 [ 488.526403][ T8256] SET target dimension over the limit! [ 488.546873][ T4274] usb 4-1: USB disconnect, device number 17 [ 490.287623][ T8260] Cannot find add_set index 0 as target [ 490.693964][ T4322] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 490.910982][ T8277] netlink: 108 bytes leftover after parsing attributes in process `syz.5.964'. [ 490.962510][ T4322] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 491.353520][ T8269] ceph: No mds server is up or the cluster is laggy [ 491.631446][ T33] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 492.621937][ T4260] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 492.835992][ T4260] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 492.870701][ T4260] usb 4-1: config 0 has no interface number 0 [ 493.053157][ T4260] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 493.173831][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'. [ 494.692240][ T4260] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.727793][ T4260] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 494.737683][ T8311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.970'. [ 495.594735][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.620900][ T4260] usb 4-1: Product: syz [ 495.634257][ T4260] usb 4-1: Manufacturer: syz [ 495.649397][ T4260] usb 4-1: SerialNumber: syz [ 495.850366][ T4260] usb 4-1: config 0 descriptor?? [ 495.873828][ T4260] usb 4-1: can't set config #0, error -71 [ 495.900468][ T4260] usb 4-1: USB disconnect, device number 18 [ 495.965792][ T8327] SET target dimension over the limit! [ 496.007828][ T26] audit: type=1800 audit(1788227986.251:104): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.973" name="addr_trtype" dev="configfs" ino=51238 res=0 errno=0 [ 496.785731][ T8328] nvmet_tcp: address family 255 not supported [ 497.257872][ T26] audit: type=1800 audit(1788227987.021:105): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.973" name="addr_traddr" dev="configfs" ino=50519 res=0 errno=0 [ 497.390731][ T26] audit: type=1800 audit(1788227987.021:106): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.973" name="addr_trsvcid" dev="configfs" ino=50520 res=0 errno=0 [ 497.487595][ T8336] dlm: no local IP address has been set [ 497.493311][ T8336] dlm: cannot start dlm midcomms -107 [ 498.121868][ T8335] Cannot find add_set index 0 as target [ 498.251902][ T4260] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 498.471765][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 498.586982][ T8340] netlink: 108 bytes leftover after parsing attributes in process `syz.4.976'. [ 499.241217][ T4260] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 499.269727][ T4260] usb 4-1: config 0 has no interface number 0 [ 499.276005][ T4260] usb 4-1: config 0 interface 85 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 499.296844][ T4260] usb 4-1: config 0 interface 85 has no altsetting 0 [ 499.308907][ T4260] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 499.326695][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.334904][ T4260] usb 4-1: Product: syz [ 499.339082][ T4260] usb 4-1: Manufacturer: syz [ 499.343762][ T4260] usb 4-1: SerialNumber: syz [ 499.386548][ T4260] usb 4-1: config 0 descriptor?? [ 499.433579][ T4260] appletouch 4-1:0.85: Could not find int-in endpoint [ 499.463832][ T4260] appletouch: probe of 4-1:0.85 failed with error -5 [ 499.475728][ T4260] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 499.512845][ T8287] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 499.602720][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.611397][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.774601][ T8287] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 500.103487][ T8346] ceph: No mds server is up or the cluster is laggy [ 500.735787][ T14] usb 4-1: USB disconnect, device number 19 [ 501.085767][ T8287] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 501.286974][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.295502][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.825121][ T26] audit: type=1800 audit(1788227992.071:107): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.985" name="addr_trtype" dev="configfs" ino=50559 res=0 errno=0 [ 501.858431][ T8371] nvmet_tcp: address family 255 not supported [ 502.066454][ T8373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.984'. [ 502.812814][ T26] audit: type=1800 audit(1788227992.101:108): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.985" name="addr_traddr" dev="configfs" ino=50560 res=0 errno=0 [ 502.874373][ T26] audit: type=1800 audit(1788227992.101:109): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.985" name="addr_trsvcid" dev="configfs" ino=50561 res=0 errno=0 [ 504.368976][ T8388] kAFS: No cell specified [ 507.120961][ T8397] SET target dimension over the limit! [ 507.188216][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.196779][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.225146][ T8401] netlink: 108 bytes leftover after parsing attributes in process `syz.1.990'. [ 508.700656][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 508.748417][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 508.763666][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 509.044409][ T8287] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 509.304236][ T33] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 509.318059][ T8441] SET target dimension over the limit! [ 509.382058][ T8287] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 509.564182][ T8431] ceph: No mds server is up or the cluster is laggy [ 509.624776][ T8287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.678542][ T8287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.083163][ T8287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.104011][ T8287] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.114095][ T8287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.126296][ T33] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 510.153146][ T8287] usb 6-1: config 0 descriptor?? [ 510.431985][ T26] audit: type=1800 audit(1788228000.681:110): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.996" name="addr_trtype" dev="configfs" ino=50625 res=0 errno=0 [ 510.461208][ T8446] nvmet_tcp: address family 255 not supported [ 510.613971][ T26] audit: type=1800 audit(1788228000.701:111): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.996" name="addr_traddr" dev="configfs" ino=50626 res=0 errno=0 [ 510.799812][ T26] audit: type=1800 audit(1788228000.701:112): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.996" name="addr_trsvcid" dev="configfs" ino=50627 res=0 errno=0 [ 511.005146][ T8287] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 511.196470][ T8287] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 511.212220][ T8287] usb 6-1: USB disconnect, device number 28 [ 511.363861][ T8460] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 511.489269][ T8454] fido_id[8454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 512.072809][ T8287] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 512.140767][ T8464] ceph: No mds server is up or the cluster is laggy [ 513.207662][ T8485] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1003'. [ 513.249345][ T8496] fuse: Bad value for 'fd' [ 514.020415][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 515.154040][ T4315] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 515.203786][ T8522] SET target dimension over the limit! [ 515.356761][ T8525] binder: 8524:8525 ioctl 4018620d 0 returned -22 [ 515.422429][ T4315] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 515.448525][ T8527] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 515.684115][ T8516] ceph: No mds server is up or the cluster is laggy [ 516.079278][ T4315] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 516.438129][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.451556][ T8534] Cannot find add_set index 0 as target [ 516.469782][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.259005][ T8561] binder: BINDER_SET_CONTEXT_MGR already set [ 520.267862][ T8561] binder: 8559:8561 ioctl 4018620d 200000004a80 returned -16 [ 520.459779][ T8567] netlink: 'syz.5.1026': attribute type 1 has an invalid length. [ 521.094793][ T8558] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1020'. [ 521.427457][ T33] [ 521.429816][ T33] ============================================ [ 521.435941][ T33] WARNING: possible recursive locking detected [ 521.442080][ T33] syzkaller #0 Not tainted [ 521.446472][ T33] -------------------------------------------- [ 521.452598][ T33] kworker/1:1/33 is trying to acquire lock: [ 521.458469][ T33] ffff88814cf70930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 521.468289][ T33] [ 521.468289][ T33] but task is already holding lock: [ 521.475636][ T33] ffff88804fc08930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 521.485361][ T33] [ 521.485361][ T33] other info that might help us debug this: [ 521.493397][ T33] Possible unsafe locking scenario: [ 521.493397][ T33] [ 521.500827][ T33] CPU0 [ 521.504083][ T33] ---- [ 521.507347][ T33] lock(&grp->list_lock); [ 521.511743][ T33] lock(&grp->list_lock); [ 521.516134][ T33] [ 521.516134][ T33] *** DEADLOCK *** [ 521.516134][ T33] [ 521.524286][ T33] May be due to missing lock nesting notation [ 521.524286][ T33] [ 521.532583][ T33] 3 locks held by kworker/1:1/33: [ 521.537595][ T33] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 521.547932][ T33] #1: ffffc90000a9fd00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 521.559843][ T33] #2: ffff88804fc08930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0 [ 521.570003][ T33] [ 521.570003][ T33] stack backtrace: [ 521.575885][ T33] CPU: 1 PID: 33 Comm: kworker/1:1 Not tainted syzkaller #0 [ 521.583148][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.593186][ T33] Workqueue: events snd_rawmidi_input_event_work [ 521.599511][ T33] Call Trace: [ 521.602776][ T33] [ 521.605693][ T33] dump_stack_lvl+0x188/0x24e [ 521.610379][ T33] ? show_regs_print_info+0x12/0x12 [ 521.615561][ T33] ? load_image+0x410/0x410 [ 521.620066][ T33] __lock_acquire+0x12c8/0x7c40 [ 521.624930][ T33] ? verify_lock_unused+0x140/0x140 [ 521.630120][ T33] ? ktime_get_ts64+0x111/0x470 [ 521.634955][ T33] ? verify_lock_unused+0x140/0x140 [ 521.640136][ T33] ? verify_lock_unused+0x140/0x140 [ 521.645338][ T33] ? __rwlock_init+0x140/0x140 [ 521.650085][ T33] lock_acquire+0x1bb/0x4a0 [ 521.654573][ T33] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 521.660019][ T33] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 521.665981][ T33] ? read_lock_is_recursive+0x10/0x10 [ 521.671352][ T33] ? lock_chain_count+0x20/0x20 [ 521.676189][ T33] ? do_raw_read_unlock+0x39/0x70 [ 521.681196][ T33] _raw_read_lock+0x32/0x40 [ 521.685748][ T33] ? snd_seq_deliver_event+0x1cb/0x8c0 [ 521.691188][ T33] snd_seq_deliver_event+0x1cb/0x8c0 [ 521.696461][ T33] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 521.702511][ T33] snd_seq_control_queue+0x8ff/0x1010 [ 521.707932][ T33] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 521.713893][ T33] ? mark_lock+0x94/0x320 [ 521.718208][ T33] ? snd_seq_port_use_ptr+0xfd/0x120 [ 521.723476][ T33] ? __lock_acquire+0x7c40/0x7c40 [ 521.728488][ T33] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 521.734364][ T33] ? _raw_spin_unlock+0x40/0x40 [ 521.739209][ T33] ? mark_lock+0x94/0x320 [ 521.743554][ T33] ? do_raw_read_unlock+0x39/0x70 [ 521.748557][ T33] ? _raw_read_unlock+0x24/0x40 [ 521.753408][ T33] ? snd_seq_port_use_ptr+0xfd/0x120 [ 521.758685][ T33] ? snd_seq_system_notify+0x170/0x170 [ 521.764123][ T33] snd_seq_deliver_single_event+0x806/0xb30 [ 521.770002][ T33] ? snd_seq_deliver_event+0x1e2/0x8c0 [ 521.775470][ T33] ? snd_sequencer_device_done+0x20/0x20 [ 521.781090][ T33] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 521.787141][ T33] snd_seq_oss_timer_start+0x2ce/0x510 [ 521.792582][ T33] ? snd_seq_oss_process_timer_event+0x3d0/0x3d0 [ 521.798894][ T33] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 521.804773][ T33] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 521.810645][ T33] ? _raw_spin_unlock+0x40/0x40 [ 521.815476][ T33] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 521.821376][ T33] ? _raw_spin_unlock+0x40/0x40 [ 521.826210][ T33] ? mark_lock+0x94/0x320 [ 521.830523][ T33] ? snd_seq_oss_readq_put_timestamp+0x33f/0x5c0 [ 521.836832][ T33] snd_seq_oss_midi_input+0x2e8/0x890 [ 521.842199][ T33] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 521.848007][ T33] ? do_raw_read_unlock+0x39/0x70 [ 521.853025][ T33] ? _raw_read_unlock+0x24/0x40 [ 521.857864][ T33] ? snd_seq_port_use_ptr+0xfd/0x120 [ 521.863133][ T33] ? snd_seq_oss_process_event+0x2910/0x2910 [ 521.869095][ T33] snd_seq_deliver_single_event+0x806/0xb30 [ 521.874976][ T33] ? lockdep_hardirqs_on+0x94/0x140 [ 521.880178][ T33] ? snd_sequencer_device_done+0x20/0x20 [ 521.885795][ T33] ? do_raw_read_unlock+0x39/0x70 [ 521.890799][ T33] snd_seq_deliver_event+0x49d/0x8c0 [ 521.896069][ T33] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 521.902118][ T33] snd_midi_input_event+0x295/0x3e0 [ 521.907301][ T33] ? event_process_midi+0x4b0/0x4b0 [ 521.912480][ T33] ? _raw_spin_unlock+0x40/0x40 [ 521.917309][ T33] ? _raw_spin_unlock_irq+0x1f/0x40 [ 521.922491][ T33] ? process_one_work+0x7b4/0x1160 [ 521.927585][ T33] process_one_work+0x8ab/0x1160 [ 521.932520][ T33] ? worker_detach_from_pool+0x240/0x240 [ 521.938147][ T33] ? _raw_spin_lock_irq+0xb7/0xf0 [ 521.943169][ T33] ? _raw_spin_lock_irqsave+0x100/0x100 [ 521.948695][ T33] ? wq_worker_running+0x97/0x190 [ 521.953703][ T33] worker_thread+0xaf5/0x12a0 [ 521.958365][ T33] kthread+0x29d/0x330 [ 521.962412][ T33] ? worker_clr_flags+0x1a0/0x1a0 [ 521.967415][ T33] ? kthread_blkcg+0xd0/0xd0 [ 521.971988][ T33] ret_from_fork+0x1f/0x30 [ 521.976391][ T33] [ 522.327410][ T26] audit: type=1804 audit(1788228012.571:113): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1022" name="/newroot/215/nfsd/pool_threads" dev="nfsd" ino=9 res=1 errno=0