last executing test programs: 2m39.98007099s ago: executing program 1 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m39.604090583s ago: executing program 1 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}, 0x0, 0x0, 0x1) 2m39.372238894s ago: executing program 1 (id=1018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 2m38.607968268s ago: executing program 1 (id=1020): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x3, 0x5, 0x10000, 0x80, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff5]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x80180}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m35.898626326s ago: executing program 1 (id=1024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x5}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r1, 0x9) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141800, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) socket(0x27, 0x5, 0x10000) finit_module(r4, 0x0, 0x3) 2m33.007959554s ago: executing program 1 (id=1029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 2m17.748855679s ago: executing program 32 (id=1029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 8.899940025s ago: executing program 3 (id=1393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) 6.34129144s ago: executing program 3 (id=1395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) 6.210065581s ago: executing program 3 (id=1398): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.438106176s ago: executing program 3 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x4d}}]}, 0x44}}, 0x0) 5.227845897s ago: executing program 3 (id=1401): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000100) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000001c0)='-^\x00') sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=r2, @ANYRESOCT=r5, @ANYBLOB], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, r1, &(0x7f0000000440)=0x80, &(0x7f0000000480)=@generic}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) 4.696083161s ago: executing program 4 (id=1405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.626744781s ago: executing program 4 (id=1406): syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4e, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4) 4.029385035s ago: executing program 4 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) open_by_handle_at(r2, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0x3ff, 0x1, 0x7, 0x4, 0x80000000}}, 0x195500) 3.688044718s ago: executing program 4 (id=1408): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0xf16c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad", 0x4e, 0x850, 0x0, 0x0) 2.877929842s ago: executing program 3 (id=1409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 2.854405502s ago: executing program 2 (id=1410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/19, 0x13}], 0x2) 2.788518813s ago: executing program 0 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) 2.644154444s ago: executing program 0 (id=1412): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x3, 0x5, 0x10000, 0x80, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff5]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x80180}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2.034694987s ago: executing program 0 (id=1413): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(0x3) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) openat$sequencer(0xffffff9c, &(0x7f0000000340), 0x80a00, 0x0) connect$can_bcm(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="ac1414aa000000001000000000000000020000", @ANYRES32=r4], 0x174}, 0x20000000) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.819119129s ago: executing program 2 (id=1414): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x4}, @host, 0xc, 0x4, 0x5e, 0x6, 0x4, 0x1c, 0x8}) 1.547929391s ago: executing program 2 (id=1415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100ffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xfc, r3, 0x10b, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe8, 0x3, "f562e1a101f0c324084ea46aab6da22bb074676ddad917efe829cbb89807533e62421d0b9151676ba3d8322c0831ad16257d15709d242fe922377f18f0a26b03a74ba56470cffa860da5c4c0b8f2f8d7202b40128cfafb6387a4f111541816bcbb6319bac15cc97ae08d2d1b3a854986b0749faf0c4605b8941155df6bb84f6b3a3871151340045212341824b98207941d779073a14bf49e62ae0b2595dde2061ca7c740f827e3c0be717addc2d26d12fb8129a867a5772dcbbfdd3d7de8256c979cff7e13a7b4f1f720964df4630e1e17cf86f21061f6300e73bc5b9ee9cd087681ff7a"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0xd4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.191912813s ago: executing program 4 (id=1416): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) 1.160115993s ago: executing program 2 (id=1417): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) name_to_handle_at(r1, &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000440), 0x1200) 1.071631674s ago: executing program 4 (id=1418): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000015e, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 808.002515ms ago: executing program 2 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x401, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="dcf2040000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 806.620795ms ago: executing program 0 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x401, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x12) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unlink(&(0x7f0000002180)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="dcf2040000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 465.970328ms ago: executing program 2 (id=1420): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$vsock(0xffffff9c, &(0x7f0000000280), 0x191300, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2caf01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce850000000400000085000000", @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 348.235718ms ago: executing program 0 (id=1421): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x3, 0x5, 0x10000, 0x80, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x80000, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff5]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x80180}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 0 (id=1422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/19, 0x13}], 0x2) kernel console output (not intermixed with test programs): been deprecated and [ 86.435515][ T5898] and is ignored by this kernel. Remove the mand [ 86.435515][ T5898] option from the mount to silence this warning. [ 86.435515][ T5898] ======================================================= [ 86.722523][ T5898] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 86.940851][ T28] audit: type=1800 audit(1762565125.688:2): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 86.961099][ T1186] cfg80211: failed to load regulatory.db [ 87.119419][ T28] audit: type=1800 audit(1762565125.868:3): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 87.277701][ T5898] syz.2.9 (5898) used greatest stack depth: 19888 bytes left [ 87.518797][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 88.560990][ T5923] loop1: detected capacity change from 0 to 32768 [ 88.689805][ T5923] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 88.714608][ T5910] loop3: detected capacity change from 0 to 65536 [ 88.760865][ T5910] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 88.840477][ T5925] loop2: detected capacity change from 0 to 32768 [ 88.898000][ T5910] XFS (loop3): Ending clean mount [ 88.939949][ T5925] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 89.059881][ T28] audit: type=1800 audit(1762565127.808:4): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 89.098350][ T5784] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 89.122962][ T28] audit: type=1800 audit(1762565127.878:5): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 89.242625][ T5923] XFS (loop1): Starting recovery (logdev: internal) [ 89.357986][ T5923] XFS (loop1): Ending recovery (logdev: internal) [ 89.409368][ T5927] loop0: detected capacity change from 0 to 32768 [ 89.412415][ T5923] XFS (loop1): User initiated shutdown received. [ 89.418469][ T5925] syz.2.13 (5925) used greatest stack depth: 18736 bytes left [ 89.468735][ T5923] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 89.490104][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 89.542139][ T5923] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 89.550632][ T5927] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.615516][ T28] audit: type=1800 audit(1762565128.368:6): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 89.733545][ T28] audit: type=1800 audit(1762565128.488:7): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 89.772801][ T5789] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 90.250025][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 91.152663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.274668][ T5973] input: syz1 as /devices/virtual/input/input5 [ 92.376389][ T5977] loop0: detected capacity change from 0 to 128 [ 92.487230][ T5969] loop3: detected capacity change from 0 to 32768 [ 92.493607][ T5977] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.548109][ T5977] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.642455][ T5969] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 92.663254][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.694875][ T28] audit: type=1800 audit(1762565131.448:8): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 92.826186][ T28] audit: type=1800 audit(1762565131.578:9): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 93.188680][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 93.573537][ T5981] loop1: detected capacity change from 0 to 32768 [ 93.612785][ T5981] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 93.699439][ T28] audit: type=1800 audit(1762565132.448:10): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 93.886248][ T28] audit: type=1800 audit(1762565132.628:11): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 94.341117][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 94.763409][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.825776][ T6011] loop1: detected capacity change from 0 to 256 [ 94.895139][ T6011] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 95.169974][ T6014] input: syz1 as /devices/virtual/input/input6 [ 96.623155][ T6021] loop2: detected capacity change from 0 to 32768 [ 96.645207][ T6021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.36 (6021) [ 96.726682][ T6021] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.752109][ T6021] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 96.772310][ T6021] BTRFS info (device loop2): using free space tree [ 96.832178][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.966325][ T6021] BTRFS info (device loop2): enabling ssd optimizations [ 96.981994][ T6021] BTRFS info (device loop2): auto enabling async discard [ 97.028366][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 97.048293][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.072110][ T8] usb 2-1: Product: syz [ 97.076450][ T8] usb 2-1: Manufacturer: syz [ 97.081076][ T8] usb 2-1: SerialNumber: syz [ 97.109007][ T8] usb 2-1: config 0 descriptor?? [ 97.292780][ T6026] loop3: detected capacity change from 0 to 32768 [ 97.394735][ T3524] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 97.414483][ T6026] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 97.458002][ T28] audit: type=1800 audit(1762565136.208:12): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.39" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 97.605172][ T5795] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.650997][ T28] audit: type=1800 audit(1762565136.388:13): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.39" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 98.066439][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 98.651552][ T8] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 99.041205][ T8] usb 2-1: USB disconnect, device number 2 [ 99.093701][ T8] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 99.175164][ T5453] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 99.213724][ T5453] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 99.245593][ T8] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 99.291848][ T6068] input: syz1 as /devices/virtual/input/input7 [ 99.534813][ T6075] loop1: detected capacity change from 0 to 512 [ 99.580899][ T6075] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.643408][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.835988][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.589500][ T6117] input: syz1 as /devices/virtual/input/input8 [ 103.999245][ T6158] loop0: detected capacity change from 0 to 22 [ 104.023919][ T6158] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 104.074142][ T6158] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 104.292827][ T6148] loop1: detected capacity change from 0 to 32768 [ 104.407056][ T6148] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 104.575881][ T28] audit: type=1800 audit(1762565143.328:14): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.65" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 105.425886][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 105.726145][ T6156] loop2: detected capacity change from 0 to 32768 [ 105.783027][ T6156] (syz.2.68,6156,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 105.869123][ T6156] (syz.2.68,6156,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 106.145914][ T6160] loop0: detected capacity change from 0 to 32768 [ 106.157186][ T6176] loop3: detected capacity change from 0 to 16 [ 106.194191][ T6176] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.207099][ T6160] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 106.639661][ T28] audit: type=1800 audit(1762565145.388:15): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 107.149480][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 107.532024][ T27] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 108.594545][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.612184][ T27] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 108.631915][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.640951][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 108.674230][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.683904][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.702156][ T27] usb 2-1: Product: syz [ 108.706405][ T27] usb 2-1: Manufacturer: syz [ 108.730341][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 108.741955][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 108.762306][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 108.768285][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 110.749259][ T5833] usb 2-1: USB disconnect, device number 3 [ 111.179803][ T6215] loop0: detected capacity change from 0 to 32768 [ 112.142645][ T6215] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 112.306148][ T28] audit: type=1800 audit(1762565151.048:16): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.86" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 113.246083][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 113.522074][ T1186] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.724747][ T1186] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.742038][ T1186] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 113.772145][ T1186] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.812028][ T1186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 113.848788][ T1186] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.878672][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.938470][ T1186] usb 3-1: Product: syz [ 113.951902][ T1186] usb 3-1: Manufacturer: syz [ 115.471870][ C0] sched: RT throttling activated [ 115.502925][ T1186] cdc_wdm 3-1:1.0: skipping garbage [ 115.689298][ T6246] loop1: detected capacity change from 0 to 32768 [ 115.774594][ T6246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.94 (6246) [ 116.201541][ T1186] cdc_wdm 3-1:1.0: skipping garbage [ 116.215160][ T1186] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 116.221149][ T1186] cdc_wdm 3-1:1.0: Unknown control protocol [ 116.239774][ T1186] usb 3-1: USB disconnect, device number 2 [ 116.248882][ T6246] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.318367][ T6267] loop0: detected capacity change from 0 to 22 [ 116.329047][ T6267] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 116.353454][ T6246] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 116.369762][ T6246] BTRFS info (device loop1): turning on flush-on-commit [ 116.387506][ T6246] BTRFS info (device loop1): max_inline at 4096 [ 116.422037][ T6267] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 116.440041][ T6246] BTRFS info (device loop1): enabling disk space caching [ 116.486332][ T6246] BTRFS info (device loop1): enabling free space tree [ 116.528535][ T6246] BTRFS info (device loop1): turning off barriers [ 116.559455][ T6246] BTRFS info (device loop1): disabling tree log [ 116.676144][ T6246] BTRFS info (device loop1): enabling ssd optimizations [ 116.827331][ T6246] BTRFS info (device loop1): force clearing of disk cache [ 116.945851][ T6246] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 117.132301][ T6246] BTRFS info (device loop1): use lzo compression, level 0 [ 117.201447][ T6246] BTRFS info (device loop1): max_inline at 0 [ 117.247636][ T6246] BTRFS info (device loop1): using free space tree [ 117.290591][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 117.293121][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 117.334245][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 117.371460][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 117.400820][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 117.432700][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 117.462770][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 117.526890][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 117.571418][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 117.631540][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 117.675144][ T6246] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 117.963038][ T6246] BTRFS error (device loop1): open_ctree failed: -12 [ 118.655625][ T5894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5894) [ 118.952005][ T27] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.143999][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.164872][ T27] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 119.172630][ T6308] loop3: detected capacity change from 0 to 22 [ 119.191102][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.193612][ T6308] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 119.239663][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 119.251325][ T6308] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 119.290226][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.325770][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.365482][ T27] usb 2-1: Product: syz [ 119.369735][ T27] usb 2-1: Manufacturer: syz [ 119.422176][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 119.442013][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 119.452257][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 119.468776][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 121.753589][ T5787] usb 2-1: USB disconnect, device number 4 [ 122.970053][ T6346] loop3: detected capacity change from 0 to 22 [ 122.993748][ T6346] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 123.039022][ T6346] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.061976][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.383154][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 127.504746][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.839036][ T27] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 128.424952][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.434080][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 128.447639][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.458568][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.471968][ T27] usb 2-1: Product: syz [ 128.476177][ T27] usb 2-1: Manufacturer: syz [ 128.502291][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 128.507569][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 128.568179][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 128.581406][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 128.757556][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.764236][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.770632][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.777275][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.784051][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.790695][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.797067][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.803696][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.810034][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.816680][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.823104][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.829742][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.836273][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.842998][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.849339][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.855963][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.862562][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.869303][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.875680][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.882317][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.911522][ T5787] usb 2-1: USB disconnect, device number 5 [ 128.911603][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 129.895977][ T6396] Zero length message leads to an empty skb [ 132.996385][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.003545][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.502081][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 134.206034][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.220726][ T27] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 134.264882][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.282638][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 134.319348][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.328535][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.351948][ T27] usb 4-1: Product: syz [ 134.372812][ T27] usb 4-1: Manufacturer: syz [ 134.404258][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 134.411656][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 134.622556][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 134.628531][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 134.650651][ T27] usb 4-1: USB disconnect, device number 2 [ 135.286558][ T6451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.149'. [ 136.670315][ T6482] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 137.555542][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 137.909965][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.918782][ T27] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 137.929149][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.940223][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 137.966218][ T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.981767][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.026833][ T27] usb 3-1: Product: syz [ 138.186293][ T27] usb 3-1: Manufacturer: syz [ 138.208110][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 138.216633][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 138.229410][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 139.006608][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 139.040224][ T27] usb 3-1: USB disconnect, device number 3 [ 139.920068][ T6500] netlink: 64 bytes leftover after parsing attributes in process `syz.1.161'. [ 143.161993][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 143.377805][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.410216][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.421966][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.431224][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 143.444808][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.467870][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.495252][ T8] usb 4-1: Product: syz [ 143.514575][ T8] usb 4-1: Manufacturer: syz [ 143.540383][ T6540] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.556289][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 143.562271][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 143.574392][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 143.581986][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 143.880731][ C1] wdm_int_callback: 119 callbacks suppressed [ 143.880752][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.893402][ C1] wdm_int_callback: 119 callbacks suppressed [ 143.893421][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.905937][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.912580][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.922539][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.929156][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.942144][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.948808][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.955845][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.962492][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.968789][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.975429][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.981686][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 143.988294][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 143.994586][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 144.001187][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 144.007444][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 144.014049][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 144.022879][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 144.029478][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 144.122803][ T5787] usb 4-1: USB disconnect, device number 3 [ 144.122889][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 147.786646][ T6577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.178'. [ 147.934834][ T6568] loop3: detected capacity change from 0 to 32768 [ 148.002140][ T6568] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 148.203290][ T28] audit: type=1800 audit(1762565186.948:17): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.180" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 148.300982][ T6587] block device autoloading is deprecated and will be removed. [ 148.677388][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 148.942114][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 149.001513][ T6594] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 149.191240][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.023009][ T8] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 150.047361][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.072470][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 150.102062][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.111160][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.165172][ T8] usb 3-1: Product: syz [ 150.189800][ T8] usb 3-1: Manufacturer: syz [ 150.230185][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 150.258993][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 150.289288][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 150.297243][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 150.514523][ C0] wdm_int_callback: 464 callbacks suppressed [ 150.514544][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 150.514971][ T5837] usb 3-1: USB disconnect, device number 4 [ 150.520578][ C0] wdm_int_callback: 464 callbacks suppressed [ 150.520593][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 150.520610][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.009028][ T6630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.193'. [ 154.466808][ T6651] fuse: Unknown parameter '0x0000000000000007' [ 154.722225][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 155.007824][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.069662][ T9] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 155.144580][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.209405][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 155.342844][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.381488][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.431005][ T9] usb 2-1: Product: syz [ 155.464557][ T9] usb 2-1: Manufacturer: syz [ 155.568863][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 155.577435][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 155.595889][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 155.616127][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 155.914021][ T9] usb 2-1: USB disconnect, device number 6 [ 159.173248][ T6698] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 159.191403][ T6679] loop3: detected capacity change from 0 to 32768 [ 159.404743][ T6679] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 160.103622][ T28] audit: type=1800 audit(1762565198.858:18): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 160.223705][ T28] audit: type=1800 audit(1762565198.978:19): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 160.611584][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 161.543898][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 161.581368][ T6723] batman_adv: batadv0: Adding interface: dummy0 [ 161.600387][ T6723] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.650569][ T6723] batman_adv: batadv0: Interface activated: dummy0 [ 161.693935][ T6727] batadv0: mtu less than device minimum [ 161.701696][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.714570][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.727219][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.739851][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.752638][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.765286][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.777657][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.790281][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.802829][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 161.882577][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.901536][ T9] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 161.936070][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.976679][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 162.056489][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.079766][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.187913][ T9] usb 2-1: Product: syz [ 162.246611][ T9] usb 2-1: Manufacturer: syz [ 162.443731][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 162.571880][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 162.622686][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 162.654270][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 162.701770][ T9] usb 2-1: USB disconnect, device number 7 [ 162.716769][ T6736] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 165.891494][ T6743] loop3: detected capacity change from 0 to 32768 [ 166.006921][ T6743] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 166.208474][ T28] audit: type=1800 audit(1762565204.958:20): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 166.240081][ T6777] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 166.492266][ T3062] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 166.810283][ T3062] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.914947][ T3062] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 167.045146][ T3062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.142505][ T3062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 167.212354][ T3062] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.231969][ T3062] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.247345][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 167.256750][ T3062] usb 2-1: Product: syz [ 167.278663][ T3062] usb 2-1: Manufacturer: syz [ 167.339452][ T3062] cdc_wdm 2-1:1.0: skipping garbage [ 167.372015][ T3062] cdc_wdm 2-1:1.0: skipping garbage [ 167.392457][ T3062] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 167.398445][ T3062] cdc_wdm 2-1:1.0: Unknown control protocol [ 167.615695][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.622377][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.628707][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.635368][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.643389][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.650070][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.662000][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.668682][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.676063][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.682725][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.689293][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.695946][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.702309][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.708965][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.715316][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.721963][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.729087][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.735771][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.742109][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 167.748764][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 167.755766][ T3062] usb 2-1: USB disconnect, device number 8 [ 167.761665][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 170.376224][ T6818] Illegal XDP return value 4294967274 on prog (id 31) dev syz_tun, expect packet loss! [ 170.889739][ T6810] loop0: detected capacity change from 0 to 32768 [ 171.046001][ T6810] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 171.332582][ T28] audit: type=1800 audit(1762565210.028:21): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 171.689015][ T28] audit: type=1800 audit(1762565210.358:22): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 171.892206][ T3062] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 171.975589][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 172.096095][ T3062] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.117769][ T3062] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 172.162113][ T3062] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.207561][ T3062] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 172.245402][ T3062] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.275674][ T3062] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.292976][ T3062] usb 4-1: Product: syz [ 172.297282][ T3062] usb 4-1: Manufacturer: syz [ 172.521908][ T3062] cdc_wdm 4-1:1.0: skipping garbage [ 172.578178][ T3062] cdc_wdm 4-1:1.0: skipping garbage [ 172.714101][ T3062] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 172.819203][ T3062] cdc_wdm 4-1:1.0: Unknown control protocol [ 172.939396][ T3062] usb 4-1: USB disconnect, device number 4 [ 173.231359][ T6860] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 173.231359][ T6860] program syz.1.262 not setting count and/or reply_len properly [ 173.402742][ T6867] binder: 6866:6867 ioctl 4018620d 0 returned -22 [ 174.744767][ T6878] binder: 6866:6878 unknown command 1074553619 [ 174.764258][ T6878] binder: 6866:6878 ioctl c0306201 200000000040 returned -22 [ 177.040581][ T6877] loop3: detected capacity change from 0 to 32768 [ 177.150837][ T6877] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 177.173731][ T28] audit: type=1800 audit(1762565215.928:23): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 177.360386][ T28] audit: type=1800 audit(1762565216.108:24): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 177.491986][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 177.612586][ T6877] syz.3.268 (6877) used greatest stack depth: 18696 bytes left [ 177.810773][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.532671][ T8] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 178.584033][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.805200][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 178.805242][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 178.876496][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.891920][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.899976][ T8] usb 3-1: Product: syz [ 178.921930][ T8] usb 3-1: Manufacturer: syz [ 179.034128][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 179.039942][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 179.114121][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 179.124671][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 179.303263][ C0] wdm_int_callback: 5 callbacks suppressed [ 179.303286][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 179.315811][ C0] wdm_int_callback: 5 callbacks suppressed [ 179.315829][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 179.329391][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 179.336050][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 179.344493][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 179.351150][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 179.357636][ T8] usb 3-1: USB disconnect, device number 5 [ 179.364097][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 179.364123][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 179.364149][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 180.697860][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 182.610224][ T6956] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 183.012136][ T3062] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 183.691973][ T3062] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.721890][ T3062] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 183.733126][ T3062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.743061][ T3062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 183.757943][ T3062] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.767946][ T3062] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.777417][ T3062] usb 2-1: Product: syz [ 183.783968][ T3062] usb 2-1: Manufacturer: syz [ 183.798663][ T3062] cdc_wdm 2-1:1.0: skipping garbage [ 183.807885][ T3062] cdc_wdm 2-1:1.0: skipping garbage [ 183.834485][ T3062] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 183.846700][ T3062] cdc_wdm 2-1:1.0: Unknown control protocol [ 184.139324][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 184.139863][ T3062] usb 2-1: USB disconnect, device number 9 [ 184.145979][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 184.145999][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.845403][ T6970] binder: 6969:6970 ioctl 4018620d 0 returned -22 [ 186.093728][ T6981] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 186.193969][ T6987] binder: 6969:6987 unknown command 1074553619 [ 186.227152][ T6987] binder: 6969:6987 ioctl c0306201 200000000040 returned -22 [ 186.886091][ T6986] loop1: detected capacity change from 0 to 32768 [ 186.948753][ T6986] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 186.991676][ T28] audit: type=1800 audit(1762565225.738:25): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.298" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 187.057374][ T5851] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 187.133280][ T6991] loop0: detected capacity change from 0 to 32768 [ 187.153000][ T6991] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 187.260981][ T6991] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 187.311964][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 187.355146][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 187.407341][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.421923][ T28] audit: type=1800 audit(1762565226.168:26): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.300" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 187.491373][ T5851] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 187.509913][ T28] audit: type=1800 audit(1762565226.258:27): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.300" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 187.512831][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.551599][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 187.635692][ T5851] usb 4-1: Product: syz [ 187.669149][ T5851] usb 4-1: Manufacturer: syz [ 187.706449][ T5851] usb 4-1: SerialNumber: syz [ 187.762824][ T5851] usb 4-1: config 0 descriptor?? [ 187.798101][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 187.984159][ T8] usb 4-1: USB disconnect, device number 5 [ 190.051969][ T7028] loop1: detected capacity change from 0 to 32768 [ 190.124142][ T7028] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 190.171241][ T28] audit: type=1800 audit(1762565228.918:28): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 190.249495][ T28] audit: type=1800 audit(1762565228.988:29): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 190.512205][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 190.594990][ T7036] loop2: detected capacity change from 0 to 32768 [ 190.657960][ T7036] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 190.719409][ T28] audit: type=1800 audit(1762565229.468:30): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 191.358297][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 191.497467][ T7060] overlayfs: missing 'lowerdir' [ 192.816615][ T7071] syz_tun: entered allmulticast mode [ 192.858949][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 193.039718][ T7071] syz_tun (unregistering): left allmulticast mode [ 194.462385][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477956][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.524962][ T28] audit: type=1326 audit(1762565234.278:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.440479][ T28] audit: type=1326 audit(1762565235.188:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.533923][ T28] audit: type=1326 audit(1762565235.188:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.559734][ T28] audit: type=1326 audit(1762565235.188:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.684454][ T28] audit: type=1326 audit(1762565235.258:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.707336][ T28] audit: type=1326 audit(1762565235.268:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.729935][ T28] audit: type=1326 audit(1762565235.268:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.752851][ T28] audit: type=1326 audit(1762565235.268:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.776436][ T28] audit: type=1326 audit(1762565235.268:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 196.833541][ T28] audit: type=1326 audit(1762565235.268:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x7ffc0000 [ 200.826246][ T7194] loop1: detected capacity change from 0 to 32768 [ 200.907031][ T7194] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 201.020124][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 201.020141][ T28] audit: type=1800 audit(1762565239.768:59): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.340" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 201.142781][ T28] audit: type=1800 audit(1762565239.888:60): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.340" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 201.401799][ T7210] bridge_slave_0: left allmulticast mode [ 201.420662][ T7210] bridge_slave_0: left promiscuous mode [ 201.436524][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.482065][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 201.525831][ T7210] bridge_slave_1: left allmulticast mode [ 201.531559][ T7210] bridge_slave_1: left promiscuous mode [ 201.566142][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.608212][ T7210] bond0: (slave bond_slave_0): Releasing backup interface [ 201.652883][ T7210] bond0: (slave bond_slave_1): Releasing backup interface [ 201.717073][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.723334][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 201.729385][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 201.735521][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 201.745217][ T7204] loop2: detected capacity change from 0 to 32768 [ 201.840276][ T7210] team0: Port device team_slave_0 removed [ 201.847042][ T7204] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 201.923164][ T7210] team0: Port device team_slave_1 removed [ 201.979418][ T7210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.997760][ T28] audit: type=1800 audit(1762565240.748:61): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.343" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 202.033964][ T7210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.105067][ T7210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.180623][ T7210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.575067][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 203.222239][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.447728][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.470052][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.481795][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.215204][ T7236] process 'syz.3.351' launched './file2' with NULL argv: empty string added [ 204.292680][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 204.322835][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 204.341521][ T8] usb 2-1: Product: syz [ 204.350649][ T7243] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.359418][ T8] usb 2-1: Manufacturer: syz [ 204.407765][ T8] usb 2-1: SerialNumber: syz [ 205.223235][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 205.400078][ T8] usb 2-1: USB disconnect, device number 10 [ 205.504557][ T8] usblp0: removed [ 206.329207][ T7261] mkiss: ax0: crc mode is auto. [ 207.477551][ T7255] loop0: detected capacity change from 0 to 32768 [ 207.520790][ T7255] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 207.676311][ T28] audit: type=1800 audit(1762565246.428:62): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.354" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 207.779638][ T28] audit: type=1800 audit(1762565246.528:63): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.354" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 208.106474][ T7257] loop1: detected capacity change from 0 to 32768 [ 208.147036][ T7257] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 209.018198][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 209.113581][ T7257] JBD2: journal reset failed [ 209.157334][ T7257] (syz.1.355,7257,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 209.197919][ T7257] (syz.1.355,7257,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 212.712021][ T5851] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 212.823592][ T7292] loop1: detected capacity change from 0 to 32768 [ 212.899716][ T7292] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 212.923917][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 212.937400][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 212.948447][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.964846][ T28] audit: type=1800 audit(1762565251.708:64): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.370" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 212.969358][ T5851] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 212.995128][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.006595][ T5851] usb 3-1: Product: syz [ 213.010900][ T5851] usb 3-1: Manufacturer: syz [ 213.015602][ T5851] usb 3-1: SerialNumber: syz [ 213.028050][ T5851] usb 3-1: config 0 descriptor?? [ 213.140117][ T28] audit: type=1800 audit(1762565251.868:65): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.370" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 213.323541][ T7311] mkiss: ax0: crc mode is auto. [ 214.323819][ T27] usb 3-1: USB disconnect, device number 6 [ 215.165113][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 220.296815][ T7345] block nbd2: shutting down sockets [ 221.569479][ T7351] loop0: detected capacity change from 0 to 32768 [ 221.737423][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 221.910671][ T7351] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 221.930160][ T7367] Can't find ip_set type hash:ip,p [ 222.345881][ T28] audit: type=1800 audit(1762565260.728:66): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 222.648739][ T28] audit: type=1800 audit(1762565261.398:67): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 222.936172][ T7351] syz.0.377 (7351) used greatest stack depth: 18248 bytes left [ 223.010924][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 225.284700][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.390'. [ 225.873414][ T7405] Can't find ip_set type hash:ip,p [ 229.315200][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 229.516903][ T7434] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 230.150556][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'. [ 230.802003][ T7440] Can't find ip_set type hash:ip,p [ 231.538469][ T7446] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 239.749504][ T7507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.552509][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 243.123344][ T7544] block nbd2: shutting down sockets [ 246.622935][ T7592] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 247.006735][ T7592] bridge_slave_0: left allmulticast mode [ 247.086464][ T7592] bridge_slave_0: left promiscuous mode [ 247.138232][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.641433][ T7592] bridge_slave_1: left allmulticast mode [ 247.653206][ T7592] bridge_slave_1: left promiscuous mode [ 247.660430][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.715666][ T7592] bond0: (slave bond_slave_0): Releasing backup interface [ 247.849462][ T7592] bond0: (slave bond_slave_1): Releasing backup interface [ 247.919745][ T7592] team0: Port device team_slave_0 removed [ 248.044389][ T7592] team0: Port device team_slave_1 removed [ 248.096052][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.148407][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.166019][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.173545][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.194251][ T7593] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 248.202792][ T7593] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 248.367922][ T7593] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.395807][ T7601] block nbd1: shutting down sockets [ 249.121613][ T7612] batman_adv: batadv0: Adding interface: gretap1 [ 249.128215][ T7612] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.349405][ T7612] batman_adv: batadv0: Interface activated: gretap1 [ 251.691586][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 251.712163][ T7638] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 254.722302][ T7653] block nbd2: shutting down sockets [ 255.876659][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883107][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.266904][ T7695] warning: `syz.3.464' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.642457][ T7691] block nbd0: shutting down sockets [ 265.166627][ T7730] batman_adv: batadv0: Adding interface: gretap1 [ 265.173318][ T7730] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.199400][ T7730] batman_adv: batadv0: Interface activated: gretap1 [ 265.206484][ T7730] net_ratelimit: 10 callbacks suppressed [ 265.206499][ T7730] batadv0: mtu less than device minimum [ 265.219533][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.231489][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.243328][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.255169][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.266873][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.278767][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.290629][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.302581][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 265.314383][ T7730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.733079][ T7750] loop6: detected capacity change from 0 to 524288000 [ 268.811586][ T7750] vlan2: entered allmulticast mode [ 269.522048][ T7750] hsr_slave_1: entered allmulticast mode [ 269.543871][ T7741] block nbd0: shutting down sockets [ 269.598184][ T7763] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 269.647847][ T7755] loop6: detected capacity change from 524288000 to 524287951 [ 269.677294][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 269.686957][ C0] I/O error, dev loop6, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 269.696572][ C0] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 2 [ 269.706166][ C0] I/O error, dev loop6, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 48 prio class 2 [ 269.723251][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.732686][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.768268][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.787411][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.797367][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 269.893162][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.902473][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.915076][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.924298][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 269.932193][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.941344][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 269.949236][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 269.957236][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 269.965130][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 269.973035][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 269.980887][ C1] Buffer I/O error on dev loop6, logical block 7, async page read [ 270.018267][ T5158] ldm_validate_partition_table(): Disk read failed. [ 270.038990][ T5158] Dev loop6: unable to read RDB block 0 [ 270.067357][ T5158] loop6: unable to read partition table [ 270.206515][ T7772] batman_adv: batadv0: Adding interface: gretap1 [ 270.213146][ T7772] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.241032][ T7772] batman_adv: batadv0: Interface activated: gretap1 [ 281.367559][ T7863] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 281.374390][ T7863] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 281.391137][ T7863] vhci_hcd vhci_hcd.0: Device attached [ 281.434899][ T5788] Bluetooth: Wrong link type (-71) [ 281.443976][ T7865] vhci_hcd: connection closed [ 281.446005][ T7152] vhci_hcd: stop threads [ 281.481244][ T7152] vhci_hcd: release socket [ 281.508912][ T7152] vhci_hcd: disconnect device [ 283.016934][ T7887] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 285.675734][ T7901] syz.0.531: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 285.736872][ T7901] CPU: 0 PID: 7901 Comm: syz.0.531 Not tainted syzkaller #0 [ 285.744266][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.754341][ T7901] Call Trace: [ 285.757632][ T7901] [ 285.760572][ T7901] dump_stack_lvl+0x16c/0x230 [ 285.765278][ T7901] ? show_regs_print_info+0x20/0x20 [ 285.770491][ T7901] ? load_image+0x3b0/0x3b0 [ 285.775003][ T7901] ? __rcu_read_unlock+0x7c/0xd0 [ 285.779954][ T7901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.786381][ T7901] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 285.792900][ T7901] warn_alloc+0x210/0x300 [ 285.797246][ T7901] ? stack_trace_save+0x9c/0xe0 [ 285.802109][ T7901] ? zone_watermark_ok_safe+0x230/0x230 [ 285.807668][ T7901] ? put_cpu_partial+0x14c/0x250 [ 285.812621][ T7901] ? kasan_set_track+0x5f/0x70 [ 285.817389][ T7901] ? kasan_set_track+0x4e/0x70 [ 285.822164][ T7901] ? __kasan_kmalloc+0x8f/0xa0 [ 285.826932][ T7901] ? xsk_init_queue+0xb0/0x110 [ 285.831699][ T7901] ? xsk_setsockopt+0x43c/0x6f0 [ 285.836555][ T7901] ? do_sock_setsockopt+0x175/0x1a0 [ 285.841771][ T7901] ? __x64_sys_setsockopt+0x184/0x200 [ 285.847189][ T7901] __vmalloc_node_range+0x126/0x1320 [ 285.852514][ T7901] ? free_vm_area+0x50/0x50 [ 285.857036][ T7901] vmalloc_user+0x74/0x80 [ 285.861405][ T7901] ? xskq_create+0xbf/0x170 [ 285.865933][ T7901] xskq_create+0xbf/0x170 [ 285.870292][ T7901] xsk_init_queue+0xb0/0x110 [ 285.874986][ T7901] xsk_setsockopt+0x43c/0x6f0 [ 285.879673][ T7901] ? xsk_poll+0x670/0x670 [ 285.884013][ T7901] ? __fget_files+0x28/0x4d0 [ 285.888616][ T7901] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 285.894197][ T7901] ? security_socket_setsockopt+0x7e/0xa0 [ 285.899928][ T7901] ? xsk_poll+0x670/0x670 [ 285.904266][ T7901] do_sock_setsockopt+0x175/0x1a0 [ 285.909304][ T7901] ? __fdget+0x180/0x210 [ 285.913560][ T7901] __x64_sys_setsockopt+0x184/0x200 [ 285.918775][ T7901] do_syscall_64+0x55/0xb0 [ 285.923203][ T7901] ? clear_bhb_loop+0x40/0x90 [ 285.927898][ T7901] ? clear_bhb_loop+0x40/0x90 [ 285.932600][ T7901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.938498][ T7901] RIP: 0033:0x7f0883d8f6c9 [ 285.942935][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.962553][ T7901] RSP: 002b:00007f0884bc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.970970][ T7901] RAX: ffffffffffffffda RBX: 00007f0883fe5fa0 RCX: 00007f0883d8f6c9 [ 285.978952][ T7901] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 285.986940][ T7901] RBP: 00007f0883e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 285.994920][ T7901] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 286.002901][ T7901] R13: 00007f0883fe6038 R14: 00007f0883fe5fa0 R15: 00007ffcca085778 [ 286.010884][ T7901] [ 286.086490][ T7901] Mem-Info: [ 286.091164][ T7901] active_anon:12455 inactive_anon:0 isolated_anon:0 [ 286.091164][ T7901] active_file:1231 inactive_file:41484 isolated_file:0 [ 286.091164][ T7901] unevictable:768 dirty:65 writeback:0 [ 286.091164][ T7901] slab_reclaimable:10265 slab_unreclaimable:92000 [ 286.091164][ T7901] mapped:32980 shmem:7100 pagetables:596 [ 286.091164][ T7901] sec_pagetables:0 bounce:0 [ 286.091164][ T7901] kernel_misc_reclaimable:0 [ 286.091164][ T7901] free:1350678 free_pcp:13406 free_cma:0 [ 286.185361][ T7901] Node 0 active_anon:49820kB inactive_anon:0kB active_file:4924kB inactive_file:165736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131920kB dirty:260kB writeback:0kB shmem:26864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:11856kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no [ 286.239298][ T7901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 286.316626][ T7901] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.361018][ T7901] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 286.374897][ T7901] Node 0 DMA32 free:1487400kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:49876kB inactive_anon:0kB active_file:4924kB inactive_file:164416kB unevictable:1536kB writepending:260kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:29864kB local_pcp:11636kB free_cma:0kB [ 286.522049][ T7901] lowmem_reserve[]: 0 0 1 1 1 [ 286.526867][ T7901] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.593363][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 286.598174][ T7901] Node 1 Normal free:3894084kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23984kB local_pcp:12616kB free_cma:0kB [ 286.638176][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 286.647748][ T7901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.668590][ T7901] Node 0 DMA32: 223*4kB (UME) 744*8kB (UME) 529*16kB (UME) 243*32kB (UME) 103*64kB (UME) 57*128kB (UME) 12*256kB (UM) 40*512kB (ME) 15*1024kB (UM) 1*2048kB (E) 350*4096kB (M) = 1511532kB [ 286.709218][ T7901] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 286.770381][ T7901] Node 1 Normal: 215*4kB (UM) 53*8kB (UME) 34*16kB (UME) 57*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894084kB [ 286.831865][ T7901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.841552][ T7901] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 286.890111][ T7901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.912195][ T7901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 286.921569][ T7901] 48608 total pagecache pages [ 286.941878][ T7901] 0 pages in swap cache [ 286.946076][ T7901] Free swap = 124960kB [ 286.950230][ T7901] Total swap = 124996kB [ 286.972293][ T7901] 2097051 pages RAM [ 286.983837][ T7901] 0 pages HighMem/MovableOnly [ 286.988557][ T7901] 416137 pages reserved [ 287.003267][ T7901] 0 pages cma reserved [ 287.232886][ T7910] block nbd1: shutting down sockets [ 291.328338][ T7949] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 293.542411][ T7954] block nbd1: shutting down sockets [ 294.051742][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 296.254961][ T7994] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 298.183321][ T8008] block nbd1: shutting down sockets [ 302.772920][ T8063] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 302.802504][ T8061] block nbd2: shutting down sockets [ 304.736378][ T8068] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 308.221685][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 308.592830][ T8102] block nbd1: shutting down sockets [ 311.266384][ T8117] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 317.320101][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.335568][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.840284][ T8155] Bluetooth: MGMT ver 1.22 [ 320.032250][ T8159] block nbd3: shutting down sockets [ 320.038814][ T8156] net_ratelimit: 10 callbacks suppressed [ 320.038830][ T8156] netlink: set zone limit has 8 unknown bytes [ 322.863385][ T8177] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 323.269708][ T8184] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 324.722789][ T8188] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 324.856671][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 335.703474][ T8245] block nbd3: shutting down sockets [ 339.532937][ T8294] block nbd1: shutting down sockets [ 339.710824][ T8299] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 341.117328][ T8305] overlayfs: overlapping lowerdir path [ 341.458708][ T8307] overlayfs: failed to verify upper (178/file0, ino=964, err=-116) [ 341.694209][ T8307] overlayfs: failed to verify index dir 'upper' xattr [ 341.762010][ T8307] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 341.768103][ T8305] kAFS: unparsable volume name [ 345.062380][ T8364] netlink: 'syz.3.637': attribute type 21 has an invalid length. [ 345.070344][ T8364] netlink: 128 bytes leftover after parsing attributes in process `syz.3.637'. [ 345.093835][ T8364] netlink: 'syz.3.637': attribute type 4 has an invalid length. [ 345.106163][ T8364] netlink: 'syz.3.637': attribute type 3 has an invalid length. [ 345.118548][ T8364] netlink: 3 bytes leftover after parsing attributes in process `syz.3.637'. [ 345.290576][ T8367] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 345.298488][ T8367] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 346.189784][ T8386] netlink: 532 bytes leftover after parsing attributes in process `syz.3.644'. [ 348.297958][ T8398] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 349.831949][ T5833] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 349.880001][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 350.032415][ T5833] usb 4-1: device descriptor read/64, error -71 [ 350.257110][ T8415] bridge1: entered promiscuous mode [ 350.269982][ T8415] bridge1: entered allmulticast mode [ 350.323046][ T5833] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 350.417322][ T8415] team0: Port device bridge1 added [ 350.531929][ T5833] usb 4-1: device descriptor read/64, error -71 [ 350.572809][ T8416] random: crng reseeded on system resumption [ 350.682565][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 350.705170][ T5833] usb usb4-port1: attempt power cycle [ 350.769798][ T8419] bridge_slave_1: left allmulticast mode [ 350.822260][ T8419] bridge_slave_1: left promiscuous mode [ 350.897838][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.019194][ T8419] bridge_slave_0: left allmulticast mode [ 351.064623][ T8419] bridge_slave_0: left promiscuous mode [ 351.122493][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.328483][ T5833] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 351.648466][ T5833] usb 4-1: device descriptor read/8, error -71 [ 356.348237][ T8447] block nbd2: shutting down sockets [ 357.568319][ T8462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.664'. [ 357.682775][ T5851] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 357.791037][ T8460] overlayfs: overlapping lowerdir path [ 357.906404][ T8460] overlayfs: failed to verify upper (166/file0, ino=911, err=-116) [ 357.942288][ T8463] kAFS: unparsable volume name [ 357.962049][ T8460] overlayfs: failed to verify index dir 'upper' xattr [ 358.004021][ T8460] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 358.049545][ T5851] usb 2-1: device descriptor read/64, error -71 [ 359.022075][ T5851] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 359.273938][ T5851] usb 2-1: device descriptor read/64, error -71 [ 359.457431][ T5851] usb usb2-port1: attempt power cycle [ 360.313516][ T5851] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 360.352538][ T5851] usb 2-1: device descriptor read/8, error -71 [ 361.690107][ T8491] netlink: 200 bytes leftover after parsing attributes in process `syz.2.670'. [ 361.935495][ T8493] block nbd1: shutting down sockets [ 363.562099][ T8508] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 367.202649][ T8540] block nbd0: shutting down sockets [ 367.422804][ T5788] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 369.510291][ T8560] bridge1: entered promiscuous mode [ 369.536903][ T8560] bridge1: entered allmulticast mode [ 369.557340][ T8560] team0: Port device bridge1 added [ 369.742767][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 369.771952][ T3062] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 369.981988][ T3062] usb 2-1: Using ep0 maxpacket: 32 [ 369.993459][ T3062] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 370.008450][ T3062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 370.023915][ T3062] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 370.048927][ T3062] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 370.060655][ T3062] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 370.074149][ T3062] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.084406][ T3062] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 370.097342][ T3062] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 370.120897][ T3062] usb 2-1: Product: syz [ 370.129712][ T3062] usb 2-1: Manufacturer: syz [ 370.138790][ T3062] usb 2-1: SerialNumber: syz [ 370.149382][ T3062] usb 2-1: config 0 descriptor?? [ 370.158884][ T8562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.176137][ T3062] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 370.192916][ T3062] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 371.064840][ T8567] syz.1.689 uses obsolete (PF_INET,SOCK_PACKET) [ 371.200403][ T8567] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 371.202583][ T5833] usb 2-1: USB disconnect, device number 15 [ 371.207873][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 371.272380][ T5833] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 371.474485][ T5788] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 371.483939][ T5788] Bluetooth: hci3: Injecting HCI hardware error event [ 371.492711][ T5792] Bluetooth: hci3: hardware error 0x00 [ 373.722945][ T5792] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 374.132466][ T8616] usb usb8: usbfs: process 8616 (syz.2.699) did not claim interface 0 before use [ 378.409084][ T8677] bridge1: entered promiscuous mode [ 378.472247][ T8677] bridge1: entered allmulticast mode [ 378.550495][ T8677] team0: Port device bridge1 added [ 378.731979][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 378.754994][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.761454][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878586][ T8691] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 381.532307][ T8731] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 385.283512][ T28] audit: type=1326 audit(1762565423.998:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.258264][ T28] audit: type=1326 audit(1762565423.998:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.454623][ T28] audit: type=1326 audit(1762565424.008:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.482374][ T28] audit: type=1326 audit(1762565424.008:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.506664][ T28] audit: type=1326 audit(1762565424.008:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.530584][ T28] audit: type=1326 audit(1762565424.008:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.590469][ T28] audit: type=1326 audit(1762565424.008:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.632174][ T28] audit: type=1326 audit(1762565424.008:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 386.680427][ T28] audit: type=1326 audit(1762565424.008:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 387.481984][ T28] audit: type=1326 audit(1762565424.008:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1244b8f6c9 code=0x7ffc0000 [ 393.099371][ T8832] random: crng reseeded on system resumption [ 393.142481][ T8830] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 393.152801][ T3062] libceph: connect (1)[c::]:6789 error -101 [ 393.165835][ T3062] libceph: mon0 (1)[c::]:6789 connect error [ 393.598099][ T3062] libceph: connect (1)[c::]:6789 error -101 [ 394.050848][ T3062] libceph: mon0 (1)[c::]:6789 connect error [ 394.192894][ T8825] ceph: No mds server is up or the cluster is laggy [ 394.443325][ T8847] 9pnet_virtio: no channels available for device syz [ 396.367741][ T8851] 9p: Unknown Cache mode or invalid value fscach [ 397.521932][ T1186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 397.569659][ T8866] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 397.702343][ T1186] usb 2-1: Using ep0 maxpacket: 16 [ 397.711504][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.463710][ T1186] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 398.473201][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.481250][ T1186] usb 2-1: Product: syz [ 398.495773][ T1186] usb 2-1: Manufacturer: syz [ 398.505891][ T1186] usb 2-1: SerialNumber: syz [ 398.670860][ T1186] usb 2-1: config 0 descriptor?? [ 398.693103][ T1186] usb 2-1: can't set config #0, error -71 [ 398.715099][ T1186] usb 2-1: USB disconnect, device number 16 [ 399.902598][ T8873] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 400.122538][ T8884] random: crng reseeded on system resumption [ 400.350830][ T8893] fuse: Bad value for 'fd' [ 401.521450][ T8910] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 405.278304][ T8921] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 405.449683][ T8924] usb usb8: usbfs: process 8924 (syz.3.768) did not claim interface 0 before use [ 405.534970][ T8931] random: crng reseeded on system resumption [ 406.461027][ T8938] fuse: Bad value for 'fd' [ 406.490706][ T5792] Bluetooth: hci2: unexpected event for opcode 0x080f [ 407.150303][ T8947] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 409.301042][ T8961] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 409.480579][ T8967] usb usb8: usbfs: process 8967 (syz.3.780) did not claim interface 0 before use [ 409.891472][ T8977] syzkaller0: entered promiscuous mode [ 409.897715][ T8977] syzkaller0: entered allmulticast mode [ 412.886462][ T8986] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 415.646856][ T8998] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 418.762085][ T9020] capability: warning: `syz.0.795' uses deprecated v2 capabilities in a way that may be insecure [ 427.554133][ T9077] syzkaller0: entered promiscuous mode [ 427.559951][ T9077] syzkaller0: entered allmulticast mode [ 429.592961][ T9081] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 432.446685][ T9096] input: syz0 as /devices/virtual/input/input12 [ 440.196960][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.205727][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.006246][ T9230] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 443.279619][ T9234] syzkaller0: entered promiscuous mode [ 443.285427][ T9234] syzkaller0: entered allmulticast mode [ 448.232579][ T9267] Bluetooth: MGMT ver 1.22 [ 449.068328][ T9261] bridge0: entered allmulticast mode [ 450.413247][ T9290] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 451.184371][ T9297] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 451.443887][ T9302] random: crng reseeded on system resumption [ 455.229705][ T9351] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 455.433044][ T9356] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 456.319175][ T9362] random: crng reseeded on system resumption [ 456.978765][ T9361] syzkaller0: entered promiscuous mode [ 456.984637][ T9361] syzkaller0: entered allmulticast mode [ 459.702658][ T5833] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 460.423454][ T5833] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.435303][ T5833] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 460.471862][ T5833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.480903][ T5833] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 460.530954][ T5833] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.565106][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.574292][ T5833] usb 2-1: Product: syz [ 460.578493][ T5833] usb 2-1: Manufacturer: syz [ 460.613984][ T5833] cdc_wdm 2-1:1.0: skipping garbage [ 460.619248][ T5833] cdc_wdm 2-1:1.0: skipping garbage [ 460.651814][ T5833] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 460.874064][ T5851] usb 2-1: USB disconnect, device number 17 [ 461.769076][ T9386] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 462.044616][ T9391] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 464.227684][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 467.903334][ T9435] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 470.355225][ T9444] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 472.973086][ T9456] random: crng reseeded on system resumption [ 475.789822][ T9486] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 479.672814][ T9518] random: crng reseeded on system resumption [ 480.472779][ T9516] syzkaller0: entered promiscuous mode [ 480.478549][ T9516] syzkaller0: entered allmulticast mode [ 482.996667][ T9528] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 492.313696][ T9586] ALSA: mixer_oss: invalid OSS volume '' [ 492.478867][ T9586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 492.485437][ T9586] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 492.589218][ T9586] vhci_hcd vhci_hcd.0: Device attached [ 492.623166][ T9595] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 492.717718][ T9589] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 492.728831][ T9589] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 492.738678][ T9589] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 492.749901][ T9589] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 492.759401][ T9589] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 492.798381][ T9592] vhci_hcd: connection closed [ 492.806794][ T7129] vhci_hcd: stop threads [ 492.831915][ T7129] vhci_hcd: release socket [ 492.842907][ T7129] vhci_hcd: disconnect device [ 492.849554][ T9589] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 492.851846][ T3062] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 492.865390][ T9589] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 492.891786][ T9589] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 492.943198][ T3062] usb 33-1: enqueue for inactive port 0 [ 492.950061][ T9589] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 493.031851][ T3062] vhci_hcd: vhci_device speed not set [ 493.535276][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 494.898724][ T9600] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 501.259746][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 501.259762][ T28] audit: type=1326 audit(1762565540.008:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.1.960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe474b8f6c9 code=0x0 [ 501.531645][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 501.635616][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.649823][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.742701][ T9681] overlayfs: missing 'lowerdir' [ 504.427155][ T9706] ALSA: mixer_oss: invalid OSS volume '' [ 504.493195][ T9706] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 504.499778][ T9706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 504.556723][ T9706] vhci_hcd vhci_hcd.0: Device attached [ 504.832773][ T5833] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 504.896644][ T9708] vhci_hcd: connection reset by peer [ 504.903315][ T7149] vhci_hcd: stop threads [ 504.913028][ T7149] vhci_hcd: release socket [ 504.917603][ T7149] vhci_hcd: disconnect device [ 505.597024][ T9715] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 505.604205][ T9717] overlayfs: missing 'lowerdir' [ 507.762065][ T9741] random: crng reseeded on system resumption [ 510.993636][ T9754] autofs4:pid:9754:autofs_fill_super: called with bogus options [ 511.441818][ T5833] vhci_hcd: vhci_device speed not set [ 511.877800][ T9757] overlayfs: missing 'lowerdir' [ 511.930199][ T9759] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 515.495049][ T9801] overlayfs: missing 'lowerdir' [ 515.609373][ T9806] random: crng reseeded on system resumption [ 517.793266][ T9809] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 520.352571][ T9837] overlayfs: missing 'lowerdir' [ 520.700688][ T9851] random: crng reseeded on system resumption [ 524.585554][ T9871] overlayfs: missing 'lowerdir' [ 525.132483][ T9877] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1014'. [ 525.184439][ T9877] batadv1: entered allmulticast mode [ 526.718222][ T9900] random: crng reseeded on system resumption [ 530.982068][ T9912] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.990969][ T9912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 533.738503][ T9957] random: crng reseeded on system resumption [ 536.294565][ T9961] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 536.312243][ T9961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 547.946235][ T9990] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 548.056110][ T9990] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 548.182686][ T9993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.200620][ T9993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.211036][ T9993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.231067][ T9993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.260083][ T9993] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 548.269637][ T9993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.652552][T10001] random: crng reseeded on system resumption [ 550.582563][ T5792] Bluetooth: hci1: command tx timeout [ 550.792584][ T9992] chnl_net:caif_netlink_parms(): no params data found [ 551.126606][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.291939][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.299215][ T9992] bridge_slave_0: entered allmulticast mode [ 551.313558][ T9992] bridge_slave_0: entered promiscuous mode [ 551.322519][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.329724][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.337589][ T9992] bridge_slave_1: entered allmulticast mode [ 551.345174][ T9992] bridge_slave_1: entered promiscuous mode [ 551.424799][ T9992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.496827][ T9992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.821360][ T9992] team0: Port device team_slave_0 added [ 551.881035][ T9992] team0: Port device team_slave_1 added [ 551.930069][T10033] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 552.029636][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.040862][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.067288][ T9992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.094269][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.101264][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.127203][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.176986][ T9992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.593675][ T9993] Bluetooth: hci1: command tx timeout [ 552.991510][T10045] overlayfs: missing 'lowerdir' [ 553.062451][ T9992] hsr_slave_0: entered promiscuous mode [ 553.069758][ T9992] hsr_slave_1: entered promiscuous mode [ 553.077639][ T9992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.085346][ T9992] Cannot create hsr debugfs directory [ 553.106867][ T8] IPVS: starting estimator thread 0... [ 553.252031][T10049] IPVS: using max 27 ests per chain, 64800 per kthread [ 553.325125][ T9992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 553.340319][ T9992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 553.355361][ T9992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 553.366963][ T9992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 553.636117][ T9992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.859796][T10067] random: crng reseeded on system resumption [ 554.752161][ T9993] Bluetooth: hci1: command tx timeout [ 554.771625][ T9992] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.874738][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.881979][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.911229][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.918463][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.832057][ T9993] Bluetooth: hci1: command tx timeout [ 557.188414][ T9992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.203430][T10096] overlayfs: missing 'lowerdir' [ 557.502199][T10103] random: crng reseeded on system resumption [ 558.550521][T10106] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 558.672156][ T9992] veth0_vlan: entered promiscuous mode [ 559.753680][ T9992] veth1_vlan: entered promiscuous mode [ 559.863800][ T9992] veth0_macvtap: entered promiscuous mode [ 559.900634][ T9992] veth1_macvtap: entered promiscuous mode [ 560.008515][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.032269][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.043427][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.054483][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.067462][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.081172][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.093320][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.111890][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.123003][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.151912][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.256019][ T9992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.300697][ T9992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.341823][ T9992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.350666][ T9992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.569127][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.633719][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.763788][ T7154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.829846][ T7154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.949159][T10131] overlayfs: missing 'lowerdir' [ 560.954829][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 561.224064][T10136] random: crng reseeded on system resumption [ 562.065578][T10143] binder: BINDER_SET_CONTEXT_MGR already set [ 562.101798][T10143] binder: 10141:10143 ioctl 4018620d 200000004a80 returned -16 [ 563.267767][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.282979][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.348836][T10161] overlayfs: missing 'workdir' [ 564.694616][T10178] random: crng reseeded on system resumption [ 568.437983][T10201] overlayfs: missing 'workdir' [ 568.649878][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 568.786722][T10204] block device autoloading is deprecated and will be removed. [ 569.358638][T10225] random: crng reseeded on system resumption [ 571.577623][T10233] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 571.741011][T10243] overlayfs: missing 'workdir' [ 572.487185][T10262] random: crng reseeded on system resumption [ 575.904600][ T8] IPVS: starting estimator thread 0... [ 575.991919][T10281] IPVS: using max 19 ests per chain, 45600 per kthread [ 578.732488][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.180635][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.215053][T10348] usb usb8: usbfs: process 10348 (syz.0.1131) did not claim interface 0 before use [ 579.267095][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.372099][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.654663][T10352] binder: 10351:10352 ioctl c0306201 0 returned -14 [ 583.152669][T10411] binder: 10409:10411 ioctl c0306201 0 returned -14 [ 584.845926][ T12] hsr_slave_0: left promiscuous mode [ 584.955570][ T12] hsr_slave_1: left promiscuous mode [ 584.973786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.006549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.023358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.030897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.183105][ T12] veth1_macvtap: left promiscuous mode [ 585.218238][ T12] veth0_macvtap: left promiscuous mode [ 585.260162][ T12] veth1_vlan: left promiscuous mode [ 585.286018][ T12] veth0_vlan: left promiscuous mode [ 586.261395][ T12] team0 (unregistering): Port device bridge1 removed [ 586.675845][T10466] binder: 10464:10466 ioctl c0306201 0 returned -14 [ 587.791758][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 587.798003][ T9993] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 589.514162][ T12] team0 (unregistering): Port device team_slave_1 removed [ 590.057851][ T12] team0 (unregistering): Port device team_slave_0 removed [ 590.704243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.715604][T10496] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1168'. [ 591.968762][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.152475][T10511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1171'. [ 593.521833][ T3062] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 593.735808][ T3062] usb 3-1: config index 0 descriptor too short (expected 64003, got 92) [ 593.753486][ T3062] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 593.772640][ T3062] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 593.804217][ T3062] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 593.826742][ T3062] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 593.847273][ T3062] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 593.861529][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.875784][T10523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.891707][ T3062] hub 3-1:255.0: bad descriptor, ignoring hub [ 593.904180][ T3062] hub: probe of 3-1:255.0 failed with error -5 [ 593.922061][ T3062] cdc_wdm 3-1:255.0: skipping garbage [ 593.927512][ T3062] cdc_wdm 3-1:255.0: skipping garbage [ 593.944734][ T12] bond0 (unregistering): Released all slaves [ 593.947959][ T3062] cdc_wdm 3-1:255.0: cdc-wdm0: USB WDM device [ 593.981801][ T3062] cdc_wdm 3-1:255.0: Unknown control protocol [ 594.694550][ T3062] usb 3-1: USB disconnect, device number 7 [ 594.700522][T10523] cdc_wdm 3-1:255.0: Error autopm - -16 [ 595.387365][T10547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1182'. [ 595.741764][ T3062] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 595.991548][ T3062] usb 3-1: config index 0 descriptor too short (expected 64003, got 92) [ 596.021085][ T3062] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 596.038063][ T3062] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 596.077676][ T3062] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 596.110632][ T3062] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 596.142624][ T3062] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 596.161824][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.196358][T10533] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 596.328350][ T3062] usb 3-1: can't set config #255, error -71 [ 596.373987][ T3062] usb 3-1: USB disconnect, device number 8 [ 599.044534][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1191'. [ 600.362101][ T3062] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 600.556339][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.584664][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.613339][ T3062] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.662586][ T3062] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.682146][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.727005][ T3062] usb 5-1: config 0 descriptor?? [ 601.202508][ T3062] usbhid 5-1:0.0: can't add hid device: -71 [ 601.243144][ T3062] usbhid: probe of 5-1:0.0 failed with error -71 [ 601.266637][ T3062] usb 5-1: USB disconnect, device number 2 [ 602.026869][T10652] usb usb8: usbfs: process 10652 (syz.2.1203) did not claim interface 0 before use [ 602.669178][T10673] random: crng reseeded on system resumption [ 606.155741][T10700] ntfs3: nullb0: Primary boot signature is not NTFS. [ 606.163003][T10700] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 606.515598][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1217'. [ 607.090598][T10719] usb usb8: usbfs: process 10719 (syz.4.1220) did not claim interface 0 before use [ 607.466667][T10731] random: crng reseeded on system resumption [ 609.901962][ T3062] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 610.243302][ T3062] usb 5-1: Using ep0 maxpacket: 16 [ 610.280317][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.349975][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.403541][ T3062] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 610.430144][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.472751][ T3062] usb 5-1: config 0 descriptor?? [ 611.165009][ T3062] kye 0003:0458:5016.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 611.273447][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.280244][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.400859][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.416677][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.431564][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.546241][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.561759][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.578766][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.591750][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.598569][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.611754][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.636424][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.651751][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.678953][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.711726][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.747189][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.931302][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.975920][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 611.996481][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.019050][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.044944][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.085843][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.120231][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.156506][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.199375][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.227090][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.241824][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.276813][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.302012][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.323574][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.341814][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.371540][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.378698][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.544965][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.552342][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.559096][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.565946][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.573288][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.579988][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.591495][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.607445][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.846516][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.853687][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 612.860789][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.347879][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.460510][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.561845][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.568630][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.595209][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.668224][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.761920][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 613.854787][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.008842][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.044848][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.108608][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.122724][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.137536][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.151803][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.171963][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.190276][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.208652][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.256216][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.294049][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.319749][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.367097][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.391471][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.429410][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.441756][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.461757][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.468546][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.491980][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.498776][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.541949][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.559933][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.579218][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.596099][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.617692][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.638366][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.664743][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.683515][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.707728][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.731592][T10828] ntfs3: nullb0: Primary boot signature is not NTFS. [ 614.738508][T10828] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 614.747069][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.758176][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.765550][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.772682][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.785411][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.793724][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.800633][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.811289][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.819931][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.829477][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.839228][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.849005][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.859122][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.889390][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.905903][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.931360][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.975120][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 614.997885][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.017245][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.035349][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.052471][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.066478][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.087202][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.102851][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.126619][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.146525][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.176501][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.329464][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.342346][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.351790][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.375059][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.401867][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.408653][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.432007][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.438836][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.447006][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.467759][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.721884][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.745979][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 615.798055][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.170588][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.179007][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.197345][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.221773][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.228557][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.262044][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.268822][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.304587][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.322075][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.330243][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.347557][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.366805][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.386773][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.413647][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.422152][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.430765][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.454769][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.459042][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.461509][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.524581][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.533552][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.544286][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.552311][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.560183][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.579671][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.595753][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.615387][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.631176][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.654227][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.668384][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.683895][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.692575][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.708444][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.724736][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.740536][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.758776][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.781928][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.791025][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.810040][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.831145][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.851013][ T3062] kye 0003:0458:5016.0001: unknown main item tag 0x0 [ 619.890434][ T3062] kye 0003:0458:5016.0001: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 619.902103][ T3062] kye 0003:0458:5016.0001: tablet-enabling feature report not found [ 619.932196][ T3062] kye 0003:0458:5016.0001: tablet enabling failed [ 620.008026][ T3062] usb 5-1: USB disconnect, device number 3 [ 620.387458][T10851] fido_id[10851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 621.343531][T10875] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 621.878727][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 622.366651][T10888] 9pnet_virtio: no channels available for device syz [ 623.294866][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1256'. [ 624.514933][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.527530][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.056525][T10928] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 626.050362][T10940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1267'. [ 627.605983][T10960] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 630.077964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.197314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.958031][T11031] syz_tun: entered allmulticast mode [ 636.138132][T11031] syz_tun: left allmulticast mode [ 636.215736][T11031] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 642.101309][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 643.351765][ T3062] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 643.542385][ T3062] usb 4-1: Using ep0 maxpacket: 8 [ 643.567907][ T3062] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.637970][ T3062] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.738528][ T3062] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 643.766475][ T3062] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 643.804158][ T3062] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 643.826370][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.857353][T11107] syz_tun: entered allmulticast mode [ 643.904915][ T3062] hub 4-1:1.0: bad descriptor, ignoring hub [ 643.956362][T11107] syz_tun: left allmulticast mode [ 643.975636][ T3062] hub: probe of 4-1:1.0 failed with error -5 [ 644.002428][ T3062] cdc_wdm 4-1:1.0: skipping garbage [ 644.033814][ T3062] cdc_wdm 4-1:1.0: skipping garbage [ 644.046142][ T3062] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 644.072839][ T3062] cdc_wdm 4-1:1.0: Unknown control protocol [ 644.969410][T11095] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 645.599891][T11127] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 646.064993][T11133] netlink: 'syz.2.1303': attribute type 4 has an invalid length. [ 646.954003][ T1186] usb 4-1: USB disconnect, device number 10 [ 650.498918][T11183] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 652.576548][T11103] Set syz1 is full, maxelem 65536 reached [ 654.685837][T11225] syz.3.1318 (11225) used greatest stack depth: 17960 bytes left [ 655.063403][T11235] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 656.681759][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 657.002894][ T23] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 657.017559][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.055622][ T23] usb 4-1: Product: syz [ 657.065489][ T23] usb 4-1: Manufacturer: syz [ 657.082532][ T23] usb 4-1: SerialNumber: syz [ 657.103886][ T23] usb 4-1: config 0 descriptor?? [ 657.557858][ T23] usb 4-1: Firmware version (0.0) predates our first public release. [ 657.601743][ T23] usb 4-1: Please update to version 0.2 or newer [ 658.182137][ T23] usb 4-1: USB disconnect, device number 11 [ 658.446775][T11284] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 660.454627][T11306] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 660.973641][T11313] binder_alloc: 11312: binder_alloc_buf, no vma [ 662.746916][T11346] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 665.706434][T11382] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 666.065595][T11391] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1362'. [ 666.261841][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 666.481970][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 666.495234][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 666.510214][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 666.538377][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 666.555536][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.571735][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 666.605549][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 666.622297][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.785320][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 666.807237][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.872834][ T9] usb 3-1: Product: syz [ 666.877127][ T9] usb 3-1: Manufacturer: syz [ 666.894096][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 666.910433][ T9] usb 3-1: SerialNumber: syz [ 666.925393][ T8] usbtmc 4-1:16.0: can't read capabilities [ 666.934921][ T9] usb 3-1: config 0 descriptor?? [ 667.242415][T11387] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 667.425461][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 667.469978][ T8] usb 4-1: USB disconnect, device number 12 [ 667.542068][ T9] usb 3-1: Please update to version 0.2 or newer [ 667.654613][ T9] usb 3-1: USB disconnect, device number 9 [ 668.136606][T11409] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 669.367952][T11420] nvme_fabrics: unknown parameter or missing value 'some 00000000000000000003 00000000000000000257' in ctrl creation request [ 669.385411][T11414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 669.587070][T11426] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 670.679569][T11437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1375'. [ 671.638878][T11455] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 672.206593][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 672.675007][ T9993] Bluetooth: hci1: command 0x0406 tx timeout [ 674.825071][T11491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.088267][T11498] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 677.220170][T11509] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 677.237201][T11512] fuse: Bad value for 'fd' [ 678.865938][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 679.230684][T11532] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 681.394131][T11552] netlink: 'syz.3.1409': attribute type 39 has an invalid length. [ 681.423363][T11556] 9pnet_virtio: no channels available for device syz [ 681.587258][T11561] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 683.499644][T11586] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 683.682571][T11588] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 683.960961][T11592] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 684.174604][ T49] ------------[ cut here ]------------ [ 684.180681][ T49] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 684.195459][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/tx.c:769 ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.205388][ T49] Modules linked in: [ 684.209329][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 684.216775][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.226924][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 684.233399][ T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.239858][ T49] Code: 8b 36 45 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 29 8e 97 f7 43 8d 4c 76 02 48 c7 c7 e0 d3 be 8b 48 89 de 4c 89 fa e8 c2 07 62 f7 <0f> 0b 41 bf 01 00 00 00 e9 eb 02 00 00 e8 50 8a 97 f7 e9 70 fa ff [ 684.259570][ T49] RSP: 0018:ffffc90000ba74e0 EFLAGS: 00010246 [ 684.265725][ T49] RAX: 59fc170048bc0e00 RBX: ffff8880304495b0 RCX: ffff88801ea78000 [ 684.273774][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 684.281816][ T49] RBP: ffffc90000ba7650 R08: ffffc90000ba70e7 R09: 1ffff92000174e1c [ 684.289830][ T49] R10: dffffc0000000000 R11: fffff52000174e1d R12: dffffc0000000000 [ 684.297892][ T49] R13: ffffc90000ba7808 R14: 0000000000000001 R15: ffff88802369e744 [ 684.305954][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 684.314975][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.321690][ T49] CR2: 000020000035a030 CR3: 000000002b81b000 CR4: 00000000003506f0 [ 684.329722][ T49] Call Trace: [ 684.333095][ T49] [ 684.336095][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 684.342179][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 684.348317][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 684.353901][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 684.359771][ T49] ieee80211_tx+0x2ad/0x420 [ 684.364336][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 684.369744][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 684.375272][ T49] ? __bpf_trace_tasklet+0x140/0x140 [ 684.380581][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 684.385487][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 684.391480][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 684.397331][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 684.403733][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 684.409967][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 684.415307][ T49] cfg80211_wiphy_work+0x225/0x260 [ 684.420495][ T49] ? process_scheduled_works+0x957/0x15b0 [ 684.426286][ T49] process_scheduled_works+0xa45/0x15b0 [ 684.431921][ T49] ? assign_work+0x400/0x400 [ 684.436552][ T49] ? assign_work+0x39e/0x400 [ 684.441169][ T49] worker_thread+0xa55/0xfc0 [ 684.445818][ T49] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 684.451748][ T49] ? _raw_spin_unlock+0x40/0x40 [ 684.456607][ T49] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 684.462553][ T49] kthread+0x2fa/0x390 [ 684.466632][ T49] ? pr_cont_work+0x560/0x560 [ 684.471318][ T49] ? kthread_blkcg+0xd0/0xd0 [ 684.475942][ T49] ret_from_fork+0x48/0x80 [ 684.480373][ T49] ? kthread_blkcg+0xd0/0xd0 [ 684.484997][ T49] ret_from_fork_asm+0x11/0x20 [ 684.489787][ T49] [ 684.492835][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 684.500116][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 684.507490][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.517561][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 684.523827][ T49] Call Trace: [ 684.527125][ T49] [ 684.530064][ T49] dump_stack_lvl+0x16c/0x230 [ 684.534852][ T49] ? show_regs_print_info+0x20/0x20 [ 684.540149][ T49] ? load_image+0x3b0/0x3b0 [ 684.544674][ T49] panic+0x2c0/0x710 [ 684.548580][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 684.553094][ T49] ? ret_from_fork_asm+0x11/0x20 [ 684.558047][ T49] __warn+0x2e0/0x470 [ 684.562048][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.567948][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.573758][ T49] report_bug+0x2be/0x4f0 [ 684.578102][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.583913][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.589737][ T49] ? ieee80211_tx_h_rate_ctrl+0xc80/0x1770 [ 684.595547][ T49] handle_bug+0xcf/0x120 [ 684.599801][ T49] exc_invalid_op+0x1a/0x50 [ 684.604313][ T49] asm_exc_invalid_op+0x1a/0x20 [ 684.609183][ T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 684.615606][ T49] Code: 8b 36 45 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 29 8e 97 f7 43 8d 4c 76 02 48 c7 c7 e0 d3 be 8b 48 89 de 4c 89 fa e8 c2 07 62 f7 <0f> 0b 41 bf 01 00 00 00 e9 eb 02 00 00 e8 50 8a 97 f7 e9 70 fa ff [ 684.635260][ T49] RSP: 0018:ffffc90000ba74e0 EFLAGS: 00010246 [ 684.641341][ T49] RAX: 59fc170048bc0e00 RBX: ffff8880304495b0 RCX: ffff88801ea78000 [ 684.649357][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 684.657331][ T49] RBP: ffffc90000ba7650 R08: ffffc90000ba70e7 R09: 1ffff92000174e1c [ 684.665317][ T49] R10: dffffc0000000000 R11: fffff52000174e1d R12: dffffc0000000000 [ 684.673305][ T49] R13: ffffc90000ba7808 R14: 0000000000000001 R15: ffff88802369e744 [ 684.681316][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 684.687353][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 684.693435][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 684.698909][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 684.704728][ T49] ieee80211_tx+0x2ad/0x420 [ 684.709248][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 684.714680][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 684.720173][ T49] ? __bpf_trace_tasklet+0x140/0x140 [ 684.725484][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 684.730361][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 684.736356][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 684.742181][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 684.748546][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 684.754729][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 684.759961][ T49] cfg80211_wiphy_work+0x225/0x260 [ 684.765094][ T49] ? process_scheduled_works+0x957/0x15b0 [ 684.770830][ T49] process_scheduled_works+0xa45/0x15b0 [ 684.776412][ T49] ? assign_work+0x400/0x400 [ 684.781017][ T49] ? assign_work+0x39e/0x400 [ 684.785628][ T49] worker_thread+0xa55/0xfc0 [ 684.790239][ T49] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 684.796149][ T49] ? _raw_spin_unlock+0x40/0x40 [ 684.801005][ T49] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 684.806931][ T49] kthread+0x2fa/0x390 [ 684.811020][ T49] ? pr_cont_work+0x560/0x560 [ 684.815706][ T49] ? kthread_blkcg+0xd0/0xd0 [ 684.820302][ T49] ret_from_fork+0x48/0x80 [ 684.824734][ T49] ? kthread_blkcg+0xd0/0xd0 [ 684.829339][ T49] ret_from_fork_asm+0x11/0x20 [ 684.834130][ T49] [ 684.837501][ T49] Kernel Offset: disabled [ 684.841938][ T49] Rebooting in 86400 seconds..