last executing test programs: 17.70921369s ago: executing program 0 (id=1681): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 17.588354994s ago: executing program 2 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800155fad330000000000000000000f0000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x4, &(0x7f0000000040)=[{0x2, 0x0, 0x7f, 0x7}, {0x3, 0xd5, 0x80, 0x2}, {0x3, 0x3, 0x4, 0x84}, {0x2, 0x8, 0x1a, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x10600, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000400)=0x10212, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$inet6_sctp(0xa, 0x1, 0x84) 14.145102795s ago: executing program 2 (id=1685): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = gettid() syz_io_uring_setup(0x9a, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 13.336494624s ago: executing program 0 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = creat(0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r7) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 13.094860819s ago: executing program 2 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendto(r0, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf108}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 11.691039304s ago: executing program 2 (id=1691): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x668, 0x470, 0x0, 0xfeffffff, 0x348, 0x470, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x308, 0x348, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x45da745f41602387}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000300)={0x1a, 0x0, 0x8, 0xff, 0x2, 0x9, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001e00010002000000fddbdf35020500000000000000000000080001005407d660080006"], 0x34}, 0x1, 0x0, 0x0, 0x4c806}, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0xc0040, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={r8, 0x80000}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x6, 0x4) 10.82337766s ago: executing program 4 (id=1693): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc42afe92b9cd22cf8b1810cbbc962bb4755d5e8ede7be"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, 0x0, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendfile(r6, r7, 0x0, 0x20000023896) 10.160401887s ago: executing program 0 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="140000000000000029000000430000000300000000000000380000000000000029000000390000000204001000000000fc010000000000000000000000000000fc0000000000000000000000000000011400000000000000290000003e0000000000008000000000380600000000000029000000040000006cc3000000000000072800000001084000000c0000000000000008000000000000000080000000000000100000000000000001f2dc08293390dd4158441290eb55c46ab39434b628669029ae7917c41508576334e1461a5ca822f7a44398327b8e2f65504cbe45ec2fc89ccd978fb6a5b42b9a70e9fd5baf20001bf86fd53e88e6c817e013661874a567551d93e310064c6ad6b61ca7b771b0767779f0d62cccf713bff628df8988ecb6f7e5dab28519b5add2d78b33c33dcff237cddd59babe8226ee8fe98cdbf533877820ce474f58d6c396772a260827a6849db0ab8ae50c11361ec6393ae67ced7866f46e82e70ead0c29afd1a3c9406f7ffab5dd36221b2202788aac503371cfe159b8db4f928d31e2fac407f3aa4e96a71df5775905f771a0e3f9f93bbf5fd443fcefcbc1ffe5f6ea9cb305a0437dbd5f3c77b6ccc6f6abd8926d6a4f41463bd48498d9412af30b65de25d113cb24509e52ed7c94ca8c4f6c6fed66f729c75e3f8d06b15803a67cc5159ddc7e85399a82f549f3e2c1546d87a3ea6cb26953d5dbcca81b34c8c6ba94ddfa313d1b26492767c65d51f02caa4b4f8296e6838e6edd5f3004554acf6024422f158dcd08e7c7dbf130c6d280bd6988d5710af98810aa01afeef89b987142352f692f15e2abf78153955d46741a4cffceb0a848262da6d1ae1da5b7bb3a52320c2f0b51b19db8a121f371d5efc2fc591bef21585dd1e3050e64568a4dc98fec6524db3becec5263f06365a6da1c6f6867fbe97a0b7677a1e9adb6bf94dbae5d360fdb73703a7120a020a56809e31c921429511493b5f6b3d22a6603837d607841c4f2e01aa620e8529383c60766ea5433a7650c85445bed844606753128385104152c8bc7238cbcf2594bd806a19d1b7eeec6d87f6d8ffaf609ca29c2291f55813543c8c8caedab9d89edc4d4337e70e52464cdf867a16c795748a6b5975ddf8338bf4c14b71c5777f51a5ea133950589497136efff8b0b7423ac5401e60db6471b5e3ac224dd41916594adc632e12c328b194f15fda36657921e440f8cfa6065e6254eb07b4b3ab4be23f12192f06fd9c4a1bcc82817a9784ebf69e9afb92439a5780e0f55b7beb8947e0c3820a11a1f2962ab2e24b930bcab22e8ccc9ab58f542f11c01839646e839058c822a52d9833f3681f70dea1dab862cb79e28aa110196115fc213b0ac91084d822586f6eb2591f864affc00d9c4a22610f8e960ae5b2751b4a32c625164de4cfee7d20b324a3fd58b5f0b1f7c88b45831cef03d51201e314496dea906b0c2d0c1d49bbc8dbfd1768a039d398585deb4e1cf3a12a342f9ef891e97b98fe90e22d5f521064b467b6286ab54452308d0f9c0da674832e207cfabd171f4d5fe56e501c18889f822fa84b20f9df1865cc52e5a675a0fdb5d70a73f983d656ac3a8824aee5adb7df74c69b4bc8edb7b3e0a08f35246d520846791a9a3900408da3e20402652388f96449e001eb95766acb12f167d7b55d0844e3e445625a50dc519f1970219c879089d8b174aa75544638ef0c1c6d45d5f088f90e81fb0af0c101c5b1c799b82c60122ef6f31a518be10e7939a4cb4725c0f00cde450025ff13c2a48002c6752c7aa45a15c2a1bce4bfe1b9de1d9962f424125b245c5d12cbf9c2e1d6115eb83527b7233c5f98c927c3117c6533f3514fe51b2b2913023858b1908a5bb47b98f464ba80574ce79843ed6ef8453fd2e720a6072062aaa3810387c54a8ff627882c621a8e04e18606bebdec97fa82ae1dd0b2d66c24d67154a8e0f4a8a038ee5cbf4ffc23ea0a63aa9dec20c4f37e24c3a5fb6b6987d6bd9e552715968aa26e74c5e69f69d80a92e9b782c86932226340980aaf47e6124fcfae8cc415ef6485ea7885c9d9e5442f98bfd9fe35e0123fc792e602dec3b9395e10a03877f1254b7433624aa4b58103659285ad08645cb33bfbb6b7930fec5e863d1538ef3ccbbedcf918572abfb0809321b9c5f1215c9d8bf470a9b62a2e0c161b78404a71f0c2c6fb38178a6aa53afefd746c8e5bc8abffd84e88dd1f5d8a93823857e9aecd93520398f4a16628d30fd4a2d3f189da4a868eb6d9c5ca9a130cbe91c23ed6b260961bc4a36fe6636c9b499ecd58577efa0caa2e553ed762dc2671caeaf8a5444e76e9ddda4f0c5eaa082ce6dc32b5a3ea1890dedef4b5c3760ca93ede4e14558e89780da183d"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r6 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r6) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 8.295003676s ago: executing program 4 (id=1698): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xb, 0x5, 0xffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(0xffffffffffffffff, 0x24020000) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a23000/0x4000)=nil, 0x4000}}) 8.017267423s ago: executing program 1 (id=1699): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = gettid() syz_io_uring_setup(0x9a, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 7.813643258s ago: executing program 0 (id=1700): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsmount(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0xe) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71a3afc3e0fe9a334df8457f3d9d1aca14304c64d77e450feec1adafd2da7aae28ddff606a5e6bad02b29b4525", 0x5f}], 0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffa, 0x7, 0x10201, 0x0, 0x0, 0x100, 0x900}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101300, 0x132) 7.239203212s ago: executing program 4 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r7, &(0x7f0000000240)={0x3, 0x8}, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r8 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r5, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32}) r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r10, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000fa3000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r11, 0xdd81000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xfc, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 6.82829307s ago: executing program 1 (id=1702): epoll_create1(0x80000) r0 = socket$netlink(0x10, 0x3, 0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0xe) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x240080c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt(r6, 0x29, 0x6, 0x0, 0x2000) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x775a, 0xd25, 0x8000000, 0x6}]}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x4, @none, 0x10}, 0xe) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x2) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r9, &(0x7f0000000640)=@file={0x1}, 0x6e) 6.798484126s ago: executing program 2 (id=1703): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc42afe92b9cd22cf8b1810cbbc962bb4755d5e8ede7be"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, 0x0, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendfile(r6, r7, 0x0, 0x20000023896) 6.254009889s ago: executing program 4 (id=1704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000180)={0x2, 0x6}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 5.975190192s ago: executing program 1 (id=1706): syz_open_dev$loop(0x0, 0x7fffffff, 0x42a182) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x2f) sendto$inet6(r3, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(r3, 0x1) connect$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r7, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.251798501s ago: executing program 0 (id=1707): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x762d1000) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) 4.673625086s ago: executing program 3 (id=1708): lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, 0x0, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 3.830703596s ago: executing program 0 (id=1709): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x0, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x5) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 3.712307934s ago: executing program 4 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="140000000000000029000000430000000300000000000000380000000000000029000000390000000204001000000000fc010000000000000000000000000000fc0000000000000000000000000000011400000000000000290000003e0000000000008000000000380600000000000029000000040000006cc3000000000000072800000001084000000c0000000000000008000000000000000080000000000000100000000000000001f2dc08293390dd4158441290eb55c46ab39434b628669029ae7917c41508576334e1461a5ca822f7a44398327b8e2f65504cbe45ec2fc89ccd978fb6a5b42b9a70e9fd5baf20001bf86fd53e88e6c817e013661874a567551d93e310064c6ad6b61ca7b771b0767779f0d62cccf713bff628df8988ecb6f7e5dab28519b5add2d78b33c33dcff237cddd59babe8226ee8fe98cdbf533877820ce474f58d6c396772a260827a6849db0ab8ae50c11361ec6393ae67ced7866f46e82e70ead0c29afd1a3c9406f7ffab5dd36221b2202788aac503371cfe159b8db4f928d31e2fac407f3aa4e96a71df5775905f771a0e3f9f93bbf5fd443fcefcbc1ffe5f6ea9cb305a0437dbd5f3c77b6ccc6f6abd8926d6a4f41463bd48498d9412af30b65de25d113cb24509e52ed7c94ca8c4f6c6fed66f729c75e3f8d06b15803a67cc5159ddc7e85399a82f549f3e2c1546d87a3ea6cb26953d5dbcca81b34c8c6ba94ddfa313d1b26492767c65d51f02caa4b4f8296e6838e6edd5f3004554acf6024422f158dcd08e7c7dbf130c6d280bd6988d5710af98810aa01afeef89b987142352f692f15e2abf78153955d46741a4cffceb0a848262da6d1ae1da5b7bb3a52320c2f0b51b19db8a121f371d5efc2fc591bef21585dd1e3050e64568a4dc98fec6524db3becec5263f06365a6da1c6f6867fbe97a0b7677a1e9adb6bf94dbae5d360fdb73703a7120a020a56809e31c921429511493b5f6b3d22a6603837d607841c4f2e01aa620e8529383c60766ea5433a7650c85445bed844606753128385104152c8bc7238cbcf2594bd806a19d1b7eeec6d87f6d8ffaf609ca29c2291f55813543c8c8caedab9d89edc4d4337e70e52464cdf867a16c795748a6b5975ddf8338bf4c14b71c5777f51a5ea133950589497136efff8b0b7423ac5401e60db6471b5e3ac224dd41916594adc632e12c328b194f15fda36657921e440f8cfa6065e6254eb07b4b3ab4be23f12192f06fd9c4a1bcc82817a9784ebf69e9afb92439a5780e0f55b7beb8947e0c3820a11a1f2962ab2e24b930bcab22e8ccc9ab58f542f11c01839646e839058c822a52d9833f3681f70dea1dab862cb79e28aa110196115fc213b0ac91084d822586f6eb2591f864affc00d9c4a22610f8e960ae5b2751b4a32c625164de4cfee7d20b324a3fd58b5f0b1f7c88b45831cef03d51201e314496dea906b0c2d0c1d49bbc8dbfd1768a039d398585deb4e1cf3a12a342f9ef891e97b98fe90e22d5f521064b467b6286ab54452308d0f9c0da674832e207cfabd171f4d5fe56e501c18889f822fa84b20f9df1865cc52e5a675a0fdb5d70a73f983d656ac3a8824aee5adb7df74c69b4bc8edb7b3e0a08f35246d520846791a9a3900408da3e20402652388f96449e001eb95766acb12f167d7b55d0844e3e445625a50dc519f1970219c879089d8b174aa75544638ef0c1c6d45d5f088f90e81fb0af0c101c5b1c799b82c60122ef6f31a518be10e7939a4cb4725c0f00cde450025ff13c2a48002c6752c7aa45a15c2a1bce4bfe1b9de1d9962f424125b245c5d12cbf9c2e1d6115eb83527b7233c5f98c927c3117c6533f3514fe51b2b2913023858b1908a5bb47b98f464ba80574ce79843ed6ef8453fd2e720a6072062aaa3810387c54a8ff627882c621a8e04e18606bebdec97fa82ae1dd0b2d66c24d67154a8e0f4a8a038ee5cbf4ffc23ea0a63aa9dec20c4f37e24c3a5fb6b6987d6bd9e552715968aa26e74c5e69f69d80a92e9b782c86932226340980aaf47e6124fcfae8cc415ef6485ea7885c9d9e5442f98bfd9fe35e0123fc792e602dec3b9395e10a03877f1254b7433624aa4b58103659285ad08645cb33bfbb6b7930fec5e863d1538ef3ccbbedcf918572abfb0809321b9c5f1215c9d8bf470a9b62a2e0c161b78404a71f0c2c6fb38178a6aa53afefd746c8e5bc8abffd84e88dd1f5d8a93823857e9aecd93520398f4a16628d30fd4a2d3f189da4a868eb6d9c5ca9a130cbe91c23ed6b260961bc4a36fe6636c9b499ecd58577efa0caa2e553ed762dc2671caeaf8a5444e76e9ddda4f0c5eaa082ce6dc32b5a3ea1890dedef4b5c3760ca93ede4e14558e89780da183d"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r6 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r6) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 3.549486139s ago: executing program 3 (id=1711): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) inotify_init() userfaultfd(0x80001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0x8, './file0\x00'}}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) 3.54830651s ago: executing program 2 (id=1712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r6 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r6) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 2.861843313s ago: executing program 3 (id=1713): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = gettid() syz_io_uring_setup(0x9a, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 2.806570459s ago: executing program 1 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) io_setup(0x8, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0xe9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000240)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {0xa, 0x2}, {0xfff3, 0xffe0}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x516}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f00000003c0)=0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080057a2413520251c6d128009000100766c616e000000003000028006000100020000000000001c0004800c00010005000000000800000c000100810000725c202c6234d7d555", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.872057107s ago: executing program 1 (id=1715): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x1, 0x0, 0xabf, 0x1000004}, {{@in6=@loopback, 0x4d0, 0x2b}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x4}]}]}, 0x17c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180140001"], 0x8c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r8, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000001440)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784fd024f453df2d7e9f7ba6440da1de8ac20000a8e1da8150f1a103000000006eee7086f09a92a65bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000", 0x9c}, {&(0x7f0000000a80)="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", 0x16e}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93", 0xd8}], 0x7}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001240)="4171f8", 0x3}], 0x1, &(0x7f0000001cc0)=ANY=[], 0xd8}}], 0x3, 0x2404c044) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a", 0x3}], 0x1) 1.820107978s ago: executing program 3 (id=1716): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, 0xfffffffffffffffd) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind(r5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000100)=""/49, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x12, r8, 0x95b53000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) 726.324762ms ago: executing program 3 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) io_setup(0x8, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0xc0010140, 0x6}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000240)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {0xa, 0x2}, {0xfff3, 0xffe0}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x516}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f00000003c0)=0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080057a2413520251c6d128009000100766c616e000000003000028006000100020000000000001c0004800c00010005000000000800000c000100810000725c202c6234d7d555", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 346.853458ms ago: executing program 1 (id=1718): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, r4}, 0xc) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c613c3b) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) 220.614185ms ago: executing program 3 (id=1719): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)='mqueue\x00', 0x0, &(0x7f0000000400)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRESOCT=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$inet(0x2, 0x802, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f000001a440)=""/102400, 0x19000) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = socket(0x18, 0x5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) socket(0x80000000000000a, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r3, &(0x7f0000000000)="08001800000020a3", 0x8) 0s ago: executing program 4 (id=1720): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffff, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x11, r3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48, 0xec000000, 0xcd}]}) kernel console output (not intermixed with test programs): usb_v2: found a 'E3C EC168 reference design' in warm state [ 552.448828][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 552.551703][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 552.560662][ T10] usb 4-1: media controller created [ 552.578515][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.842219][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 552.889015][ T10] usb 4-1: USB disconnect, device number 14 [ 553.322624][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 553.447601][T10822] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 553.736934][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 554.125636][ T1548] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 554.127320][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.176096][ T10] usb 4-1: config 0 has no interface number 0 [ 554.195209][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 554.205896][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.213873][ T10] usb 4-1: Product: syz [ 554.244685][ T10] usb 4-1: Manufacturer: syz [ 554.260390][ T10] usb 4-1: SerialNumber: syz [ 554.289447][ T10] usb 4-1: config 0 descriptor?? [ 554.606746][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 554.914884][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.925329][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.029106][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 555.040429][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 555.049679][ T10] usb 4-1: media controller created [ 555.067884][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.075827][T10828] wlan1 speed is unknown, defaulting to 1000 [ 555.083771][T10828] lo speed is unknown, defaulting to 1000 [ 555.280380][ T10] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 555.282421][T10834] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1080'. [ 555.336399][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 555.348359][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 555.521712][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.204119][T10836] ceph: No mds server is up or the cluster is laggy [ 556.439639][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1081'. [ 556.472561][T10839] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1081'. [ 556.506546][T10716] libceph: connect (1)[c::]:6789 error -101 [ 556.512641][T10716] libceph: mon0 (1)[c::]:6789 connect error [ 556.534149][ T10] usb 4-1: USB disconnect, device number 15 [ 556.598942][T10844] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 556.690193][T10854] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 556.987402][ T1548] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.009704][ T1548] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 557.047710][ T1548] usb 2-1: can't read configurations, error -71 [ 557.585004][T10870] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 557.925175][T10873] mkiss: ax0: crc mode is auto. [ 558.152211][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 558.199606][ T29] audit: type=1400 audit(2000000270.550:684): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 558.396240][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.427460][ T10] usb 4-1: config 0 has no interface number 0 [ 558.629449][ T29] audit: type=1400 audit(2000000271.010:685): avc: denied { read append } for pid=10859 comm="syz.1.1084" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 558.699098][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.724395][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.753180][ T10] usb 4-1: Product: syz [ 558.758356][ T10] usb 4-1: Manufacturer: syz [ 558.762975][ T10] usb 4-1: SerialNumber: syz [ 558.865203][ T10] usb 4-1: config 0 descriptor?? [ 558.925557][ T29] audit: type=1400 audit(2000000271.010:686): avc: denied { open } for pid=10859 comm="syz.1.1084" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 559.834925][ T29] audit: type=1400 audit(2000000271.570:687): avc: denied { name_bind } for pid=10877 comm="syz.2.1090" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 559.841171][T10884] sp0: Synchronizing with TNC [ 559.844316][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 559.848958][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.849048][T10886] wg1: left promiscuous mode [ 559.849211][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 559.849246][ T10] usb 4-1: media controller created [ 559.859733][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.901885][ T10] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 559.966770][T10891] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 560.144929][ T10] usb 4-1: USB disconnect, device number 16 [ 560.193167][ T29] audit: type=1804 audit(2000000272.570:688): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1092" name="bus" dev="ramfs" ino=36336 res=1 errno=0 [ 560.209273][ T29] audit: type=1804 audit(2000000272.570:689): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1092" name="bus" dev="ramfs" ino=36336 res=1 errno=0 [ 560.942386][T10916] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1093'. [ 561.425924][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 561.588625][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.660224][ T10] usb 4-1: config 0 has no interface number 0 [ 561.804941][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 562.222752][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.236086][ T10] usb 4-1: Product: syz [ 562.241373][ T10] usb 4-1: Manufacturer: syz [ 562.248977][ T10] usb 4-1: SerialNumber: syz [ 562.263387][ T10] usb 4-1: config 0 descriptor?? [ 562.471889][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 562.501562][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 562.576216][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.583307][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.613286][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 563.073327][ T10] usb 4-1: media controller created [ 563.126695][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.328226][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 563.888932][ T10] usb 4-1: USB disconnect, device number 17 [ 567.390885][T10990] syzkaller0: entered promiscuous mode [ 567.390906][T10990] syzkaller0: entered allmulticast mode [ 568.124785][T10997] No control pipe specified [ 568.187668][T10996] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 568.713618][ T29] audit: type=1400 audit(2000000281.090:690): avc: denied { set_context_mgr } for pid=11004 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 569.036149][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 569.381798][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.403480][ T10] usb 1-1: config 0 has no interface number 0 [ 569.454653][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 569.481428][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.511144][ T10] usb 1-1: Product: syz [ 569.526105][ T10] usb 1-1: Manufacturer: syz [ 569.639752][ T10] usb 1-1: SerialNumber: syz [ 569.659417][ T10] usb 1-1: config 0 descriptor?? [ 569.754601][T11031] siw: device registration error -23 [ 570.164843][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 570.249462][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 570.280866][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 570.337949][ T10] usb 1-1: media controller created [ 570.660593][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.853793][T11047] overlayfs: workdir and upperdir must be separate subtrees [ 571.145586][ T29] audit: type=1400 audit(2000000283.130:691): avc: denied { write } for pid=11040 comm="syz.1.1111" path="socket:[37124]" dev="sockfs" ino=37124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 571.472754][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 571.660981][ T10] usb 1-1: USB disconnect, device number 16 [ 572.721229][T11068] blktrace: Concurrent blktraces are not allowed on loop6 [ 573.087203][T11074] netlink: 'syz.1.1116': attribute type 10 has an invalid length. [ 573.696138][T11086] FAT-fs (loop7): unable to read boot sector [ 574.191755][T11093] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 574.358205][T11098] No control pipe specified [ 575.164128][T11105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.179702][T11105] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 575.567639][T11111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1122'. [ 575.586066][ T29] audit: type=1400 audit(2000000287.950:692): avc: denied { nlmsg_read } for pid=11103 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 575.849014][T11116] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.1123'. [ 576.298121][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 576.656208][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 576.920477][T11127] binder: 11121:11127 ioctl c0306201 2000000004c0 returned -14 [ 577.283266][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 577.293568][ T10] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 577.302664][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.314698][ T10] usb 1-1: config 0 has no interfaces? [ 577.320775][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 577.330395][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.345258][ T10] usb 1-1: config 0 descriptor?? [ 577.379677][ T29] audit: type=1400 audit(2000000289.760:693): avc: denied { write } for pid=11130 comm="syz.4.1127" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 577.441773][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.450563][ T5882] usb 2-1: config 0 has no interface number 0 [ 577.460746][ T5882] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 577.470834][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.480286][ T5882] usb 2-1: Product: syz [ 577.491820][ T5882] usb 2-1: Manufacturer: syz [ 577.502324][ T5882] usb 2-1: SerialNumber: syz [ 577.603217][ T5882] usb 2-1: config 0 descriptor?? [ 577.658453][T11133] 9p: Bad value for 'wfdno' [ 578.012417][ T5882] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 578.033921][ T5882] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.058396][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 578.172608][ T5882] usb 2-1: media controller created [ 578.432957][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.816355][ T5882] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 578.918987][ T5882] usb 2-1: USB disconnect, device number 25 [ 578.972447][T11143] syzkaller0: entered allmulticast mode [ 578.987547][ T29] audit: type=1400 audit(2000000291.350:694): avc: denied { ioctl } for pid=11138 comm="syz.3.1138" path="socket:[37340]" dev="sockfs" ino=37340 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 579.072817][T11143] netlink: 'syz.3.1138': attribute type 4 has an invalid length. [ 579.459172][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.469981][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.480353][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 579.490319][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.522905][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.533486][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.930299][ T10] usb 1-1: string descriptor 0 read error: -71 [ 579.943159][ T10] usb 1-1: USB disconnect, device number 17 [ 580.232445][T11158] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 580.317507][T10716] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 580.551030][T11162] No control pipe specified [ 580.879130][T10716] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.908059][T10716] usb 5-1: config 0 has no interface number 0 [ 580.948926][T10716] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 580.960159][T10716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.970268][T10716] usb 5-1: Product: syz [ 580.975967][T10716] usb 5-1: Manufacturer: syz [ 580.981753][T10716] usb 5-1: SerialNumber: syz [ 581.046841][T10716] usb 5-1: config 0 descriptor?? [ 581.282574][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 581.324159][T10716] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 581.345349][T10716] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.427546][T10716] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 581.438875][T10716] usb 5-1: media controller created [ 581.578005][T11172] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 581.589379][T11172] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 581.701364][T10716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.916514][T10716] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 581.954980][T11177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.019364][T10716] usb 5-1: USB disconnect, device number 24 [ 582.028240][T11175] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1136'. [ 582.045401][T11177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1137'. [ 582.057537][T11177] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1137'. [ 582.107764][T11177] netlink: 'syz.3.1137': attribute type 6 has an invalid length. [ 582.138799][T11180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.154283][T11180] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 582.173901][T11177] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1137'. [ 582.903241][T11190] blktrace: Concurrent blktraces are not allowed on loop8 [ 584.958050][T11210] No control pipe specified [ 586.800567][T11224] vivid-007: ================= START STATUS ================= [ 586.810011][T11224] vivid-007: Enable Output Cropping: true [ 586.816644][T11224] vivid-007: Enable Output Composing: true [ 586.822554][T11224] vivid-007: Enable Output Scaler: true [ 586.828772][T11224] vivid-007: Tx RGB Quantization Range: Automatic [ 586.835281][T11224] vivid-007: Transmit Mode: HDMI [ 586.840911][T11224] vivid-007: Hotplug Present: 0x00000000 [ 586.847813][T11224] vivid-007: RxSense Present: 0x00000000 [ 586.853671][T11224] vivid-007: EDID Present: 0x00000000 [ 586.859729][T11224] vivid-007: ================== END STATUS ================== [ 587.498324][T11229] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1148'. [ 587.919612][T11236] netlink: 'syz.0.1149': attribute type 39 has an invalid length. [ 588.110928][ T29] audit: type=1400 audit(2000000300.460:695): avc: denied { write } for pid=11217 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 588.345593][ T47] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 588.517291][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.525411][ T47] usb 2-1: config 0 has no interface number 0 [ 588.574764][ T47] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 588.584039][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.701222][ T47] usb 2-1: Product: syz [ 588.705409][ T47] usb 2-1: Manufacturer: syz [ 588.715921][ T47] usb 2-1: SerialNumber: syz [ 588.727151][ T47] usb 2-1: config 0 descriptor?? [ 588.955740][ T47] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 589.222100][T11242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.408633][ T47] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 589.439870][ T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 589.449122][ T47] usb 2-1: media controller created [ 589.553010][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.795597][T11248] wlan1 speed is unknown, defaulting to 1000 [ 589.808807][T11248] lo speed is unknown, defaulting to 1000 [ 590.163340][ T47] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 590.213546][ T47] usb 2-1: USB disconnect, device number 26 [ 590.378196][T11249] hfs: can't find a HFS filesystem on dev nullb0 [ 592.466770][T11283] No control pipe specified [ 594.426532][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 594.451769][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 595.030435][ T47] libceph: connect (1)[c::]:6789 error -101 [ 595.106182][T11302] dvmrp8: entered allmulticast mode [ 595.130587][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 595.149564][T11294] ceph: No mds server is up or the cluster is laggy [ 595.721006][ T1548] libceph: connect (1)[c::]:6789 error -101 [ 595.727437][ T1548] libceph: mon0 (1)[c::]:6789 connect error [ 596.003198][T11300] IPv6: Can't replace route, no match found [ 596.009314][T11300] IPv6: Can't replace route, no match found [ 596.152188][ T1548] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 596.154871][T11315] IPVS: stopping backup sync thread 10483 ... [ 596.390779][T11319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.453140][ T1548] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.461233][ T1548] usb 1-1: config 0 has no interface number 0 [ 596.476709][ T1548] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 596.487809][ T1548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.496870][ T1548] usb 1-1: Product: syz [ 596.501071][ T1548] usb 1-1: Manufacturer: syz [ 596.509644][ T1548] usb 1-1: SerialNumber: syz [ 596.528749][ T1548] usb 1-1: config 0 descriptor?? [ 596.986457][ T1548] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 597.008948][ T1548] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.040863][ T1548] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 597.064663][ T1548] usb 1-1: media controller created [ 597.085971][ T1548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.214571][T11324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1168'. [ 597.256020][T11324] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1168'. [ 597.275845][T11324] netlink: 'syz.3.1168': attribute type 6 has an invalid length. [ 597.294473][T11324] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1168'. [ 597.328721][ T1548] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 597.359211][T11319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.408713][T11319] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 597.661446][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 598.077467][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 598.085743][ T10] usb 3-1: config 0 has no interface number 0 [ 598.094254][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 598.103929][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.111955][ T10] usb 3-1: Product: syz [ 598.116174][ T10] usb 3-1: Manufacturer: syz [ 598.120962][ T793] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 598.129757][ T10] usb 3-1: SerialNumber: syz [ 598.180782][T11337] No control pipe specified [ 598.552406][ T10] usb 3-1: config 0 descriptor?? [ 598.572958][ T1548] usb 1-1: USB disconnect, device number 18 [ 598.946035][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 598.976154][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 598.988381][ T793] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 598.997876][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 599.009182][ T793] usb 5-1: config 1 has no interface number 1 [ 599.016742][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 599.025153][ T793] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.036655][ T10] usb 3-1: media controller created [ 599.042496][ T793] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 599.061408][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.070432][ T793] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.248023][ T793] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.279679][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.292188][ T793] usb 5-1: Product: syz [ 599.297141][ T793] usb 5-1: Manufacturer: syz [ 599.301922][ T10] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 599.310803][ T793] usb 5-1: SerialNumber: syz [ 599.469086][T11350] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1174'. [ 599.655016][ T793] usb 5-1: failed to enable PITCH for EP 0x82 [ 599.673552][ T793] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 599.744969][T11353] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1175'. [ 599.871192][ C1] hrtimer: interrupt took 403187 ns [ 599.949508][ T793] usb 5-1: USB disconnect, device number 25 [ 599.982768][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.841635][ T10] usb 3-1: USB disconnect, device number 30 [ 602.162069][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 602.480121][T11373] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 602.649209][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 602.655713][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.671437][ T47] usb 4-1: config 0 has no interfaces? [ 602.678436][ T47] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 602.690719][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.944011][ T47] usb 4-1: config 0 descriptor?? [ 603.111638][T11389] siw: device registration error -23 [ 604.178994][T11397] binder: 11392:11397 ioctl c0306201 0 returned -14 [ 605.514972][ T47] usb 4-1: USB disconnect, device number 18 [ 605.593678][T11406] tmpfs: Bad value for 'mpol' [ 605.862094][T11408] overlayfs: unescaped trailing colons in lowerdir mount option. [ 606.016775][T11408] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 606.333927][T11401] sp0: Synchronizing with TNC [ 606.443639][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 606.979211][T11419] wlan1 speed is unknown, defaulting to 1000 [ 606.986482][T11419] lo speed is unknown, defaulting to 1000 [ 607.011378][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 607.043011][ T10] usb 3-1: config 0 has no interface number 0 [ 607.086452][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 607.108409][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.137945][ T10] usb 3-1: Product: syz [ 607.145109][ T10] usb 3-1: Manufacturer: syz [ 607.174631][ T10] usb 3-1: SerialNumber: syz [ 607.199875][ T10] usb 3-1: config 0 descriptor?? [ 607.504224][T11423] netlink: 'syz.3.1190': attribute type 27 has an invalid length. [ 607.847900][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 607.873045][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 607.884440][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 607.893125][ T10] usb 3-1: media controller created [ 608.000582][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.316793][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 608.687864][ T10] usb 3-1: USB disconnect, device number 31 [ 608.881999][ T793] IPVS: starting estimator thread 0... [ 609.017819][T11435] IPVS: using max 82 ests per chain, 196800 per kthread [ 609.306950][ T29] audit: type=1400 audit(2000000320.379:696): avc: denied { write } for pid=11436 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 609.853358][T11443] binder: binder_mmap: 11438 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 609.875371][ T29] audit: type=1400 audit(2000000320.904:697): avc: denied { map } for pid=11438 comm="syz.2.1194" path="/dev/binderfs/binder0" dev="binder" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 610.156136][T11444] ceph: No mds server is up or the cluster is laggy [ 610.163971][ T47] libceph: connect (1)[c::]:6789 error -101 [ 610.306484][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 610.490970][T11440] binder: Binderfs stats mode cannot be changed during a remount [ 610.500071][ T29] audit: type=1400 audit(2000000321.493:698): avc: denied { unmount } for pid=11439 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 612.630551][T11474] autofs: Bad value for 'fd' [ 613.077426][ T29] audit: type=1400 audit(2000000323.861:699): avc: denied { read } for pid=11472 comm="syz.4.1201" path="socket:[39426]" dev="sockfs" ino=39426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.281044][T11484] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 614.277025][T11494] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1969765460/1969765461 [ 614.288730][T11494] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1969765460/1969765461 [ 614.606896][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 614.792328][ T47] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.801345][ T47] usb 3-1: config 0 has no interface number 0 [ 615.065000][ T5948] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 615.123004][ T47] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 615.142793][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.150802][ T47] usb 3-1: Product: syz [ 615.173208][ T47] usb 3-1: Manufacturer: syz [ 615.177838][ T47] usb 3-1: SerialNumber: syz [ 615.195281][ T47] usb 3-1: config 0 descriptor?? [ 615.276408][T11506] trusted_key: encrypted_key: insufficient parameters specified [ 615.299765][ T5948] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.308530][ T5948] usb 2-1: config 0 has no interface number 0 [ 615.324982][ T5948] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 615.354011][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.380618][ T5948] usb 2-1: Product: syz [ 615.405337][ T5948] usb 2-1: Manufacturer: syz [ 615.410067][ T5948] usb 2-1: SerialNumber: syz [ 615.489333][ T47] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 615.527293][ T47] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 615.543784][ T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 615.568707][ T47] usb 3-1: media controller created [ 615.582463][ T5948] usb 2-1: config 0 descriptor?? [ 615.932817][ T5948] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 615.943719][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.008613][ T5948] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 616.027991][ T5948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 616.038924][ T5948] usb 2-1: media controller created [ 616.049535][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.223637][ T47] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 616.232081][ T5948] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 616.329283][T11515] max out of range [ 616.508449][ T47] usb 3-1: USB disconnect, device number 32 [ 616.714622][ T29] audit: type=1400 audit(2000000326.949:700): avc: denied { mount } for pid=11511 comm="syz.3.1210" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 616.777204][ T5948] usb 2-1: USB disconnect, device number 27 [ 616.786552][ T29] audit: type=1400 audit(2000000326.958:701): avc: denied { remount } for pid=11511 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 616.984498][ T29] audit: type=1400 audit(2000000327.566:702): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 617.171262][T11518] netlink: 'syz.3.1211': attribute type 9 has an invalid length. [ 617.180608][T11518] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 617.190188][T11518] netlink: 'syz.3.1211': attribute type 12 has an invalid length. [ 617.199360][T11518] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1211'. [ 617.211082][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 617.576451][T11522] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 618.151689][T11529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.981190][T11538] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1214'. [ 619.145918][T11534] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1215'. [ 619.190780][T11538] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1214'. [ 619.333381][T11538] netlink: 'syz.3.1214': attribute type 6 has an invalid length. [ 619.515632][T11538] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1214'. [ 619.796395][T11541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.911419][T11539] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 620.052437][T11548] netlink: 'syz.0.1217': attribute type 27 has an invalid length. [ 620.662222][ T29] audit: type=1400 audit(2000000330.729:703): avc: denied { bind } for pid=11542 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 620.971597][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 622.963545][T11583] netlink: 'syz.1.1225': attribute type 2 has an invalid length. [ 623.094949][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 623.103281][ T47] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 623.119833][T11582] netlink: 'syz.1.1225': attribute type 2 has an invalid length. [ 623.157886][T11584] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 623.287831][ T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.296550][ T5948] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.306268][ T47] usb 5-1: config 0 has no interface number 0 [ 623.313828][ T5948] usb 4-1: config 0 has no interface number 0 [ 623.325903][ T47] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 623.335485][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.344003][ T5948] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 623.353427][ T47] usb 5-1: Product: syz [ 623.357612][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.366003][ T47] usb 5-1: Manufacturer: syz [ 623.371166][ T47] usb 5-1: SerialNumber: syz [ 623.375783][ T5948] usb 4-1: Product: syz [ 623.384136][ T47] usb 5-1: config 0 descriptor?? [ 623.390199][ T5948] usb 4-1: Manufacturer: syz [ 623.399762][ T5948] usb 4-1: SerialNumber: syz [ 623.412274][ T5948] usb 4-1: config 0 descriptor?? [ 623.616074][ T47] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 623.628689][ T47] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 623.644005][ T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 623.653450][ T5948] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 623.662093][ T47] usb 5-1: media controller created [ 623.669271][ T5948] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 623.684615][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.694706][ T5948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 623.704584][ T5948] usb 4-1: media controller created [ 623.718604][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.895244][ T47] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 623.913352][ T5948] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 624.021716][T11590] No control pipe specified [ 624.709120][T11598] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1228'. [ 625.022864][ T9833] usb 4-1: USB disconnect, device number 19 [ 625.053692][ T47] usb 5-1: USB disconnect, device number 26 [ 625.555761][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 625.784474][T11610] vivid-007: ================= START STATUS ================= [ 625.792237][T11610] vivid-007: Enable Output Cropping: true [ 625.799160][T11610] vivid-007: Enable Output Composing: true [ 625.805085][T11610] vivid-007: Enable Output Scaler: true [ 625.810747][T11610] vivid-007: Tx RGB Quantization Range: Automatic [ 625.817288][T11610] vivid-007: Transmit Mode: HDMI [ 625.822318][T11610] vivid-007: Hotplug Present: 0x00000000 [ 625.828083][T11610] vivid-007: RxSense Present: 0x00000000 [ 625.833789][T11610] vivid-007: EDID Present: 0x00000000 [ 625.839271][T11610] vivid-007: ================== END STATUS ================== [ 626.289361][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.295739][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.874702][T11623] netlink: 'syz.1.1231': attribute type 27 has an invalid length. [ 627.677350][T11619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.799330][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 627.813052][T11628] comedi comedi0: No hardware detected at I/O base 0x4f27 [ 628.287353][T11639] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1233'. [ 628.722107][T11639] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1233'. [ 628.824749][T11619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.844564][T11639] netlink: 'syz.4.1233': attribute type 6 has an invalid length. [ 628.863365][T11639] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1233'. [ 628.929692][T11619] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 629.167833][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 629.177520][T11644] netlink: 'syz.0.1237': attribute type 2 has an invalid length. [ 629.980980][T11659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1241'. [ 631.256583][T11672] usb usb2: usbfs: process 11672 (syz.3.1243) did not claim interface 0 before use [ 631.334272][T11675] netlink: 'syz.0.1244': attribute type 2 has an invalid length. [ 631.580200][T11678] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 635.570172][T11702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.771322][T11695] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1248'. [ 636.780475][ T5948] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 636.879501][T11715] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 636.940686][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 636.951417][ T5948] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 637.206571][T10716] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 637.236232][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.251789][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.284133][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 637.305574][ T5948] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 637.315082][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.387394][ T5948] usb 1-1: config 0 descriptor?? [ 637.419252][T10716] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 637.437969][T10716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.474431][T10716] usb 2-1: config 0 descriptor?? [ 637.498466][T10716] cp210x 2-1:0.0: cp210x converter detected [ 637.721326][T10716] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 637.728828][T10716] cp210x 2-1:0.0: querying part number failed [ 638.129523][T10716] usb 2-1: cp210x converter now attached to ttyUSB0 [ 638.332279][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 638.343924][T11723] xt_hashlimit: size too large, truncated to 1048576 [ 638.727918][ T5948] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input10 [ 639.413966][ T5948] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input11 [ 639.914508][T11740] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 640.026761][T11743] comedi comedi3: dac02: I/O port conflict (0x7,8) [ 640.043183][ T5948] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 640.222840][ T5948] usb 1-1: USB disconnect, device number 19 [ 640.893663][T11746] fido_id[11746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 641.223631][ T793] usb 2-1: USB disconnect, device number 28 [ 641.256287][ T793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 641.288995][ T793] cp210x 2-1:0.0: device disconnected [ 641.572449][T11761] autofs: Unknown parameter '0x0000000000000000' [ 641.975422][T11763] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 642.089848][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 643.256664][T11764] nbd: socks must be embedded in a SOCK_ITEM attr [ 643.321429][T11774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.715301][T11779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 644.426582][T10231] udevd[10231]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 644.686583][T11791] No such timeout policy "syz0" [ 646.260510][T11805] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 646.978670][T11813] loop6: detected capacity change from 0 to 8 [ 648.141595][T11813] loop6: detected capacity change from 8 to 7 [ 648.242914][T10231] blk_print_req_error: 30 callbacks suppressed [ 648.242925][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.447003][T11824] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 648.515544][T10231] buffer_io_error: 30 callbacks suppressed [ 648.515561][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.580304][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.590880][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.599762][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.610548][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.618440][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.631768][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.761293][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.778386][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.792099][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.807392][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.819088][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.932679][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.940999][T10231] ldm_validate_partition_table(): Disk read failed. [ 648.969837][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.980668][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.991572][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.001921][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.058382][T11830] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 649.423199][T10231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.433589][T10231] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.442573][T10231] Dev loop6: unable to read RDB block 0 [ 649.449069][T10231] loop6: unable to read partition table [ 649.460737][T10231] loop6: partition table beyond EOD, truncated [ 649.473228][T11813] ldm_validate_partition_table(): Disk read failed. [ 649.504801][T11813] Dev loop6: unable to read RDB block 0 [ 649.524996][T11813] loop6: unable to read partition table [ 649.534088][T11813] loop6: partition table beyond EOD, truncated [ 649.566997][T11813] loop_reread_partitions: partition scan of loop6 (aQ¤"¸ÍAZD–Îå0̹¨Š¾>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 655.092773][T11896] ufs: ufstype=old is supported read-only [ 655.103230][T11896] ufs: ufs_fill_super(): bad magic number [ 655.591261][ T29] audit: type=1400 audit(2000000363.651:709): avc: denied { read } for pid=11890 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 656.022370][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 656.044725][ T29] audit: type=1326 audit(2000000364.119:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.074163][ T29] audit: type=1326 audit(2000000364.119:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.198012][ T10] usb 3-1: device descriptor read/64, error -71 [ 656.240176][ T29] audit: type=1326 audit(2000000364.147:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.266633][ T29] audit: type=1326 audit(2000000364.147:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.715277][T10716] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 656.775712][ T29] audit: type=1326 audit(2000000364.147:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.800064][ T29] audit: type=1326 audit(2000000364.147:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.824076][ T29] audit: type=1326 audit(2000000364.147:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.848253][ T29] audit: type=1326 audit(2000000364.147:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016319c819 code=0x7ffc0000 [ 656.872234][ T29] audit: type=1326 audit(2000000364.147:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.0.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f016315d04e code=0x7ffc0000 [ 656.911274][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 657.096131][T10716] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.176233][T10716] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 657.194418][T10716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.218171][T10716] usb 2-1: config 0 descriptor?? [ 657.309317][ T10] usb 3-1: device descriptor read/64, error -71 [ 657.363866][T10716] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 657.745882][T11919] binder: binder_mmap: 11915 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 658.140924][ T10] usb usb3-port1: attempt power cycle [ 658.330211][T10716] usb 2-1: USB disconnect, device number 29 [ 658.756769][T11929] siw: device registration error -23 [ 659.296619][T11939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.946938][T11946] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 660.341062][T11953] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 660.423540][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 660.432557][T11954] openvswitch: netlink: Flow actions attr not present in new flow. [ 660.783473][T11950] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 661.817073][T11957] mqueue: Unknown parameter 'grn#ÔØË' [ 662.274450][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 662.274468][ T29] audit: type=1400 audit(2000000369.911:724): avc: denied { accept } for pid=11963 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 662.801672][ T29] audit: type=1400 audit(2000000370.426:725): avc: denied { setopt } for pid=11963 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 663.382665][T11977] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1312'. [ 663.763899][ T29] audit: type=1400 audit(2000000371.353:726): avc: denied { bind } for pid=11975 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 663.907178][ T29] audit: type=1400 audit(2000000371.465:727): avc: denied { ioctl } for pid=11975 comm="syz.2.1313" path="socket:[42467]" dev="sockfs" ino=42467 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 664.885270][ T29] audit: type=1400 audit(2000000371.474:728): avc: denied { getopt } for pid=11975 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 664.905600][ T29] audit: type=1400 audit(2000000371.474:729): avc: denied { write } for pid=11975 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 664.927134][ T29] audit: type=1400 audit(2000000371.998:730): avc: denied { mount } for pid=11978 comm="syz.4.1314" name="/" dev="hugetlbfs" ino=43291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 665.222837][ T29] audit: type=1400 audit(2000000372.709:731): avc: denied { ioctl } for pid=11987 comm="syz.2.1317" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 665.254103][T11986] siw: device registration error -23 [ 665.372557][T11992] random: crng reseeded on system resumption [ 665.416604][ T29] audit: type=1400 audit(2000000372.850:732): avc: denied { setopt } for pid=11987 comm="syz.2.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.556603][ T29] audit: type=1400 audit(2000000372.850:733): avc: denied { write } for pid=11987 comm="syz.2.1317" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 666.231165][ T9833] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 666.264472][T12005] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 667.225099][ T9833] usb 1-1: Using ep0 maxpacket: 16 [ 667.275797][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 667.591439][ T9833] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 667.612590][ T9833] usb 1-1: config 1 has no interface number 1 [ 667.633072][ T9833] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.661658][T12017] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1324'. [ 667.699969][ T9833] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 667.806266][T12020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.910327][T12021] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 668.085326][ T9833] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.150556][ T9833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.249356][T12024] siw: device registration error -23 [ 668.318146][ T9833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.367852][ T9833] usb 1-1: Product: syz [ 668.375692][ T9833] usb 1-1: Manufacturer: syz [ 668.512123][T12033] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 668.531689][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.544827][T12033] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 668.686757][T12035] binder: 12027:12035 ioctl c0306201 200000000040 returned -14 [ 668.850205][T12033] loop5: detected capacity change from 0 to 7 [ 668.863898][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 668.864141][ T29] audit: type=1400 audit(2000000376.078:735): avc: denied { append } for pid=12029 comm="syz.4.1326" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.067382][T12036] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 669.076087][T12036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 669.086062][T12036] batadv0: entered promiscuous mode [ 669.091331][T12036] batadv0: entered allmulticast mode [ 669.205304][T12036] bond0: (slave batadv0): Releasing backup interface [ 669.220965][T12036] bridge0: port 4(batadv0) entered blocking state [ 669.228279][T12036] bridge0: port 4(batadv0) entered disabled state [ 669.547877][T12033] Dev loop5: unable to read RDB block 7 [ 669.553456][T12033] loop5: AHDI p1 [ 669.557106][T12033] loop5: partition table partially beyond EOD, truncated [ 669.591969][ T9833] usb 1-1: SerialNumber: syz [ 669.636790][ T58] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 669.646765][ T58] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 669.682877][ T9833] usb 1-1: can't set config #1, error -71 [ 669.708775][ T9833] usb 1-1: USB disconnect, device number 20 [ 669.743109][T12022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 670.904127][T12048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.947186][T12051] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 671.362952][T12059] siw: device registration error -23 [ 673.183094][T12066] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1334'. [ 673.250473][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 673.282416][T12068] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 673.630198][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 675.847399][T12083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.981953][T12083] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1338'. [ 675.991382][T12083] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1338'. [ 676.000753][T12083] netlink: 'syz.4.1338': attribute type 6 has an invalid length. [ 676.008465][T12083] netlink: 'syz.4.1338': attribute type 5 has an invalid length. [ 676.016787][T12083] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1338'. [ 676.028508][T12083] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 676.038494][T12083] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 678.418584][T12113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.520695][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 679.225973][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 679.286765][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 679.360153][T12119] 9p: Bad value for 'rfdno' [ 679.376690][ T10] usb 2-1: config 1 has no interface number 1 [ 679.382872][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 679.394527][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 679.482753][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.501749][T12119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 679.554843][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.565682][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.704409][ T10] usb 2-1: Product: syz [ 679.717503][ T10] usb 2-1: Manufacturer: syz [ 679.722182][ T10] usb 2-1: SerialNumber: syz [ 679.763525][T12126] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1345'. [ 679.928988][ T29] audit: type=1400 audit(2000000386.438:736): avc: denied { map } for pid=12125 comm="syz.3.1346" path="socket:[44093]" dev="sockfs" ino=44093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 680.419583][ T29] audit: type=1400 audit(2000000386.438:737): avc: denied { read accept } for pid=12125 comm="syz.3.1346" path="socket:[44093]" dev="sockfs" ino=44093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 680.460233][T12132] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1341'. [ 680.632996][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 680.673537][ T10] usb 2-1: failed to enable PITCH for EP 0x82 [ 680.691340][ T10] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 680.813591][T12141] ubi: mtd0 is already attached to ubi16 [ 681.055801][ T10] usb 2-1: USB disconnect, device number 30 [ 682.182007][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'. [ 682.524098][T12157] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 683.999995][T12169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.204613][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 685.317815][T12185] netlink: 'syz.4.1359': attribute type 7 has an invalid length. [ 685.325689][T12185] netlink: 'syz.4.1359': attribute type 8 has an invalid length. [ 686.023056][T12198] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 687.966706][T12210] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1363'. [ 688.047113][T12220] blktrace: Concurrent blktraces are not allowed on loop4 [ 688.113709][ T29] audit: type=1400 audit(2000000394.083:738): avc: denied { connect } for pid=12216 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 688.379998][T12222] hub 1-0:1.0: USB hub found [ 688.386155][T12222] hub 1-0:1.0: 1 port detected [ 689.287236][T12231] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 689.708723][ T9833] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 690.006359][ T9833] usb 4-1: Using ep0 maxpacket: 16 [ 690.026033][ T9833] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 690.143592][ T9833] usb 4-1: config 1 has no interface number 1 [ 690.165191][ T9833] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 690.189374][ T9833] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 690.213091][ T9833] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.325982][ T9833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.336363][ T9833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.353222][ T9833] usb 4-1: Product: syz [ 690.831201][ T9833] usb 4-1: Manufacturer: syz [ 690.839140][ T9833] usb 4-1: SerialNumber: syz [ 691.098594][ T9833] usb 4-1: failed to enable PITCH for EP 0x82 [ 691.262639][ T9833] usb 4-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 691.836921][ T9833] usb 4-1: USB disconnect, device number 20 [ 691.933036][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.939574][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.420027][T12262] syz.4.1376 (12262): attempted to duplicate a private mapping with mremap. This is not supported. [ 692.562953][T12266] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 692.629160][T12269] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 692.637683][T12269] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1376'. [ 692.651269][T12269] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 693.196216][T12276] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 693.396002][T12277] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1379'. [ 693.701594][T12282] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1380'. [ 695.751978][T12302] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 695.771345][T12302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.785209][T12302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 695.835987][T12302] loop5: detected capacity change from 0 to 7 [ 695.881699][T12302] Dev loop5: unable to read RDB block 7 [ 695.887437][T12302] loop5: AHDI p1 [ 695.891190][T12302] loop5: partition table partially beyond EOD, truncated [ 695.916165][T12302] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 695.924088][T12302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1381'. [ 695.934206][T12302] batadv0: entered promiscuous mode [ 695.939484][T12302] batadv0: entered allmulticast mode [ 695.949132][T12302] bond0: (slave batadv0): Releasing backup interface [ 695.993267][T12302] bridge0: port 4(batadv0) entered blocking state [ 696.000137][T12302] bridge0: port 4(batadv0) entered disabled state [ 696.120541][ T1107] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 696.129790][ T1107] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 696.380863][T12305] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 696.393574][T12301] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1385'. [ 696.651144][ T29] audit: type=1400 audit(2000000402.122:739): avc: denied { create } for pid=12307 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 697.141211][T12320] No control pipe specified [ 697.549356][ T29] audit: type=1400 audit(2000000402.964:740): avc: denied { sys_module } for pid=12307 comm="syz.0.1386" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 697.932742][T12330] IPv6: sit1: Disabled Multicast RS [ 697.942260][T12330] sit1: entered allmulticast mode [ 698.540746][T12338] autofs: Unknown parameter 'fd0x0000000000000000' [ 700.988843][T12352] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1393'. [ 701.044688][T12356] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 701.125946][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'. [ 702.552880][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 702.571973][T12365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.449028][T12370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1398'. [ 703.792470][T12377] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 703.907981][T12380] No control pipe specified [ 705.526891][T12391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 705.702626][T12391] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 705.714501][T12391] overlayfs: failed to look up (tracing) for ino (-66) [ 706.317843][T12402] overlayfs: missing 'lowerdir' [ 706.467058][T12403] wlan1 speed is unknown, defaulting to 1000 [ 706.478032][T12403] lo speed is unknown, defaulting to 1000 [ 707.274448][ T29] audit: type=1400 audit(2000000411.236:741): avc: denied { append } for pid=12396 comm="syz.4.1405" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 707.532772][ T9833] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 708.448963][T12410] syzkaller0: entered allmulticast mode [ 708.475479][ T9833] usb 5-1: config 0 has no interfaces? [ 708.482024][ T9833] usb 5-1: config 0 has no interfaces? [ 708.488517][ T9833] usb 5-1: config 0 has no interfaces? [ 708.585253][ T9833] usb 5-1: string descriptor 0 read error: -22 [ 708.591560][ T9833] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 708.600599][ T9833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.619423][ T9833] usb 5-1: config 0 descriptor?? [ 708.929466][ T29] audit: type=1400 audit(2000000413.613:742): avc: denied { getopt } for pid=12396 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 708.991299][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 709.004111][T12416] netlink: 'syz.3.1408': attribute type 7 has an invalid length. [ 709.012371][T12416] netlink: 'syz.3.1408': attribute type 8 has an invalid length. [ 709.056663][T12415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.634316][T12415] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 709.657356][T12415] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.743074][T12415] bond0: (slave team0): Enslaving as an active interface with an up link [ 709.976913][ T29] audit: type=1400 audit(2000000414.586:743): avc: denied { bind } for pid=12423 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 710.121091][ T10] usb 5-1: USB disconnect, device number 27 [ 710.459176][T12435] No control pipe specified [ 710.859122][T12436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.201555][T12449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.503125][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 712.553186][T12447] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1416'. [ 712.674381][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 712.689570][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.721329][ T10] usb 5-1: config 0 descriptor?? [ 714.437024][T12466] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1420'. [ 714.456897][ T29] audit: type=1400 audit(2000000418.779:744): avc: denied { write } for pid=12457 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 715.102733][ T9833] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 715.293159][ T9833] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.301295][ T9833] usb 3-1: config 0 has no interface number 0 [ 715.314508][ T9833] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 715.329906][ T9833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.351654][ T9833] usb 3-1: Product: syz [ 715.376856][ T9833] usb 3-1: Manufacturer: syz [ 715.393350][ T9833] usb 3-1: SerialNumber: syz [ 715.409898][ T9833] usb 3-1: config 0 descriptor?? [ 716.493078][ T10] usb 5-1: Cannot read MAC address [ 716.499157][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 716.514077][ T10] usb 5-1: USB disconnect, device number 28 [ 716.785392][ T9833] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 717.117298][ T9833] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.141059][T12479] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 717.152628][ T9833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 717.175082][ T9833] usb 3-1: media controller created [ 717.218251][ T9833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.396083][ T9833] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 718.045283][ T9833] usb 3-1: USB disconnect, device number 36 [ 718.140279][T12489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1428'. [ 718.413429][T12500] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1429'. [ 718.435543][T12498] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1431'. [ 722.264023][T12535] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 722.589767][T12542] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1439'. [ 723.165022][T12548] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 723.275780][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 723.587871][T12550] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1442'. [ 723.776230][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 723.788848][ T10] usb 2-1: config 0 has no interface number 0 [ 723.895527][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 723.905725][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.923340][ T10] usb 2-1: Product: syz [ 723.932002][ T10] usb 2-1: Manufacturer: syz [ 724.577028][ T29] audit: type=1400 audit(2000000428.230:745): avc: denied { mount } for pid=12555 comm="syz.2.1444" name="/" dev="hugetlbfs" ino=45995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 724.748322][ T10] usb 2-1: SerialNumber: syz [ 724.798650][ T10] usb 2-1: config 0 descriptor?? [ 725.050115][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 725.509878][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 725.559836][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 725.568699][ T10] usb 2-1: media controller created [ 725.626349][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.678682][ T10] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 725.703023][ T10] usb 2-1: USB disconnect, device number 31 [ 726.114595][T12577] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1448'. [ 726.414735][T12582] block device autoloading is deprecated and will be removed. [ 726.881324][T12588] futex_wake_op: syz.1.1450 tries to shift op by 144; fix this program [ 727.148003][T12589] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 727.242628][T12592] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1452'. [ 727.662529][T12603] vlan0: entered promiscuous mode [ 728.174381][T12604] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1455'. [ 728.231365][T12605] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 728.480172][T12612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1456'. [ 729.374425][T12619] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 729.383226][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1459'. [ 729.393030][T12619] bridge0: port 5(dummy0) entered blocking state [ 729.400091][T12619] bridge0: port 5(dummy0) entered disabled state [ 729.406716][T12619] dummy0: entered allmulticast mode [ 729.415176][T12619] dummy0: entered promiscuous mode [ 729.421735][T12619] bridge0: port 5(dummy0) entered blocking state [ 729.428464][T12619] bridge0: port 5(dummy0) entered forwarding state [ 729.561960][T12619] netlink: 'syz.3.1459': attribute type 23 has an invalid length. [ 730.669416][T12637] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 730.954503][ T5948] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 731.068888][T12641] blktrace: Concurrent blktraces are not allowed on loop6 [ 731.619513][T12643] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1464'. [ 731.842410][ T5948] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.871356][ T5948] usb 2-1: config 0 has no interface number 0 [ 731.973206][ T5948] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 731.982526][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.991572][ T5948] usb 2-1: Product: syz [ 732.009170][ T5948] usb 2-1: Manufacturer: syz [ 732.016740][ T5948] usb 2-1: SerialNumber: syz [ 732.022695][ T5948] usb 2-1: config 0 descriptor?? [ 732.495828][ T5948] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 732.513966][ T5948] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 732.535355][ T5948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 732.846448][ T5948] usb 2-1: media controller created [ 732.899405][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 733.246693][ T5948] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 733.375355][ T5948] usb 2-1: USB disconnect, device number 32 [ 733.574614][ T47] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 733.789769][ T47] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 733.799819][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 733.843313][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 733.843341][ T47] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 733.843359][ T47] usb 3-1: Product: syz [ 733.843373][ T47] usb 3-1: Manufacturer: syz [ 733.843388][ T47] usb 3-1: SerialNumber: syz [ 733.857324][ T47] usb 3-1: config 0 descriptor?? [ 733.870525][ T47] usb 3-1: selecting invalid altsetting 0 [ 734.383180][ T47] usb 3-1: USB disconnect, device number 37 [ 734.500944][T12667] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 734.544379][ T29] audit: type=1400 audit(2000000437.579:746): avc: denied { mounton } for pid=12657 comm="syz.2.1468" path="/298/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 734.595897][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 734.613314][T10165] udevd[10165]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.481404][T12686] ALSA: mixer_oss: invalid OSS volume 'C' [ 736.490016][T12686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1473'. [ 736.867978][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 738.498813][T12695] block device autoloading is deprecated and will be removed. [ 739.800580][T12711] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 741.680934][T12723] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1483'. [ 743.662729][ T29] audit: type=1400 audit(2000000445.122:747): avc: denied { audit_write } for pid=12731 comm="syz.3.1485" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 744.883140][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1487'. [ 745.189372][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 746.441048][T12768] siw: device registration error -23 [ 747.519899][ T47] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 747.890619][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.910611][ T47] usb 1-1: config 0 has no interface number 0 [ 748.107988][ T47] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 748.117091][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.908488][T12780] team0: entered allmulticast mode [ 748.914076][T12780] team_slave_0: entered allmulticast mode [ 748.920187][T12780] team_slave_1: entered allmulticast mode [ 748.926100][T12780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1496'. [ 748.935348][T12780] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 749.052849][ T47] usb 1-1: Product: syz [ 749.238556][ T47] usb 1-1: Manufacturer: syz [ 749.251356][ T47] usb 1-1: SerialNumber: syz [ 749.257339][ T47] usb 1-1: config 0 descriptor?? [ 749.354842][ T47] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 749.381224][ T47] usb 1-1: USB disconnect, device number 21 [ 751.219520][T12789] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1498'. [ 751.677308][T10716] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 752.817358][T10716] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.825483][T10716] usb 2-1: config 0 has no interface number 0 [ 752.844146][T10716] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 752.854131][T10716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.119843][T10716] usb 2-1: Product: syz [ 753.119863][T10716] usb 2-1: Manufacturer: syz [ 753.119878][T10716] usb 2-1: SerialNumber: syz [ 753.122089][T10716] usb 2-1: config 0 descriptor?? [ 753.200959][T12811] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 753.213132][ T10] IPVS: starting estimator thread 0... [ 753.338744][T10716] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 753.361589][T10716] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 753.376238][T12812] IPVS: using max 80 ests per chain, 192000 per kthread [ 753.387458][T10716] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 753.398416][T10716] usb 2-1: media controller created [ 753.826571][T10716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.911126][T10716] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 754.601148][T10716] usb 2-1: USB disconnect, device number 33 [ 754.791282][T12825] random: crng reseeded on system resumption [ 755.235213][T12829] SELinux: policydb version -188086128 does not match my version range 15-35 [ 755.246008][T12829] SELinux: failed to load policy [ 755.342225][T12829] veth0: entered promiscuous mode [ 755.575719][T12826] veth0: left promiscuous mode [ 755.593250][ T29] audit: type=1400 audit(2000000456.931:748): avc: denied { load_policy } for pid=12826 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 756.293113][ T47] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 756.487172][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.506148][ T47] usb 1-1: config 0 has no interface number 0 [ 756.521014][ T47] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 756.532442][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.546187][ T47] usb 1-1: Product: syz [ 756.610454][ T47] usb 1-1: Manufacturer: syz [ 756.616129][ T47] usb 1-1: SerialNumber: syz [ 756.629660][ T47] usb 1-1: config 0 descriptor?? [ 756.656575][ T9833] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 756.822105][ T9833] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 756.828853][T12845] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 756.830522][ T9833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.880867][ T47] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 756.893722][ T9833] usb 2-1: config 0 has no interface number 0 [ 756.933659][T12847] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 756.958305][ T9833] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 756.970862][T12850] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1512'. [ 756.980191][ T47] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 756.991664][ T9833] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 757.002520][ T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 757.010608][ T9833] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.024171][ T47] usb 1-1: media controller created [ 757.034687][ T9833] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 757.048830][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.057487][ T9833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.065933][ T9833] usb 2-1: Product: syz [ 757.079712][ T9833] usb 2-1: Manufacturer: syz [ 757.092143][ T9833] usb 2-1: SerialNumber: syz [ 757.123586][ T9833] usb 2-1: config 0 descriptor?? [ 757.136367][ T9833] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 757.147689][ T9833] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 757.161473][ T9833] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 757.361961][ T47] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 757.715584][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.721962][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.857466][ T47] usb 1-1: USB disconnect, device number 22 [ 758.314800][ T47] usb 2-1: USB disconnect, device number 34 [ 758.366497][ T47] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 758.388097][ T47] cyberjack 2-1:0.69: device disconnected [ 759.659856][T12878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.270321][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 760.424874][T12889] nbd: socks must be embedded in a SOCK_ITEM attr [ 761.444361][ T29] audit: type=1326 audit(2000000462.097:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 761.941374][T10231] udevd[10231]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 761.968181][ T29] audit: type=1326 audit(2000000462.097:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.022465][T10231] udevd[10231]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 762.074880][ T29] audit: type=1326 audit(2000000462.790:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.420982][ T29] audit: type=1326 audit(2000000462.790:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.550253][ T29] audit: type=1326 audit(2000000462.790:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.704613][ T29] audit: type=1326 audit(2000000462.790:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.733340][ T29] audit: type=1326 audit(2000000462.790:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 762.769436][ T29] audit: type=1326 audit(2000000462.790:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 763.175783][ T29] audit: type=1326 audit(2000000462.799:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 763.255359][ T29] audit: type=1326 audit(2000000462.799:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x7ffc0000 [ 764.811854][T12927] sp0: Synchronizing with TNC [ 764.979189][T12933] netlink: 'syz.2.1526': attribute type 39 has an invalid length. [ 765.419737][T12938] wlan1 speed is unknown, defaulting to 1000 [ 765.433268][T12938] lo speed is unknown, defaulting to 1000 [ 766.274359][T12939] Mount JFS Failure: -22 [ 766.278645][T12939] jfs_mount failed w/return code = -22 [ 766.286756][ T9833] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 766.537753][T12939] orangefs_mount: mount request failed with -4 [ 766.815540][ T9833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.856181][ T9833] usb 5-1: config 0 has no interface number 0 [ 766.876770][ T9833] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 766.887882][ T9833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.901964][ T9833] usb 5-1: Product: syz [ 766.911837][ T9833] usb 5-1: Manufacturer: syz [ 766.919444][ T9833] usb 5-1: SerialNumber: syz [ 766.929637][ T9833] usb 5-1: config 0 descriptor?? [ 767.156778][ T9833] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 767.167643][ T9833] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 767.192629][ T9833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 767.208933][ T9833] usb 5-1: media controller created [ 767.231161][ T9833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.434230][ T9833] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 767.900417][T12948] binder: binder_mmap: 12942 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 768.427613][T12949] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 768.487855][T12949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.500310][T12949] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 768.545012][T12949] loop5: detected capacity change from 0 to 7 [ 768.637397][T12950] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 768.645268][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 768.654830][T12950] batadv0: entered promiscuous mode [ 768.660640][T12950] batadv0: entered allmulticast mode [ 768.667733][T12950] bond0: (slave batadv0): Releasing backup interface [ 768.680528][T12950] bridge0: port 4(batadv0) entered blocking state [ 768.687283][T12950] bridge0: port 4(batadv0) entered disabled state [ 768.766736][T12949] Dev loop5: unable to read RDB block 7 [ 768.772414][T12949] loop5: AHDI p1 [ 768.776232][T12949] loop5: partition table partially beyond EOD, truncated [ 768.998128][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 769.008017][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 769.219375][ T9833] usb 5-1: USB disconnect, device number 29 [ 769.394316][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 769.394418][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.761473][T12958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.014398][ T1548] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 770.237386][ T1548] usb 2-1: Using ep0 maxpacket: 32 [ 770.332501][ T1548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.350921][ T1548] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 770.364288][ T1548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.468944][ T1548] usb 2-1: Product: syz [ 770.697892][ T1548] usb 2-1: Manufacturer: syz [ 770.804727][ T1548] usb 2-1: SerialNumber: syz [ 770.823581][ T1548] usb 2-1: config 0 descriptor?? [ 771.306255][ T1548] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 771.338385][ T1548] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 771.583869][T12979] siw: device registration error -23 [ 772.051298][T12982] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1538'. [ 772.435965][T12986] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 772.810622][ T1548] usb 2-1: USB disconnect, device number 35 [ 772.919556][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1541'. [ 773.464648][T12993] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 773.855422][T13003] netlink: 'syz.2.1543': attribute type 2 has an invalid length. [ 774.187416][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 774.187433][ T29] audit: type=1400 audit(2000000474.684:800): avc: denied { connect } for pid=13002 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.548082][ T1548] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 774.883871][T13012] Trying to write to read-only block-device nullb0 [ 775.092447][ T1548] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 775.100516][ T1548] usb 1-1: config 0 has no interface number 0 [ 775.134778][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 775.145407][ T1548] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 775.186464][ T1548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.194540][ T1548] usb 1-1: Product: syz [ 775.756937][ T1548] usb 1-1: Manufacturer: syz [ 775.763768][ T1548] usb 1-1: SerialNumber: syz [ 775.772924][ T1548] usb 1-1: config 0 descriptor?? [ 776.525095][T13026] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 776.919419][ T1548] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 777.048940][T13026] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 777.059565][T13026] overlayfs: failed to look up (tracing) for ino (-66) [ 778.071415][T13035] No control pipe specified [ 778.971828][T13048] siw: device registration error -23 [ 780.576600][ T10] usb 1-1: USB disconnect, device number 23 [ 780.980410][T13058] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 780.992786][ T1548] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 781.655112][ T1548] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.676546][ T1548] usb 3-1: config 0 has no interface number 0 [ 781.695621][ T1548] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 781.716851][ T1548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.741420][ T1548] usb 3-1: Product: syz [ 781.750091][ T1548] usb 3-1: Manufacturer: syz [ 781.759306][ T1548] usb 3-1: SerialNumber: syz [ 781.776895][ T1548] usb 3-1: config 0 descriptor?? [ 782.205999][T13069] ALSA: mixer_oss: invalid OSS volume 'C' [ 782.217569][T13069] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1558'. [ 782.329297][ T1548] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 782.374328][ T1548] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 782.408176][ T1548] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 782.417110][ T1548] usb 3-1: media controller created [ 782.857120][ T1548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.072658][ T1548] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 783.079163][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.098275][T13077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.618071][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.625587][T13077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.725978][ T1548] usb 3-1: USB disconnect, device number 38 [ 783.833486][T13086] No control pipe specified [ 783.867152][T13077] bridge0: port 4(batadv0) entered disabled state [ 784.996243][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 785.115130][T10716] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 785.627017][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 785.634675][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 785.669515][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 785.678752][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.687010][ T10] usb 4-1: Product: syz [ 785.691815][ T10] usb 4-1: Manufacturer: syz [ 785.696531][ T10] usb 4-1: SerialNumber: syz [ 785.702383][T10716] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 785.710467][T10716] usb 5-1: config 0 has no interface number 0 [ 785.721539][T10716] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 785.731171][T10716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.740701][T10716] usb 5-1: Product: syz [ 785.746971][T10716] usb 5-1: Manufacturer: syz [ 785.751661][T10716] usb 5-1: SerialNumber: syz [ 785.772699][T10716] usb 5-1: config 0 descriptor?? [ 786.001160][T10716] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 786.116548][T13108] blktrace: Concurrent blktraces are not allowed on loop4 [ 786.424114][ T10] kalmia 4-1:1.0: probe with driver kalmia failed with error -22 [ 786.436354][T10716] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 786.453979][ T10] usb 4-1: USB disconnect, device number 21 [ 786.482716][T10716] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 786.519520][T10716] usb 5-1: media controller created [ 786.537984][T10716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.633427][T10716] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 786.877929][T13116] siw: device registration error -23 [ 787.996509][T10716] usb 5-1: USB disconnect, device number 30 [ 791.270870][T13154] No control pipe specified [ 792.302021][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 792.327075][T13162] libceph: secret too big 289 [ 793.964260][ T29] audit: type=1400 audit(2000000492.197:801): avc: denied { ioctl } for pid=13171 comm="syz.2.1584" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 793.964981][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 794.508820][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'. [ 794.531641][T13186] netlink: 'syz.0.1586': attribute type 7 has an invalid length. [ 794.927991][T13186] netlink: 'syz.0.1586': attribute type 8 has an invalid length. [ 795.066210][T13194] siw: device registration error -23 [ 796.768246][T13209] No control pipe specified [ 797.131561][T13211] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1591'. [ 797.701980][ T5882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 798.980672][T13219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1595'. [ 799.296005][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.304092][ T5882] usb 2-1: config 0 has no interface number 0 [ 799.463567][ T5882] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.473395][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.482111][ T5882] usb 2-1: Product: syz [ 799.486875][ T5882] usb 2-1: Manufacturer: syz [ 799.491487][ T5882] usb 2-1: SerialNumber: syz [ 799.552932][ T5882] usb 2-1: config 0 descriptor?? [ 799.701068][ T9833] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 799.876618][ T5882] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 799.882681][ T9833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.890319][T13227] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1599'. [ 799.894260][ T9833] usb 1-1: config 0 has no interface number 0 [ 799.896251][ T9833] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.950615][ T9833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.259320][ T5882] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 800.278491][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 800.288008][ T9833] usb 1-1: Product: syz [ 800.303018][ T5882] usb 2-1: media controller created [ 800.324890][ T9833] usb 1-1: Manufacturer: syz [ 800.329527][ T9833] usb 1-1: SerialNumber: syz [ 800.373483][ T9833] usb 1-1: config 0 descriptor?? [ 800.389005][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.438513][ T29] audit: type=1400 audit(2000000498.224:802): avc: denied { shutdown } for pid=13226 comm="syz.4.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 800.504705][ T5882] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 800.658106][ T9833] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 800.669238][ T9833] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 800.686392][ T5882] usb 2-1: USB disconnect, device number 36 [ 800.695322][T13237] kernel read not supported for file /cpuacct.usage_percpu (pid: 13237 comm: syz.4.1600) [ 800.714833][ T29] audit: type=1800 audit(2000000498.505:803): pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1600" name="cpuacct.usage_percpu" dev="mqueue" ino=51397 res=0 errno=0 [ 801.147919][ T9833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 801.156445][ T9833] usb 1-1: media controller created [ 801.167795][ T9833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.195854][ T1548] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 801.207321][ T9833] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 801.238212][ T9833] usb 1-1: USB disconnect, device number 24 [ 801.356354][ T1548] usb 4-1: device descriptor read/64, error -71 [ 801.676718][ T1548] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 801.723021][T10391] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 802.133928][T13252] syzkaller0: entered allmulticast mode [ 802.177721][T13251] nvme_fabrics: missing parameter 'transport=%s' [ 802.184162][T13251] nvme_fabrics: missing parameter 'nqn=%s' [ 802.222560][ T1548] usb 4-1: device descriptor read/64, error -71 [ 802.341840][ T1548] usb usb4-port1: attempt power cycle [ 802.448781][T13259] No control pipe specified [ 802.831331][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 802.991664][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 802.998145][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 803.023852][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 803.037491][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.054427][ T5882] usb 5-1: Product: syz [ 803.064304][ T5882] usb 5-1: Manufacturer: syz [ 803.073977][ T5882] usb 5-1: SerialNumber: syz [ 803.087296][ T1548] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 803.102607][ T5882] usb 5-1: config 0 descriptor?? [ 803.192343][ T5882] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 803.213820][ T5882] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 803.215367][ T1548] usb 4-1: device descriptor read/8, error -71 [ 804.029261][T10391] Bluetooth: hci3: command 0x0406 tx timeout [ 804.544201][T13275] Invalid source name [ 804.544285][T13275] UBIFS error (pid: 13275): cannot open "./file0", error -22 [ 804.678857][ T5882] em28xx 5-1:0.0: chip ID is em2882/3 [ 805.195369][T13281] siw: device registration error -23 [ 806.298009][ T5882] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 806.335385][ T5882] em28xx 5-1:0.0: board has no eeprom [ 806.508224][ T5882] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 806.534935][ T5882] em28xx 5-1:0.0: dvb set to bulk mode. [ 806.651532][T10716] em28xx 5-1:0.0: Binding DVB extension [ 806.664780][ T5882] usb 5-1: USB disconnect, device number 31 [ 806.682583][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 806.683492][ T5882] em28xx 5-1:0.0: Disconnecting em28xx [ 806.691881][ T29] audit: type=1400 audit(2000000504.091:804): avc: denied { ioctl } for pid=13283 comm="syz.2.1610" path="socket:[51459]" dev="sockfs" ino=51459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 806.755982][T10716] em28xx 5-1:0.0: Registering input extension [ 806.790649][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 807.377952][ T29] audit: type=1400 audit(2000000504.278:805): avc: denied { read } for pid=13282 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 807.404955][T10716] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 807.411502][T10716] Registered IR keymap rc-empty [ 807.449152][T10716] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 807.528882][T10716] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 807.579524][T10716] em28xx 5-1:0.0: Input extension successfully initialized [ 807.590407][ T5882] em28xx 5-1:0.0: Closing input extension [ 807.623338][ T5882] em28xx 5-1:0.0: Freeing device [ 807.712030][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 807.799934][ T1548] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 808.004952][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.013095][ T10] usb 1-1: config 0 has no interface number 0 [ 808.053995][ T1548] usb 3-1: Using ep0 maxpacket: 32 [ 808.080036][ T1548] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 808.109174][ T1548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 808.115307][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 808.202147][T13308] binder: binder_mmap: 13305 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 808.480088][ T1548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 808.486325][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.486348][ T10] usb 1-1: Product: syz [ 808.486363][ T10] usb 1-1: Manufacturer: syz [ 808.486377][ T10] usb 1-1: SerialNumber: syz [ 808.489415][ T10] usb 1-1: config 0 descriptor?? [ 808.583232][ T1548] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 808.592594][ T1548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.603967][ T1548] usb 3-1: Product: syz [ 808.608821][ T1548] usb 3-1: Manufacturer: syz [ 808.625881][ T1548] usb 3-1: SerialNumber: syz [ 808.699228][ T1548] usb 3-1: config 0 descriptor?? [ 808.705973][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 808.716685][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.730253][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 808.752864][ T10] usb 1-1: media controller created [ 808.758761][T13301] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 808.766979][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.769729][ T1548] hub 3-1:0.0: bad descriptor, ignoring hub [ 808.841584][ T1548] hub 3-1:0.0: probe with driver hub failed with error -5 [ 808.919098][ T1548] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 810.137972][T13318] No control pipe specified [ 810.270821][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 810.467577][ T1548] usb 3-1: USB disconnect, device number 39 [ 810.467625][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 810.517195][ T10] usb 1-1: USB disconnect, device number 25 [ 810.933684][T13329] siw: device registration error -23 [ 811.850653][T13326] team0: No ports can be present during mode change [ 812.750507][T13342] team0: left allmulticast mode [ 812.755444][T13342] team_slave_0: left allmulticast mode [ 812.761080][T13342] team_slave_1: left allmulticast mode [ 813.425209][T13342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.673745][T13357] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.1626'. [ 814.134091][T13362] md: md2 stopped. [ 814.372603][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 815.689430][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'. [ 818.147483][T13379] No control pipe specified [ 819.293463][T13390] delete_channel: no stack [ 819.916854][ T29] audit: type=1400 audit(2000000515.901:806): avc: denied { write } for pid=13387 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 821.324080][ T29] audit: type=1400 audit(2000000515.901:807): avc: denied { ioctl } for pid=13387 comm="syz.3.1633" path="socket:[52706]" dev="sockfs" ino=52706 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 822.209950][T13410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.727039][ T29] audit: type=1326 audit(2000000519.102:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 822.901731][T13423] siw: device registration error -23 [ 823.284482][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.290888][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.741138][ T29] audit: type=1326 audit(2000000519.167:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794409][ T29] audit: type=1326 audit(2000000519.167:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794438][ T29] audit: type=1326 audit(2000000519.167:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794460][ T29] audit: type=1326 audit(2000000519.167:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794482][ T29] audit: type=1326 audit(2000000519.167:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794503][ T29] audit: type=1326 audit(2000000519.167:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 823.794524][ T29] audit: type=1326 audit(2000000519.176:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd2d859c819 code=0x7ffc0000 [ 824.365806][T13427] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 825.280112][T13438] No control pipe specified [ 826.956994][T13456] blktrace: Concurrent blktraces are not allowed on loop6 [ 829.754252][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 830.035179][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'. [ 830.144828][T13485] netlink: 'syz.1.1654': attribute type 7 has an invalid length. [ 830.178095][T13485] netlink: 'syz.1.1654': attribute type 8 has an invalid length. [ 830.232041][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 830.257389][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.288344][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 830.423602][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.436634][ T10] usb 1-1: config 0 descriptor?? [ 830.786004][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 831.468676][ T10] isku 0003:1E7D:319C.0002: item fetching failed at offset 0/7 [ 831.481876][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 831.492988][ T10] isku 0003:1E7D:319C.0002: parse failed [ 831.500653][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.511722][ T10] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -22 [ 831.531541][ T5882] usb 4-1: config 0 descriptor?? [ 831.733022][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.741719][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.035757][ T1548] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 832.558076][T13507] syz.4.1660 uses old SIOCAX25GETINFO [ 832.690218][ T1548] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 832.705977][ T1548] usb 3-1: config 0 has no interface number 0 [ 832.726356][T13510] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 832.851438][ T1548] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 832.868535][ T1548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.870572][T13510] veth0_vlan: left promiscuous mode [ 832.905645][T13510] veth0_vlan: entered promiscuous mode [ 832.926077][ T47] usb 1-1: USB disconnect, device number 26 [ 832.956423][ T1548] usb 3-1: Product: syz [ 832.966377][ T1548] usb 3-1: Manufacturer: syz [ 832.974523][T13510] team0: Device veth0_vlan failed to register rx_handler [ 833.076992][ T1548] usb 3-1: SerialNumber: syz [ 833.112931][ T1548] usb 3-1: config 0 descriptor?? [ 833.134312][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 833.521177][ T1548] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 833.846236][ T5882] usb 4-1: Cannot read MAC address [ 833.851683][ T5882] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 833.896046][ T5882] usb 4-1: USB disconnect, device number 26 [ 833.906986][ T1548] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 833.919342][ T1548] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 833.928008][ T1548] usb 3-1: media controller created [ 834.098789][T10391] Bluetooth: hci0: command 0x0406 tx timeout [ 835.131305][T13501] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 835.290881][T13501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 835.301963][T13501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 835.386979][ T1548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.549321][T13501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 835.685943][T13535] binder: binder_mmap: 13527 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 835.962032][T13501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 835.972140][T13501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 835.996569][T13537] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1664'. [ 836.033442][ T1548] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 836.248359][ T1548] usb 3-1: USB disconnect, device number 40 [ 837.165634][T10716] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 837.517807][T11937] Bluetooth: hci1: command 0x0406 tx timeout [ 837.571725][T10716] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 837.592997][T10716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.614376][ T5882] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 837.647830][T10716] usb 2-1: config 0 descriptor?? [ 837.690163][T11937] Bluetooth: hci2: command 0x0406 tx timeout [ 837.818237][ T5882] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 837.848174][ T5882] usb 5-1: config 0 has no interface number 0 [ 838.116142][T11937] Bluetooth: hci3: command 0x0406 tx timeout [ 838.394894][ T5882] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.400138][T11937] Bluetooth: hci4: command 0x0405 tx timeout [ 838.407328][ T5882] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.424413][ T5882] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 838.438781][ T5882] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 838.448950][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.489060][ T5882] usb 5-1: config 0 descriptor?? [ 838.510283][T13552] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 838.528812][ T5882] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input14 [ 838.561050][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 838.561065][ T29] audit: type=1326 audit(2000000533.925:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13553 comm="syz.3.1670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7619c819 code=0x0 [ 838.807245][T10716] ath6kl: Failed to submit usb control message: -110 [ 838.807289][T10716] ath6kl: unable to send the bmi data to the device: -110 [ 838.807330][T10716] ath6kl: Unable to send get target info: -110 [ 838.854200][T10716] ath6kl: Failed to init ath6kl core: -110 [ 838.854686][T10716] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 838.898615][T10391] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 838.948353][T10716] usb 2-1: USB disconnect, device number 37 [ 839.274914][T13569] netlink: 'syz.4.1669': attribute type 21 has an invalid length. [ 839.283636][T13569] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1669'. [ 839.296282][T13569] netlink: 'syz.4.1669': attribute type 21 has an invalid length. [ 839.304921][T13569] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1669'. [ 840.136471][T10391] Bluetooth: hci1: command 0x0406 tx timeout [ 840.489017][T13580] tap0: tun_chr_ioctl cmd 1074025677 [ 840.506005][T13580] tap0: linktype set to 778 [ 840.749110][ T9833] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 841.077450][ T9833] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.085635][ T9833] usb 2-1: config 0 has no interface number 0 [ 841.181613][ T9833] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 841.191491][ T9833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.209487][ T9833] usb 2-1: Product: syz [ 841.215617][ T9833] usb 2-1: Manufacturer: syz [ 841.220336][ T9833] usb 2-1: SerialNumber: syz [ 841.238493][ T9833] usb 2-1: config 0 descriptor?? [ 841.644522][T13593] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 841.715869][ T9833] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 841.771304][ T5882] lo speed is unknown, defaulting to 1000 [ 841.777064][ T5882] syz0: Port: 1 Link DOWN [ 841.785805][ T9833] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 841.924035][ T9833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 841.948317][ T9833] usb 2-1: media controller created [ 841.960956][ T1548] usb 5-1: USB disconnect, device number 32 [ 842.006542][ T9833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.203414][ T9833] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 842.342647][ T9833] usb 2-1: USB disconnect, device number 38 [ 842.989274][T11937] Bluetooth: hci4: command 0x0405 tx timeout [ 846.735309][T13626] binder: binder_mmap: 13618 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 847.807909][T13637] evm: overlay not supported [ 848.738108][ T29] audit: type=1400 audit(2000000542.590:851): avc: denied { watch } for pid=13632 comm="syz.1.1688" path="/324/bus/file1" dev="overlay" ino=1777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 848.955030][ T29] audit: type=1400 audit(2000000542.590:852): avc: denied { watch_sb } for pid=13632 comm="syz.1.1688" path="/324/bus/file1" dev="overlay" ino=1777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 849.249014][T13648] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 849.355122][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1692'. [ 849.382637][ T1548] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 849.561110][ T1548] usb 3-1: Using ep0 maxpacket: 16 [ 849.639444][ T1548] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 849.667321][ T1548] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 849.735071][ T1548] usb 3-1: Product: syz [ 849.742678][ T1548] usb 3-1: SerialNumber: syz [ 849.751024][ T1548] usb 3-1: config 0 descriptor?? [ 849.768156][ T1548] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 849.781679][ T1548] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 849.798664][ T1548] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 849.805795][ T1548] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 850.426990][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 850.787182][ T29] audit: type=1400 audit(2000000545.313:853): avc: denied { bind } for pid=13644 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 850.806726][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 850.815449][ T5882] usb 2-1: config 0 has no interface number 0 [ 850.825580][ T5882] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 850.835687][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.848942][ T5882] usb 2-1: Product: syz [ 850.853233][ T5882] usb 2-1: Manufacturer: syz [ 850.858603][ T5882] usb 2-1: SerialNumber: syz [ 850.867149][ T5882] usb 2-1: config 0 descriptor?? [ 851.189347][T13671] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1696'. [ 851.332387][ T5882] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 851.455490][ T5882] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 851.474424][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 851.482551][ T5882] usb 2-1: media controller created [ 851.498896][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.933497][ T5882] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 852.109017][ T5882] usb 2-1: USB disconnect, device number 39 [ 853.372262][ T1548] usb 3-1: USB disconnect, device number 41 [ 853.769182][ T29] audit: type=1400 audit(2000000547.156:854): avc: denied { mounton } for pid=13686 comm="syz.0.1700" path="/314/file0" dev="tmpfs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.159544][T13690] batman_adv: batadv0: Adding interface: macsec1 [ 854.165902][T13690] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.191269][T13690] batman_adv: batadv0: Interface activated: macsec1 [ 854.289734][ T29] audit: type=1804 audit(2000000547.633:855): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1700" name="/newroot/314/file0" dev="fuse" ino=1 res=1 errno=0 [ 855.125328][T13710] netlink: 'syz.3.1705': attribute type 2 has an invalid length. [ 855.136735][T13710] netlink: 'syz.3.1705': attribute type 2 has an invalid length. [ 856.978225][T13731] netlink: 'syz.0.1709': attribute type 4 has an invalid length. [ 858.615816][T13748] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1714'. [ 859.191129][T13755] binder: binder_mmap: 13750 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 859.266074][T13757] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 859.274178][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1715'. [ 859.388675][ T29] audit: type=1400 audit(2000000552.406:856): avc: denied { connect } for pid=13749 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 860.115604][T13761] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1717'. [ 860.487609][T13769] mqueue: Unknown parameter 'grpquota' [ 860.496552][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 861.539871][ C0] ------------[ cut here ]------------ [ 861.545644][ C0] ODEBUG: free active (active state 0) object: ffff888056076890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 861.558521][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.4.1720/13774 [ 861.568696][ C0] Modules linked in: [ 861.572783][ C0] CPU: 0 UID: 0 PID: 13774 Comm: syz.4.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.583728][ C0] Tainted: [L]=SOFTLOCKUP [ 861.588027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 861.598077][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 861.603874][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 04 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 861.623479][ C0] RSP: 0000:ffffc90000007a38 EFLAGS: 00010246 [ 861.629535][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 861.637493][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44f10 [ 861.645439][ C0] RBP: 0000000000000001 R08: ffff888056076890 R09: ffffffff8bb2bba0 [ 861.653405][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 861.661366][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0490 R15: ffffc90000007b38 [ 861.669353][ C0] FS: 00007f9fedfd36c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 861.678279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.684865][ C0] CR2: 000000110c348901 CR3: 000000003bf7e000 CR4: 00000000003526f0 [ 861.692826][ C0] Call Trace: [ 861.696081][ C0] [ 861.698912][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 861.704548][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 861.710347][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 861.715893][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 861.721951][ C0] ? __lock_acquire+0x4a5/0x2630 [ 861.726866][ C0] ? rose_timer_expiry+0x53f/0x630 [ 861.731977][ C0] kfree+0x38f/0x6b0 [ 861.736004][ C0] rose_timer_expiry+0x53f/0x630 [ 861.740950][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 861.746431][ C0] call_timer_fn+0x19a/0x670 [ 861.751043][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 861.756171][ C0] ? debug_object_activate+0x331/0x490 [ 861.761621][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 861.767098][ C0] ? mark_held_locks+0x40/0x70 [ 861.771840][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 861.777293][ C0] __run_timers+0x757/0xb30 [ 861.781786][ C0] ? __pfx___run_timers+0x10/0x10 [ 861.786820][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 861.791840][ C0] run_timer_base+0x114/0x190 [ 861.796547][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 861.801740][ C0] run_timer_softirq+0x1a/0x50 [ 861.806514][ C0] handle_softirqs+0x1eb/0x9e0 [ 861.811276][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 861.816544][ C0] __irq_exit_rcu+0xef/0x150 [ 861.821139][ C0] irq_exit_rcu+0x9/0x30 [ 861.825361][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 861.830990][ C0] [ 861.833900][ C0] [ 861.836805][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 861.842775][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 861.848382][ C0] Code: ff ff ff ff 65 0f c1 15 91 78 7d 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 bc 2c 03 00 c3 cc cc cc cc 31 c0 [ 861.868014][ C0] RSP: 0000:ffffc900061eee68 EFLAGS: 00000282 [ 861.874079][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e7740 RCX: 0000000000000001 [ 861.882038][ C0] RDX: 0000000000000046 RSI: ffffffff8de5501e RDI: ffffffff8c1b1ea0 [ 861.889985][ C0] RBP: ffff88802c924980 R08: 0000000000000001 R09: 0000000000000000 [ 861.897945][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 861.905902][ C0] R13: 0000000000000246 R14: ffff88802c925528 R15: 0000000000000002 [ 861.913877][ C0] __might_resched+0x248/0x330 [ 861.918621][ C0] ? __pfx___might_resched+0x10/0x10 [ 861.923885][ C0] ? check_vma_flags+0x39e/0x580 [ 861.928820][ C0] ? gup_vma_lookup+0x64/0x170 [ 861.933570][ C0] __get_user_pages+0x308/0x34d0 [ 861.938499][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 861.943849][ C0] get_dump_page+0x27e/0x3d0 [ 861.948428][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 861.953516][ C0] ? cgroup1_freezing+0x136/0x3b0 [ 861.958529][ C0] ? freezing_slow_path+0xb5/0x1a0 [ 861.963630][ C0] dump_user_range+0x18d/0xb50 [ 861.968390][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 861.973655][ C0] ? __pfx_writenote+0x10/0x10 [ 861.978426][ C0] elf_core_dump+0x2d5f/0x3d10 [ 861.983177][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 861.988271][ C0] ? kasan_save_stack+0x3f/0x50 [ 861.993111][ C0] ? kasan_save_stack+0x30/0x50 [ 861.997940][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 862.002692][ C0] ? __kvmalloc_node_noprof+0x360/0xa00 [ 862.008216][ C0] ? vfs_coredump+0x2105/0x5570 [ 862.013053][ C0] ? asm_exc_page_fault+0x26/0x30 [ 862.018074][ C0] ? 0xffffffffff600000 [ 862.022233][ C0] ? vfs_coredump+0x27bc/0x5570 [ 862.027060][ C0] vfs_coredump+0x27bc/0x5570 [ 862.031730][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 862.036735][ C0] ? __lock_acquire+0x4a5/0x2630 [ 862.041655][ C0] ? lock_acquire+0x1cf/0x380 [ 862.046323][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 862.051499][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 862.056251][ C0] ? __kernel_text_address+0xd/0x30 [ 862.061424][ C0] ? unwind_get_return_address+0x59/0xa0 [ 862.067062][ C0] ? arch_stack_walk+0xa6/0xf0 [ 862.071809][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 862.076650][ C0] ? stack_trace_save+0x8e/0xc0 [ 862.081490][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 862.086862][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 862.092473][ C0] ? __lock_acquire+0x4a5/0x2630 [ 862.097420][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 862.103046][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 862.109016][ C0] ? rcu_is_watching+0x12/0xc0 [ 862.113764][ C0] get_signal+0x1f2a/0x21e0 [ 862.118274][ C0] ? __pfx_get_signal+0x10/0x10 [ 862.123115][ C0] ? force_sig_fault+0xc3/0x100 [ 862.127955][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 862.133482][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 862.139629][ C0] ? __bad_area_nosemaphore+0x320/0x3f0 [ 862.145155][ C0] irqentry_exit+0x1f8/0x670 [ 862.149742][ C0] asm_exc_page_fault+0x26/0x30 [ 862.154573][ C0] RIP: 0033:0x7f9fed19c821 [ 862.158973][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 862.178672][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 862.184736][ C0] RAX: 0000000000000000 RBX: 00007f9fed416090 RCX: 00007f9fed19c819 [ 862.192697][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 862.200643][ C0] RBP: 00007f9fed232c91 R08: 0000000000000000 R09: 0000000000000000 [ 862.208623][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.216583][ C0] R13: 00007f9fed416128 R14: 00007f9fed416090 R15: 00007fff3752b138 [ 862.224550][ C0] [ 862.227548][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 862.234803][ C0] CPU: 0 UID: 0 PID: 13774 Comm: syz.4.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.245717][ C0] Tainted: [L]=SOFTLOCKUP [ 862.250012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 862.260045][ C0] Call Trace: [ 862.263301][ C0] [ 862.266122][ C0] dump_stack_lvl+0x100/0x190 [ 862.270782][ C0] vpanic+0x552/0x970 [ 862.274738][ C0] ? __pfx_vpanic+0x10/0x10 [ 862.279231][ C0] panic+0xd1/0xe0 [ 862.282927][ C0] ? __pfx_panic+0x10/0x10 [ 862.287329][ C0] ? check_panic_on_warn+0x1f/0x90 [ 862.292426][ C0] check_panic_on_warn.cold+0x19/0x34 [ 862.297787][ C0] ? debug_print_object+0x18e/0x2a0 [ 862.302967][ C0] __warn.cold+0x191/0x348 [ 862.307376][ C0] __report_bug+0x296/0x3d0 [ 862.311858][ C0] ? debug_print_object+0x18e/0x2a0 [ 862.317035][ C0] ? __pfx___report_bug+0x10/0x10 [ 862.322044][ C0] report_bug_entry+0xe1/0x290 [ 862.326785][ C0] ? debug_print_object+0x19b/0x2a0 [ 862.331972][ C0] handle_bug+0x1cd/0x2a0 [ 862.336277][ C0] exc_invalid_op+0x17/0x50 [ 862.340759][ C0] asm_exc_invalid_op+0x1a/0x20 [ 862.345586][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 862.351380][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 04 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 862.370964][ C0] RSP: 0000:ffffc90000007a38 EFLAGS: 00010246 [ 862.377007][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 862.384963][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44f10 [ 862.392908][ C0] RBP: 0000000000000001 R08: ffff888056076890 R09: ffffffff8bb2bba0 [ 862.400855][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 862.408801][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0490 R15: ffffc90000007b38 [ 862.416761][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 862.422377][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 862.427997][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 862.433784][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 862.439326][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 862.445374][ C0] ? __lock_acquire+0x4a5/0x2630 [ 862.450290][ C0] ? rose_timer_expiry+0x53f/0x630 [ 862.455378][ C0] kfree+0x38f/0x6b0 [ 862.459256][ C0] rose_timer_expiry+0x53f/0x630 [ 862.464169][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 862.469604][ C0] call_timer_fn+0x19a/0x670 [ 862.474172][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 862.479260][ C0] ? debug_object_activate+0x331/0x490 [ 862.484700][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 862.490133][ C0] ? mark_held_locks+0x40/0x70 [ 862.494883][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 862.500317][ C0] __run_timers+0x757/0xb30 [ 862.504814][ C0] ? __pfx___run_timers+0x10/0x10 [ 862.509822][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 862.514847][ C0] run_timer_base+0x114/0x190 [ 862.519521][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 862.524722][ C0] run_timer_softirq+0x1a/0x50 [ 862.529494][ C0] handle_softirqs+0x1eb/0x9e0 [ 862.534246][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 862.539518][ C0] __irq_exit_rcu+0xef/0x150 [ 862.544090][ C0] irq_exit_rcu+0x9/0x30 [ 862.548320][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 862.553943][ C0] [ 862.556848][ C0] [ 862.559754][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 862.565711][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 862.571320][ C0] Code: ff ff ff ff 65 0f c1 15 91 78 7d 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 bc 2c 03 00 c3 cc cc cc cc 31 c0 [ 862.590899][ C0] RSP: 0000:ffffc900061eee68 EFLAGS: 00000282 [ 862.596942][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e7740 RCX: 0000000000000001 [ 862.604888][ C0] RDX: 0000000000000046 RSI: ffffffff8de5501e RDI: ffffffff8c1b1ea0 [ 862.612862][ C0] RBP: ffff88802c924980 R08: 0000000000000001 R09: 0000000000000000 [ 862.620818][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 862.628762][ C0] R13: 0000000000000246 R14: ffff88802c925528 R15: 0000000000000002 [ 862.636715][ C0] __might_resched+0x248/0x330 [ 862.641465][ C0] ? __pfx___might_resched+0x10/0x10 [ 862.646724][ C0] ? check_vma_flags+0x39e/0x580 [ 862.651636][ C0] ? gup_vma_lookup+0x64/0x170 [ 862.656373][ C0] __get_user_pages+0x308/0x34d0 [ 862.661291][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 862.666643][ C0] get_dump_page+0x27e/0x3d0 [ 862.671211][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 862.676298][ C0] ? cgroup1_freezing+0x136/0x3b0 [ 862.681299][ C0] ? freezing_slow_path+0xb5/0x1a0 [ 862.686391][ C0] dump_user_range+0x18d/0xb50 [ 862.691136][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 862.696409][ C0] ? __pfx_writenote+0x10/0x10 [ 862.701243][ C0] elf_core_dump+0x2d5f/0x3d10 [ 862.706037][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 862.711139][ C0] ? kasan_save_stack+0x3f/0x50 [ 862.715972][ C0] ? kasan_save_stack+0x30/0x50 [ 862.720815][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 862.725562][ C0] ? __kvmalloc_node_noprof+0x360/0xa00 [ 862.731086][ C0] ? vfs_coredump+0x2105/0x5570 [ 862.735925][ C0] ? asm_exc_page_fault+0x26/0x30 [ 862.740926][ C0] ? 0xffffffffff600000 [ 862.745073][ C0] ? vfs_coredump+0x27bc/0x5570 [ 862.749899][ C0] vfs_coredump+0x27bc/0x5570 [ 862.754561][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 862.759572][ C0] ? __lock_acquire+0x4a5/0x2630 [ 862.764512][ C0] ? lock_acquire+0x1cf/0x380 [ 862.769183][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 862.774369][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 862.779110][ C0] ? __kernel_text_address+0xd/0x30 [ 862.784297][ C0] ? unwind_get_return_address+0x59/0xa0 [ 862.789918][ C0] ? arch_stack_walk+0xa6/0xf0 [ 862.794660][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 862.799518][ C0] ? stack_trace_save+0x8e/0xc0 [ 862.804385][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 862.809747][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 862.815189][ C0] ? __lock_acquire+0x4a5/0x2630 [ 862.820125][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 862.825736][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 862.831694][ C0] ? rcu_is_watching+0x12/0xc0 [ 862.836435][ C0] get_signal+0x1f2a/0x21e0 [ 862.840933][ C0] ? __pfx_get_signal+0x10/0x10 [ 862.845760][ C0] ? force_sig_fault+0xc3/0x100 [ 862.850594][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 862.856117][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 862.862250][ C0] ? __bad_area_nosemaphore+0x320/0x3f0 [ 862.867775][ C0] irqentry_exit+0x1f8/0x670 [ 862.872340][ C0] asm_exc_page_fault+0x26/0x30 [ 862.877176][ C0] RIP: 0033:0x7f9fed19c821 [ 862.881565][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 862.901151][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 862.907191][ C0] RAX: 0000000000000000 RBX: 00007f9fed416090 RCX: 00007f9fed19c819 [ 862.915580][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 862.923525][ C0] RBP: 00007f9fed232c91 R08: 0000000000000000 R09: 0000000000000000 [ 862.931495][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.939450][ C0] R13: 00007f9fed416128 R14: 00007f9fed416090 R15: 00007fff3752b138 [ 862.947664][ C0] [ 862.950926][ C0] Kernel Offset: disabled [ 862.955233][ C0] Rebooting in 86400 seconds..