last executing test programs: 14m5.189428873s ago: executing program 0 (id=763): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 14m1.887950517s ago: executing program 0 (id=765): unshare(0x62040200) 14m0.925551962s ago: executing program 0 (id=769): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) r3 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r3, 0x0, 0x3b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) 13m59.391768011s ago: executing program 0 (id=770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 13m46.388536344s ago: executing program 0 (id=788): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r2 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000080)) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 13m43.661627654s ago: executing program 0 (id=791): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) 13m26.846375194s ago: executing program 32 (id=791): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) 13m26.577918281s ago: executing program 2 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m25.169808777s ago: executing program 2 (id=810): ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x700) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, 'proc/kallsyms\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) getrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x6d) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0', 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x1, 0x0) lseek(r4, 0x186a0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 13m23.48287647s ago: executing program 2 (id=815): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 13m23.151237388s ago: executing program 2 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) keyctl$dh_compute(0x2e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x17, 0x0, 0x0) 13m22.857565566s ago: executing program 2 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 13m20.897709396s ago: executing program 2 (id=820): timer_create(0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 13m20.254189512s ago: executing program 33 (id=820): timer_create(0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 13m4.371994698s ago: executing program 3 (id=848): mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 13m4.185691063s ago: executing program 3 (id=849): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0x12) listen(r1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r4, 0x6410) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40046302}], 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20004081) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r8, &(0x7f0000000400), 0x0) 13m3.117856371s ago: executing program 3 (id=851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x4}}, 0x9) 13m2.861659007s ago: executing program 3 (id=852): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48}) 13m0.157795686s ago: executing program 3 (id=855): r0 = syz_open_dev$vim2m(0x0, 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 12m59.801625955s ago: executing program 3 (id=857): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40840) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591114120600402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12m43.356994676s ago: executing program 34 (id=857): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40840) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591114120600402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9m19.135400989s ago: executing program 4 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000b26000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 9m18.801672538s ago: executing program 4 (id=1264): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB], 0x50) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r4, 0x0, 0x3b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) 9m18.704646951s ago: executing program 5 (id=1265): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000380)=0x1) 9m17.401788714s ago: executing program 4 (id=1266): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffd, 0x0, 0x10, @buffer={0x0, 0x0, &(0x7f0000000600)}, &(0x7f0000000640), &(0x7f0000000680), 0x4e20, 0x0, 0x0, &(0x7f00000006c0)}) close(r4) 9m17.211738879s ago: executing program 5 (id=1267): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r3, 0x6410) 9m16.749186681s ago: executing program 5 (id=1268): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) 9m14.935786587s ago: executing program 5 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) keyctl$dh_compute(0x2e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x17, 0x0, 0x0) 9m14.42662188s ago: executing program 5 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./export\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 client1\n', 0x22) close(r0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='client1 ./export 2147483647 139264 65534 65534 1\n', 0x31) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='1\n', 0x2) close(r3) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:./export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='4.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 9m12.511793159s ago: executing program 5 (id=1276): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r3, 0x6410) 9m11.541964564s ago: executing program 35 (id=1276): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r3, 0x6410) 9m11.494916935s ago: executing program 4 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 9m11.163504543s ago: executing program 4 (id=1279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r3 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000080)) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r4, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 9m9.860363516s ago: executing program 4 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) fcntl$setpipe(r0, 0x407, 0xf9) 8m54.612815257s ago: executing program 36 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) fcntl$setpipe(r0, 0x407, 0xf9) 9.581257205s ago: executing program 7 (id=3058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$mtd(&(0x7f0000000000), 0x6b4, 0x2000) ioctl$MEMGETBADBLOCK(r10, 0x40084d0b, &(0x7f0000000440)=0x2) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r12, &(0x7f0000000300)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 6.840530645s ago: executing program 7 (id=3062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r4, 0x20}, {r4, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="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"]) r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x839}]}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x1, 0x0, 0x1f) 6.323689098s ago: executing program 1 (id=3067): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000140), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 6.056496395s ago: executing program 1 (id=3069): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) ftruncate(r0, 0x51a9497) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='1\x00', 0x2) socket$can_raw(0x1d, 0x3, 0x1) 2.783201899s ago: executing program 7 (id=3075): r0 = socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, 0x0, 0x0) 2.537538255s ago: executing program 8 (id=3077): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000340)=""/4096) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r4) 2.171187655s ago: executing program 6 (id=3079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) write(r1, &(0x7f00000000c0)="e100da537ad8c399227dac4f6e3b082d5b3023c6c450e1b851e23131430a3e56f750387572da120dcc48d7936aeaed128233f399dafc068e3c1dc4dd3072d72336173b61a88ee8383fa219c58f4a2ec5e66b70bada010c07d4b2aa4a6d8524830c6339acac617982585151a721da3bb934ae2533b8f89f45a6451e34358cf9c45429e45cd98b2067378701e141059a85dd82749b54539ce7be4c6241f381b2144faf587cd4de7164f0b548c01bbab13abd229b345c0b38161c5683e5d7b44df91e", 0xc1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000080)=0x1) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = fanotify_init(0x20, 0x0) fanotify_mark(r9, 0x445, 0x1003, r8, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7021fddbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0100500080211000001080211000000505050505050730018008c108302726712ea1b02acf28009ddef7a20"], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x2401}, 0x20000000) 1.796755164s ago: executing program 6 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001a800000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016540000000c0a010309000000000000000100000008000440000000000900010073797a"], 0xd8}}, 0x0) 1.540132581s ago: executing program 6 (id=3081): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ftruncate(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) 1.469650383s ago: executing program 7 (id=3082): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0xb8, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9bba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf74}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x51}, 0x20000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.356466976s ago: executing program 8 (id=3083): syz_emit_ethernet(0xd6, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0xe, "08051a5f89f58e0820f28421"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}]}]}}, "a815a23d"}}}}}, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x80801, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x7, 0x6, 0x1ff, 0xbc, 0x1b, "fec9fb7d94ada13d93278847a125c8219e688a"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x97) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) writev(r1, &(0x7f00000000c0), 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x6, 0x5, 0x6}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x0, 0x4}}, 0x26) 1.323643626s ago: executing program 7 (id=3084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r4, 0x20}, {r4, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="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"]) r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x839}]}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x1, 0x0, 0x1f) 1.145695851s ago: executing program 8 (id=3085): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000140), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 979.531475ms ago: executing program 8 (id=3086): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='xfrm0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmsg$sock(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="18", 0x1}], 0x1}, 0x880) sendmsg$inet6(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x4040851) write$cgroup_pid(r2, &(0x7f0000000780), 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 935.943836ms ago: executing program 1 (id=3087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='4\n', 0x2) 787.17993ms ago: executing program 8 (id=3088): r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000001040)="01010101", 0x4) read(r0, &(0x7f0000001080)=""/4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000001100)='./my_tracefs\x00', &(0x7f0000001140)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) 729.706121ms ago: executing program 1 (id=3089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x4c, 0x6, 0x3c, 0x5, 0xb, 0x4, 0x4, 0xb7, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x2, 0x6, 0x66e6, [0x3ff, 0x80]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x2, 0x1, 0x40, 0x1, 0xf0}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 622.478295ms ago: executing program 8 (id=3090): socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, 0x0, 0x0) 526.528887ms ago: executing program 6 (id=3091): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) close(r2) write(0xffffffffffffffff, &(0x7f0000000900)='0\n', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='0\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) close(r7) nanosleep(0x0, 0x0) 416.58004ms ago: executing program 1 (id=3092): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0xb8, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9bba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf74}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x51}, 0x20000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 318.409892ms ago: executing program 6 (id=3093): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0), 0x0) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='123456789', 0x9) 161.502067ms ago: executing program 1 (id=3094): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000340)=""/4096) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_getoverrun(r4) 120.448157ms ago: executing program 6 (id=3095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000020)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='high-speed\x00', 0xa) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/bus/usb/002/002\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/bus/usb/002/002\x00', 0x2, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) 0s ago: executing program 7 (id=3096): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) ftruncate(r0, 0x51a9497) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) kernel console output (not intermixed with test programs): errno=0 [ 1044.981868][T12065] loop0: detected capacity change from 0 to 128 [ 1045.412611][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1045.560044][T12074] XFS (mtdblock0): Invalid superblock magic number [ 1045.632232][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 1045.680587][ T5836] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1045.772271][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.778956][ T5836] usb 2-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 1045.872138][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.901072][T12084] 9pnet_virtio: no channels available for device syz [ 1045.927745][ T5836] usb 2-1: config 0 descriptor?? [ 1045.982186][ T5816] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1045.992656][ T5836] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1046.195541][ T5836] usb 2-1: USB disconnect, device number 8 [ 1046.214435][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.260816][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.306853][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1046.347620][ T5816] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.389876][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.431232][ T5816] usb 9-1: config 0 descriptor?? [ 1046.765177][T11903] Bluetooth: hci4: command 0x0406 tx timeout [ 1046.881241][ T5816] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1047.024667][ T5816] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1047.051029][T12104] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1509'. [ 1048.313608][ T5816] usb 9-1: USB disconnect, device number 3 [ 1048.497671][T12107] fido_id[12107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1048.566398][ T27] audit: type=1800 audit(1786992714.463:295): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1512" name="cdrom" dev="configfs" ino=33290 res=0 errno=0 [ 1048.686906][ T27] audit: type=1800 audit(1786992714.463:296): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1512" name="file" dev="configfs" ino=33291 res=0 errno=0 [ 1048.840296][ T27] audit: type=1800 audit(1786992714.483:297): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1512" name="UDC" dev="configfs" ino=33292 res=0 errno=0 [ 1051.911230][T12128] XFS (mtdblock0): Invalid superblock magic number [ 1052.512270][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1052.732169][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 1052.760782][ T5816] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.851562][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1052.871015][ T27] audit: type=1800 audit(1786992718.783:298): pid=12152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1511" name="cdrom" dev="configfs" ino=33365 res=0 errno=0 [ 1052.910399][ T5816] usb 2-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 1052.967289][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.997289][ T27] audit: type=1800 audit(1786992718.813:299): pid=12152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1511" name="file" dev="configfs" ino=33367 res=0 errno=0 [ 1053.048130][ T5816] usb 2-1: config 0 descriptor?? [ 1053.088734][ T5816] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1053.155785][ T27] audit: type=1800 audit(1786992718.823:300): pid=12152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1511" name="UDC" dev="configfs" ino=33370 res=0 errno=0 [ 1053.289279][ T5816] usb 2-1: USB disconnect, device number 9 [ 1053.621183][T12159] No source specified [ 1055.392568][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.400026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.662569][T12208] No source specified [ 1061.742840][ T5836] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1063.369870][ T5836] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.577915][ T5836] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1064.772138][ T5836] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.921461][ T5836] usb 8-1: string descriptor 0 read error: -71 [ 1064.980466][ T5836] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.047616][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.116703][T12234] file system registered [ 1065.153430][ T5836] usb 8-1: can't set config #1, error -71 [ 1065.221877][ T5836] usb 8-1: USB disconnect, device number 2 [ 1065.467203][T10986] ffs_data_put(): freeing [ 1066.302196][T11242] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1066.688999][T11242] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1068.063404][T11242] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1068.117968][T11242] usb 8-1: can't read configurations, error -71 [ 1068.742545][T12279] XFS (mtdblock0): Invalid superblock magic number [ 1069.444394][T11242] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1070.530017][T12293] Can't find ip_set type lash:ip,mark [ 1071.247289][T11242] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.328195][T11242] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1071.399553][T11242] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.469986][T12303] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1072.662224][T11242] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.671318][T11242] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.791095][T11242] usb 8-1: Product: syz [ 1072.812121][T11242] usb 8-1: Manufacturer: syz [ 1072.849029][T11242] usb 8-1: SerialNumber: syz [ 1072.910503][T11242] cdc_mbim 8-1:1.0: CDC Union missing and no IAD found [ 1072.962293][T11242] cdc_mbim 8-1:1.0: bind() failure [ 1073.127543][ T5762] usb 8-1: USB disconnect, device number 5 [ 1080.332195][ T8] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1082.403900][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.464569][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1082.520067][ T8] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.621597][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1082.643356][T12387] Bluetooth: hci0: unsupported parameter 255 [ 1082.649412][T12387] Bluetooth: hci0: unsupported parameter 255 [ 1082.686384][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.736931][ T8] usb 9-1: Product: syz [ 1082.772441][ T8] usb 9-1: Manufacturer: syz [ 1082.815287][ T8] usb 9-1: SerialNumber: syz [ 1082.873279][ T8] cdc_mbim 9-1:1.0: CDC Union missing and no IAD found [ 1082.880241][ T8] cdc_mbim 9-1:1.0: bind() failure [ 1082.930905][ T27] audit: type=1800 audit(1786992748.823:301): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1567" name="cdrom" dev="configfs" ino=34101 res=0 errno=0 [ 1083.075603][ T8] usb 9-1: USB disconnect, device number 4 [ 1083.098784][ T27] audit: type=1800 audit(1786992748.823:302): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1567" name="file" dev="configfs" ino=34102 res=0 errno=0 [ 1083.220952][ T27] audit: type=1800 audit(1786992748.843:303): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1567" name="UDC" dev="configfs" ino=34107 res=0 errno=0 [ 1095.814452][T12495] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1095.963609][T12495] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1096.008142][T12495] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1102.337178][T12542] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1102.466022][T12542] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1102.559560][T12542] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1105.469556][T12563] input: syz0 as /devices/virtual/input/input110 [ 1107.439908][T12581] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1108.766996][T12581] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1108.825130][T12581] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1114.252696][T12619] XFS (mtdblock0): Invalid superblock magic number [ 1115.413188][T12640] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1115.559614][T12640] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1115.619066][T12640] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1115.678527][ T27] audit: type=1800 audit(1786992781.593:304): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1628" name="cdrom" dev="configfs" ino=34758 res=0 errno=0 [ 1115.841237][ T27] audit: type=1800 audit(1786992781.593:305): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1628" name="file" dev="configfs" ino=34759 res=0 errno=0 [ 1116.024779][ T27] audit: type=1800 audit(1786992781.633:306): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1628" name="UDC" dev="configfs" ino=34760 res=0 errno=0 [ 1116.309487][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.322200][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.892454][T12665] XFS (mtdblock0): Invalid superblock magic number [ 1118.842707][ T5762] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1119.088089][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.132472][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.176667][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1119.254590][ T5762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.330356][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.411759][ T5762] usb 2-1: config 0 descriptor?? [ 1119.905599][ T5762] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1120.058056][ T5762] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1120.225844][ T5762] usb 2-1: USB disconnect, device number 10 [ 1120.478719][T12698] fido_id[12698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1120.523957][ T27] audit: type=1800 audit(1786992786.413:307): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1641" name="cdrom" dev="configfs" ino=34940 res=0 errno=0 [ 1120.703351][ T27] audit: type=1800 audit(1786992786.423:308): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1641" name="file" dev="configfs" ino=34941 res=0 errno=0 [ 1120.914957][ T27] audit: type=1800 audit(1786992786.433:309): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1641" name="UDC" dev="configfs" ino=34942 res=0 errno=0 [ 1121.063539][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1642'. [ 1122.414263][T12732] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1122.584334][T12732] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1122.630391][T12732] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1122.762762][ T9052] ffs_data_put(): freeing [ 1122.927401][ T5762] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1123.014945][ T27] audit: type=1800 audit(1786992788.933:310): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1651" name="cdrom" dev="configfs" ino=35091 res=0 errno=0 [ 1123.075457][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1652'. [ 1123.139132][ T27] audit: type=1800 audit(1786992788.963:311): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1651" name="file" dev="configfs" ino=35092 res=0 errno=0 [ 1123.182778][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.236952][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.277445][ T27] audit: type=1800 audit(1786992788.973:312): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1651" name="UDC" dev="configfs" ino=35093 res=0 errno=0 [ 1123.300870][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1123.355855][ T5762] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1123.397578][ T5762] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.450819][ T5762] usb 8-1: config 0 descriptor?? [ 1124.118439][ T5762] usbhid 8-1:0.0: can't add hid device: -71 [ 1124.212358][ T5762] usbhid: probe of 8-1:0.0 failed with error -71 [ 1124.283231][ T5762] usb 8-1: USB disconnect, device number 6 [ 1125.079740][T12774] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1125.214220][T12774] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1125.250849][ T5772] ffs_data_put(): freeing [ 1125.258894][T12774] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1125.569281][ T27] audit: type=1800 audit(1786992791.463:313): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1661" name="cdrom" dev="configfs" ino=35207 res=0 errno=0 [ 1125.949254][ T27] audit: type=1800 audit(1786992791.483:314): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1661" name="file" dev="configfs" ino=35212 res=0 errno=0 [ 1126.166985][ T27] audit: type=1800 audit(1786992791.523:315): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1661" name="UDC" dev="configfs" ino=35213 res=0 errno=0 [ 1126.360694][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1664'. [ 1126.872377][T11242] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1127.070781][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1127.114121][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.168679][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.247420][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1127.316462][ T8] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.363151][T11242] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.419018][ T8] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.457819][T11242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.494018][T10986] ffs_data_put(): freeing [ 1127.500368][ T8] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1127.550863][T11242] usb 2-1: config 0 descriptor?? [ 1127.587710][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.682205][ T8] usb 7-1: Product: syz [ 1127.730361][ T8] usb 7-1: Manufacturer: syz [ 1127.766477][ T8] usb 7-1: SerialNumber: syz [ 1127.831220][ T8] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1127.948276][ T8] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1128.039962][T11242] usbhid 2-1:0.0: can't add hid device: -71 [ 1128.055271][ T8] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1128.098081][T11242] usbhid: probe of 2-1:0.0 failed with error -71 [ 1128.199950][T11242] usb 2-1: USB disconnect, device number 11 [ 1128.845049][T12822] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1129.016622][T12822] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1129.083482][T12822] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1129.584843][ T27] audit: type=1800 audit(1786992795.503:316): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1674" name="cdrom" dev="configfs" ino=35381 res=0 errno=0 [ 1129.791519][ T27] audit: type=1800 audit(1786992795.553:317): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1674" name="file" dev="configfs" ino=35382 res=0 errno=0 [ 1129.987262][ T27] audit: type=1800 audit(1786992795.563:318): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1674" name="UDC" dev="configfs" ino=35383 res=0 errno=0 [ 1130.027910][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1676'. [ 1130.108114][ T27] audit: type=1800 audit(1786992795.883:319): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1675" name="file" dev="configfs" ino=35397 res=0 errno=0 [ 1130.288823][ T27] audit: type=1800 audit(1786992795.893:320): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1675" name="UDC" dev="configfs" ino=35398 res=0 errno=0 [ 1130.811646][T12844] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1130.920304][T12844] device-mapper: ioctl: error adding target to table [ 1131.172620][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1131.395380][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.449823][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.498433][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1131.557240][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1131.615776][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.700756][ T8] usb 8-1: config 0 descriptor?? [ 1132.044570][T12818] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 1132.112360][T12818] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 1132.169293][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 1132.225002][ T8] usbhid: probe of 8-1:0.0 failed with error -71 [ 1132.347941][ T8] usb 8-1: USB disconnect, device number 7 [ 1132.408894][T12818] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 1132.531408][T12818] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 1132.700204][T11241] usb 7-1: USB disconnect, device number 3 [ 1132.805740][T11241] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1132.968257][T11241] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1133.026079][T12874] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1133.274780][T11241] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1133.468680][T12874] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1133.569255][T12874] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1133.973122][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1685'. [ 1134.263129][ T27] audit: type=1800 audit(1786992800.153:321): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1687" name="cdrom" dev="configfs" ino=35554 res=0 errno=0 [ 1134.445300][ T27] audit: type=1800 audit(1786992800.163:322): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1687" name="file" dev="configfs" ino=35555 res=0 errno=0 [ 1134.476534][T12898] jffs2: notice: (12898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1134.605938][ T27] audit: type=1800 audit(1786992800.213:323): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1687" name="UDC" dev="configfs" ino=35556 res=0 errno=0 [ 1134.744178][T12901] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1134.897324][T12901] device-mapper: ioctl: error adding target to table [ 1135.452203][ T5762] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1135.481368][ T5772] ffs_data_put(): freeing [ 1135.892292][ T5762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.010495][ T5762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.122563][ T5762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1136.210875][ T5762] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1136.240469][T12930] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1136.264919][ T5762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.345386][ T5762] usb 7-1: config 0 descriptor?? [ 1136.418808][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 1136.437138][T12930] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1136.503758][T12930] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1136.766411][ T5762] usbhid 7-1:0.0: can't add hid device: -71 [ 1136.832260][ T5762] usbhid: probe of 7-1:0.0 failed with error -71 [ 1136.898149][ T5762] usb 7-1: USB disconnect, device number 4 [ 1136.935750][T12941] 9pnet_virtio: no channels available for device syz [ 1137.443788][T12948] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1137.598729][T12948] device-mapper: ioctl: error adding target to table [ 1138.067975][T12974] jffs2: notice: (12974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1139.117790][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1707'. [ 1141.272535][T11242] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1141.499055][T11242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.580523][T11242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.646796][T11242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1141.726430][T11242] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1141.790103][T11242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.101301][T11242] usb 7-1: config 0 descriptor?? [ 1142.490430][ T27] audit: type=1800 audit(1786992808.403:324): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1717" name="cdrom" dev="configfs" ino=35964 res=0 errno=0 [ 1142.584032][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1142.605977][T11242] usbhid 7-1:0.0: can't add hid device: -71 [ 1142.637749][T11242] usbhid: probe of 7-1:0.0 failed with error -71 [ 1142.666293][ T27] audit: type=1800 audit(1786992808.443:325): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1717" name="file" dev="configfs" ino=35965 res=0 errno=0 [ 1142.727076][T11242] usb 7-1: USB disconnect, device number 5 [ 1142.818617][ T27] audit: type=1800 audit(1786992808.453:326): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1717" name="UDC" dev="configfs" ino=35971 res=0 errno=0 [ 1143.369905][T13029] jffs2: notice: (13029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1143.412941][T13031] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1143.554030][T13031] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1143.623896][T13031] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1143.877836][ T27] audit: type=1800 audit(1786992809.773:327): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1723" name="cdrom" dev="configfs" ino=36026 res=0 errno=0 [ 1144.007521][ T27] audit: type=1800 audit(1786992809.773:328): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1723" name="file" dev="configfs" ino=36027 res=0 errno=0 [ 1144.138257][ T27] audit: type=1800 audit(1786992809.793:329): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1723" name="UDC" dev="configfs" ino=36029 res=0 errno=0 [ 1144.195567][T13044] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1144.250808][T13044] device-mapper: ioctl: error adding target to table [ 1145.572812][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1727'. [ 1145.945036][ T27] audit: type=1800 audit(1786992811.833:330): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1730" name="cdrom" dev="configfs" ino=36163 res=0 errno=0 [ 1146.039084][T13076] jffs2: notice: (13076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1146.079652][ T27] audit: type=1800 audit(1786992811.883:331): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1730" name="file" dev="configfs" ino=36164 res=0 errno=0 [ 1146.210109][ T27] audit: type=1800 audit(1786992811.883:332): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1730" name="UDC" dev="configfs" ino=36165 res=0 errno=0 [ 1146.649612][T13084] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1146.710712][T13084] device-mapper: ioctl: error adding target to table [ 1148.072875][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1740'. [ 1148.181079][T13115] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1148.371596][T13115] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1148.436468][T13115] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1148.867569][T13129] bond0: (slave veth0): Error: Device can not be enslaved while up [ 1148.879550][ T27] audit: type=1800 audit(1786992814.783:333): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1744" name="cdrom" dev="configfs" ino=36408 res=0 errno=0 [ 1148.967494][T13131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.989170][ T59] bond0: (slave bond_slave_0): interface is now down [ 1149.007613][ T27] audit: type=1800 audit(1786992814.793:334): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1744" name="file" dev="configfs" ino=36409 res=0 errno=0 [ 1149.051909][ T59] bond0: (slave bond_slave_1): interface is now down [ 1149.134752][ T59] bond0: now running without any active interface! [ 1149.171847][ T27] audit: type=1800 audit(1786992814.833:335): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1744" name="UDC" dev="configfs" ino=36410 res=0 errno=0 [ 1149.594719][T13137] jffs2: notice: (13137) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1149.946338][T13140] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1150.015577][T13140] device-mapper: ioctl: error adding target to table [ 1151.039349][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1751'. [ 1151.323968][T13167] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1151.438385][ T27] audit: type=1800 audit(1786992817.353:336): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1755" name="cdrom" dev="configfs" ino=36577 res=0 errno=0 [ 1151.474162][T13167] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1151.508842][T13167] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1151.570608][ T27] audit: type=1800 audit(1786992817.383:337): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1755" name="file" dev="configfs" ino=36578 res=0 errno=0 [ 1151.717726][ T27] audit: type=1800 audit(1786992817.383:338): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1754" name="UDC" dev="configfs" ino=36579 res=0 errno=0 [ 1153.819357][ T27] audit: type=1800 audit(1786992817.393:339): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1755" name="UDC" dev="configfs" ino=36580 res=0 errno=0 [ 1153.884816][T13180] Mass Storage Function, version: 2009/09/11 [ 1153.919025][T13180] LUN: removable file: (no medium) [ 1154.473181][T13187] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1154.612913][T13187] device-mapper: ioctl: error adding target to table [ 1155.627581][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1764'. [ 1155.713148][ T27] audit: type=1800 audit(1786992821.633:340): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1766" name="cdrom" dev="configfs" ino=36713 res=0 errno=0 [ 1155.785442][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1764'. [ 1155.822960][ T27] audit: type=1800 audit(1786992821.673:341): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1766" name="file" dev="configfs" ino=36714 res=0 errno=0 [ 1155.997995][ T27] audit: type=1800 audit(1786992821.673:342): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1766" name="UDC" dev="configfs" ino=36715 res=0 errno=0 [ 1156.197687][ T27] audit: type=1800 audit(1786992822.113:343): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1767" name="file" dev="configfs" ino=36726 res=0 errno=0 [ 1156.371391][ T27] audit: type=1800 audit(1786992822.143:344): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1767" name="UDC" dev="configfs" ino=36727 res=0 errno=0 [ 1157.463006][ T27] audit: type=1800 audit(1786992823.353:345): pid=13249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1772" name="cdrom" dev="configfs" ino=36774 res=0 errno=0 [ 1157.538256][T13247] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1157.589346][T13247] device-mapper: ioctl: error adding target to table [ 1157.611388][ T27] audit: type=1800 audit(1786992823.403:346): pid=13249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1772" name="UDC" dev="configfs" ino=36777 res=0 errno=0 [ 1158.494315][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1776'. [ 1159.424813][T13286] batman_adv: batadv0: Adding interface: veth0 [ 1159.445928][T13286] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.588525][T13286] batman_adv: batadv0: Interface activated: veth0 [ 1159.648783][T13291] batman_adv: batadv0: Interface deactivated: veth0 [ 1159.695871][T13291] batman_adv: batadv0: Removing interface: veth0 [ 1159.980027][T13291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.036993][T13291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.102614][T13291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.152707][T13291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.184085][T13296] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1160.213023][ T27] audit: type=1800 audit(1786992826.113:347): pid=13304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1784" name="cdrom" dev="configfs" ino=36910 res=0 errno=0 [ 1160.247645][T13296] device-mapper: ioctl: error adding target to table [ 1160.320054][ T27] audit: type=1800 audit(1786992826.123:348): pid=13304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1784" name="UDC" dev="configfs" ino=36911 res=0 errno=0 [ 1160.611281][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1785'. [ 1162.153448][T13335] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1162.181166][T13335] device-mapper: ioctl: error adding target to table [ 1162.718279][ T27] audit: type=1800 audit(1786992828.633:349): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1795" name="cdrom" dev="configfs" ino=37111 res=0 errno=0 [ 1162.790738][ T27] audit: type=1800 audit(1786992828.653:350): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1795" name="UDC" dev="configfs" ino=37112 res=0 errno=0 [ 1165.530489][ T27] audit: type=1800 audit(1786992831.263:351): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1801" name="cdrom" dev="configfs" ino=37214 res=0 errno=0 [ 1165.726082][ T27] audit: type=1800 audit(1786992831.473:352): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1801" name="UDC" dev="configfs" ino=37215 res=0 errno=0 [ 1166.077338][T13374] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1166.133944][T13374] device-mapper: ioctl: error adding target to table [ 1166.499019][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 1166.536384][ T27] audit: type=1800 audit(1786992832.453:353): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1808" name="cdrom" dev="configfs" ino=37358 res=0 errno=0 [ 1166.600385][T13390] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1807'. [ 1166.638505][ T27] audit: type=1800 audit(1786992832.473:354): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1808" name="file" dev="configfs" ino=37359 res=0 errno=0 [ 1166.730004][ T27] audit: type=1800 audit(1786992832.493:355): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1808" name="UDC" dev="configfs" ino=37360 res=0 errno=0 [ 1167.647422][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1813'. [ 1167.856064][ T27] audit: type=1800 audit(1786992833.763:356): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1815" name="cdrom" dev="configfs" ino=37460 res=0 errno=0 [ 1168.007699][ T27] audit: type=1800 audit(1786992833.773:357): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1815" name="UDC" dev="configfs" ino=37461 res=0 errno=0 [ 1168.104493][T13417] netlink: 'syz.7.1816': attribute type 1 has an invalid length. [ 1168.177087][T13417] netlink: 'syz.7.1816': attribute type 2 has an invalid length. [ 1168.209607][T13416] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1168.244759][T13416] device-mapper: ioctl: error adding target to table [ 1170.444579][T13429] jffs2: notice: (13429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1170.659053][T13426] null_blk: disk nullb1 created [ 1170.674318][ T27] audit: type=1800 audit(1786992836.543:358): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1818" name="power" dev="configfs" ino=37499 res=0 errno=0 [ 1171.038836][T13441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1821'. [ 1171.100260][T13443] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1171.120758][T13441] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1821'. [ 1171.211911][T13443] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1171.246464][T13443] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1171.579991][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1825'. [ 1172.064699][T13460] jffs2: notice: (13460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1172.693579][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1835'. [ 1173.119054][ T27] audit: type=1800 audit(1786992839.033:359): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1839" name="cdrom" dev="configfs" ino=37809 res=0 errno=0 [ 1173.181275][ T27] audit: type=1800 audit(1786992839.063:360): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1839" name="file" dev="configfs" ino=37810 res=0 errno=0 [ 1173.235759][ T27] audit: type=1800 audit(1786992839.063:361): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1839" name="UDC" dev="configfs" ino=37811 res=0 errno=0 [ 1173.380192][T13495] jffs2: notice: (13495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1173.887090][T13508] 9pnet_fd: Insufficient options for proto=fd [ 1174.286266][T13521] jffs2: notice: (13521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1176.046386][T13544] orangefs_mount: mount request failed with -4 [ 1176.460187][T13555] device-mapper: ioctl: populate_table: no targets specified [ 1177.727414][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.764876][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.147881][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1866'. [ 1179.308027][T13574] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1866'. [ 1180.066845][ T27] audit: type=1800 audit(1786992845.983:362): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1868" name="cdrom" dev="configfs" ino=38112 res=0 errno=0 [ 1180.154197][ T27] audit: type=1800 audit(1786992846.013:363): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1868" name="file" dev="configfs" ino=38114 res=0 errno=0 [ 1180.253617][ T27] audit: type=1800 audit(1786992846.023:364): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1868" name="UDC" dev="configfs" ino=38116 res=0 errno=0 [ 1180.295703][T13589] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1180.400553][T13589] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1181.018112][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1877'. [ 1181.041465][ T27] audit: type=1800 audit(1786992846.953:365): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1878" name="cdrom" dev="configfs" ino=38202 res=0 errno=0 [ 1181.071347][T13611] mass_storage.0/lun.0: unable to open backing file: fil [ 1181.120781][T13609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1877'. [ 1181.135750][ T27] audit: type=1800 audit(1786992846.983:366): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1878" name="file" dev="configfs" ino=38203 res=0 errno=0 [ 1181.201417][ T27] audit: type=1800 audit(1786992847.013:367): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1878" name="UDC" dev="configfs" ino=38204 res=0 errno=0 [ 1181.843242][ T27] audit: type=1800 audit(1786992847.753:368): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1880" name="cdrom" dev="configfs" ino=38231 res=0 errno=0 [ 1181.865009][T13618] mass_storage.0/lun.0: unable to open backing file: fil [ 1181.997020][ T27] audit: type=1800 audit(1786992847.763:369): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1880" name="file" dev="configfs" ino=38232 res=0 errno=0 [ 1182.312589][ T27] audit: type=1800 audit(1786992847.833:370): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1880" name="UDC" dev="configfs" ino=38235 res=0 errno=0 [ 1182.486557][ T27] audit: type=1800 audit(1786992848.403:371): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1885" name="cdrom" dev="configfs" ino=38255 res=0 errno=0 [ 1183.182722][T13640] mass_storage.0/lun.0: unable to open backing file: fil [ 1183.496166][T13652] mass_storage.0/lun.0: unable to open backing file: fil [ 1186.437435][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1186.437448][ T27] audit: type=1800 audit(1786992852.353:379): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1905" name="cdrom" dev="configfs" ino=38566 res=0 errno=0 [ 1186.474018][T13684] mass_storage.0/lun.0: unable to open backing file: fil [ 1186.504621][T13685] mass_storage.0/lun.0: unable to open backing file: fil [ 1187.934149][ T27] audit: type=1800 audit(1786992852.383:380): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1905" name="file" dev="configfs" ino=38567 res=0 errno=0 [ 1188.081623][ T27] audit: type=1800 audit(1786992852.433:381): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1905" name="UDC" dev="configfs" ino=38570 res=0 errno=0 [ 1188.273335][ T27] audit: type=1800 audit(1786992852.453:382): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1906" name="UDC" dev="configfs" ino=38573 res=0 errno=0 [ 1193.985656][T13742] vlan2: entered allmulticast mode [ 1193.990859][T13742] bond0: entered allmulticast mode [ 1194.082957][T13742] bond_slave_0: entered allmulticast mode [ 1194.088776][T13742] bond_slave_1: entered allmulticast mode [ 1194.170646][T13742] bridge0: port 3(vlan2) entered blocking state [ 1194.222241][T13742] bridge0: port 3(vlan2) entered disabled state [ 1194.302575][T13742] vlan2: entered promiscuous mode [ 1194.370417][T13742] bond0: entered promiscuous mode [ 1194.402167][T13742] bond_slave_0: entered promiscuous mode [ 1194.432884][T13742] bond_slave_1: entered promiscuous mode [ 1194.479226][T13742] bridge0: port 3(vlan2) entered blocking state [ 1194.486019][T13742] bridge0: port 3(vlan2) entered forwarding state [ 1194.532780][T13745] mass_storage.0/lun.0: unable to open backing file: file [ 1194.541405][ T27] audit: type=1800 audit(1786992860.433:383): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1918" name="cdrom" dev="configfs" ino=38814 res=0 errno=0 [ 1194.679073][ T27] audit: type=1800 audit(1786992860.443:384): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1918" name="file" dev="configfs" ino=38815 res=0 errno=0 [ 1194.803828][ T27] audit: type=1800 audit(1786992860.513:385): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1918" name="UDC" dev="configfs" ino=38816 res=0 errno=0 [ 1195.233505][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 1195.364972][T13758] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1195.503665][T13758] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1195.764274][T13762] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1197.873724][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1928'. [ 1197.969059][T13777] batadv0: entered promiscuous mode [ 1198.021065][T13777] macsec1: entered promiscuous mode [ 1198.056567][T13777] macsec1: entered allmulticast mode [ 1198.087384][T13777] batadv0: entered allmulticast mode [ 1198.156701][T13777] batadv0: left allmulticast mode [ 1198.185333][T13777] batadv0: left promiscuous mode [ 1198.294075][T10986] ffs_data_put(): freeing [ 1198.611860][T13792] input: syz0 as /devices/virtual/input/input115 [ 1198.641541][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 1201.501805][ T9052] ffs_data_put(): freeing [ 1201.602856][T13822] block device autoloading is deprecated and will be removed. [ 1201.977091][T13832] input: syz0 as /devices/virtual/input/input116 [ 1202.240694][ T27] audit: type=1800 audit(1786992868.153:386): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1956" name="cdrom" dev="configfs" ino=39137 res=0 errno=0 [ 1202.273821][T13835] mass_storage.0/lun.0: unable to open backing file: file [ 1202.388348][ T27] audit: type=1800 audit(1786992868.193:387): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1956" name="file" dev="configfs" ino=39138 res=0 errno=0 [ 1202.500104][ T27] audit: type=1800 audit(1786992868.233:388): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1956" name="UDC" dev="configfs" ino=39139 res=0 errno=0 [ 1202.728431][T13847] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1202.843146][T13847] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1202.889711][T13847] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1203.473808][T13857] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 1203.572457][T10986] ffs_data_put(): freeing [ 1204.875684][ T27] audit: type=1800 audit(1786992870.783:389): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1972" name="cdrom" dev="configfs" ino=39310 res=0 errno=0 [ 1205.027957][ T27] audit: type=1800 audit(1786992870.813:390): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1972" name="file" dev="configfs" ino=39311 res=0 errno=0 [ 1205.079543][ T9052] ffs_data_put(): freeing [ 1205.145911][ T27] audit: type=1800 audit(1786992870.833:391): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1972" name="UDC" dev="configfs" ino=39312 res=0 errno=0 [ 1207.643137][T13894] 9pnet_fd: p9_fd_create_unix (13894): problem connecting socket: ./file0: -111 [ 1207.710692][T13895] input: syz0 as /devices/virtual/input/input117 [ 1210.142329][T11093] ffs_data_put(): freeing [ 1210.342627][ T27] audit: type=1800 audit(1786992876.253:392): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1986" name="cdrom" dev="configfs" ino=39528 res=0 errno=0 [ 1210.421609][ T27] audit: type=1800 audit(1786992876.253:393): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1986" name="file" dev="configfs" ino=39529 res=0 errno=0 [ 1210.528032][ T27] audit: type=1800 audit(1786992876.253:394): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1986" name="UDC" dev="configfs" ino=39530 res=0 errno=0 [ 1215.397731][T10986] ffs_data_put(): freeing [ 1215.515618][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1995'. [ 1216.165202][ T27] audit: type=1800 audit(1786992882.073:395): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2000" name="cdrom" dev="configfs" ino=39757 res=0 errno=0 [ 1216.260917][ T27] audit: type=1800 audit(1786992882.103:396): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2000" name="file" dev="configfs" ino=39758 res=0 errno=0 [ 1216.517243][ T27] audit: type=1800 audit(1786992882.113:397): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2000" name="UDC" dev="configfs" ino=39759 res=0 errno=0 [ 1220.266150][ T5772] ffs_data_put(): freeing [ 1220.288061][T13980] bond_slave_0: entered promiscuous mode [ 1220.294141][T13980] bond_slave_1: entered promiscuous mode [ 1220.417939][T13980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1220.473275][T13982] mass_storage.0/lun.0: unable to open backing file: file [ 1220.480626][ T27] audit: type=1800 audit(1786992886.383:398): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2007" name="cdrom" dev="configfs" ino=39829 res=0 errno=0 [ 1220.555861][T13980] bond2: (slave macvlan2): making interface the new active one [ 1220.592256][ T27] audit: type=1800 audit(1786992886.383:399): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2007" name="file" dev="configfs" ino=39830 res=0 errno=0 [ 1220.619953][T13980] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1220.710842][ T27] audit: type=1800 audit(1786992886.463:400): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2007" name="UDC" dev="configfs" ino=39831 res=0 errno=0 [ 1220.745680][T13980] syz.6.2006 (13980) used greatest stack depth: 19880 bytes left [ 1221.245410][ T27] audit: type=1800 audit(1786992887.153:401): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="cdrom" dev="configfs" ino=39865 res=0 errno=0 [ 1221.267230][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1221.365496][ T27] audit: type=1800 audit(1786992887.183:402): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="file" dev="configfs" ino=39866 res=0 errno=0 [ 1221.495295][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1221.531312][ T8] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1221.543814][ T27] audit: type=1800 audit(1786992887.193:403): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="UDC" dev="configfs" ino=39867 res=0 errno=0 [ 1221.591584][ T8] usb 9-1: can't read configurations, error -71 [ 1223.712501][ T5772] ffs_data_put(): freeing [ 1225.681272][ T27] audit: type=1800 audit(1786992891.383:404): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2016" name="power" dev="configfs" ino=39932 res=0 errno=0 [ 1225.928880][T14021] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1226.045799][T14021] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1226.119356][T14021] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1226.388447][ T27] audit: type=1800 audit(1786992892.303:405): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2023" name="cdrom" dev="configfs" ino=40014 res=0 errno=0 [ 1226.659666][ T27] audit: type=1800 audit(1786992892.333:406): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2023" name="file" dev="configfs" ino=40017 res=0 errno=0 [ 1228.143606][ T27] audit: type=1800 audit(1786992892.343:407): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2023" name="UDC" dev="configfs" ino=40018 res=0 errno=0 [ 1228.395254][ T27] audit: type=1800 audit(1786992892.383:408): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2024" name="file" dev="configfs" ino=40019 res=0 errno=0 [ 1230.470278][ T27] audit: type=1800 audit(1786992895.863:409): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2028" name="power" dev="configfs" ino=40056 res=0 errno=0 [ 1230.708248][T10986] ffs_data_put(): freeing [ 1233.333204][T14073] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1233.435618][ T27] audit: type=1800 audit(1786992899.353:410): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2035" name="cdrom" dev="configfs" ino=40123 res=0 errno=0 [ 1233.493012][T14073] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1233.513145][T14073] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 1233.553680][ T27] audit: type=1800 audit(1786992899.383:411): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2035" name="file" dev="configfs" ino=40124 res=0 errno=0 [ 1236.515434][ T27] audit: type=1800 audit(1786992902.283:412): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2037" name="power" dev="configfs" ino=40160 res=0 errno=0 [ 1239.288588][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.307610][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.995714][ T5772] ffs_data_put(): freeing [ 1241.446128][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2044'. [ 1241.695655][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2046'. [ 1241.781263][T14110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2046'. [ 1243.734979][ T27] audit: type=1800 audit(1786992909.653:413): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2048" name="cdrom" dev="configfs" ino=40302 res=0 errno=0 [ 1245.763768][ T27] audit: type=1800 audit(1786992909.673:414): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2048" name="file" dev="configfs" ino=40303 res=0 errno=0 [ 1247.439680][T11093] ffs_data_put(): freeing [ 1247.445565][ T27] audit: type=1800 audit(1786992909.683:415): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2048" name="UDC" dev="configfs" ino=40306 res=0 errno=0 [ 1248.112368][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2058'. [ 1248.148559][ T27] audit: type=1800 audit(1786992914.063:416): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2060" name="cdrom" dev="configfs" ino=40408 res=0 errno=0 [ 1248.210303][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2058'. [ 1248.255100][ T27] audit: type=1800 audit(1786992914.083:417): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2060" name="file" dev="configfs" ino=40409 res=0 errno=0 [ 1248.329339][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2059'. [ 1248.387419][ T27] audit: type=1800 audit(1786992914.093:418): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2060" name="UDC" dev="configfs" ino=40413 res=0 errno=0 [ 1249.459604][ T27] audit: type=1800 audit(1786992915.373:419): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2070" name="cdrom" dev="configfs" ino=40502 res=0 errno=0 [ 1250.025335][ T27] audit: type=1800 audit(1786992915.403:420): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2070" name="file" dev="configfs" ino=40503 res=0 errno=0 [ 1250.242191][ T27] audit: type=1800 audit(1786992915.413:421): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2070" name="UDC" dev="configfs" ino=40504 res=0 errno=0 [ 1250.432081][ T27] audit: type=1800 audit(1786992916.343:422): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2075" name="cdrom" dev="configfs" ino=40538 res=0 errno=0 [ 1250.577390][ T27] audit: type=1800 audit(1786992916.373:423): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2075" name="file" dev="configfs" ino=40539 res=0 errno=0 [ 1250.688692][ T27] audit: type=1800 audit(1786992916.383:424): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2075" name="UDC" dev="configfs" ino=40540 res=0 errno=0 [ 1250.998069][ T27] audit: type=1800 audit(1786992916.903:425): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2081" name="cdrom" dev="configfs" ino=40582 res=0 errno=0 [ 1251.581690][ T27] audit: type=1800 audit(1786992916.933:426): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2081" name="file" dev="configfs" ino=40583 res=0 errno=0 [ 1251.705567][ T27] audit: type=1800 audit(1786992916.933:427): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2081" name="UDC" dev="configfs" ino=40584 res=0 errno=0 [ 1251.884934][T14215] bond2: option mode: unable to set because the bond device has slaves [ 1252.191082][ T27] audit: type=1800 audit(1786992918.103:428): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2089" name="cdrom" dev="configfs" ino=40650 res=0 errno=0 [ 1253.898162][T14223] nvme_fabrics: missing parameter 'transport=%s' [ 1253.956400][T14223] nvme_fabrics: missing parameter 'nqn=%s' [ 1255.122207][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1255.122218][ T27] audit: type=1800 audit(1786992921.043:435): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2102" name="cdrom" dev="configfs" ino=40785 res=0 errno=0 [ 1255.274533][ T27] audit: type=1800 audit(1786992921.073:436): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2102" name="file" dev="configfs" ino=40786 res=0 errno=0 [ 1255.347726][T14257] md: could not open device unknown-block(0,0). [ 1255.375480][T14257] md: md_import_device returned -6 [ 1255.406459][ T27] audit: type=1800 audit(1786992921.093:437): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2102" name="UDC" dev="configfs" ino=40787 res=0 errno=0 [ 1255.542790][ T27] audit: type=1800 audit(1786992921.133:438): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2101" name="file" dev="configfs" ino=40790 res=0 errno=0 [ 1255.686362][ T27] audit: type=1800 audit(1786992921.143:439): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2101" name="UDC" dev="configfs" ino=40793 res=0 errno=0 [ 1256.005817][ T27] audit: type=1800 audit(1786992921.913:440): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2105" name="cdrom" dev="configfs" ino=40820 res=0 errno=0 [ 1256.141264][ T27] audit: type=1800 audit(1786992921.923:441): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2105" name="file" dev="configfs" ino=40821 res=0 errno=0 [ 1256.177053][T14282] aoe: unknown AoE command type 0xbc [ 1256.256981][ T27] audit: type=1800 audit(1786992921.953:442): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2105" name="UDC" dev="configfs" ino=40822 res=0 errno=0 [ 1256.385338][ T27] audit: type=1800 audit(1786992922.093:443): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2107" name="file" dev="configfs" ino=40829 res=0 errno=0 [ 1258.821606][T13737] bond0: (slave bond_slave_0): interface is now down [ 1258.872966][T13737] bond0: (slave bond_slave_1): interface is now down [ 1258.974616][T13737] bond0: now running without any active interface! [ 1259.243807][ T27] audit: type=1800 audit(1786992925.153:444): pid=14310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2113" name="cdrom" dev="configfs" ino=40893 res=0 errno=0 [ 1259.377960][T11093] ffs_data_put(): freeing [ 1262.630648][T11093] ffs_data_put(): freeing [ 1262.773187][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1262.773198][ T27] audit: type=1800 audit(1786992928.693:452): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2125" name="cdrom" dev="configfs" ino=41020 res=0 errno=0 [ 1262.937964][ T27] audit: type=1800 audit(1786992928.723:453): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2125" name="file" dev="configfs" ino=41021 res=0 errno=0 [ 1263.080946][ T27] audit: type=1800 audit(1786992928.733:454): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2125" name="UDC" dev="configfs" ino=41022 res=0 errno=0 [ 1265.137885][ T27] audit: type=1800 audit(1786992930.703:455): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2128" name="power" dev="configfs" ino=41107 res=0 errno=0 [ 1265.536933][ T27] audit: type=1800 audit(1786992931.453:456): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2132" name="cdrom" dev="configfs" ino=41143 res=0 errno=0 [ 1265.648499][ T27] audit: type=1800 audit(1786992931.493:457): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2132" name="file" dev="configfs" ino=41144 res=0 errno=0 [ 1265.767383][ T27] audit: type=1800 audit(1786992931.493:458): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2132" name="UDC" dev="configfs" ino=41145 res=0 errno=0 [ 1265.986735][ T5772] ffs_data_put(): freeing [ 1268.047235][T14399] overlayfs: overlapping lowerdir path [ 1268.458895][ T27] audit: type=1800 audit(1786992934.373:459): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2139" name="cdrom" dev="configfs" ino=41258 res=0 errno=0 [ 1270.279381][ T27] audit: type=1800 audit(1786992934.373:460): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2139" name="file" dev="configfs" ino=41259 res=0 errno=0 [ 1270.522185][ T27] audit: type=1800 audit(1786992934.403:461): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2139" name="UDC" dev="configfs" ino=41260 res=0 errno=0 [ 1270.674405][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2143'. [ 1270.695382][ T27] audit: type=1800 audit(1786992936.613:462): pid=14441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2144" name="cdrom" dev="configfs" ino=41328 res=0 errno=0 [ 1272.440118][ T27] audit: type=1800 audit(1786992936.633:463): pid=14441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2144" name="file" dev="configfs" ino=41329 res=0 errno=0 [ 1272.591221][T14453] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 1272.799898][T14453] netlink: 'syz.1.2145': attribute type 2 has an invalid length. [ 1272.830449][ T27] audit: type=1800 audit(1786992936.643:464): pid=14441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2144" name="UDC" dev="configfs" ino=41330 res=0 errno=0 [ 1272.968593][T14460] overlayfs: overlapping lowerdir path [ 1273.368454][ T27] audit: type=1800 audit(1786992939.273:465): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2151" name="cdrom" dev="configfs" ino=41412 res=0 errno=0 [ 1273.450390][ T27] audit: type=1800 audit(1786992939.313:466): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2151" name="file" dev="configfs" ino=41422 res=0 errno=0 [ 1273.591497][ T27] audit: type=1800 audit(1786992939.313:467): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2151" name="UDC" dev="configfs" ino=41423 res=0 errno=0 [ 1273.921308][ T27] audit: type=1800 audit(1786992939.833:468): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2155" name="file" dev="configfs" ino=41450 res=0 errno=0 [ 1275.601559][ T27] audit: type=1800 audit(1786992939.863:469): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2155" name="UDC" dev="configfs" ino=41451 res=0 errno=0 [ 1276.385741][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 1276.671825][T14498] overlayfs: overlapping lowerdir path [ 1276.720502][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'. [ 1276.991731][ T27] audit: type=1800 audit(1786992942.903:470): pid=14510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2165" name="cdrom" dev="configfs" ino=41563 res=0 errno=0 [ 1278.879645][ T27] audit: type=1800 audit(1786992942.933:471): pid=14510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2165" name="file" dev="configfs" ino=41564 res=0 errno=0 [ 1279.034353][ T27] audit: type=1800 audit(1786992942.933:472): pid=14510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2165" name="UDC" dev="configfs" ino=41565 res=0 errno=0 [ 1281.563569][T14536] overlayfs: failed to resolve './file1/file0': -2 [ 1281.802502][ T27] audit: type=1800 audit(1786992947.723:473): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2176" name="cdrom" dev="configfs" ino=41675 res=0 errno=0 [ 1281.900010][ T27] audit: type=1800 audit(1786992947.743:474): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2176" name="file" dev="configfs" ino=41676 res=0 errno=0 [ 1282.007945][ T27] audit: type=1800 audit(1786992947.773:475): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2176" name="UDC" dev="configfs" ino=41679 res=0 errno=0 [ 1284.453003][T14571] overlayfs: failed to resolve './file1/file0': -2 [ 1284.545600][T14574] netlink: 620 bytes leftover after parsing attributes in process `syz.1.2187'. [ 1284.777329][ T27] audit: type=1800 audit(1786992950.693:476): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2190" name="cdrom" dev="configfs" ino=41813 res=0 errno=0 [ 1285.037088][ T27] audit: type=1800 audit(1786992950.713:477): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2190" name="file" dev="configfs" ino=41814 res=0 errno=0 [ 1286.632927][ T27] audit: type=1800 audit(1786992950.723:478): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2190" name="UDC" dev="configfs" ino=41815 res=0 errno=0 [ 1287.196388][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2195'. [ 1287.711727][T14612] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2199'. [ 1287.936592][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1287.989058][ T27] audit: type=1800 audit(1786992953.903:479): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2201" name="cdrom" dev="configfs" ino=41954 res=0 errno=0 [ 1288.070251][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1288.115386][ T27] audit: type=1800 audit(1786992953.933:480): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2201" name="file" dev="configfs" ino=41955 res=0 errno=0 [ 1288.321512][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1289.788070][ T27] audit: type=1800 audit(1786992953.953:481): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2201" name="UDC" dev="configfs" ino=41957 res=0 errno=0 [ 1289.912512][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.069571][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.130572][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.304898][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.566764][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.624714][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.684295][T14620] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 1290.922080][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1290.982953][T14637] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1291.639580][ T27] audit: type=1800 audit(1786992957.553:482): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2212" name="cdrom" dev="configfs" ino=42098 res=0 errno=0 [ 1291.750931][ T27] audit: type=1800 audit(1786992957.583:483): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2212" name="file" dev="configfs" ino=42102 res=0 errno=0 [ 1291.870959][ T27] audit: type=1800 audit(1786992957.593:484): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2212" name="UDC" dev="configfs" ino=42103 res=0 errno=0 [ 1293.933634][T14673] overlayfs: failed to resolve './file1/file0': -2 [ 1294.163574][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2219'. [ 1295.055282][T14698] validate_nla: 43 callbacks suppressed [ 1295.055299][T14698] netlink: 'syz.8.2224': attribute type 1 has an invalid length. [ 1295.210287][T14698] netlink: 'syz.8.2224': attribute type 2 has an invalid length. [ 1297.294394][T14713] overlayfs: failed to resolve './file1/file0': -2 [ 1297.641541][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 1300.432939][T14749] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 1300.440927][T14749] netlink: 'syz.1.2241': attribute type 2 has an invalid length. [ 1300.483612][T14751] overlayfs: failed to resolve './file1/file0': -2 [ 1300.609221][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.615905][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.112049][ T27] audit: type=1800 audit(1786992967.013:485): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2248" name="power" dev="configfs" ino=42589 res=0 errno=0 [ 1301.753829][T14778] overlayfs: failed to resolve './file1/file0': -2 [ 1302.239059][T11903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1302.249467][T11903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1302.260798][T11903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1302.270956][T11903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1302.280206][T11903] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1302.288207][T11903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1302.484979][ T27] audit: type=1800 audit(1786992968.403:486): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2257" name="power" dev="configfs" ino=42773 res=0 errno=0 [ 1302.648729][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.928874][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.009424][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2259'. [ 1303.076930][T14804] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2259'. [ 1303.103208][T14811] overlayfs: failed to resolve './file1/file0': -2 [ 1303.267223][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.460185][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.835246][T11903] Bluetooth: Wrong link type (-71) [ 1304.245420][ T27] audit: type=1800 audit(1786992970.153:487): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2267" name="power" dev="configfs" ino=43081 res=0 errno=0 [ 1304.377754][T11903] Bluetooth: hci2: command tx timeout [ 1304.479797][T14791] chnl_net:caif_netlink_parms(): no params data found [ 1304.773422][T14840] overlayfs: failed to resolve './file1/file0': -2 [ 1305.220827][T10986] ffs_data_put(): freeing [ 1305.431335][ T27] audit: type=1800 audit(1786992971.343:488): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2276" name="power" dev="configfs" ino=43241 res=0 errno=0 [ 1305.638682][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.677331][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.719530][T14791] bridge_slave_0: entered allmulticast mode [ 1305.774075][T14791] bridge_slave_0: entered promiscuous mode [ 1305.939493][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.964007][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1305.991024][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.031205][T14791] bridge_slave_1: entered allmulticast mode [ 1306.069798][T14791] bridge_slave_1: entered promiscuous mode [ 1306.442557][T11903] Bluetooth: hci2: command tx timeout [ 1306.506082][T14791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.737525][T14791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.232949][ T27] audit: type=1800 audit(1786992973.153:489): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2285" name="power" dev="configfs" ino=43389 res=0 errno=0 [ 1307.278324][T14791] team0: Port device team_slave_0 added [ 1307.304379][T14791] team0: Port device team_slave_1 added [ 1307.494178][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2288'. [ 1307.590107][T14791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.668810][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.820321][T14791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.886268][T14791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.926074][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.059376][T14791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.475156][ T12] hsr_slave_0: left promiscuous mode [ 1308.513221][ T12] hsr_slave_1: left promiscuous mode [ 1308.522316][T11903] Bluetooth: hci2: command tx timeout [ 1308.573802][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.607367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.651426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.704880][ T27] audit: type=1800 audit(1786992974.613:490): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2295" name="power" dev="configfs" ino=43498 res=0 errno=0 [ 1308.733146][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.802719][ T12] vlan2: left promiscuous mode [ 1308.807602][ T12] bond0: left promiscuous mode [ 1308.878307][ T12] bond_slave_0: left promiscuous mode [ 1308.900184][ T12] bond_slave_1: left promiscuous mode [ 1308.936306][ T12] bridge0: port 3(vlan2) entered disabled state [ 1308.965267][T14929] loop5: detected capacity change from 0 to 4095 [ 1308.990498][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2299'. [ 1309.001589][ T12] bridge_slave_1: left allmulticast mode [ 1309.039041][ T12] bridge_slave_1: left promiscuous mode [ 1309.067127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.086137][T14935] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1309.119454][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 95 prio class 2 [ 1309.138386][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1309.147659][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1309.156970][ T12] bridge_slave_0: left allmulticast mode [ 1309.174400][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1309.186684][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1309.196184][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 1309.229500][ T12] bridge_slave_0: left promiscuous mode [ 1309.268333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.447790][ T12] veth1_macvtap: left promiscuous mode [ 1309.470480][ T12] veth0_macvtap: left promiscuous mode [ 1309.499278][ T12] veth1_vlan: left promiscuous mode [ 1309.519814][ T12] veth0_vlan: left promiscuous mode [ 1309.534204][ T27] audit: type=1800 audit(1786992975.453:491): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2300" name="cdrom" dev="configfs" ino=43536 res=0 errno=0 [ 1309.608211][ T27] audit: type=1800 audit(1786992975.473:492): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2300" name="file" dev="configfs" ino=43537 res=0 errno=0 [ 1309.868250][ T12] bond3 (unregistering): Released all slaves [ 1309.897968][ T12] bond2 (unregistering): Released all slaves [ 1309.929898][ T12] bond1 (unregistering): Released all slaves [ 1310.602237][T11903] Bluetooth: hci2: command tx timeout [ 1311.250989][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1311.370112][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1311.435430][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.448065][ T12] bond_slave_1 (unregistering): left allmulticast mode [ 1311.516900][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.530021][ T12] bond_slave_0 (unregistering): left allmulticast mode [ 1312.081359][ T12] bond0 (unregistering): Released all slaves [ 1312.258672][T14791] hsr_slave_0: entered promiscuous mode [ 1312.286320][T14791] hsr_slave_1: entered promiscuous mode [ 1312.308744][T14791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.316808][T14791] Cannot create hsr debugfs directory [ 1312.652859][T14959] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 1312.687074][T14959] comedi comedi1: 8255: I/O port conflict (0xb,4) [ 1312.762600][T14959] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 1312.795045][T14959] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 1312.858829][T14959] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 1312.932548][T14959] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 1312.978519][T14959] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 1313.026717][T14959] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 1313.070262][T14959] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 1313.108945][T14959] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1313.167749][T14959] comedi comedi1: 8255: I/O port conflict (0x101,4) [ 1313.209652][T14959] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 1313.254123][T14959] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 1313.291154][ T12] IPVS: stop unused estimator thread 0... [ 1313.323707][T14959] comedi comedi1: 8255: I/O port conflict (0x401,4) [ 1313.357285][T14959] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1313.407179][T14959] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 1313.459955][T14959] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 1313.513896][T14959] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1313.563835][T14959] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 1313.616296][T14959] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1313.672496][T14959] comedi comedi1: 8255: I/O port conflict (0x8001,4) [ 1313.721229][T14959] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1314.303229][T14982] netlink: 'syz.7.2310': attribute type 1 has an invalid length. [ 1314.311132][T14982] netlink: 'syz.7.2310': attribute type 2 has an invalid length. [ 1314.647336][T14988] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1314.662121][T14791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1314.721232][T14791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1314.809863][T14791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1314.883492][T14791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1315.148508][T11093] ffs_data_put(): freeing [ 1315.320720][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.437692][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.525899][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.533153][T13736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.608456][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.615731][T13736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.629717][T15009] overlayfs: overlapping lowerdir path [ 1316.078430][T14791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1316.852903][ T27] audit: type=1800 audit(1786992982.763:493): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2325" name="cdrom" dev="configfs" ino=44200 res=0 errno=0 [ 1317.006919][ T27] audit: type=1800 audit(1786992982.763:494): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2325" name="file" dev="configfs" ino=44201 res=0 errno=0 [ 1317.195289][ T27] audit: type=1800 audit(1786992982.763:495): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2325" name="UDC" dev="configfs" ino=44202 res=0 errno=0 [ 1317.308675][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.714128][T11242] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1317.916722][T14791] veth0_vlan: entered promiscuous mode [ 1317.936441][T11242] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1317.979204][T11242] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1318.025428][T11242] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1318.083779][T11242] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1318.163579][T11242] usb 9-1: Product: syz [ 1318.188329][T11242] usb 9-1: Manufacturer: syz [ 1318.218809][T11242] usb 9-1: SerialNumber: syz [ 1318.225661][T14791] veth1_vlan: entered promiscuous mode [ 1318.260166][T11242] usb 9-1: config 0 descriptor?? [ 1318.319296][T11242] usb 9-1: selecting invalid altsetting 0 [ 1318.476580][T14791] veth0_macvtap: entered promiscuous mode [ 1318.574078][T14791] veth1_macvtap: entered promiscuous mode [ 1318.662933][T11242] usb 9-1: USB disconnect, device number 7 [ 1318.710675][T14791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1318.851261][T14791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.937327][T14791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.009134][T14791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.264534][T14791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.424752][T14791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.465486][T14791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.507590][T14791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.527373][T14791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.553967][T14791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.595582][T14791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.672125][T14791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.730953][T14791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.781634][T14791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.903985][ T27] audit: type=1800 audit(1786992985.813:496): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2336" name="cdrom" dev="configfs" ino=44470 res=0 errno=0 [ 1320.031432][ T27] audit: type=1800 audit(1786992985.853:497): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2336" name="file" dev="configfs" ino=44475 res=0 errno=0 [ 1320.053375][T15079] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2337'. [ 1320.216522][ T27] audit: type=1800 audit(1786992985.863:498): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2336" name="UDC" dev="configfs" ino=44476 res=0 errno=0 [ 1320.600574][T13737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.664270][T13737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.840508][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.868880][T15095] block device autoloading is deprecated and will be removed. [ 1320.915382][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.587250][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 1322.106461][T10986] ffs_data_put(): freeing [ 1322.322171][T11241] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1322.392447][T11241] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1323.131431][T15129] md: could not open device unknown-block(0,0). [ 1323.174328][T15129] md: md_import_device returned -6 [ 1323.768658][T11093] ffs_data_put(): freeing [ 1325.552075][T15184] Invalid ELF header magic: != ELF [ 1326.422721][T15184] overlayfs: overlapping lowerdir path [ 1326.700118][T15182] netlink: 'syz.8.2367': attribute type 5 has an invalid length. [ 1326.820047][T15182] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.829744][T15182] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.838678][T15182] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.849362][T15182] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.164451][T15182] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.174005][T15182] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.183229][T15182] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.192426][T15182] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.383785][T15188] netlink: 'syz.8.2367': attribute type 5 has an invalid length. [ 1327.436205][ T5836] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1327.449887][T15188] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.460046][T15188] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.469316][T15188] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.478287][T15188] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.518431][ T5836] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1327.601724][T15188] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.610935][T15188] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.620059][T15188] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.629035][T15188] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.816694][T15200] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1329.189572][T15228] fuse: Bad value for 'fd' [ 1330.032031][ T5836] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1330.270059][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 1330.331568][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1330.394819][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1330.469082][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1330.556680][ T5836] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1330.577189][T15264] fuse: Bad value for 'fd' [ 1330.613981][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.692081][ T5836] usb 2-1: Product: syz [ 1330.709713][ T5836] usb 2-1: Manufacturer: syz [ 1330.773429][ T5836] usb 2-1: SerialNumber: syz [ 1330.796221][ T5836] usb 2-1: config 0 descriptor?? [ 1330.848410][ T5836] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input138 [ 1330.941885][ T5124] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1334.229464][ T5836] usb 2-1: USB disconnect, device number 12 [ 1335.512712][T15306] fuse: Bad value for 'fd' [ 1335.747899][ T5762] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1335.838492][ T5762] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1337.185421][T15341] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1338.291080][T15373] batadv0: entered promiscuous mode [ 1338.331275][T15373] macsec1: entered promiscuous mode [ 1338.371393][T15373] macsec1: entered allmulticast mode [ 1338.411135][T15373] batadv0: entered allmulticast mode [ 1338.902756][T11242] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1339.430721][ T5762] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1339.611033][ T5762] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1341.887862][T15442] 9pnet_virtio: no channels available for device syz [ 1342.028780][T15442] netlink: 'syz.8.2439': attribute type 39 has an invalid length. [ 1342.265612][ T5816] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1342.317291][T15456] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1342.330074][T15449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.360247][T15449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.388183][T15449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.424475][T15449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.475307][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.530789][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.578119][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1342.636662][ T5816] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.656582][T15449] batadv0 (unregistering): left allmulticast mode [ 1342.682918][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.750631][ T5816] usb 2-1: config 0 descriptor?? [ 1343.227361][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2445'. [ 1343.284008][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2445'. [ 1343.379830][T15470] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.389154][T15470] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.398558][T15470] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.407812][T15470] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.452596][ T5816] usbhid 2-1:0.0: can't add hid device: -71 [ 1343.473089][ T5816] usbhid: probe of 2-1:0.0 failed with error -71 [ 1343.509291][ T5816] usb 2-1: USB disconnect, device number 13 [ 1343.579120][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2447'. [ 1344.715232][T15508] netlink: 620 bytes leftover after parsing attributes in process `syz.7.2454'. [ 1345.022360][T11242] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1345.861563][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2460'. [ 1345.913861][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1348.026003][T11903] Bluetooth: hci0: unexpected event for opcode 0x100c [ 1348.686925][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2472'. [ 1349.333327][ T5762] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1349.553313][ T5762] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.606470][ T5762] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.665654][ T5762] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1349.717910][ T5762] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.763059][ T5762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.806226][ T5762] usb 9-1: config 0 descriptor?? [ 1350.270480][T15598] fuse: Bad value for 'group_id' [ 1350.449909][ T5762] usbhid 9-1:0.0: can't add hid device: -71 [ 1350.469063][ T5762] usbhid: probe of 9-1:0.0 failed with error -71 [ 1350.496535][ T5762] usb 9-1: USB disconnect, device number 8 [ 1353.122066][T11242] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1353.189574][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2515'. [ 1353.223541][T15672] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1353.332246][T11242] usb 9-1: Using ep0 maxpacket: 32 [ 1353.352770][T11242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1353.384592][T11242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1353.420779][T11242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1353.450182][T11242] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1353.465955][T11242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.485564][T11242] usb 9-1: Product: syz [ 1353.510236][T11242] usb 9-1: Manufacturer: syz [ 1353.520631][T11242] usb 9-1: SerialNumber: syz [ 1353.547787][T11242] usb 9-1: config 0 descriptor?? [ 1353.602957][T11242] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input139 [ 1353.634852][ T5124] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1353.924581][ T5124] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1354.070981][ T5124] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1354.214620][T15570] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1354.304597][ T5124] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1354.372701][T15690] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1354.413348][ T5124] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1354.439824][T15690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1354.455935][T11242] usb 9-1: USB disconnect, device number 9 [ 1354.461873][ C0] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1354.907040][T15701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2527'. [ 1355.472518][T11242] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1355.488175][T15719] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1355.565149][T15719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1356.169023][T14791] ffs_data_put(): freeing [ 1356.612354][T15747] overlayfs: missing 'lowerdir' [ 1356.969261][T15759] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2546'. [ 1357.346702][T10986] ffs_data_put(): freeing [ 1358.002826][T15781] overlayfs: missing 'lowerdir' [ 1358.856554][T11093] ffs_data_put(): freeing [ 1359.347475][T15809] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1359.769368][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2567'. [ 1362.233257][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.241663][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.918779][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2582'. [ 1363.652287][T15896] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2585'. [ 1365.976970][T11903] Bluetooth: hci0: link tx timeout [ 1365.986960][T11903] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1368.045349][T15963] Bluetooth: hci0: command 0x0406 tx timeout [ 1368.946359][T16014] 9pnet_virtio: no channels available for device syz [ 1369.031035][T16014] netlink: 'syz.6.2628': attribute type 39 has an invalid length. [ 1369.199993][T16021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.218880][T16021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.240313][T16021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.269215][T16021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.896537][ T5836] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1372.076743][T16087] overlayfs: failed to resolve './file1': -2 [ 1372.113866][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 1372.131571][ T5836] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.176777][ T5836] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1372.236919][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.277048][ T5836] usb 9-1: config 0 descriptor?? [ 1372.669480][T11241] usb 9-1: USB disconnect, device number 10 [ 1373.029030][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1373.059461][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1373.101833][T16115] bond2: option mode: unable to set because the bond device has slaves [ 1373.158155][T16115] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1373.955680][T11903] Bluetooth: hci4: unexpected event for opcode 0xb3c1 [ 1374.075586][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2680'. [ 1374.176493][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2680'. [ 1374.575555][ T9052] ffs_data_put(): freeing [ 1378.626299][T10986] ffs_data_put(): freeing [ 1379.015334][T11903] Bluetooth: hci0: ACL packet for unknown connection handle 2825 [ 1379.642700][T11241] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1379.842814][T11241] usb 8-1: Using ep0 maxpacket: 32 [ 1379.860933][T11241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1379.904439][T11241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1379.961771][T11241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1380.025816][T11241] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1380.070742][T11241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.115041][T11241] usb 8-1: Product: syz [ 1380.143581][T11241] usb 8-1: Manufacturer: syz [ 1380.165930][T11241] usb 8-1: SerialNumber: syz [ 1380.211602][T11241] usb 8-1: config 0 descriptor?? [ 1380.253304][T11241] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input141 [ 1380.301652][ T5124] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1380.377508][ T5124] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1380.440853][ T5124] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1380.509555][T16204] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1380.593840][ T5124] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1380.654972][ T5816] usb 8-1: USB disconnect, device number 9 [ 1380.660892][ C0] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1380.925664][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2713'. [ 1380.959903][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2713'. [ 1381.615239][T16259] fuse: Bad value for 'user_id' [ 1382.253106][T10986] ffs_data_put(): freeing [ 1384.353292][T16281] fuse: Bad value for 'fd' [ 1385.064887][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'. [ 1385.114188][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2736'. [ 1385.556318][T16311] fuse: Bad value for 'fd' [ 1385.647179][T11093] ffs_data_put(): freeing [ 1386.052080][ T5836] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1386.276411][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.309901][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.371986][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1386.414480][ T5836] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1386.460774][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.496479][ T5836] usb 2-1: config 0 descriptor?? [ 1386.610461][T11093] ffs_data_put(): freeing [ 1386.796216][T16340] fuse: Bad value for 'fd' [ 1387.139563][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 1387.165745][ T5836] usbhid: probe of 2-1:0.0 failed with error -71 [ 1387.201334][ T5836] usb 2-1: USB disconnect, device number 16 [ 1389.309952][T16353] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1389.467506][T16353] CIFS: Attempting to mount //127.0.0.1/share [ 1389.580859][T16353] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1389.695552][T16353] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1389.922284][T14791] ffs_data_put(): freeing [ 1390.144502][T16367] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1390.259524][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2763'. [ 1390.308978][T16370] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2763'. [ 1390.676630][T16377] input: syz0 as /devices/virtual/input/input142 [ 1391.212821][T16390] 9pnet_virtio: no channels available for device syz [ 1391.329766][T10986] ffs_data_put(): freeing [ 1391.367776][T16390] netlink: 'syz.6.2767': attribute type 39 has an invalid length. [ 1391.971862][T16405] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1392.093091][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2775'. [ 1392.138953][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2775'. [ 1393.483240][T14791] ffs_data_put(): freeing [ 1393.765244][T16439] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1394.241608][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2793'. [ 1394.285049][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2793'. [ 1394.425329][T10986] ffs_data_put(): freeing [ 1394.942043][T16473] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1395.423183][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1395.515094][T16482] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1396.192609][T11241] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1396.363836][T11241] usb 8-1: device descriptor read/64, error -71 [ 1396.649170][T16513] 9pnet_virtio: no channels available for device syz [ 1396.663596][T11241] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1396.710894][T16513] netlink: 'syz.1.2816': attribute type 39 has an invalid length. [ 1396.822861][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.844195][T11241] usb 8-1: device descriptor read/64, error -71 [ 1396.851220][T16514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.869813][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.888258][T16514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.998990][T11241] usb usb8-port1: attempt power cycle [ 1397.192122][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1397.442063][T11241] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1397.503488][T11241] usb 8-1: device descriptor read/8, error -71 [ 1397.606521][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2823'. [ 1397.784072][T11241] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1397.834478][T11241] usb 8-1: device descriptor read/8, error -71 [ 1397.972180][T11241] usb usb8-port1: unable to enumerate USB device [ 1399.146420][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2837'. [ 1399.172043][ T5836] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1399.345015][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2839'. [ 1399.369383][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.409660][T16574] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1399.419355][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.460545][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1399.503283][ T5836] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1399.546010][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.598213][ T5836] usb 2-1: config 0 descriptor?? [ 1400.247749][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 1400.282682][ T5836] usbhid: probe of 2-1:0.0 failed with error -71 [ 1400.315913][ T5836] usb 2-1: USB disconnect, device number 17 [ 1400.432056][T11241] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1400.633423][T11241] usb 8-1: Using ep0 maxpacket: 16 [ 1400.673575][T11241] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.726320][T11241] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1400.783133][T11241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.855727][T11241] usb 8-1: config 0 descriptor?? [ 1400.978727][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1401.004290][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1401.108130][T11242] usb 8-1: USB disconnect, device number 14 [ 1401.263123][T16607] fuse: Unknown parameter 'use00000000000000000000' [ 1401.400005][T16611] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2850'. [ 1401.455372][T11903] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1401.483367][T16611] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1401.771388][T16628] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1401.925316][T16632] 9pnet_virtio: no channels available for device syz [ 1401.949872][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2857'. [ 1401.979476][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2857'. [ 1401.993402][T16632] netlink: 'syz.7.2856': attribute type 39 has an invalid length. [ 1402.092053][T11242] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1402.141019][T16640] fuse: Unknown parameter 'use00000000000000000000' [ 1402.303861][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.346389][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.388107][T11242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1402.442816][T11242] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1402.488808][T11242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.516147][T11242] usb 2-1: config 0 descriptor?? [ 1403.166448][T11242] usbhid 2-1:0.0: can't add hid device: -71 [ 1403.327989][T11242] usbhid: probe of 2-1:0.0 failed with error -71 [ 1403.728312][T11242] usb 2-1: USB disconnect, device number 18 [ 1404.448727][T16671] fuse: Unknown parameter 'use00000000000000000000' [ 1404.867448][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2871'. [ 1405.484101][T11903] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1405.495704][T11903] Bluetooth: hci4: Injecting HCI hardware error event [ 1405.506239][T15963] Bluetooth: hci4: hardware error 0x00 [ 1406.913394][ T27] audit: type=1800 audit(1786993072.823:499): pid=16715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2879" name="file1" dev="overlay" ino=2279 res=0 errno=0 [ 1407.253671][T16737] capability: warning: `syz.7.2887' uses deprecated v2 capabilities in a way that may be insecure [ 1407.402344][T11241] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1407.562044][T15963] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1407.624397][T11241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.674276][T11241] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1407.736445][T11241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1407.818161][T11241] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1407.868300][T11241] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1407.916318][T11241] usb 2-1: Manufacturer: syz [ 1407.956448][T11241] usb 2-1: config 0 descriptor?? [ 1408.015121][T11241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1408.971435][T16760] 9pnet_virtio: no channels available for device syz [ 1410.106007][ T5816] usb 2-1: USB disconnect, device number 19 [ 1410.214150][T16758] netlink: 'syz.7.2893': attribute type 39 has an invalid length. [ 1410.246037][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2892'. [ 1410.794568][T16778] input: syz0 as /devices/virtual/input/input143 [ 1410.855928][ T9052] ffs_data_put(): freeing [ 1411.753983][T16809] 9pnet_virtio: no channels available for device syz [ 1411.834185][T16809] netlink: 'syz.8.2905': attribute type 39 has an invalid length. [ 1412.024826][ T5816] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1412.192709][ T5816] usb 2-1: device descriptor read/64, error -71 [ 1412.502196][ T5816] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1412.675420][T16824] input: syz1 as /devices/virtual/input/input144 [ 1412.682172][ T5816] usb 2-1: device descriptor read/64, error -71 [ 1412.833222][ T5816] usb usb2-port1: attempt power cycle [ 1413.249038][ T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1413.282273][ T5816] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1413.336507][ T5816] usb 2-1: device descriptor read/8, error -71 [ 1413.451001][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2912'. [ 1413.461804][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2912'. [ 1413.487232][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.518877][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.554072][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1413.585665][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1413.624619][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.633315][ T5816] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1413.667016][ T8] usb 8-1: config 0 descriptor?? [ 1413.694884][ T5816] usb 2-1: device descriptor read/8, error -71 [ 1413.823953][ T5816] usb usb2-port1: unable to enumerate USB device [ 1414.302017][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 1414.327664][ T8] usbhid: probe of 8-1:0.0 failed with error -71 [ 1414.370845][ T8] usb 8-1: USB disconnect, device number 15 [ 1416.505164][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2916'. [ 1417.955175][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.962736][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.100369][T16855] bond_slave_0: left promiscuous mode [ 1418.118985][T16855] bond_slave_1: left promiscuous mode [ 1419.592531][T11241] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1419.752038][T11241] usb 2-1: device descriptor read/64, error -71 [ 1419.989501][T16855] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.001142][T16855] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.010625][T16855] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.025433][T16855] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.036661][T11241] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1420.192165][T11241] usb 2-1: device descriptor read/64, error -71 [ 1420.222374][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2922'. [ 1420.247187][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2922'. [ 1420.312650][T11241] usb usb2-port1: attempt power cycle [ 1420.609320][T16905] 9pnet_virtio: no channels available for device syz [ 1420.646735][T16905] netlink: 'syz.7.2933': attribute type 39 has an invalid length. [ 1420.752810][T11241] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1420.795457][T11241] usb 2-1: device descriptor read/8, error -71 [ 1420.915721][T16911] fuse: Unknown parameter '0x0000000000000004' [ 1421.223302][T11241] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1421.469584][T11241] usb 2-1: device descriptor read/8, error -71 [ 1421.602203][T11241] usb usb2-port1: unable to enumerate USB device [ 1422.032596][T16931] 9pnet_virtio: no channels available for device syz [ 1422.090773][T16931] netlink: 'syz.6.2943': attribute type 39 has an invalid length. [ 1423.126425][T16958] netlink: 'syz.6.2951': attribute type 1 has an invalid length. [ 1423.194872][T16960] fuse: Bad value for 'fd' [ 1423.203923][T16958] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2951'. [ 1423.494875][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.501349][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.702381][T11241] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1423.932762][T11241] usb 9-1: device descriptor read/64, error -71 [ 1424.071991][ T5816] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1424.205514][T11241] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1424.273191][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 1424.309931][ T5816] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.351693][ T5816] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1424.383979][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.392302][T11241] usb 9-1: device descriptor read/64, error -71 [ 1424.425142][ T5816] usb 8-1: config 0 descriptor?? [ 1424.534656][T11241] usb usb9-port1: attempt power cycle [ 1424.708079][ T5816] usb 8-1: USB disconnect, device number 16 [ 1424.963519][T11241] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1425.013643][T11241] usb 9-1: device descriptor read/8, error -71 [ 1425.061977][T15963] Bluetooth: hci2: link tx timeout [ 1425.068733][T15963] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1425.302100][T11241] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1425.354824][T11241] usb 9-1: device descriptor read/8, error -71 [ 1425.492165][T11241] usb usb9-port1: unable to enumerate USB device [ 1425.529695][T17008] fuse: Unknown parameter 'fd0x0000000000000004' [ 1426.613858][T17025] 9pnet_virtio: no channels available for device syz [ 1426.902344][ T5816] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1427.101928][ T5816] usb 8-1: Using ep0 maxpacket: 32 [ 1427.161984][T15963] Bluetooth: hci2: command 0x0406 tx timeout [ 1428.914464][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1429.425114][ T5816] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1429.476462][ T5816] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1429.523484][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.612195][ T5816] usb 8-1: Product: syz [ 1429.616429][ T5816] usb 8-1: Manufacturer: syz [ 1429.621042][ T5816] usb 8-1: SerialNumber: syz [ 1429.679417][ T5816] usb 8-1: config 0 descriptor?? [ 1429.712398][ T5816] usb 8-1: can't set config #0, error -71 [ 1429.742451][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1429.752321][ T5816] usb 8-1: USB disconnect, device number 17 [ 1429.781048][T17052] input: syz0 as /devices/virtual/input/input145 [ 1429.977336][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.026848][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.089301][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1430.132033][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1430.157294][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.197659][ T8] usb 7-1: config 0 descriptor?? [ 1430.203547][T17058] 9pnet_virtio: no channels available for device syz [ 1430.252167][T11241] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1430.421988][T11241] usb 9-1: device descriptor read/64, error -71 [ 1430.712887][T11241] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1430.822996][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 1430.949419][T11241] usb 9-1: device descriptor read/64, error -71 [ 1432.548433][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 1433.328055][T11241] usb usb9-port1: attempt power cycle [ 1433.379962][ T8] usb 7-1: USB disconnect, device number 6 [ 1433.635493][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2998'. [ 1433.692131][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2998'. [ 1433.774551][T17087] 9pnet_virtio: no channels available for device syz [ 1434.592019][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1434.701978][ T5816] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1436.908240][ T9052] ffs_data_put(): freeing [ 1436.934134][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1436.969846][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1437.019427][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1437.154516][ T8] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1437.197964][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.257521][ T8] usb 2-1: Product: syz [ 1437.261810][ T8] usb 2-1: Manufacturer: syz [ 1437.315620][ T8] usb 2-1: SerialNumber: syz [ 1437.347686][ T8] usb 2-1: config 0 descriptor?? [ 1437.376844][ T5816] usb 8-1: device descriptor read/all, error -71 [ 1437.415874][ T8] usb 2-1: can't set config #0, error -71 [ 1437.438855][T17112] zonefs (nullb1) ERROR: Not a zoned block device [ 1437.448052][T17113] 9pnet_virtio: no channels available for device syz [ 1437.473208][ T8] usb 2-1: USB disconnect, device number 28 [ 1437.532960][T17113] netlink: 'syz.6.3012': attribute type 39 has an invalid length. [ 1438.199326][T17139] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3022'. [ 1438.292138][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1438.494217][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1438.515105][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1438.543731][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1438.575652][T17148] 9pnet_virtio: no channels available for device syz [ 1438.609645][ T8] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1438.629471][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.650820][T17148] netlink: 'syz.7.3026': attribute type 39 has an invalid length. [ 1438.675075][ T8] usb 2-1: Product: syz [ 1438.679310][ T8] usb 2-1: Manufacturer: syz [ 1438.724904][ T8] usb 2-1: SerialNumber: syz [ 1438.753994][ T8] usb 2-1: config 0 descriptor?? [ 1439.034993][ T5816] usb 2-1: USB disconnect, device number 29 [ 1440.480169][T17180] random: crng reseeded on system resumption [ 1440.622849][T17183] Illegal XDP return value 3457 on prog (id 148) dev syz_tun, expect packet loss! [ 1441.432973][T11241] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1441.654562][T11241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.063188][T11241] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1444.114320][T11241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1444.223735][T11241] usb 2-1: string descriptor 0 read error: -71 [ 1444.230373][T11241] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1444.351986][T11241] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1444.412823][T11241] usb 2-1: config 0 descriptor?? [ 1444.450752][T11241] usb 2-1: can't set config #0, error -71 [ 1444.512732][T11241] usb 2-1: USB disconnect, device number 30 [ 1444.673158][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 1444.704640][T17233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3053'. [ 1445.145302][T17247] fuse: Bad value for 'fd' [ 1445.276594][T17229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1445.286339][T17229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1445.304585][T17229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1445.311141][T17229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1445.317744][T17229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1445.505411][T17249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1446.681950][T11903] Bluetooth: hci1: command 0x0406 tx timeout [ 1447.322036][T11903] Bluetooth: hci2: command 0x0406 tx timeout [ 1447.328280][T11903] Bluetooth: hci0: command 0x0406 tx timeout [ 1448.252181][ T9052] ffs_data_put(): freeing [ 1448.762914][T11903] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.226059][T17295] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3070'. [ 1449.403554][T11903] Bluetooth: hci2: command 0x0406 tx timeout [ 1449.453781][T17298] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1451.486220][T11903] Bluetooth: hci2: command 0x0406 tx timeout [ 1452.962960][T17322] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3079'. [ 1453.352304][T17328] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3080'. [ 1453.817586][T11093] ffs_data_put(): freeing [ 1455.013308][T17366] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1455.025094][T17366] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1455.033549][T17366] CPU: 0 PID: 17366 Comm: syz.6.3095 Not tainted syzkaller #0 [ 1455.041038][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.051129][T17366] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1455.057249][T17366] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 1455.076906][T17366] RSP: 0018:ffffc90004b277e0 EFLAGS: 00010246 [ 1455.083084][T17366] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1455.091080][T17366] RDX: ffff888030475a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1455.099118][T17366] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1455.107112][T17366] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1455.115110][T17366] R13: ffff8880300a4530 R14: ffff8880239dd280 R15: 0000000000000000 [ 1455.123136][T17366] FS: 00007fceff2a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1455.132114][T17366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.138731][T17366] CR2: 0000000000000000 CR3: 000000007e66d000 CR4: 00000000003506f0 [ 1455.146738][T17366] Call Trace: [ 1455.150038][T17366] [ 1455.152996][T17366] ? dummy_wakeup+0x270/0x270 [ 1455.157795][T17366] usb_gadget_set_selfpowered+0x6e/0x230 [ 1455.163458][T17366] composite_dev_prepare+0x2fa/0x320 [ 1455.168761][T17366] configfs_composite_bind+0xa1/0x13f0 [ 1455.174230][T17366] ? kernfs_put+0x309/0x360 [ 1455.178806][T17366] ? webusb_landingPage_store+0x1c0/0x1c0 [ 1455.184564][T17366] gadget_bind_driver+0x2b3/0x770 [ 1455.189625][T17366] ? gadget_match_driver+0x130/0x130 [ 1455.194949][T17366] really_probe+0x247/0xae0 [ 1455.199543][T17366] ? pm_runtime_barrier+0x14b/0x1c0 [ 1455.204773][T17366] __driver_probe_device+0x1f5/0x390 [ 1455.210082][T17366] driver_probe_device+0x4f/0x420 [ 1455.215116][T17366] __driver_attach+0x444/0x6d0 [ 1455.219939][T17366] bus_for_each_dev+0x235/0x2b0 [ 1455.224808][T17366] ? driver_attach+0x50/0x50 [ 1455.229438][T17366] ? bus_remove_file+0x140/0x140 [ 1455.234405][T17366] ? do_raw_spin_unlock+0x121/0x230 [ 1455.239689][T17366] bus_add_driver+0x340/0x630 [ 1455.244402][T17366] driver_register+0x23a/0x310 [ 1455.249178][T17366] usb_gadget_register_driver_owner+0xf9/0x270 [ 1455.255347][T17366] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 1455.260988][T17366] configfs_write_iter+0x312/0x400 [ 1455.266120][T17366] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 1455.271730][T17366] vfs_write+0x474/0x9a0 [ 1455.276042][T17366] ? file_end_write+0x250/0x250 [ 1455.280915][T17366] ? __fget_files+0x3fc/0x460 [ 1455.285646][T17366] ? __fdget_pos+0x2a3/0x330 [ 1455.290280][T17366] ? ksys_write+0x74/0x260 [ 1455.294743][T17366] ksys_write+0x151/0x260 [ 1455.299102][T17366] ? __ia32_sys_read+0x90/0x90 [ 1455.303886][T17366] ? lockdep_hardirqs_on+0x98/0x150 [ 1455.309240][T17366] do_syscall_64+0x55/0xb0 [ 1455.313822][T17366] ? clear_bhb_loop+0x40/0x90 [ 1455.318672][T17366] ? clear_bhb_loop+0x40/0x90 [ 1455.323383][T17366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1455.329335][T17366] RIP: 0033:0x7fcefe39e0d9 [ 1455.333792][T17366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.353452][T17366] RSP: 002b:00007fceff2a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1455.361926][T17366] RAX: ffffffffffffffda RBX: 00007fcefe625fa0 RCX: 00007fcefe39e0d9 [ 1455.369933][T17366] RDX: 000000000000000b RSI: 00002000000004c0 RDI: 0000000000000003 [ 1455.377968][T17366] RBP: 00007fcefe435024 R08: 0000000000000000 R09: 0000000000000000 [ 1455.385962][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.393963][T17366] R13: 00007fcefe626038 R14: 00007fcefe625fa0 R15: 00007ffcb6c35018 [ 1455.401981][T17366] [ 1455.405037][T17366] Modules linked in: [ 1455.872845][T17372] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1455.881984][T11903] Bluetooth: hci2: command 0x0406 tx timeout [ 1456.216434][T17366] ---[ end trace 0000000000000000 ]--- [ 1456.233048][T17366] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1456.255242][T17366] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 1456.312449][T17366] RSP: 0018:ffffc90004b277e0 EFLAGS: 00010246 [ 1456.333042][T17366] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1456.359393][T17366] RDX: ffff888030475a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1456.386836][T17366] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1456.411440][T17366] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1456.443827][T17366] R13: ffff8880300a4530 R14: ffff8880239dd280 R15: 0000000000000000 [ 1456.479171][T17366] FS: 00007fceff2a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1456.510551][T17366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1456.530697][T17366] CR2: 0000001b32821ff8 CR3: 000000007e66d000 CR4: 00000000003506f0 [ 1456.555344][T17366] Kernel panic - not syncing: Fatal exception [ 1456.561530][T17366] Kernel Offset: disabled [ 1456.565864][T17366] Rebooting in 86400 seconds..