last executing test programs: 9.569673294s ago: executing program 2 (id=757): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f020}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) creat(&(0x7f0000000180)='./file0\x00', 0x129) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x200000000000004b, 0x1}}, 0x3c) open$dir(&(0x7f0000000240)='./file0\x00', 0x20e02, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7a, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 9.364127037s ago: executing program 0 (id=759): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.237734444s ago: executing program 0 (id=761): pipe(&(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000180), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 7.463367446s ago: executing program 2 (id=766): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) membarrier(0x4, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r4 = creat(0x0, 0xa) fadvise64(r4, 0x3, 0x5, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_connect$uac1(0x5, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "82ab09"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2, '\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.608800944s ago: executing program 3 (id=769): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.21224433s ago: executing program 0 (id=770): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x80, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x47, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @void, [{0xdd, 0x6, "3e115be9fc85"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc3b}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.179738121s ago: executing program 0 (id=771): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 5.108078563s ago: executing program 0 (id=772): sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x1ff, 0x400) read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 4.58680234s ago: executing program 3 (id=776): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) creat(&(0x7f0000002000)='./file0\x00', 0xa) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) memfd_secret(0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) 3.543545176s ago: executing program 1 (id=777): ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x1, "a140bf23a1f17b2511d129c1aa9de8065fcaa8f5a68f4cd6c75c883a292b2d2b", 0x4, 0x2, 0x1, 0x38, 0x4, 0x3, 0x9, 0x10}) 3.413655328s ago: executing program 2 (id=778): syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)=0x9, 0xfffffff7, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000080) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14004}], 0x1, 0x40000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f000001a4c0)=[{&(0x7f00000192c0)=""/158, 0x9e}], 0x1}, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8e, 0x180000504) 3.2687303s ago: executing program 1 (id=779): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000080000000800000006"], 0x48) socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000002040), 0x0}, 0x20) 3.267047931s ago: executing program 3 (id=780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 3.131319703s ago: executing program 1 (id=781): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(r0, 0x0, 0x1c1) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x331200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000010c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 3.020081115s ago: executing program 3 (id=782): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0xace, 0x8}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 1.951810601s ago: executing program 1 (id=783): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 1.657339216s ago: executing program 2 (id=784): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.621635556s ago: executing program 3 (id=785): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0500580c"], 0x8) 1.528187467s ago: executing program 1 (id=786): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 1.391932629s ago: executing program 3 (id=787): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) membarrier(0x4, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r4 = creat(0x0, 0xa) fadvise64(r4, 0x3, 0x5, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_connect$uac1(0x5, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "82ab09"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2, '\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 515.902193ms ago: executing program 2 (id=788): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000000c0)={0x1, "a140bf23a1f17b2511d129c1aa9de8065fcaa8f5a68f4cd6c75c883a292b2d2b", 0x4, 0x2, 0x1, 0x38, 0x4, 0x3, 0x9, 0x10}) 461.004864ms ago: executing program 1 (id=789): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) creat(&(0x7f0000002000)='./file0\x00', 0xa) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) memfd_secret(0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) 286.592316ms ago: executing program 0 (id=790): sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 2 (id=791): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(r0, 0x0, 0x1c1) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x331200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000010c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 73.329799][ T5764] cgroup: Unknown subsys name 'net' [ 73.459909][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.093015][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.067232][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.075498][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.080009][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.084644][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.093508][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.098220][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.112395][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.120277][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.127908][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.137548][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.145196][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.154137][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.162212][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.164192][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.170227][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.178826][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.184179][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.191419][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.203854][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.208262][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.218573][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.231824][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.242000][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.249389][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.752834][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.838250][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.887377][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.965716][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.974543][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.982062][ T5779] bridge_slave_0: entered allmulticast mode [ 77.989845][ T5779] bridge_slave_0: entered promiscuous mode [ 78.027221][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.034797][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.042443][ T5779] bridge_slave_1: entered allmulticast mode [ 78.049418][ T5779] bridge_slave_1: entered promiscuous mode [ 78.106179][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.134570][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.142040][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.149256][ T5773] bridge_slave_0: entered allmulticast mode [ 78.156553][ T5773] bridge_slave_0: entered promiscuous mode [ 78.194966][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.202258][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.209390][ T5775] bridge_slave_0: entered allmulticast mode [ 78.216638][ T5775] bridge_slave_0: entered promiscuous mode [ 78.226066][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.233280][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.240445][ T5775] bridge_slave_1: entered allmulticast mode [ 78.249217][ T5775] bridge_slave_1: entered promiscuous mode [ 78.256506][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.263908][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.271088][ T5773] bridge_slave_1: entered allmulticast mode [ 78.278414][ T5773] bridge_slave_1: entered promiscuous mode [ 78.288646][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.301879][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.384785][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.396992][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.450705][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.465037][ T5779] team0: Port device team_slave_0 added [ 78.490419][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.514878][ T5779] team0: Port device team_slave_1 added [ 78.537543][ T5775] team0: Port device team_slave_0 added [ 78.546689][ T5775] team0: Port device team_slave_1 added [ 78.568356][ T5773] team0: Port device team_slave_0 added [ 78.624885][ T5773] team0: Port device team_slave_1 added [ 78.632001][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.638976][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.664968][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.678591][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.685663][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.712281][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.723720][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.730892][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.739360][ T5774] bridge_slave_0: entered allmulticast mode [ 78.746579][ T5774] bridge_slave_0: entered promiscuous mode [ 78.789643][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.797198][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.805909][ T5774] bridge_slave_1: entered allmulticast mode [ 78.813026][ T5774] bridge_slave_1: entered promiscuous mode [ 78.820225][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.828278][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.854647][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.867913][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.875180][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.901647][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.977104][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.984193][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.010773][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.023446][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.030414][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.056529][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.070630][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.113917][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.139484][ T5775] hsr_slave_0: entered promiscuous mode [ 79.146414][ T5775] hsr_slave_1: entered promiscuous mode [ 79.172117][ T5779] hsr_slave_0: entered promiscuous mode [ 79.178556][ T5779] hsr_slave_1: entered promiscuous mode [ 79.185429][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.193789][ T5779] Cannot create hsr debugfs directory [ 79.240554][ T5774] team0: Port device team_slave_0 added [ 79.243211][ T5782] Bluetooth: hci2: command tx timeout [ 79.254402][ T5774] team0: Port device team_slave_1 added [ 79.289934][ T5773] hsr_slave_0: entered promiscuous mode [ 79.296784][ T5773] hsr_slave_1: entered promiscuous mode [ 79.303608][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.311214][ T5773] Cannot create hsr debugfs directory [ 79.323845][ T5087] Bluetooth: hci3: command tx timeout [ 79.323866][ T5783] Bluetooth: hci0: command tx timeout [ 79.331400][ T5782] Bluetooth: hci1: command tx timeout [ 79.386172][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.393644][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.420215][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.433808][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.440786][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.467859][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.593396][ T5774] hsr_slave_0: entered promiscuous mode [ 79.599961][ T5774] hsr_slave_1: entered promiscuous mode [ 79.606776][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.614554][ T5774] Cannot create hsr debugfs directory [ 79.880682][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.900429][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.936721][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.947038][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.027355][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.058713][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.082576][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.100075][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.156165][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.169111][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.180003][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.193798][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.276302][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.288214][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.300439][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.316728][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.407012][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.450482][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.484031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.491586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.538922][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.546104][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.573299][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.603624][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.646581][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.665253][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.685404][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.700627][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.707776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.720626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.727787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.756838][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.776399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.783572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.795537][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.838084][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.845276][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.883802][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.890964][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.323687][ T5782] Bluetooth: hci2: command tx timeout [ 81.356246][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.407489][ T5782] Bluetooth: hci3: command tx timeout [ 81.412660][ T5087] Bluetooth: hci1: command tx timeout [ 81.412975][ T5783] Bluetooth: hci0: command tx timeout [ 81.521008][ T5775] veth0_vlan: entered promiscuous mode [ 81.549894][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.558376][ T5775] veth1_vlan: entered promiscuous mode [ 81.583379][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.598648][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.706666][ T5774] veth0_vlan: entered promiscuous mode [ 81.715647][ T5775] veth0_macvtap: entered promiscuous mode [ 81.759904][ T5775] veth1_macvtap: entered promiscuous mode [ 81.769986][ T5774] veth1_vlan: entered promiscuous mode [ 81.777029][ T5779] veth0_vlan: entered promiscuous mode [ 81.793741][ T5773] veth0_vlan: entered promiscuous mode [ 81.807383][ T5779] veth1_vlan: entered promiscuous mode [ 81.880013][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.898426][ T5773] veth1_vlan: entered promiscuous mode [ 81.956498][ T5779] veth0_macvtap: entered promiscuous mode [ 81.968439][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.002526][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.011686][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020399][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.029807][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.065194][ T5773] veth0_macvtap: entered promiscuous mode [ 82.087075][ T5774] veth0_macvtap: entered promiscuous mode [ 82.097254][ T5779] veth1_macvtap: entered promiscuous mode [ 82.147175][ T5774] veth1_macvtap: entered promiscuous mode [ 82.168098][ T5773] veth1_macvtap: entered promiscuous mode [ 82.229294][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.246844][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.260625][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.277819][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.296659][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.308639][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.378861][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.393281][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.403344][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.414054][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.427366][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.437591][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.449586][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.460374][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.471179][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.482299][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.494509][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.507170][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.517428][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.527012][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.537168][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.546471][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.574870][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.586254][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.596641][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.608361][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.620210][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.630957][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.641901][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.651952][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.662543][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.673653][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.684594][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.695925][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.724400][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733367][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.742706][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.752318][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787785][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796885][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.805877][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.814729][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.847126][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.860463][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.963991][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.976046][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.071030][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.085055][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.179785][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.183321][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.212865][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.220847][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.290406][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.310826][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.376838][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.395865][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.405724][ T5783] Bluetooth: hci2: command tx timeout [ 83.482499][ T5783] Bluetooth: hci0: command tx timeout [ 83.487961][ T5783] Bluetooth: hci3: command tx timeout [ 83.494357][ T5782] Bluetooth: hci1: command tx timeout [ 83.551050][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.601485][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.442896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.492379][ T5087] Bluetooth: hci2: command tx timeout [ 85.562705][ T5087] Bluetooth: hci3: command tx timeout [ 85.562713][ T5783] Bluetooth: hci1: command tx timeout [ 85.562749][ T5783] Bluetooth: hci0: command tx timeout [ 85.676380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.962033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.042214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.597827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.606907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.682014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.699940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.762620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.842632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.832596][ T5866] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.112880][ T785] cfg80211: failed to load regulatory.db [ 92.216433][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.543991][ T5947] dvmrp8: entered allmulticast mode [ 98.242869][ T5951] input: syz1 as /devices/virtual/input/input5 [ 100.792912][ T5973] syz.1.33[5973]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.876168][ T5973] loop1: detected capacity change from 0 to 2048 [ 100.950637][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.296031][ T5985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.33: bg 0: block 234: padding at end of block bitmap is not set [ 101.318090][ T5985] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 212 with error 28 [ 101.338137][ T5985] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.338137][ T5985] [ 101.354558][ T5985] EXT4-fs (loop1): Total free blocks count 0 [ 101.360808][ T5985] EXT4-fs (loop1): Free/Dirty block details [ 101.367347][ T5985] EXT4-fs (loop1): free_blocks=0 [ 101.375074][ T5985] EXT4-fs (loop1): dirty_blocks=224 [ 101.381242][ T5985] EXT4-fs (loop1): Block reservation details [ 101.393652][ T5985] EXT4-fs (loop1): i_reserved_data_blocks=14 [ 102.064133][ T5994] dvmrp8: entered allmulticast mode [ 102.122733][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.237263][ T5999] loop0: detected capacity change from 0 to 256 [ 102.336756][ T5999] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.381328][ T5999] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 102.492573][ T5999] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 102.656739][ T6010] vivid-004: disconnect [ 103.126402][ T6006] loop1: detected capacity change from 0 to 512 [ 103.259782][ T27] audit: type=1326 audit(1750151356.337:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.292396][ T6003] vivid-004: reconnect [ 103.310876][ T27] audit: type=1326 audit(1750151356.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.333483][ T27] audit: type=1326 audit(1750151356.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.355881][ T27] audit: type=1326 audit(1750151356.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.378010][ T27] audit: type=1326 audit(1750151356.347:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.511962][ T27] audit: type=1326 audit(1750151356.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.580962][ T27] audit: type=1326 audit(1750151356.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.610707][ T27] audit: type=1326 audit(1750151356.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.668770][ T27] audit: type=1326 audit(1750151356.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 103.740385][ T27] audit: type=1326 audit(1750151356.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 104.004061][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.084126][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 104.114192][ T6006] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.227140][ T6025] input: syz1 as /devices/virtual/input/input6 [ 104.497450][ T6030] loop2: detected capacity change from 0 to 2048 [ 104.550758][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.599221][ T6037] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 104.612412][ T6037] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 104.647001][ T6038] mmap: syz.0.43 (6038) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.652487][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.734788][ T6030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.47: bg 0: block 234: padding at end of block bitmap is not set [ 104.769709][ T6030] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 230 with error 28 [ 104.800488][ T6030] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.800488][ T6030] [ 104.846328][ T6030] EXT4-fs (loop2): Total free blocks count 0 [ 104.876173][ T6030] EXT4-fs (loop2): Free/Dirty block details [ 104.893080][ T6030] EXT4-fs (loop2): free_blocks=0 [ 104.900142][ T6030] EXT4-fs (loop2): dirty_blocks=240 [ 104.910652][ T6030] EXT4-fs (loop2): Block reservation details [ 104.917706][ T6030] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 104.934221][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.948984][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 104.964132][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.982478][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.990974][ T9] usb 2-1: Product: syz [ 105.031337][ T9] usb 2-1: Manufacturer: syz [ 105.047885][ T9] usb 2-1: SerialNumber: syz [ 105.102205][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.444179][ T9] usb 2-1: found format II with max.bitrate = 2418, frame size=7 [ 105.452722][ T9] usb 2-1: 2:1: All rates were zero [ 105.946689][ T9] usb 2-1: USB disconnect, device number 2 [ 106.328149][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.792057][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 107.901176][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 110.698718][ T6084] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 111.810706][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 112.260685][ T6099] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.272626][ T6099] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.891688][ T42] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 113.243406][ T42] usb 4-1: device descriptor read/64, error -71 [ 113.343542][ T6109] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 113.352865][ T6109] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 113.981915][ T42] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.777259][ T42] usb 4-1: device descriptor read/64, error -71 [ 116.671122][ T42] usb usb4-port1: attempt power cycle [ 118.171606][ T6155] loop0: detected capacity change from 0 to 2048 [ 118.420725][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.117441][ T6162] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 119.126759][ T6162] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 119.568521][ T6155] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.81: bg 0: block 234: padding at end of block bitmap is not set [ 119.839487][ T6155] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 164 with error 28 [ 119.863943][ T6155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.863943][ T6155] [ 119.877321][ T6155] EXT4-fs (loop0): Total free blocks count 0 [ 119.892314][ T6155] EXT4-fs (loop0): Free/Dirty block details [ 119.899419][ T6155] EXT4-fs (loop0): free_blocks=0 [ 119.912557][ T6155] EXT4-fs (loop0): dirty_blocks=176 [ 119.917881][ T6155] EXT4-fs (loop0): Block reservation details [ 119.991514][ T6155] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 120.748000][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.564472][ T6200] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 123.574751][ T6200] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 123.996993][ T6203] loop1: detected capacity change from 0 to 2048 [ 124.114989][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.265912][ T6203] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.94: bg 0: block 234: padding at end of block bitmap is not set [ 124.332618][ T6203] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 14 with error 28 [ 124.375038][ T6203] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.375038][ T6203] [ 124.440863][ T6203] EXT4-fs (loop1): Total free blocks count 0 [ 124.458071][ T6203] EXT4-fs (loop1): Free/Dirty block details [ 124.491884][ T6203] EXT4-fs (loop1): free_blocks=0 [ 124.503231][ T6203] EXT4-fs (loop1): dirty_blocks=16 [ 124.518302][ T6203] EXT4-fs (loop1): Block reservation details [ 124.534921][ T6203] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.622256][ T3425] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 126.585347][ T5783] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 126.597026][ T5783] Bluetooth: hci1: Injecting HCI hardware error event [ 126.607332][ T5782] Bluetooth: hci1: hardware error 0x00 [ 127.085120][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 127.207129][ T6248] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 127.217231][ T6248] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 127.803805][ T9] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 127.817428][ T9] usb 1-1: config 54 has no interface number 0 [ 127.849343][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 127.884138][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.908073][ T9] usb 1-1: Product: syz [ 127.920383][ T9] usb 1-1: Manufacturer: syz [ 127.950781][ T9] usb 1-1: SerialNumber: syz [ 128.032188][ T6253] loop1: detected capacity change from 0 to 2048 [ 128.466826][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.513593][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 128.519829][ T31] usb 1-1: Failed to submit usb control message: -71 [ 128.531108][ T9] usb 1-1: USB disconnect, device number 2 [ 128.541948][ T31] usb 1-1: unable to send the bmi data to the device: -71 [ 128.549845][ T31] usb 1-1: unable to get target info from device [ 128.559400][ T31] usb 1-1: could not get target info (-71) [ 128.568479][ T31] usb 1-1: could not probe fw (-71) [ 128.681732][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 128.694113][ T6253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.110: bg 0: block 234: padding at end of block bitmap is not set [ 128.752110][ T6253] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1060 with error 28 [ 128.774079][ T6253] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.774079][ T6253] [ 128.795959][ T6253] EXT4-fs (loop1): Total free blocks count 0 [ 128.803892][ T6253] EXT4-fs (loop1): Free/Dirty block details [ 128.820803][ T6253] EXT4-fs (loop1): free_blocks=0 [ 128.859887][ T6253] EXT4-fs (loop1): dirty_blocks=1072 [ 128.869190][ T6253] EXT4-fs (loop1): Block reservation details [ 128.878146][ T6253] EXT4-fs (loop1): i_reserved_data_blocks=67 [ 129.906506][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.704044][ T6282] input: syz1 as /devices/virtual/input/input9 [ 134.648147][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.657374][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.242870][ T6315] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 137.011429][ T6330] input: syz1 as /devices/virtual/input/input10 [ 139.757774][ T6359] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 139.783288][ T6360] overlayfs: failed to resolve './bus': -2 [ 139.799473][ T6359] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 140.826152][ T6372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.837418][ T6372] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.084177][ T6402] overlayfs: failed to resolve './bus': -2 [ 150.141748][ T6427] overlayfs: overlapping lowerdir path [ 150.507806][ T6428] dvmrp8: entered allmulticast mode [ 150.775880][ T6429] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 151.436308][ T5818] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 151.720321][ T6431] loop1: detected capacity change from 0 to 2048 [ 151.895007][ T5818] usb 3-1: device descriptor read/64, error -71 [ 151.920348][ T6435] overlayfs: failed to resolve './bus': -2 [ 151.937796][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.634515][ T6431] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.157: bg 0: block 234: padding at end of block bitmap is not set [ 152.732299][ T6431] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 52 with error 28 [ 152.941836][ T6431] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.941836][ T6431] [ 153.004890][ T6431] EXT4-fs (loop1): Total free blocks count 0 [ 153.011147][ T6431] EXT4-fs (loop1): Free/Dirty block details [ 153.018198][ T6431] EXT4-fs (loop1): free_blocks=0 [ 153.023556][ T6431] EXT4-fs (loop1): dirty_blocks=64 [ 153.028893][ T6431] EXT4-fs (loop1): Block reservation details [ 153.212292][ T6431] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 154.309906][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.977356][ T6457] vivid-000: disconnect [ 155.207868][ T6448] vivid-000: reconnect [ 155.216972][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 155.216985][ T27] audit: type=1326 audit(1750151408.327:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 155.252477][ T27] audit: type=1326 audit(1750151408.327:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 155.740829][ T27] audit: type=1326 audit(1750151408.327:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 155.933374][ T27] audit: type=1326 audit(1750151408.327:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 156.076462][ T27] audit: type=1326 audit(1750151408.327:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 156.145132][ T27] audit: type=1326 audit(1750151408.327:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 156.216828][ T27] audit: type=1326 audit(1750151408.327:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 156.788894][ T27] audit: type=1326 audit(1750151408.327:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 157.097534][ T27] audit: type=1326 audit(1750151408.327:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 157.154977][ T27] audit: type=1326 audit(1750151408.327:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 157.577756][ T6481] overlayfs: overlapping lowerdir path [ 157.617745][ T6481] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 158.861503][ T5817] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 159.101447][ T5817] usb 1-1: device descriptor read/64, error -71 [ 161.371307][ T5817] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 162.282053][ T6510] dvmrp8: entered allmulticast mode [ 165.281549][ T6542] overlayfs: overlapping lowerdir path [ 165.352426][ T6543] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 165.701635][ T5818] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 165.930747][ T6545] syz.1.192 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 166.011464][ T5818] usb 4-1: device descriptor read/64, error -71 [ 167.063318][ T5818] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 169.809484][ T6578] vivid-004: disconnect [ 170.176555][ T6587] input: syz1 as /devices/virtual/input/input11 [ 170.652212][ T6592] overlayfs: overlapping lowerdir path [ 171.093072][ T6593] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 171.348685][ T6588] sched: RT throttling activated [ 171.349391][ T6576] vivid-004: reconnect [ 171.382518][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 171.382532][ T27] audit: type=1326 audit(1750151424.497:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 173.087943][ T785] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 174.936865][ T6634] vivid-004: disconnect [ 176.242147][ T6644] overlayfs: overlapping lowerdir path [ 176.523143][ T6645] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 177.339528][ T6626] vivid-004: reconnect [ 177.421403][ T27] audit: type=1326 audit(1750151430.497:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 177.593644][ T27] audit: type=1326 audit(1750151430.497:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.2.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f59ff98e929 code=0x7fc00000 [ 177.791378][ T785] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 179.551915][ T785] usb 2-1: device descriptor read/64, error -71 [ 181.855864][ T6693] vivid-000: disconnect [ 182.338255][ T6694] overlayfs: overlapping lowerdir path [ 182.350649][ T6694] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 182.403490][ T6684] vivid-000: reconnect [ 182.408381][ T27] audit: type=1326 audit(1750151435.527:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.501089][ T27] audit: type=1326 audit(1750151435.527:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.625894][ T27] audit: type=1326 audit(1750151435.527:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.658655][ T27] audit: type=1326 audit(1750151435.527:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.694262][ T27] audit: type=1326 audit(1750151435.527:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.722776][ T27] audit: type=1326 audit(1750151435.527:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.758903][ T27] audit: type=1326 audit(1750151435.527:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.786224][ T27] audit: type=1326 audit(1750151435.527:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 182.809303][ T27] audit: type=1326 audit(1750151435.527:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 183.203247][ T27] audit: type=1326 audit(1750151435.527:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 183.225856][ T785] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 183.225906][ T27] audit: type=1326 audit(1750151435.527:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7fc00000 [ 183.612527][ T785] usb 3-1: device descriptor read/64, error -71 [ 184.221874][ T785] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 184.297301][ T6715] loop3: detected capacity change from 0 to 256 [ 184.315417][ T6715] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.371571][ T6715] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 184.391894][ T785] usb 3-1: device descriptor read/64, error -71 [ 184.449469][ T6715] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 184.512925][ T785] usb usb3-port1: attempt power cycle [ 186.748192][ T6731] vivid-002: disconnect [ 187.633286][ T6725] vivid-002: reconnect [ 187.641771][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 187.641785][ T27] audit: type=1326 audit(1750151440.757:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 188.456750][ T27] audit: type=1326 audit(1750151440.757:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 188.551919][ T27] audit: type=1326 audit(1750151440.757:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.341529][ T27] audit: type=1326 audit(1750151440.757:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.389948][ T27] audit: type=1326 audit(1750151440.757:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.486269][ T27] audit: type=1326 audit(1750151440.757:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.608176][ T27] audit: type=1326 audit(1750151440.757:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.669745][ T27] audit: type=1326 audit(1750151440.757:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.736910][ T27] audit: type=1326 audit(1750151440.757:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.806994][ T27] audit: type=1326 audit(1750151440.757:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7fc00000 [ 189.908504][ T6758] loop1: detected capacity change from 0 to 256 [ 189.944164][ T6758] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.957505][ T6758] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 190.132890][ T6761] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.462255][ T6758] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 191.174277][ T6766] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 191.184079][ T6766] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 191.242899][ T5818] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 191.541430][ T5818] usb 4-1: device descriptor read/64, error -71 [ 191.921674][ T5818] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 192.175552][ T5818] usb 4-1: device descriptor read/64, error -71 [ 192.386129][ T5818] usb usb4-port1: attempt power cycle [ 194.160511][ T6791] loop0: detected capacity change from 0 to 256 [ 194.177184][ T6791] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.468648][ T6791] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 194.506289][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.516366][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.107749][ T6791] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 196.738983][ T6803] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 196.748026][ T6803] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 197.462978][ T6806] loop1: detected capacity change from 0 to 2048 [ 197.560150][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.272291][ T6806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.267: bg 0: block 234: padding at end of block bitmap is not set [ 198.334040][ T6806] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 168 with error 28 [ 198.375463][ T6806] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.375463][ T6806] [ 198.385275][ T6806] EXT4-fs (loop1): Total free blocks count 0 [ 198.391364][ T6806] EXT4-fs (loop1): Free/Dirty block details [ 198.397298][ T6806] EXT4-fs (loop1): free_blocks=0 [ 198.402321][ T6806] EXT4-fs (loop1): dirty_blocks=176 [ 198.407548][ T6806] EXT4-fs (loop1): Block reservation details [ 198.413607][ T6806] EXT4-fs (loop1): i_reserved_data_blocks=11 [ 198.508604][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.856120][ T6822] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 199.252825][ T1186] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 199.621478][ T1186] usb 1-1: device descriptor read/64, error -71 [ 200.805338][ T6835] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.817184][ T6835] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 201.271701][ T1186] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 201.401501][ T5818] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 201.449310][ T6840] loop3: detected capacity change from 0 to 256 [ 201.589592][ T1186] usb 1-1: device descriptor read/64, error -71 [ 201.598106][ T6840] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.647030][ T6840] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 201.656331][ T5818] usb 2-1: device descriptor read/64, error -71 [ 201.741730][ T1186] usb usb1-port1: attempt power cycle [ 201.753503][ T6840] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 201.869195][ T6844] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 201.876094][ T6844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.885334][ T6844] vhci_hcd vhci_hcd.0: Device attached [ 201.916108][ T6845] vhci_hcd: connection closed [ 201.949326][ T12] vhci_hcd: stop threads [ 201.981649][ T5818] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 202.080008][ T12] vhci_hcd: release socket [ 202.363164][ T12] vhci_hcd: disconnect device [ 202.880893][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 202.887147][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 202.898011][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 202.936835][ T5818] usb 2-1: device descriptor read/64, error -71 [ 203.077518][ T5818] usb usb2-port1: attempt power cycle [ 203.658906][ T6852] loop2: detected capacity change from 0 to 2048 [ 203.715892][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.898036][ T6852] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.279: bg 0: block 234: padding at end of block bitmap is not set [ 203.960138][ T6852] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 240 with error 28 [ 203.980731][ T6852] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.980731][ T6852] [ 203.991457][ T6852] EXT4-fs (loop2): Total free blocks count 0 [ 203.997576][ T6852] EXT4-fs (loop2): Free/Dirty block details [ 204.003683][ T6852] EXT4-fs (loop2): free_blocks=0 [ 204.008750][ T6852] EXT4-fs (loop2): dirty_blocks=240 [ 204.014304][ T6852] EXT4-fs (loop2): Block reservation details [ 204.025141][ T6852] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 204.245697][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.249016][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 206.640470][ T6882] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 207.321573][ T5818] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 207.831404][ T5818] usb 2-1: device descriptor read/64, error -71 [ 208.111932][ T5818] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 208.178740][ T6895] loop0: detected capacity change from 0 to 2048 [ 208.397687][ T6895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.537214][ T6895] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.292: bg 0: block 234: padding at end of block bitmap is not set [ 208.571579][ T6895] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28 [ 208.592665][ T6895] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.592665][ T6895] [ 208.608259][ T6895] EXT4-fs (loop0): Total free blocks count 0 [ 208.614848][ T6895] EXT4-fs (loop0): Free/Dirty block details [ 208.626413][ T6895] EXT4-fs (loop0): free_blocks=0 [ 208.632064][ T6895] EXT4-fs (loop0): dirty_blocks=256 [ 208.637754][ T6895] EXT4-fs (loop0): Block reservation details [ 208.644441][ T5818] usb 2-1: device descriptor read/64, error -71 [ 208.650924][ T6895] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 208.704096][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.459926][ T5818] usb usb2-port1: attempt power cycle [ 210.496320][ T6929] loop3: detected capacity change from 0 to 2048 [ 210.554542][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.709936][ T6929] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.304: bg 0: block 234: padding at end of block bitmap is not set [ 210.730658][ T6929] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 378 with error 28 [ 210.822175][ T6929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.822175][ T6929] [ 210.848224][ T6929] EXT4-fs (loop3): Total free blocks count 0 [ 210.866224][ T6929] EXT4-fs (loop3): Free/Dirty block details [ 210.889902][ T6929] EXT4-fs (loop3): free_blocks=0 [ 210.904769][ T6929] EXT4-fs (loop3): dirty_blocks=384 [ 210.926365][ T6929] EXT4-fs (loop3): Block reservation details [ 210.946696][ T6929] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 211.699293][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.382934][ T6948] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 212.582187][ T5818] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.871481][ T5817] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 213.087786][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.112787][ T5818] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.125188][ T5818] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.134347][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.142463][ T5818] usb 1-1: SerialNumber: syz [ 213.251476][ T5817] usb 4-1: device descriptor read/64, error -71 [ 213.528693][ T5818] usb 1-1: 0:2 : does not exist [ 213.654166][ T5818] usb 1-1: USB disconnect, device number 8 [ 213.701359][ T5817] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 213.724215][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.777782][ T5817] usb 4-1: device descriptor read/64, error -71 [ 214.987314][ T5817] usb usb4-port1: attempt power cycle [ 215.155222][ T6967] loop1: detected capacity change from 0 to 2048 [ 215.327581][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.245455][ T6970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 216.296142][ T6973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.315: bg 0: block 234: padding at end of block bitmap is not set [ 216.414782][ T6973] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 984 with error 117 [ 216.437763][ T6973] EXT4-fs (loop1): This should not happen!! Data will be lost [ 216.437763][ T6973] [ 216.787082][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.356251][ T7001] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 218.905811][ T5817] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 219.436690][ T7013] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 219.445895][ T7013] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 220.353395][ T5817] usb 3-1: device descriptor read/64, error -71 [ 222.086683][ T7020] loop0: detected capacity change from 0 to 2048 [ 222.778133][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.078031][ T7020] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.328: bg 0: block 234: padding at end of block bitmap is not set [ 223.119891][ T7020] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 78 with error 28 [ 223.155555][ T7020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 223.155555][ T7020] [ 223.181444][ T7020] EXT4-fs (loop0): Total free blocks count 0 [ 223.202060][ T7020] EXT4-fs (loop0): Free/Dirty block details [ 223.231868][ T7020] EXT4-fs (loop0): free_blocks=0 [ 223.254897][ T7020] EXT4-fs (loop0): dirty_blocks=80 [ 223.274249][ T7020] EXT4-fs (loop0): Block reservation details [ 223.300571][ T7020] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 223.453462][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.366466][ T7056] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 225.389785][ T7057] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 225.398829][ T7057] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 226.738199][ T5817] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 226.892178][ T5817] usb 4-1: device descriptor read/64, error -71 [ 227.907054][ T5817] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 230.831727][ T7109] overlayfs: missing 'lowerdir' [ 230.858596][ T7109] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 231.489131][ T7111] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 231.499309][ T7111] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 234.111789][ T1186] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 234.331426][ T1186] usb 1-1: device descriptor read/64, error -71 [ 234.570263][ T7130] overlayfs: failed to resolve './file0': -2 [ 234.621372][ T1186] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 234.791400][ T1186] usb 1-1: device descriptor read/64, error -71 [ 235.090929][ T1186] usb usb1-port1: attempt power cycle [ 235.931509][ T7147] loop0: detected capacity change from 0 to 512 [ 236.082675][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.096850][ T7147] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.191380][ T1186] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.263478][ T1186] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.286537][ T1186] usb 1-1: config 1 interface 1 has no altsetting 0 [ 237.296563][ T1186] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.311335][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.330790][ T1186] usb 1-1: Product: syz [ 237.339742][ T1186] usb 1-1: Manufacturer: syz [ 237.349896][ T1186] usb 1-1: SerialNumber: syz [ 238.473069][ T1186] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 238.480909][ T1186] usb 1-1: 2:1: All rates were zero [ 238.577206][ T1186] usb 1-1: USB disconnect, device number 11 [ 238.827615][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 238.993654][ T7181] overlayfs: missing 'lowerdir' [ 239.101738][ T7182] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 239.571823][ T5817] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 239.669639][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.841421][ T5817] usb 4-1: device descriptor read/64, error -71 [ 240.865619][ T5817] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 241.031384][ T5817] usb 4-1: device descriptor read/64, error -71 [ 241.161765][ T5817] usb usb4-port1: attempt power cycle [ 241.571406][ T5817] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 241.623334][ T5817] usb 4-1: device descriptor read/8, error -71 [ 243.501622][ T7226] overlayfs: missing 'lowerdir' [ 243.557277][ T7226] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 243.981532][ T5817] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 244.172974][ T5817] usb 4-1: device descriptor read/8, error -71 [ 244.331617][ T5817] usb usb4-port1: unable to enumerate USB device [ 248.598849][ T7273] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 248.608312][ T7273] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 249.936594][ T7282] overlay: Unknown parameter '/' [ 249.962273][ T7282] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 250.603996][ T5817] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 250.831408][ T5817] usb 1-1: device descriptor read/64, error -71 [ 251.111435][ T5817] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 251.311745][ T5817] usb 1-1: device descriptor read/64, error -71 [ 251.463052][ T5817] usb usb1-port1: attempt power cycle [ 251.931453][ T5817] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 251.976321][ T5817] usb 1-1: device descriptor read/8, error -71 [ 252.062985][ T7298] Bluetooth: MGMT ver 1.22 [ 252.411323][ T5817] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 253.143403][ T5817] usb 1-1: device descriptor read/8, error -71 [ 253.295947][ T5817] usb usb1-port1: unable to enumerate USB device [ 253.337065][ T7308] loop0: detected capacity change from 0 to 256 [ 253.355338][ T7308] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.381295][ T7308] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 253.426196][ T7308] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 254.991721][ T7324] netlink: 'syz.3.426': attribute type 3 has an invalid length. [ 255.304636][ T7332] overlay: Unknown parameter '/' [ 255.350708][ T7332] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.721638][ T23] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 255.885797][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895094][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.032534][ T23] usb 3-1: device descriptor read/64, error -71 [ 256.125907][ T7334] loop3: detected capacity change from 0 to 256 [ 256.145290][ T7334] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.162111][ T7334] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 256.179103][ T7334] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 256.426835][ T7336] Zero length message leads to an empty skb [ 256.491350][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 256.662277][ T23] usb 3-1: device descriptor read/64, error -71 [ 256.852974][ T23] usb usb3-port1: attempt power cycle [ 257.588976][ T23] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 257.626847][ T23] usb 3-1: device descriptor read/8, error -71 [ 258.892817][ T7372] loop0: detected capacity change from 0 to 256 [ 258.907532][ T7372] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.931367][ T7372] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 258.958929][ T7372] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 261.057266][ T7387] overlay: Unknown parameter '/' [ 261.105254][ T7387] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 261.552536][ T23] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 262.781519][ T23] usb 1-1: device descriptor read/64, error -71 [ 263.091331][ T23] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 263.335455][ T23] usb 1-1: device descriptor read/64, error -71 [ 263.471676][ T23] usb usb1-port1: attempt power cycle [ 263.531358][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.725244][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.741304][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.763444][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.781283][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.811587][ T9] usb 3-1: SerialNumber: syz [ 265.167771][ T9] usb 3-1: 0:2 : does not exist [ 265.352273][ T9] usb 3-1: USB disconnect, device number 14 [ 265.472908][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.323429][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 267.130867][ T7444] overlayfs: failed to resolve './file1': -2 [ 267.721796][ T42] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 267.889177][ T42] usb 2-1: device descriptor read/64, error -71 [ 268.183186][ T42] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 268.922784][ T42] usb 2-1: device descriptor read/64, error -71 [ 269.126585][ T42] usb usb2-port1: attempt power cycle [ 269.201708][ T7461] netlink: 'syz.0.472': attribute type 3 has an invalid length. [ 269.641635][ T42] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 270.181405][ T42] usb 2-1: device not accepting address 13, error -71 [ 272.103488][ T7492] netlink: 'syz.2.482': attribute type 3 has an invalid length. [ 272.545561][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 274.698919][ T7518] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 275.421417][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 278.662521][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.505'. [ 282.527285][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 286.184091][ T7643] netlink: 260 bytes leftover after parsing attributes in process `syz.1.529'. [ 287.591352][ T5820] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 287.781283][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 287.810113][ T5820] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 287.858312][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.889128][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.899909][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.928745][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.951712][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.989503][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.319143][ T5820] usb 4-1: GET_CAPABILITIES returned 0 [ 288.330134][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 289.431936][ T5820] usb 4-1: USB disconnect, device number 20 [ 289.666658][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.539'. [ 290.890422][ T7691] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 290.899770][ T7691] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 296.085473][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 299.842834][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 301.563837][ T7773] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 301.572860][ T7773] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 303.951401][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 304.649445][ T7808] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 304.658729][ T7808] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 307.289949][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 308.562093][ T7847] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 308.571062][ T7847] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 309.704475][ T7852] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.715594][ T7852] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 310.011355][ T42] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 310.349990][ T42] usb 1-1: device descriptor read/64, error -71 [ 310.651522][ T42] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 311.220246][ T42] usb 1-1: device descriptor read/64, error -71 [ 311.381747][ T42] usb usb1-port1: attempt power cycle [ 311.592574][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.599'. [ 312.115408][ T42] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 313.588073][ T42] usb 1-1: device descriptor read/8, error -71 [ 314.114620][ T7896] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 314.149264][ T7896] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 314.521668][ T42] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 314.614746][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.676549][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.736317][ T42] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.751471][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.760159][ T42] usb 1-1: SerialNumber: syz [ 314.994988][ T42] usb 1-1: 0:2 : does not exist [ 315.042951][ T42] usb 1-1: USB disconnect, device number 22 [ 315.129942][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.328874][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.338493][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956052][ T7924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.967762][ T7924] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.451538][ T42] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 318.731299][ T42] usb 3-1: device descriptor read/64, error -71 [ 319.011415][ T42] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 319.300995][ T7941] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 319.311154][ T7941] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 320.180596][ T42] usb 3-1: device descriptor read/64, error -71 [ 320.302838][ T42] usb usb3-port1: attempt power cycle [ 321.841270][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 321.931942][ T7959] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 321.940876][ T7959] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 322.072281][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.103257][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.230831][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.333827][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.459315][ T9] usb 1-1: SerialNumber: syz [ 322.966163][ T9] usb 1-1: 0:2 : does not exist [ 323.052090][ T9] usb 1-1: USB disconnect, device number 23 [ 323.201399][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.569986][ T7999] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 327.576547][ T7999] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.602171][ T7999] vhci_hcd vhci_hcd.0: Device attached [ 327.631326][ T8000] vhci_hcd: connection closed [ 327.633108][ T58] vhci_hcd: stop threads [ 327.689285][ T58] vhci_hcd: release socket [ 327.716740][ T58] vhci_hcd: disconnect device [ 327.771345][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 327.981258][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 328.652928][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 328.672630][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.691268][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.707893][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.760659][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.812237][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.830047][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.856025][ T8009] loop2: detected capacity change from 0 to 256 [ 328.904512][ T8009] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.980245][ T8009] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 329.028855][ T8009] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 329.069963][ T9] usb 2-1: usb_control_msg returned -71 [ 329.087111][ T9] usbtmc 2-1:16.0: can't read capabilities [ 329.327400][ T9] usb 2-1: USB disconnect, device number 15 [ 330.545439][ T8026] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 330.585584][ T8026] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 333.479262][ T8050] loop1: detected capacity change from 0 to 256 [ 333.497437][ T8050] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.511981][ T8050] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 333.530185][ T8050] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 333.671537][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 334.141434][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 334.297050][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 334.339748][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.401294][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.491497][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.521552][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.551872][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.579704][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.842630][ T9] usb 4-1: usb_control_msg returned -71 [ 334.848295][ T9] usbtmc 4-1:16.0: can't read capabilities [ 334.891929][ T9] usb 4-1: USB disconnect, device number 21 [ 336.526102][ T8083] loop1: detected capacity change from 0 to 256 [ 336.574367][ T8083] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.591342][ T8083] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 336.646446][ T8079] trusted_key: encrypted_key: insufficient parameters specified [ 336.677903][ T8086] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.763591][ T8083] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 336.823664][ T8086] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.077717][ T8089] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 337.148356][ T8089] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 337.881401][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 338.058290][ T9] usb 4-1: device descriptor read/64, error -71 [ 338.341388][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 339.241347][ T9] usb 4-1: device descriptor read/64, error -71 [ 339.403454][ T9] usb usb4-port1: attempt power cycle [ 339.716558][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 339.716574][ T27] audit: type=1326 audit(1750151592.837:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 339.758375][ T27] audit: type=1326 audit(1750151592.837:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 339.821445][ T27] audit: type=1326 audit(1750151592.867:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 339.851408][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 339.962071][ T27] audit: type=1326 audit(1750151592.867:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 339.984252][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.991053][ T27] audit: type=1326 audit(1750151592.867:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.013874][ T27] audit: type=1326 audit(1750151592.867:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.035983][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.049962][ T27] audit: type=1326 audit(1750151592.867:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.072654][ T27] audit: type=1326 audit(1750151592.867:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.095873][ T27] audit: type=1326 audit(1750151592.867:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.118066][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.190066][ T27] audit: type=1326 audit(1750151592.867:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ff98e929 code=0x7ffc0000 [ 340.501295][ T9] usb 4-1: device descriptor read/8, error -71 [ 344.112908][ T8150] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 344.159665][ T8150] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 348.546834][ C1] Unknown status report in ack skb [ 348.823503][ T8187] loop3: detected capacity change from 0 to 512 [ 349.097638][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 349.116920][ T8187] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.212120][ T8195] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 349.250283][ T8195] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 349.711271][ T5870] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 349.905817][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.940505][ T5870] usb 4-1: config 1 interface 1 has no altsetting 0 [ 349.948728][ T8200] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 349.968222][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.998840][ T8200] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 350.001254][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.034133][ T5870] usb 4-1: Product: syz [ 350.038402][ T5870] usb 4-1: Manufacturer: syz [ 350.051579][ T5870] usb 4-1: SerialNumber: syz [ 350.147130][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'. [ 350.319281][ T5870] usb 4-1: found format II with max.bitrate = 2418, frame size=7 [ 350.328973][ T5870] usb 4-1: 2:1: All rates were zero [ 350.411918][ T5870] usb 4-1: USB disconnect, device number 26 [ 350.455367][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.621400][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.813657][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.833142][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.852713][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.862369][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.880337][ T9] usb 2-1: SerialNumber: syz [ 351.021696][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 351.250199][ T9] usb 2-1: 0:2 : does not exist [ 351.298489][ T9] usb 2-1: USB disconnect, device number 16 [ 351.340503][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.391400][ T5818] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 352.583685][ T5818] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 352.600858][ T5818] usb 2-1: config 54 has no interface number 0 [ 352.625124][ T5818] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 352.645863][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.661516][ T5818] usb 2-1: Product: syz [ 352.671740][ T5818] usb 2-1: Manufacturer: syz [ 352.681813][ T5818] usb 2-1: SerialNumber: syz [ 352.923459][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 352.932869][ T31] usb 2-1: Failed to submit usb control message: -71 [ 352.940681][ T31] usb 2-1: unable to send the bmi data to the device: -71 [ 352.948175][ T5818] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 352.952693][ T31] usb 2-1: unable to get target info from device [ 352.974904][ T31] usb 2-1: could not get target info (-71) [ 352.983626][ T5818] usb 2-1: USB disconnect, device number 17 [ 353.000412][ T31] usb 2-1: could not probe fw (-71) [ 353.409254][ T8240] loop2: detected capacity change from 0 to 512 [ 353.487720][ T8240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 353.514519][ T8240] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.538657][ T8244] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 353.637220][ T8244] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 354.061498][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 354.257344][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.281079][ T8] usb 3-1: config 1 interface 1 has no altsetting 0 [ 354.305932][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.318257][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.333237][ T8] usb 3-1: Product: syz [ 354.339870][ T8] usb 3-1: Manufacturer: syz [ 354.345924][ T8] usb 3-1: SerialNumber: syz [ 354.389776][ T8252] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 354.408167][ T8252] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 354.590786][ T8] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 354.607605][ T8] usb 3-1: 2:1: All rates were zero [ 354.644579][ T8] usb 3-1: USB disconnect, device number 18 [ 354.685000][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.736211][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.975211][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.720'. [ 357.377670][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 357.377729][ T27] audit: type=1326 audit(1750151610.487:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7ffc0000 [ 357.766004][ T27] audit: type=1326 audit(1750151610.487:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3bd398e929 code=0x7ffc0000 [ 357.899208][ T27] audit: type=1326 audit(1750151610.487:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7ffc0000 [ 357.921409][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.927896][ T27] audit: type=1326 audit(1750151610.497:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd398e929 code=0x7ffc0000 [ 358.233043][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 358.914487][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 359.962894][ T8289] loop3: detected capacity change from 0 to 512 [ 360.307823][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.356101][ T8289] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.991813][ T785] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 362.921323][ T5087] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 362.929877][ T5087] Bluetooth: hci2: Injecting HCI hardware error event [ 362.938137][ T5780] Bluetooth: hci2: hardware error 0x00 [ 363.739402][ T785] usb 4-1: device descriptor read/all, error -71 [ 363.932994][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 365.081447][ T27] audit: type=1326 audit(1750151618.127:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.081311][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 366.247966][ T27] audit: type=1326 audit(1750151618.127:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.274257][ T27] audit: type=1326 audit(1750151618.277:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.297258][ T27] audit: type=1326 audit(1750151618.277:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.319769][ T27] audit: type=1326 audit(1750151618.277:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.346408][ T27] audit: type=1326 audit(1750151618.587:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.627647][ T27] audit: type=1326 audit(1750151618.587:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.705636][ T27] audit: type=1326 audit(1750151618.587:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.727979][ T27] audit: type=1326 audit(1750151618.617:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 366.800625][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 366.811594][ T8337] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 366.820522][ T8337] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 368.555783][ T27] audit: type=1326 audit(1750151621.627:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77878e929 code=0x7ffc0000 [ 368.578008][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.986168][ T8352] loop2: detected capacity change from 0 to 512 [ 369.122776][ T8352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 369.162007][ T8352] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.603146][ T5821] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 370.041097][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 370.103540][ T5821] usb 3-1: config 1 interface 1 has no altsetting 0 [ 370.172315][ T5821] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.343612][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.456263][ T5821] usb 3-1: Product: syz [ 370.647436][ T5821] usb 3-1: Manufacturer: syz [ 370.652681][ T5821] usb 3-1: SerialNumber: syz [ 370.918852][ T5821] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 370.935772][ T5821] usb 3-1: 2:1: All rates were zero [ 370.970007][ T5821] usb 3-1: USB disconnect, device number 19 [ 371.050899][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.056507][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 372.576929][ T8400] trusted_key: encrypted_key: insufficient parameters specified [ 373.312423][ C1] Unknown status report in ack skb [ 373.547533][ T8412] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 373.556642][ T8412] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 374.051279][ T5872] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 374.254348][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.960231][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.963218][ T8426] loop2: detected capacity change from 0 to 512 [ 374.971092][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.985019][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.996988][ T5872] usb 1-1: SerialNumber: syz [ 375.504139][ T5872] usb 1-1: 0:2 : does not exist [ 375.673755][ T8426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 375.731768][ T8426] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.759076][ T5872] usb 1-1: USB disconnect, device number 24 [ 376.025801][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.321292][ T785] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 376.527791][ T785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 376.537779][ T785] usb 3-1: config 1 interface 1 has no altsetting 0 [ 376.549060][ T785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.558678][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.689230][ T785] usb 3-1: Product: syz [ 376.710213][ T785] usb 3-1: Manufacturer: syz [ 376.725381][ T785] usb 3-1: SerialNumber: syz [ 376.988456][ T785] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 377.017787][ T785] usb 3-1: 2:1: All rates were zero [ 377.147066][ T8458] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 377.156322][ T8458] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 377.892079][ T785] usb 3-1: USB disconnect, device number 20 [ 378.109894][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.388998][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 378.811136][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817647][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.157006][ T8500] loop3: detected capacity change from 0 to 512 [ 381.470252][ T8500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 381.614199][ T8500] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.415984][ T8517] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 382.440709][ T8517] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 382.636370][ C1] ------------[ cut here ]------------ [ 382.641984][ C1] WARNING: CPU: 1 PID: 8518 at net/mac80211/tx.c:5019 __ieee80211_beacon_get+0x1233/0x1600 [ 382.652136][ C1] Modules linked in: [ 382.656129][ C1] CPU: 1 PID: 8518 Comm: syz.2.791 Not tainted 6.6.93-syzkaller #0 [ 382.664094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.674220][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 382.680600][ C1] Code: 24 4c 89 e7 e8 ce dd dd f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 57 9f f7 0f 0b e9 f6 f7 ff ff e8 0d 57 9f f7 <0f> 0b e9 48 fb ff ff e8 01 57 9f f7 48 c7 c7 e0 28 23 8e 4c 89 e6 [ 382.700320][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 382.706456][ C1] RAX: ffffffff89e63fd3 RBX: ffffffff89e62dd6 RCX: ffff888027490000 [ 382.714525][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.722544][ C1] RBP: 0000000000000000 R08: ffff888027490000 R09: 0000000000000003 [ 382.730520][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d74a3c0 [ 382.738539][ C1] R13: dffffc0000000000 R14: ffff88805d74a8b0 R15: ffff88805dd66824 [ 382.746549][ C1] FS: 00007f5a007cd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 382.755520][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.762175][ C1] CR2: 000000110c35dacf CR3: 000000001bb68000 CR4: 00000000003506e0 [ 382.770156][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.778173][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.786194][ C1] Call Trace: [ 382.789504][ C1] [ 382.792387][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 382.797972][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 382.803472][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 382.810267][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 382.815899][ C1] __iterate_interfaces+0x243/0x500 [ 382.821147][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 382.827467][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 382.834725][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 382.840999][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 382.848075][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 382.853375][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 382.858614][ C1] ? hw_scan_work+0x1060/0x1060 [ 382.863554][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 382.868705][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 382.874855][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 382.879985][ C1] handle_softirqs+0x280/0x820 [ 382.884787][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 382.889563][ C1] ? do_softirq+0x180/0x180 [ 382.894118][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 382.899347][ C1] __irq_exit_rcu+0xc7/0x190 [ 382.903986][ C1] ? irq_exit_rcu+0x20/0x20 [ 382.908507][ C1] irq_exit_rcu+0x9/0x20 [ 382.912781][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 382.918447][ C1] [ 382.921440][ C1] [ 382.924380][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.930373][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 382.936947][ C1] Code: 74 05 e8 ba 46 1c f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b2 b0 eb f6 65 8b 05 c3 06 94 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 382.957263][ C1] RSP: 0018:ffffc9000448f580 EFLAGS: 00000206 [ 382.963428][ C1] RAX: 8878e32d8c4f9500 RBX: 0000000000000a02 RCX: 8878e32d8c4f9500 [ 382.971428][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 382.979409][ C1] RBP: ffffc9000448f618 R08: ffffffff90d845cf R09: 1ffffffff21b08b9 [ 382.987417][ C1] R10: dffffc0000000000 R11: fffffbfff21b08ba R12: dffffc0000000000 [ 382.995421][ C1] R13: 1ffff1100feb9946 R14: ffff88807f5cc9d0 R15: 1ffff92000891eb0 [ 383.003435][ C1] ? _raw_spin_unlock+0x40/0x40 [ 383.008311][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 383.013842][ C1] ? sock_load_diag_module+0x140/0x140 [ 383.019351][ C1] __unix_dgram_recvmsg+0x2d5/0xd60 [ 383.024630][ C1] ? unix_unhash+0x10/0x10 [ 383.029098][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 383.034249][ C1] ? mark_lock+0x94/0x320 [ 383.038589][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 383.043643][ C1] ? unix_dgram_sendmsg+0x1720/0x1720 [ 383.049024][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 383.053926][ C1] ____sys_recvmsg+0x49b/0x5b0 [ 383.058707][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 383.063781][ C1] ? import_iovec+0x73/0xa0 [ 383.068388][ C1] ___sys_recvmsg+0x1b6/0x510 [ 383.073137][ C1] ? __sys_recvmsg+0x270/0x270 [ 383.077926][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 383.083010][ C1] ? __might_fault+0xc6/0x120 [ 383.087696][ C1] ? __might_fault+0xaa/0x120 [ 383.092404][ C1] do_recvmmsg+0x360/0x7d0 [ 383.096838][ C1] ? __sys_recvmmsg+0x280/0x280 [ 383.101737][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 383.107468][ C1] ? rcu_read_lock_sched_held+0x8a/0x100 [ 383.113133][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 383.118184][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 383.122979][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 383.128183][ C1] do_syscall_64+0x55/0xb0 [ 383.132628][ C1] ? clear_bhb_loop+0x40/0x90 [ 383.137319][ C1] ? clear_bhb_loop+0x40/0x90 [ 383.142118][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.148111][ C1] RIP: 0033:0x7f59ff98e929 [ 383.152643][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.172382][ C1] RSP: 002b:00007f5a007cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 383.180809][ C1] RAX: ffffffffffffffda RBX: 00007f59ffbb6080 RCX: 00007f59ff98e929 [ 383.188823][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 383.196904][ C1] RBP: 00007f59ffa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 383.205259][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 383.213282][ C1] R13: 0000000000000000 R14: 00007f59ffbb6080 R15: 00007ffe65753d28 [ 383.221301][ C1] [ 383.224329][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.231610][ C1] CPU: 1 PID: 8518 Comm: syz.2.791 Not tainted 6.6.93-syzkaller #0 [ 383.239506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.249570][ C1] Call Trace: [ 383.252863][ C1] [ 383.255706][ C1] dump_stack_lvl+0x16c/0x230 [ 383.260409][ C1] ? show_regs_print_info+0x20/0x20 [ 383.265621][ C1] ? load_image+0x3b0/0x3b0 [ 383.270142][ C1] panic+0x2c0/0x710 [ 383.274049][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 383.278568][ C1] __warn+0x2e0/0x470 [ 383.282556][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.288285][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.294024][ C1] report_bug+0x2be/0x4f0 [ 383.298362][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.304179][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.309909][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 383.315638][ C1] handle_bug+0xcf/0x120 [ 383.319895][ C1] exc_invalid_op+0x1a/0x50 [ 383.324405][ C1] asm_exc_invalid_op+0x1a/0x20 [ 383.329278][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 383.335614][ C1] Code: 24 4c 89 e7 e8 ce dd dd f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 57 9f f7 0f 0b e9 f6 f7 ff ff e8 0d 57 9f f7 <0f> 0b e9 48 fb ff ff e8 01 57 9f f7 48 c7 c7 e0 28 23 8e 4c 89 e6 [ 383.355223][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 383.361298][ C1] RAX: ffffffff89e63fd3 RBX: ffffffff89e62dd6 RCX: ffff888027490000 [ 383.369270][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.377245][ C1] RBP: 0000000000000000 R08: ffff888027490000 R09: 0000000000000003 [ 383.385222][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d74a3c0 [ 383.393196][ C1] R13: dffffc0000000000 R14: ffff88805d74a8b0 R15: ffff88805dd66824 [ 383.401191][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 383.406843][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.412576][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 383.418302][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 383.423858][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 383.429332][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 383.436110][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 383.441686][ C1] __iterate_interfaces+0x243/0x500 [ 383.446894][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 383.453139][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 383.460347][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 383.466601][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 383.473635][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 383.478868][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 383.484081][ C1] ? hw_scan_work+0x1060/0x1060 [ 383.488943][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 383.494058][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 383.500146][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 383.505278][ C1] handle_softirqs+0x280/0x820 [ 383.510054][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 383.514829][ C1] ? do_softirq+0x180/0x180 [ 383.519334][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 383.524541][ C1] __irq_exit_rcu+0xc7/0x190 [ 383.529133][ C1] ? irq_exit_rcu+0x20/0x20 [ 383.533646][ C1] irq_exit_rcu+0x9/0x20 [ 383.537888][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 383.543540][ C1] [ 383.546476][ C1] [ 383.549410][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.555394][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 383.561915][ C1] Code: 74 05 e8 ba 46 1c f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b2 b0 eb f6 65 8b 05 c3 06 94 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 383.581529][ C1] RSP: 0018:ffffc9000448f580 EFLAGS: 00000206 [ 383.587601][ C1] RAX: 8878e32d8c4f9500 RBX: 0000000000000a02 RCX: 8878e32d8c4f9500 [ 383.595576][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 383.603563][ C1] RBP: ffffc9000448f618 R08: ffffffff90d845cf R09: 1ffffffff21b08b9 [ 383.611538][ C1] R10: dffffc0000000000 R11: fffffbfff21b08ba R12: dffffc0000000000 [ 383.619515][ C1] R13: 1ffff1100feb9946 R14: ffff88807f5cc9d0 R15: 1ffff92000891eb0 [ 383.627590][ C1] ? _raw_spin_unlock+0x40/0x40 [ 383.632459][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 383.637935][ C1] ? sock_load_diag_module+0x140/0x140 [ 383.643411][ C1] __unix_dgram_recvmsg+0x2d5/0xd60 [ 383.648717][ C1] ? unix_unhash+0x10/0x10 [ 383.653152][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 383.658273][ C1] ? mark_lock+0x94/0x320 [ 383.662629][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 383.667745][ C1] ? unix_dgram_sendmsg+0x1720/0x1720 [ 383.673134][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 383.678098][ C1] ____sys_recvmsg+0x49b/0x5b0 [ 383.682966][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 383.688009][ C1] ? import_iovec+0x73/0xa0 [ 383.692519][ C1] ___sys_recvmsg+0x1b6/0x510 [ 383.697202][ C1] ? __sys_recvmsg+0x270/0x270 [ 383.701983][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 383.707019][ C1] ? __might_fault+0xc6/0x120 [ 383.711702][ C1] ? __might_fault+0xaa/0x120 [ 383.716388][ C1] do_recvmmsg+0x360/0x7d0 [ 383.720816][ C1] ? __sys_recvmmsg+0x280/0x280 [ 383.725681][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 383.731412][ C1] ? rcu_read_lock_sched_held+0x8a/0x100 [ 383.737060][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 383.742094][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 383.746690][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 383.751897][ C1] do_syscall_64+0x55/0xb0 [ 383.756328][ C1] ? clear_bhb_loop+0x40/0x90 [ 383.761008][ C1] ? clear_bhb_loop+0x40/0x90 [ 383.765703][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.771629][ C1] RIP: 0033:0x7f59ff98e929 [ 383.776055][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.795664][ C1] RSP: 002b:00007f5a007cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 383.804083][ C1] RAX: ffffffffffffffda RBX: 00007f59ffbb6080 RCX: 00007f59ff98e929 [ 383.812078][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 383.820057][ C1] RBP: 00007f59ffa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 383.828115][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 383.836085][ C1] R13: 0000000000000000 R14: 00007f59ffbb6080 R15: 00007ffe65753d28 [ 383.844071][ C1] [ 383.847404][ C1] Kernel Offset: disabled [ 383.851773][ C1] Rebooting in 86400 seconds..