last executing test programs: 8.348085721s ago: executing program 0 (id=3514): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 8.217853394s ago: executing program 0 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 8.201734325s ago: executing program 2 (id=3516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='SS', 0x2}], 0x1}, 0x4010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 8.028662429s ago: executing program 2 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7e, 0xffffffffffffffff, 0x3, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 7.98627074s ago: executing program 0 (id=3519): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c413ecd2d036a2762bb626c65640a", 0x10) 7.024889624s ago: executing program 0 (id=3521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$rnullb(0xffffff9c, &(0x7f0000000540)={'/dev/syzrnull', 0x0}, 0x200, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000580)=0xfffffe00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x24001, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200008d0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, r7, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x812) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 5.274304448s ago: executing program 3 (id=3523): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5.202277909s ago: executing program 3 (id=3524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20044010) 4.636287984s ago: executing program 0 (id=3526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0xe, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0xa44, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4.539904186s ago: executing program 2 (id=3527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='SS', 0x2}], 0x1}, 0x4010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 4.466276228s ago: executing program 2 (id=3528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x4, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x40}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 4.173273325s ago: executing program 1 (id=3529): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c413ecd2d036a2762bb626c65640a", 0x10) 4.068075118s ago: executing program 3 (id=3530): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001dc0)="1d8b870177046784264d7e60590d2bf92bd1ca9b12a3d1b4bb52435810dda5", 0x1f}], 0x1}}], 0x1, 0x80) 3.919145272s ago: executing program 3 (id=3531): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000d2ad000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000001600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000183a00fe8000000000000000000000000000bbff02000000000000000000000000000184"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.159710271s ago: executing program 1 (id=3532): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3.060911233s ago: executing program 1 (id=3533): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x4000000) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0xc000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) 2.128655006s ago: executing program 1 (id=3534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$rnullb(0xffffff9c, &(0x7f0000000540)={'/dev/syzrnull', 0x0}, 0x200, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000580)=0xfffffe00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x24001, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200008d0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, r7, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x812) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 279.547103ms ago: executing program 3 (id=3535): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x705, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004844) 193.098965ms ago: executing program 1 (id=3536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='SS', 0x2}], 0x1}, 0x4010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 188.869455ms ago: executing program 2 (id=3537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)={@cgroup=r1, r1, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r1}, 0x10) 111.033437ms ago: executing program 3 (id=3538): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) listen(r0, 0x7) 109.379187ms ago: executing program 0 (id=3539): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001dc0)="1d8b870177046784264d7e60590d2bf9", 0x10}], 0x1}}], 0x1, 0x80) 56.978638ms ago: executing program 1 (id=3540): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4850) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000700)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3b, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @random="bc7dd4e39344", {0x1, 0xff}}, 0x2, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x8c}, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x6, "739ae2e111e7"}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) 0s ago: executing program 2 (id=3541): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1037.770364][T12540] usb 3-1: USB disconnect, device number 34 [ 1038.153443][ T28] audit: type=1800 audit(1791599760.527:5743): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2473" name="file0" dev="overlay" ino=132 res=0 errno=0 [ 1038.216599][ T27] vhci_hcd: vhci_device speed not set [ 1039.109228][ T12] bond0 (unregistering): Released all slaves [ 1039.336740][T14634] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.583521][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1039.590095][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1039.597960][T14882] vhci_hcd vhci_hcd.0: Device attached [ 1039.870574][T12953] vhci_hcd: vhci_device speed not set [ 1039.881690][T14634] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.000438][T12953] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 1040.850240][T14883] vhci_hcd: connection closed [ 1040.850646][ T7102] vhci_hcd: stop threads [ 1040.859704][ T7102] vhci_hcd: release socket [ 1040.961006][T14888] md: couldn't update array info. -22 [ 1040.981794][T14888] md: could not open device unknown-block(1,1). [ 1041.007079][ T7102] vhci_hcd: disconnect device [ 1041.012902][T14888] md: md_import_device returned -16 [ 1041.012982][T14885] netlink: 'syz.3.2477': attribute type 10 has an invalid length. [ 1041.109629][T14634] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.137061][T14888] netlink: 'syz.3.2477': attribute type 10 has an invalid length. [ 1041.203931][T14634] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.479928][ T12] IPVS: stop unused estimator thread 0... [ 1041.686106][T14902] block nbd3: shutting down sockets [ 1041.807837][T14634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1041.960642][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1043.031934][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.235647][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.347981][T14634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1043.410949][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1043.609344][T14904] syz_tun: vlans aren't supported yet for dev_uc|mc_add() [ 1043.666625][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.697257][T14634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1043.771646][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.909688][T14634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1044.024659][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1044.120642][ T9] usb 4-1: invalid MIDI out EP 0 [ 1044.369829][ T9] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1044.400677][ T9] usb 4-1: USB disconnect, device number 42 [ 1044.481862][T14913] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1044.517774][T14634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.268197][T14634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.363902][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.371125][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.454601][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.461758][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.728696][T14927] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1045.735274][T14927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1045.743618][T14927] vhci_hcd vhci_hcd.0: Device attached [ 1046.422398][T14928] vhci_hcd: connection reset by peer [ 1046.464478][ T1081] vhci_hcd: stop threads [ 1046.529271][ T1081] vhci_hcd: release socket [ 1046.603099][ T1081] vhci_hcd: disconnect device [ 1046.680228][T12953] vhci_hcd: vhci_device speed not set [ 1047.009868][T14933] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 1047.068397][T14933] team0: Port device dummy0 added [ 1047.141146][T14933] md: couldn't update array info. -22 [ 1047.153628][T14933] md: could not open device unknown-block(1,1). [ 1047.161999][T14933] md: md_import_device returned -16 [ 1047.202990][T14933] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 1047.316202][T14933] team0: Port device dummy0 removed [ 1047.589967][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.601262][T14954] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1048.523280][T14958] block nbd3: shutting down sockets [ 1049.300691][T14954] hub 1-0:1.0: USB hub found [ 1049.340273][ T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1049.348574][T14954] hub 1-0:1.0: 1 port detected [ 1049.514520][T14634] veth0_vlan: entered promiscuous mode [ 1049.557318][T14634] veth1_vlan: entered promiscuous mode [ 1049.609940][ T23] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.646641][T14634] veth0_macvtap: entered promiscuous mode [ 1049.657890][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1049.663453][T14634] veth1_macvtap: entered promiscuous mode [ 1049.703215][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.725246][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.733795][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1049.747545][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.768125][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.791680][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.820499][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.823758][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1049.850107][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.866516][ T23] usb 4-1: invalid MIDI out EP 0 [ 1050.231240][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1050.283059][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.397414][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.415180][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.464717][T14127] udevd[14127]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.483553][T12953] usb 4-1: USB disconnect, device number 43 [ 1050.517980][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.545744][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.568769][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.606489][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.647335][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.689373][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.765584][T14634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.792051][T14634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.820168][T14634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.828923][T14634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.246773][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.615160][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.631035][T14990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1051.637590][T14990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1051.645622][T14990] vhci_hcd vhci_hcd.0: Device attached [ 1051.870870][T12540] vhci_hcd: vhci_device speed not set [ 1052.030255][T12540] usb 39-1: new full-speed USB device number 14 using vhci_hcd [ 1052.060655][T14991] vhci_hcd: connection closed [ 1052.071398][ T11] vhci_hcd: stop threads [ 1052.212079][ T11] vhci_hcd: release socket [ 1052.291209][ T11] vhci_hcd: disconnect device [ 1052.588435][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.621406][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1052.636911][T14998] bridge0: port 3(batadv1) entered blocking state [ 1052.648768][T14998] bridge0: port 3(batadv1) entered disabled state [ 1052.648979][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.655519][T14998] batadv1: entered allmulticast mode [ 1052.669547][T14998] batadv1: entered promiscuous mode [ 1052.886187][T15006] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1052.896287][T15006] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 1052.922937][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1052.933198][T15006] md: couldn't update array info. -22 [ 1052.954470][T15006] md: could not open device unknown-block(1,1). [ 1052.972523][T15006] md: md_import_device returned -16 [ 1053.133118][T15006] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 1053.157177][ T3499] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1053.167621][ T3499] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1053.930344][ T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1054.174076][ T23] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.323134][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.517850][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.556998][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.582826][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.904155][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.042133][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.417290][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1055.633392][ T23] usb 4-1: invalid MIDI out EP 0 [ 1056.782920][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1056.806402][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1056.833971][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1056.865336][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1056.884096][ T23] usb 4-1: USB disconnect, device number 44 [ 1056.894995][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1056.907009][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1056.915260][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1056.922744][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1057.021986][ T1081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.066593][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1057.252500][T12540] vhci_hcd: vhci_device speed not set [ 1057.336915][ T1081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.480944][ T1081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.621996][ T1081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.657556][T15048] netlink: 'syz.1.2507': attribute type 11 has an invalid length. [ 1057.692538][T15048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1058.184981][ T1081] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.252753][ T1081] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.269445][T15060] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1058.323436][ T1081] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.334723][T15063] jffs2: notice: (15063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1058.371246][T15060] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 1058.950640][ T5834] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1059.010985][ T5776] Bluetooth: hci0: command tx timeout [ 1060.354648][T15060] team0: Port device dummy0 added [ 1060.387388][ T1081] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.442783][ T5834] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.498240][T15071] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 1060.507852][ T28] audit: type=1800 audit(1791599782.887:5744): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2510" name="file0" dev="overlay" ino=232 res=0 errno=0 [ 1060.529095][ T5834] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1060.546815][ T5834] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.567232][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.577070][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.609082][ T5834] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1060.635409][ T5834] usb 3-1: invalid MIDI out EP 0 [ 1060.716102][T15071] team0: Port device dummy0 removed [ 1060.805251][T15029] chnl_net:caif_netlink_parms(): no params data found [ 1060.822504][T14112] udevd[14112]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.007831][ T5834] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1061.025259][ T5834] usb 3-1: USB disconnect, device number 35 [ 1061.025573][ T1081] tipc: Left network mode [ 1061.098020][ T5783] Bluetooth: hci0: command tx timeout [ 1062.670671][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.677925][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.685759][T15029] bridge_slave_0: entered allmulticast mode [ 1062.696399][T15029] bridge_slave_0: entered promiscuous mode [ 1062.707033][ T5834] IPVS: starting estimator thread 0... [ 1062.711530][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.730899][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.738273][T15029] bridge_slave_1: entered allmulticast mode [ 1062.767999][T15029] bridge_slave_1: entered promiscuous mode [ 1062.811512][T15105] IPVS: using max 21 ests per chain, 50400 per kthread [ 1062.935552][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.975329][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.070656][T15110] netlink: 'syz.1.2516': attribute type 11 has an invalid length. [ 1063.110208][T15110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2516'. [ 1063.170227][ T5783] Bluetooth: hci0: command tx timeout [ 1063.414316][T15029] team0: Port device team_slave_0 added [ 1063.496147][T15130] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2520'. [ 1063.533451][T15029] team0: Port device team_slave_1 added [ 1063.562249][T15130] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 1063.635135][T15130] md: couldn't update array info. -22 [ 1063.653083][T15130] md: could not open device unknown-block(1,1). [ 1063.671726][T15130] md: md_import_device returned -16 [ 1063.916587][T15130] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 1063.930924][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.949659][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.028633][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.302018][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.380259][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.410294][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.810303][ T5834] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1065.047080][ T5834] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.229432][ T5834] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.250195][ T5783] Bluetooth: hci0: command tx timeout [ 1065.415494][ T5834] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.612503][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1065.761740][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.199946][ T5834] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1066.404404][ T5834] usb 2-1: invalid MIDI out EP 0 [ 1066.761936][T15029] hsr_slave_0: entered promiscuous mode [ 1066.935171][T15029] hsr_slave_1: entered promiscuous mode [ 1067.132817][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.599289][T15029] Cannot create hsr debugfs directory [ 1067.789427][ T5834] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1067.809097][ T5834] usb 2-1: USB disconnect, device number 41 [ 1068.908004][ T1081] hsr_slave_0: left promiscuous mode [ 1068.915792][ T1081] hsr_slave_1: left promiscuous mode [ 1068.925227][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.933442][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.942548][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.950398][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.958228][ T1081] bridge_slave_1: left allmulticast mode [ 1068.964996][ T1081] bridge_slave_1: left promiscuous mode [ 1068.971171][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.987247][ T1081] bridge_slave_0: left allmulticast mode [ 1069.000286][ T1081] bridge_slave_0: left promiscuous mode [ 1069.016396][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.080712][ T1081] veth1_macvtap: left promiscuous mode [ 1069.086349][ T1081] veth0_macvtap: left promiscuous mode [ 1069.096755][ T1081] veth1_vlan: left promiscuous mode [ 1069.106266][ T1081] veth0_vlan: left promiscuous mode [ 1069.798714][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1069.847362][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1069.899311][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.962532][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.496295][ T1081] bond0 (unregistering): Released all slaves [ 1070.579358][T15171] netlink: 'syz.3.2527': attribute type 11 has an invalid length. [ 1070.600162][T15171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1070.740887][T15184] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1070.766460][T15184] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 1070.830344][T15184] md: couldn't update array info. -22 [ 1070.867860][T15184] md: could not open device unknown-block(1,1). [ 1070.909628][T15184] md: md_import_device returned -16 [ 1070.987644][T15029] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.104629][T15184] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 1071.181565][T15029] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.232538][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'. [ 1071.262734][ T1081] IPVS: stop unused estimator thread 0... [ 1071.297492][T15029] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.399420][T15029] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.668560][T15029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1071.693362][T15029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1071.725092][T15029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1071.751808][T15029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1071.981950][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.095049][T15029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.117530][T15029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.128510][T14570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.135678][T14570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.166927][T15029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.188399][T15029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.290378][T14570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.297569][T14570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.789612][T15246] tipc: Enabled bearer , priority 1 [ 1073.865699][T15029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.965100][T15239] tipc: Resetting bearer [ 1074.033824][T15239] tipc: Disabling bearer [ 1074.073815][T15255] netlink: 'syz.2.2539': attribute type 11 has an invalid length. [ 1074.093595][T15255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1074.193353][T15029] veth0_vlan: entered promiscuous mode [ 1074.226929][T15029] veth1_vlan: entered promiscuous mode [ 1074.250404][T15263] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2540'. [ 1074.276930][T15263] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 1074.317815][T15029] veth0_macvtap: entered promiscuous mode [ 1074.336214][T15029] veth1_macvtap: entered promiscuous mode [ 1074.337728][T15263] md: couldn't update array info. -22 [ 1074.358695][T15263] md: could not open device unknown-block(1,1). [ 1074.367276][T15263] md: md_import_device returned -16 [ 1074.374200][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1074.426009][T15263] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 1074.442568][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.463415][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.473956][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.484836][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.495311][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.506816][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.518616][T15029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.552033][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.579418][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.590523][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.601422][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.611880][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.623825][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.635540][T15029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.649730][T15029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.659623][T15029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.669782][T15029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.678850][T15029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.794257][T14019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.807802][T14019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.843736][T14019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.853583][T14019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.125916][T15297] syzkaller0: entered promiscuous mode [ 1076.160467][T15297] syzkaller0: entered allmulticast mode [ 1076.306190][T15304] netlink: 'syz.1.2548': attribute type 11 has an invalid length. [ 1076.328451][T15304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1076.523868][T15315] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2549'. [ 1076.558419][T15315] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 1076.743219][T15315] md: couldn't update array info. -22 [ 1076.836966][T15323] md: could not open device unknown-block(1,1). [ 1076.931776][T15323] md: md_import_device returned -16 [ 1077.044301][T15315] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 1077.606725][T15325] tipc: Enabled bearer , priority 1 [ 1077.677993][T15324] tipc: Resetting bearer [ 1077.827487][T15324] tipc: Disabling bearer [ 1078.965662][T15353] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1079.072853][T15354] hub 1-0:1.0: USB hub found [ 1079.080387][T15354] hub 1-0:1.0: 1 port detected [ 1079.978298][T15362] netlink: 'syz.1.2559': attribute type 11 has an invalid length. [ 1080.003475][T15362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1080.055082][T15369] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2560'. [ 1080.108342][T15369] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 1080.127614][T15369] md: couldn't update array info. -22 [ 1080.149211][T15369] md: could not open device unknown-block(1,1). [ 1080.155941][T15369] md: md_import_device returned -16 [ 1080.170536][T15369] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 1082.934239][T15384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1082.940800][T15384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1082.948337][T15384] vhci_hcd vhci_hcd.0: Device attached [ 1082.972660][T15389] vhci_hcd: connection closed [ 1082.972902][ T989] vhci_hcd: stop threads [ 1082.996406][ T989] vhci_hcd: release socket [ 1083.003502][ T989] vhci_hcd: disconnect device [ 1083.219528][T15404] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1083.307923][T15407] hub 1-0:1.0: USB hub found [ 1083.313947][T15407] hub 1-0:1.0: 1 port detected [ 1085.479998][T15412] netlink: 'syz.2.2572': attribute type 11 has an invalid length. [ 1085.489072][T15412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2572'. [ 1086.898708][T15450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1086.905377][T15450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1086.913308][T15450] vhci_hcd vhci_hcd.0: Device attached [ 1087.149312][ T9] vhci_hcd: vhci_device speed not set [ 1087.332228][ T9] usb 39-1: new full-speed USB device number 15 using vhci_hcd [ 1087.643273][T15451] vhci_hcd: connection reset by peer [ 1088.147838][T15457] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1088.242056][T15458] hub 1-0:1.0: USB hub found [ 1088.252588][T15458] hub 1-0:1.0: 1 port detected [ 1089.110546][T15461] block nbd2: shutting down sockets [ 1089.143575][ T989] vhci_hcd: stop threads [ 1089.227880][ T989] vhci_hcd: release socket [ 1089.314367][ T989] vhci_hcd: disconnect device [ 1089.430224][T14240] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1089.943969][T14240] usb 3-1: device descriptor read/64, error -71 [ 1091.520179][T14240] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1091.529098][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1091.663684][T15473] netlink: 'syz.3.2585': attribute type 11 has an invalid length. [ 1091.679174][T15473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2585'. [ 1091.685820][T14240] usb 3-1: device descriptor read/64, error -71 [ 1091.805781][T12540] libceph: connect (1)[c::]:6789 error -101 [ 1091.820511][T14240] usb usb3-port1: attempt power cycle [ 1091.828239][T12540] libceph: mon0 (1)[c::]:6789 connect error [ 1091.902054][T15488] ceph: No mds server is up or the cluster is laggy [ 1092.252716][T14240] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1092.610160][ T9] vhci_hcd: vhci_device speed not set [ 1092.803883][T14240] usb 3-1: device descriptor read/8, error -71 [ 1093.073165][T15510] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1093.079746][T15510] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1093.088023][T15510] vhci_hcd vhci_hcd.0: Device attached [ 1093.350499][T12953] vhci_hcd: vhci_device speed not set [ 1093.513354][T12953] usb 33-1: new full-speed USB device number 11 using vhci_hcd [ 1093.790787][T15511] vhci_hcd: connection reset by peer [ 1093.869527][T14019] vhci_hcd: stop threads [ 1093.940507][T14019] vhci_hcd: release socket [ 1094.017509][T14019] vhci_hcd: disconnect device [ 1094.369696][T15517] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1094.489299][T15523] hub 1-0:1.0: USB hub found [ 1094.496283][T15523] hub 1-0:1.0: 1 port detected [ 1095.868176][T15522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1095.874733][T15522] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1095.882391][T15522] vhci_hcd vhci_hcd.0: Device attached [ 1095.910085][T15526] vhci_hcd: connection closed [ 1095.923289][T14019] vhci_hcd: stop threads [ 1095.954046][T14019] vhci_hcd: release socket [ 1095.989032][T14019] vhci_hcd: disconnect device [ 1097.042945][T15538] block nbd0: shutting down sockets [ 1097.391708][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1097.670297][ T9] usb 1-1: device descriptor read/64, error -71 [ 1098.044936][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1098.342366][ T9] usb 1-1: device descriptor read/64, error -71 [ 1098.605621][ T9] usb usb1-port1: attempt power cycle [ 1099.630195][T12953] vhci_hcd: vhci_device speed not set [ 1099.670567][T15544] tipc: Enabled bearer , priority 1 [ 1099.700982][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1099.707078][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1099.717243][T15542] tipc: Resetting bearer [ 1099.833561][T15560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1099.840148][T15560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1099.848449][T15560] vhci_hcd vhci_hcd.0: Device attached [ 1099.876144][T15553] ceph: No mds server is up or the cluster is laggy [ 1099.970561][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 1099.976653][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 1100.120559][T12540] vhci_hcd: vhci_device speed not set [ 1100.253683][T12540] usb 37-1: new full-speed USB device number 14 using vhci_hcd [ 1100.447512][T15542] tipc: Disabling bearer [ 1100.543575][T15561] vhci_hcd: connection reset by peer [ 1100.587578][ T12] vhci_hcd: stop threads [ 1100.651834][ T12] vhci_hcd: release socket [ 1100.702635][ T12] vhci_hcd: disconnect device [ 1100.775941][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1101.229092][T15576] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1101.382895][T15579] hub 1-0:1.0: USB hub found [ 1101.390482][T15579] hub 1-0:1.0: 1 port detected [ 1102.629045][T15587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1102.635620][T15587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1102.643477][T15587] vhci_hcd vhci_hcd.0: Device attached [ 1103.474747][T14240] vhci_hcd: vhci_device speed not set [ 1103.483971][T15589] vhci_hcd: connection closed [ 1103.486714][T15584] netlink: 'syz.1.2611': attribute type 11 has an invalid length. [ 1103.520169][T14570] vhci_hcd: stop threads [ 1103.524481][T14570] vhci_hcd: release socket [ 1103.529071][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1103.598831][T14570] vhci_hcd: disconnect device [ 1103.604228][T14240] usb 39-1: new full-speed USB device number 16 using vhci_hcd [ 1103.701161][T14240] usb 39-1: enqueue for inactive port 0 [ 1103.766428][T15593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1103.773008][T15593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1103.781207][T15593] vhci_hcd vhci_hcd.0: Device attached [ 1103.931095][T14240] vhci_hcd: vhci_device speed not set [ 1104.888534][T15595] vhci_hcd: connection closed [ 1104.888917][ T42] vhci_hcd: stop threads [ 1104.929385][ T42] vhci_hcd: release socket [ 1104.941882][ T42] vhci_hcd: disconnect device [ 1105.130182][T14240] vhci_hcd: vhci_device speed not set [ 1105.146111][T15604] tipc: Enabled bearer , priority 1 [ 1105.195571][T15606] block nbd2: shutting down sockets [ 1105.318698][T15598] tipc: Resetting bearer [ 1105.470397][ T5815] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1105.752495][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.857693][ T5815] usb 3-1: config 0 has no interfaces? [ 1105.870246][T12540] vhci_hcd: vhci_device speed not set [ 1105.886630][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1105.932905][ T5815] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1105.968026][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1106.048260][T15608] ceph: No mds server is up or the cluster is laggy [ 1106.081656][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1106.091940][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.171544][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1106.296379][ T5815] usb 3-1: config 0 descriptor?? [ 1106.537372][T15598] tipc: Disabling bearer [ 1106.554507][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1106.649405][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1108.304062][ T9] usb 3-1: USB disconnect, device number 40 [ 1108.464517][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 1108.477644][T15625] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1109.382838][T15627] hub 1-0:1.0: USB hub found [ 1109.388326][T15627] hub 1-0:1.0: 1 port detected [ 1110.605759][T15640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1110.612321][T15640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1110.628177][T15640] vhci_hcd vhci_hcd.0: Device attached [ 1110.645370][T15641] vhci_hcd: connection closed [ 1110.675985][ T11] vhci_hcd: stop threads [ 1110.796656][ T11] vhci_hcd: release socket [ 1110.870935][ T11] vhci_hcd: disconnect device [ 1110.884799][T14240] vhci_hcd: vhci_device speed not set [ 1111.129393][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1111.135984][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1111.219810][T15646] ceph: No mds server is up or the cluster is laggy [ 1111.291450][T15653] tipc: Started in network mode [ 1111.339753][T15653] tipc: Node identity ea5c83b791f, cluster identity 4711 [ 1111.408592][T15659] block nbd0: shutting down sockets [ 1111.474045][T15653] tipc: Enabled bearer , priority 1 [ 1111.793608][ T5837] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1112.052758][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.089229][ T5837] usb 1-1: config 0 has no interfaces? [ 1112.112332][ T5837] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.157965][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.226123][ T5837] usb 1-1: config 0 descriptor?? [ 1112.681313][T15651] tipc: Resetting bearer [ 1112.825249][T12953] libceph: connect (1)[c::]:6789 error -101 [ 1112.931727][T15644] Bluetooth: hci3: command 0x0406 tx timeout [ 1114.217602][T12953] libceph: mon0 (1)[c::]:6789 connect error [ 1114.244737][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1114.251775][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1114.276642][T15651] tipc: Disabling bearer [ 1114.319751][ T5837] tipc: Node number set to 2074903479 [ 1114.397161][ T9] usb 1-1: USB disconnect, device number 86 [ 1114.514018][T15668] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1114.619450][T15672] hub 1-0:1.0: USB hub found [ 1114.625159][T15672] hub 1-0:1.0: 1 port detected [ 1115.444678][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 1115.977442][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.984244][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.562888][T15687] jffs2: notice: (15687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1116.647400][T15688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1116.653986][T15688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1116.662009][T15688] vhci_hcd vhci_hcd.0: Device attached [ 1116.920527][ T2183] vhci_hcd: vhci_device speed not set [ 1117.280950][T15690] vhci_hcd: connection closed [ 1117.842820][ T3567] vhci_hcd: stop threads [ 1117.853145][ T3567] vhci_hcd: release socket [ 1117.857730][ T3567] vhci_hcd: disconnect device [ 1117.902514][ T2183] usb 33-1: new full-speed USB device number 12 using vhci_hcd [ 1119.210657][ T2183] usb 33-1: enqueue for inactive port 0 [ 1119.227115][T15702] block nbd0: shutting down sockets [ 1119.600232][ T2183] vhci_hcd: vhci_device speed not set [ 1119.619827][T15705] tipc: Enabled bearer , priority 1 [ 1119.639065][T15704] tipc: Resetting bearer [ 1119.658513][T15707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1119.669103][T15704] tipc: Disabling bearer [ 1119.790121][T12953] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1119.993923][T12953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.100484][T12953] usb 1-1: config 0 has no interfaces? [ 1120.166607][T12953] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1120.177981][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 1120.266836][T12953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.491940][T12953] usb 1-1: config 0 descriptor?? [ 1120.814172][ T2183] usb 1-1: USB disconnect, device number 87 [ 1122.288942][T15737] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1122.461534][T15735] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1122.468107][T15735] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1122.475888][T15735] vhci_hcd vhci_hcd.0: Device attached [ 1122.537739][T15734] jffs2: notice: (15734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1122.581767][T15737] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1122.810582][ T9] vhci_hcd: vhci_device speed not set [ 1122.922729][T15736] vhci_hcd: connection closed [ 1123.472692][ T3567] vhci_hcd: stop threads [ 1123.482238][ T2183] IPVS: starting estimator thread 0... [ 1123.527499][ T3567] vhci_hcd: release socket [ 1123.532158][ T3567] vhci_hcd: disconnect device [ 1123.570314][T15740] IPVS: using max 19 ests per chain, 45600 per kthread [ 1123.594077][ T9] usb 39-1: new full-speed USB device number 17 using vhci_hcd [ 1123.612841][ T9] usb 39-1: enqueue for inactive port 0 [ 1123.635258][T15748] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1123.659222][T15748] jffs2: notice: (15748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1123.709938][ T9] vhci_hcd: vhci_device speed not set [ 1123.941439][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 1125.445430][T15775] block nbd1: shutting down sockets [ 1125.862620][ T2183] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1127.181953][T15782] jffs2: notice: (15782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1127.276630][ T2183] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.347845][ T2183] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1127.517632][ T2183] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.638800][ T2183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.981844][ T2183] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1128.599542][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1128.664111][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1128.672686][ T2183] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1128.682367][ T2183] usb 2-1: USB disconnect, device number 42 [ 1128.715664][T14106] udevd[14106]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.750396][T15789] ceph: No mds server is up or the cluster is laggy [ 1128.757856][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1128.781270][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1129.028867][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1131.176590][T15847] jffs2: notice: (15847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1131.254079][T15849] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1131.263614][T15849] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1131.358039][T12540] IPVS: starting estimator thread 0... [ 1132.106924][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1132.160179][T15852] IPVS: using max 34 ests per chain, 81600 per kthread [ 1132.197005][T15855] ceph: No mds server is up or the cluster is laggy [ 1132.203920][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1132.460618][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 1133.120253][T12953] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1133.314203][T15882] block nbd1: shutting down sockets [ 1133.420271][T12953] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.572724][T12953] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1133.732429][T12953] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1133.864087][T12953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.212918][T12953] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1135.036546][T12953] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1135.260607][T14106] udevd[14106]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.666225][T15873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1136.065459][T14240] usb 2-1: USB disconnect, device number 43 [ 1136.286247][T15901] jffs2: notice: (15901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1138.152050][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1138.181181][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1138.232114][T15927] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 1138.240222][T15927] netlink: 'syz.1.2688': attribute type 2 has an invalid length. [ 1138.254616][T15920] ceph: No mds server is up or the cluster is laggy [ 1139.698660][T15958] block nbd3: shutting down sockets [ 1140.036168][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1140.373765][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.532115][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1140.734817][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1140.877892][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.232950][T15960] netlink: 'syz.2.2693': attribute type 11 has an invalid length. [ 1141.325575][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1141.378658][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2693'. [ 1142.269345][ T9] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1142.466684][T14106] udevd[14106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.580133][T14240] usb 4-1: USB disconnect, device number 45 [ 1143.201894][T15986] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1143.211069][T15986] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1143.662284][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1145.538121][T16022] block nbd0: shutting down sockets [ 1145.840261][T12953] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1146.141567][T12953] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.495318][T12953] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1147.281179][T15998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1147.600213][T12953] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.680575][T12953] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1147.753251][T12953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.815143][T12953] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1147.909641][T12953] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1148.033891][ T5837] usb 1-1: USB disconnect, device number 88 [ 1148.222612][T16042] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1148.231735][T16042] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1149.330865][T16051] netlink: 'syz.0.2710': attribute type 1 has an invalid length. [ 1149.338662][T16051] netlink: 'syz.0.2710': attribute type 2 has an invalid length. [ 1150.331917][T16065] jffs2: notice: (16065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1150.572629][ T28] audit: type=1800 audit(1791599872.947:5745): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2715" name="file0" dev="overlay" ino=353 res=0 errno=0 [ 1152.620583][T16102] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1152.669127][T16102] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1153.811521][T16121] jffs2: notice: (16121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1153.871765][T16119] netlink: 'syz.0.2726': attribute type 11 has an invalid length. [ 1153.898598][T16119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1154.115864][ T28] audit: type=1800 audit(1791599876.487:5746): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2727" name="file0" dev="overlay" ino=581 res=0 errno=0 [ 1154.904559][T16142] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 1154.912740][T16142] netlink: 'syz.0.2731': attribute type 2 has an invalid length. [ 1155.933125][T16153] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1155.949303][T16153] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1156.009974][T14240] IPVS: starting estimator thread 0... [ 1156.160229][T16157] IPVS: using max 27 ests per chain, 64800 per kthread [ 1157.332172][T12953] libceph: connect (1)[c::]:6789 error -101 [ 1157.343810][T12953] libceph: mon0 (1)[c::]:6789 connect error [ 1157.421752][T16175] ceph: No mds server is up or the cluster is laggy [ 1158.337263][T16187] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1158.343842][T16187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1158.351676][T16187] vhci_hcd vhci_hcd.0: Device attached [ 1158.433427][T16188] vhci_hcd: connection closed [ 1158.435550][ T3567] vhci_hcd: stop threads [ 1158.554751][ T3567] vhci_hcd: release socket [ 1158.604675][ T3567] vhci_hcd: disconnect device [ 1159.203685][T16205] tipc: Started in network mode [ 1159.208618][T16205] tipc: Node identity 3a942d881409, cluster identity 4711 [ 1159.250496][T16205] tipc: Enabled bearer , priority 1 [ 1159.272037][T16200] tipc: Resetting bearer [ 1159.311889][T16200] tipc: Disabling bearer [ 1159.338901][T16211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.465163][T16224] block nbd0: shutting down sockets [ 1163.180147][T12953] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1163.322424][T16240] syzkaller0: entered promiscuous mode [ 1163.327969][T16240] syzkaller0: entered allmulticast mode [ 1163.357650][T12953] usb 1-1: device descriptor read/64, error -71 [ 1163.377559][T16240] tipc: Enabled bearer , priority 0 [ 1163.416410][T16238] tipc: Resetting bearer [ 1163.423415][T16241] netlink: 'syz.2.2750': attribute type 1 has an invalid length. [ 1163.465618][T16241] netlink: 'syz.2.2750': attribute type 2 has an invalid length. [ 1163.499978][T16238] tipc: Disabling bearer [ 1163.650278][T12953] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1163.832075][T12953] usb 1-1: device descriptor read/64, error -71 [ 1164.758804][T16258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1164.765386][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1164.773160][T16258] vhci_hcd vhci_hcd.0: Device attached [ 1164.785675][T16259] vhci_hcd: connection closed [ 1165.124962][ T7102] vhci_hcd: stop threads [ 1165.163508][ T7102] vhci_hcd: release socket [ 1165.170605][ T7102] vhci_hcd: disconnect device [ 1165.230360][T12953] usb usb1-port1: attempt power cycle [ 1165.296838][T16269] jffs2: notice: (16269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1166.621557][T16289] jffs2: notice: (16289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1167.898216][ T28] audit: type=1800 audit(1791599890.007:5747): pid=16298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2759" name="file0" dev="overlay" ino=430 res=0 errno=0 [ 1167.954933][T16297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1167.961531][T16297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1167.969102][T16297] vhci_hcd vhci_hcd.0: Device attached [ 1167.985309][T16303] vhci_hcd: connection closed [ 1167.991202][T14570] vhci_hcd: stop threads [ 1168.211205][T12953] vhci_hcd: vhci_device speed not set [ 1168.338832][T14570] vhci_hcd: release socket [ 1168.400601][T12953] usb 33-1: new full-speed USB device number 13 using vhci_hcd [ 1169.045439][T14570] vhci_hcd: disconnect device [ 1169.759072][T12953] usb 33-1: enqueue for inactive port 0 [ 1169.890519][T12953] vhci_hcd: vhci_device speed not set [ 1169.980446][ T2183] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1170.716076][T16308] block nbd3: shutting down sockets [ 1170.823297][T16323] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 1170.831731][T16323] netlink: 'syz.1.2764': attribute type 2 has an invalid length. [ 1170.836229][ T5437] bridge0: port 3(batadv1) entered blocking state [ 1170.846056][ T5437] bridge0: port 3(batadv1) entered forwarding state [ 1170.885256][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1171.128786][T16329] tipc: Enabling of bearer rejected, failed to enable media [ 1171.272062][ T2183] usb 4-1: device not accepting address 46, error -71 [ 1172.345971][T16348] jffs2: notice: (16348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1174.188082][T16372] block nbd1: shutting down sockets [ 1174.490246][ T5834] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1174.570771][T16371] netlink: 'syz.0.2779': attribute type 1 has an invalid length. [ 1175.933088][T16371] netlink: 'syz.0.2779': attribute type 2 has an invalid length. [ 1175.950599][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.008549][ T5834] usb 2-1: config 0 has no interfaces? [ 1176.032299][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1177.419793][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.427263][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.657498][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.668356][ T5834] usb 2-1: config 0 descriptor?? [ 1177.863683][ T5834] usb 2-1: can't set config #0, error -71 [ 1177.924004][ T5834] usb 2-1: USB disconnect, device number 44 [ 1179.498371][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1180.844046][T16433] block nbd1: shutting down sockets [ 1181.120351][ T5834] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1182.673729][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.801117][T16446] netlink: 'syz.2.2793': attribute type 1 has an invalid length. [ 1182.923607][T16446] netlink: 'syz.2.2793': attribute type 2 has an invalid length. [ 1183.057949][ T5834] usb 2-1: config 0 has no interfaces? [ 1183.560663][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1183.569803][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.580676][ T5834] usb 2-1: config 0 descriptor?? [ 1183.730424][ T5834] usb 2-1: USB disconnect, device number 45 [ 1184.162589][T16469] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2798'. [ 1184.220362][T16471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1184.226938][T16471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1184.235682][T16471] vhci_hcd vhci_hcd.0: Device attached [ 1184.480504][ T5834] vhci_hcd: vhci_device speed not set [ 1184.620200][ T5834] usb 37-1: new full-speed USB device number 15 using vhci_hcd [ 1184.943206][T16472] vhci_hcd: connection reset by peer [ 1185.012439][T16436] vhci_hcd: stop threads [ 1185.078775][T16436] vhci_hcd: release socket [ 1185.149802][T16436] vhci_hcd: disconnect device [ 1185.607104][T16477] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2800'. [ 1185.667667][T16477] md: couldn't update array info. -22 [ 1185.726388][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1185.773255][T16491] md: could not open device unknown-block(1,1). [ 1185.845539][T16491] md: md_import_device returned -16 [ 1186.557147][T16481] syzkaller0: entered promiscuous mode [ 1186.565329][T16481] syzkaller0: entered allmulticast mode [ 1186.572520][T16477] netlink: 'syz.0.2800': attribute type 10 has an invalid length. [ 1186.808858][T16501] block nbd1: shutting down sockets [ 1187.120581][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1187.445581][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.582166][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1187.773997][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1187.905632][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.295190][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1189.592549][ T9] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1189.742557][T16324] udevd[16324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.010268][ T5834] vhci_hcd: vhci_device speed not set [ 1190.196331][ T5837] usb 2-1: USB disconnect, device number 46 [ 1190.374776][T16515] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 1190.383032][T16515] netlink: 'syz.0.2807': attribute type 2 has an invalid length. [ 1191.258109][T16527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1191.264685][T16527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1191.272634][T16527] vhci_hcd vhci_hcd.0: Device attached [ 1191.500546][T12540] vhci_hcd: vhci_device speed not set [ 1191.580341][T12540] usb 33-1: new full-speed USB device number 14 using vhci_hcd [ 1191.948654][T16529] vhci_hcd: connection reset by peer [ 1191.988214][ T3499] vhci_hcd: stop threads [ 1192.001998][ T3499] vhci_hcd: release socket [ 1192.037508][ T3499] vhci_hcd: disconnect device [ 1194.633060][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 1194.811982][T16547] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2814'. [ 1194.868502][T16547] md: couldn't update array info. -22 [ 1194.889021][T16547] md: could not open device unknown-block(1,1). [ 1194.930367][T16547] md: md_import_device returned -16 [ 1194.952840][T16547] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 1195.014363][T16554] netlink: 'syz.3.2817': attribute type 1 has an invalid length. [ 1195.049884][T16554] netlink: 'syz.3.2817': attribute type 2 has an invalid length. [ 1196.272222][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1196.690500][T12540] vhci_hcd: vhci_device speed not set [ 1197.245120][T16600] syzkaller0: entered promiscuous mode [ 1197.251226][T16600] syzkaller0: entered allmulticast mode [ 1197.355953][T16606] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1197.373669][T16606] md: couldn't update array info. -22 [ 1197.379708][T16606] md: could not open device unknown-block(1,1). [ 1197.399809][T16606] md: md_import_device returned -16 [ 1197.455358][T16606] netlink: 'syz.0.2827': attribute type 10 has an invalid length. [ 1198.220462][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1198.325562][T16614] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 1198.364904][T16614] netlink: 'syz.1.2829': attribute type 2 has an invalid length. [ 1199.627742][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 1199.911141][T16654] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1199.983156][T16654] md: couldn't update array info. -22 [ 1200.018606][T16654] md: could not open device unknown-block(1,1). [ 1200.079178][T16654] md: md_import_device returned -16 [ 1200.770366][T16654] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 1200.801755][T16662] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1200.810721][T16662] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1202.440503][T16699] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2850'. [ 1202.457528][T16699] md: couldn't update array info. -22 [ 1202.466808][T16699] md: could not open device unknown-block(1,1). [ 1202.505308][T16699] md: md_import_device returned -16 [ 1202.541098][T16699] netlink: 'syz.2.2850': attribute type 10 has an invalid length. [ 1202.630520][T16709] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1202.639580][T16709] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1204.170575][T16749] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1204.203985][T16749] md: couldn't update array info. -22 [ 1204.209875][T16749] md: could not open device unknown-block(1,1). [ 1204.216358][T16749] md: md_import_device returned -16 [ 1204.228019][T16749] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 1204.456890][T16759] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1204.466219][T16759] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1204.954544][T16785] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2870'. [ 1205.011935][T16785] md: couldn't update array info. -22 [ 1205.018182][T16785] md: could not open device unknown-block(1,1). [ 1205.032124][T16785] md: md_import_device returned -16 [ 1205.044292][T16785] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 1205.134731][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 1205.814727][T16827] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1205.835244][T16827] md: couldn't update array info. -22 [ 1205.848427][T16827] md: could not open device unknown-block(1,1). [ 1205.857056][T16827] md: md_import_device returned -16 [ 1205.881706][T16827] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 1206.045776][T16838] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1206.054999][T16838] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1206.166704][T16842] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1207.301914][T16851] block nbd0: shutting down sockets [ 1207.596275][T16852] jffs2: notice: (16852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1207.751239][ T2183] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1208.033759][ T2183] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.374630][ T28] audit: type=1800 audit(1791599931.747:5748): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2888" name="file0" dev="overlay" ino=850 res=0 errno=0 [ 1209.560985][ T2183] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1209.576172][ T2183] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1209.589779][ T2183] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1209.599192][ T2183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.614517][ T2183] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1209.639904][ T2183] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1209.675149][T16858] udevd[16858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.855120][T16870] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1209.873467][ T2183] usb 1-1: USB disconnect, device number 92 [ 1209.905971][T16870] md: couldn't update array info. -22 [ 1209.920817][T16870] md: could not open device unknown-block(1,1). [ 1209.936662][T16870] md: md_import_device returned -16 [ 1209.954159][T16870] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 1210.141334][T16884] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1211.311687][T16904] jffs2: notice: (16904) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1211.584528][ T28] audit: type=1800 audit(1791599933.957:5749): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2900" name="file0" dev="overlay" ino=880 res=0 errno=0 [ 1212.347386][T16920] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2903'. [ 1212.349515][T16925] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1212.375591][T16920] netlink: 'syz.0.2903': attribute type 10 has an invalid length. [ 1212.589855][T16920] md: couldn't update array info. -22 [ 1212.679465][T16931] md: could not open device unknown-block(1,1). [ 1212.725784][T16931] md: md_import_device returned -16 [ 1212.839632][T16920] netlink: 'syz.0.2903': attribute type 10 has an invalid length. [ 1213.471910][T16941] block nbd1: shutting down sockets [ 1215.015076][T16938] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1215.024016][T16938] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1215.300184][ T5834] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1215.356645][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2911'. [ 1215.502841][ T5834] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.522701][ T5834] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1215.537137][ T5834] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.553810][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.556899][T16970] jffs2: notice: (16970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1215.564678][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.610295][ T5834] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1215.801157][ T28] audit: type=1800 audit(1791599938.147:5750): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2914" name="file0" dev="overlay" ino=843 res=0 errno=0 [ 1217.482826][ T5834] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 1217.499155][ T5834] usb 2-1: USB disconnect, device number 47 [ 1217.635279][T16983] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1217.661043][T16984] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1217.717741][T16984] netlink: 'syz.2.2917': attribute type 10 has an invalid length. [ 1217.926239][T16984] md: couldn't update array info. -22 [ 1218.447265][T16984] md: could not open device unknown-block(1,1). [ 1218.453981][T16984] md: md_import_device returned -16 [ 1218.461630][T16984] netlink: 'syz.2.2917': attribute type 10 has an invalid length. [ 1219.443290][T16995] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1219.452330][T16995] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1219.650515][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 1219.743231][T17016] jffs2: notice: (17016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1219.995387][ T28] audit: type=1800 audit(1791599942.297:5751): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2925" name="file0" dev="overlay" ino=869 res=0 errno=0 [ 1221.776312][T17029] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1222.777104][T17040] block nbd2: shutting down sockets [ 1224.321914][T17042] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2930'. [ 1224.352057][T17042] netlink: 'syz.0.2930': attribute type 10 has an invalid length. [ 1224.403355][T17042] md: couldn't update array info. -22 [ 1224.420878][T17042] md: could not open device unknown-block(1,1). [ 1224.442219][T17042] md: md_import_device returned -16 [ 1224.498476][T17042] netlink: 'syz.0.2930': attribute type 10 has an invalid length. [ 1224.540298][ T5834] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1224.973946][ T5834] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.103462][ T5834] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1225.210305][ T5834] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.291328][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1225.324909][T17052] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1225.334155][T17052] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1225.391756][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.448709][ T5834] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1225.489198][ T5834] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1225.517106][T16858] udevd[16858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.591319][T17063] jffs2: notice: (17063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1225.614893][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1225.831372][ T28] audit: type=1800 audit(1791599948.207:5752): pid=17071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2936" name="file0" dev="overlay" ino=585 res=0 errno=0 [ 1227.216133][T12540] usb 3-1: USB disconnect, device number 41 [ 1228.495117][T17093] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2941'. [ 1228.587301][T17093] netlink: 'syz.3.2941': attribute type 10 has an invalid length. [ 1228.602493][T17093] md: couldn't update array info. -22 [ 1228.609685][T17093] md: could not open device unknown-block(1,1). [ 1228.620124][T17093] md: md_import_device returned -16 [ 1228.628306][T17093] netlink: 'syz.3.2941': attribute type 10 has an invalid length. [ 1231.451280][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1231.469573][T12540] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1231.513432][T17127] jffs2: notice: (17127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1231.519682][T17120] block nbd3: shutting down sockets [ 1232.323075][T12540] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.490762][ T28] audit: type=1800 audit(1791599954.097:5753): pid=17132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2948" name="file0" dev="overlay" ino=905 res=0 errno=0 [ 1232.621377][T12540] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1232.729411][T12540] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1232.806681][T12540] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.488552][T12540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.693915][T12540] usb 4-1: can't set config #27, error -71 [ 1233.701749][T12540] usb 4-1: USB disconnect, device number 48 [ 1233.739361][T17141] syzkaller0: entered promiscuous mode [ 1233.757386][T17141] syzkaller0: entered allmulticast mode [ 1233.788067][T17147] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1233.800611][T17141] tipc: Started in network mode [ 1233.805544][T17141] tipc: Node identity 36ffffd0e6e2, cluster identity 4711 [ 1233.831913][T17141] tipc: Enabled bearer , priority 0 [ 1233.850434][T17147] netlink: 'syz.3.2954': attribute type 10 has an invalid length. [ 1233.878932][T17140] tipc: Resetting bearer [ 1233.892948][T17147] md: couldn't update array info. -22 [ 1233.928227][T17147] md: could not open device unknown-block(1,1). [ 1233.935048][T17147] md: md_import_device returned -16 [ 1233.948118][T17153] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1233.961812][T17140] tipc: Disabling bearer [ 1233.987077][T17147] netlink: 'syz.3.2954': attribute type 10 has an invalid length. [ 1234.784784][T17151] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1234.793842][T17151] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1234.958890][T17159] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1235.002500][T17159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2958'. [ 1235.042933][T17159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2958'. [ 1235.080475][T17167] netlink: 'syz.2.2961': attribute type 12 has an invalid length. [ 1235.289723][T17173] block nbd1: shutting down sockets [ 1235.571646][ T5834] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1235.884247][ T5834] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.072434][ T5834] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1236.306873][ T5834] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.538522][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1236.705305][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.606799][T17180] jffs2: notice: (17180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1237.679677][ T5834] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1237.705808][ T5834] usb 2-1: invalid MIDI out EP 0 [ 1237.958929][ T28] audit: type=1800 audit(1791599960.207:5754): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2963" name="file0" dev="overlay" ino=930 res=0 errno=0 [ 1238.155570][ T5834] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1238.172960][T16858] udevd[16858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.220452][ T5834] usb 2-1: USB disconnect, device number 48 [ 1238.324183][T17194] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1238.333139][T17194] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1238.360381][T17197] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1238.365998][T17198] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1238.372147][T17197] netlink: 'syz.3.2966': attribute type 10 has an invalid length. [ 1238.463225][T17197] md: couldn't update array info. -22 [ 1238.514213][T17197] md: could not open device unknown-block(1,1). [ 1238.556572][T17197] md: md_import_device returned -16 [ 1238.857069][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.895246][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.225470][T17197] netlink: 'syz.3.2966': attribute type 10 has an invalid length. [ 1239.413472][T17204] syzkaller0: entered promiscuous mode [ 1239.419012][T17204] syzkaller0: entered allmulticast mode [ 1239.471198][T17204] tipc: Enabled bearer , priority 0 [ 1239.498412][T17207] syzkaller0: entered promiscuous mode [ 1239.518561][T17207] syzkaller0: entered allmulticast mode [ 1239.557469][T17203] tipc: Resetting bearer [ 1239.643809][T17203] tipc: Disabling bearer [ 1240.032308][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1240.618307][T17230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2977'. [ 1240.646540][T17230] netlink: 'syz.1.2977': attribute type 10 has an invalid length. [ 1240.707248][T17235] jffs2: notice: (17235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1240.740667][T17230] md: couldn't update array info. -22 [ 1240.750550][T17230] md: could not open device unknown-block(1,1). [ 1240.757812][T17230] md: md_import_device returned -16 [ 1240.788576][T17230] netlink: 'syz.1.2977': attribute type 10 has an invalid length. [ 1240.956468][ T28] audit: type=1800 audit(1791599963.297:5755): pid=17246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2976" name="file0" dev="overlay" ino=671 res=0 errno=0 [ 1242.761443][T17249] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1242.770382][T17249] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1244.944628][T17264] hub 1-0:1.0: USB hub found [ 1244.949584][T17264] hub 1-0:1.0: 1 port detected [ 1245.154300][T17267] syzkaller0: entered promiscuous mode [ 1245.175451][T17267] syzkaller0: entered allmulticast mode [ 1245.241371][T17272] tipc: Enabled bearer , priority 0 [ 1245.287034][T17266] tipc: Resetting bearer [ 1245.395401][T17266] tipc: Disabling bearer [ 1245.414351][T14570] batman_adv: batadv1: IGMP Querier appeared [ 1245.420587][T14570] batman_adv: batadv1: MLD Querier appeared [ 1245.457821][T17281] netlink: 'syz.1.2988': attribute type 11 has an invalid length. [ 1245.470183][T17281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2988'. [ 1245.499748][T17285] syzkaller0: entered promiscuous mode [ 1245.511428][T17288] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2989'. [ 1245.512658][T17285] syzkaller0: entered allmulticast mode [ 1245.549822][T17288] netlink: 'syz.2.2989': attribute type 10 has an invalid length. [ 1245.582835][T17288] md: couldn't update array info. -22 [ 1245.600830][T17288] md: could not open device unknown-block(1,1). [ 1245.623920][T17288] md: md_import_device returned -16 [ 1245.732177][T17288] netlink: 'syz.2.2989': attribute type 10 has an invalid length. [ 1245.841463][T17294] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1245.850608][T17294] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1248.454551][T17313] hub 1-0:1.0: USB hub found [ 1248.459405][T17313] hub 1-0:1.0: 1 port detected [ 1248.612646][T17320] syzkaller0: entered promiscuous mode [ 1248.665493][T17320] syzkaller0: entered allmulticast mode [ 1248.711628][T17323] tipc: Enabled bearer , priority 0 [ 1248.761651][T17319] tipc: Resetting bearer [ 1248.820866][T17332] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1248.850574][T17319] tipc: Disabling bearer [ 1248.878992][T17332] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 1248.956107][T17336] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1248.965619][T17336] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1249.271129][T17332] md: couldn't update array info. -22 [ 1249.353603][T17332] md: could not open device unknown-block(1,1). [ 1249.448477][T17332] md: md_import_device returned -16 [ 1249.584287][T17335] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 1249.834699][T17344] jffs2: notice: (17344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1250.111388][ T28] audit: type=1800 audit(1791599972.427:5756): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="file0" dev="overlay" ino=718 res=0 errno=0 [ 1252.634810][T17379] syzkaller0: entered promiscuous mode [ 1252.641291][T17379] syzkaller0: entered allmulticast mode [ 1252.664251][T17379] tipc: Enabled bearer , priority 0 [ 1252.685294][T17376] tipc: Resetting bearer [ 1253.594401][T17376] tipc: Disabling bearer [ 1253.648623][T17386] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1253.658526][T17386] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1253.901980][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1253.956008][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1253.963236][T17399] ceph: No mds server is up or the cluster is laggy [ 1254.321920][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1254.424185][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1256.013846][T17424] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1256.022839][T17424] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1256.442050][T17433] syzkaller0: entered promiscuous mode [ 1256.529688][T17433] syzkaller0: entered allmulticast mode [ 1256.783598][T17439] ceph: No mds server is up or the cluster is laggy [ 1256.805760][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1256.915106][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1257.554028][T17444] tipc: Enabling of bearer rejected, failed to enable media [ 1257.781940][T17462] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1258.976719][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 1258.986954][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 1259.007603][T17485] ceph: No mds server is up or the cluster is laggy [ 1260.045517][T17504] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3048'. [ 1260.228689][T17504] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 1261.005517][T17513] gadgetfs: bound to dummy_udc driver [ 1261.069086][T17504] md: couldn't update array info. -22 [ 1261.186122][T17504] md: could not open device unknown-block(1,1). [ 1261.222270][T17504] md: md_import_device returned -16 [ 1261.260387][T17504] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 1261.328948][T17520] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1261.339057][T17520] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1261.463107][T17525] hub 1-0:1.0: USB hub found [ 1261.470581][T17525] hub 1-0:1.0: 1 port detected [ 1263.921903][T17533] jffs2: notice: (17533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1264.030673][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 1264.039100][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 1264.076842][T17535] ceph: No mds server is up or the cluster is laggy [ 1264.220841][ T28] audit: type=1800 audit(1791599986.567:5757): pid=17544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3054" name="file0" dev="overlay" ino=819 res=0 errno=0 [ 1265.138472][T17561] gadgetfs: bound to dummy_udc driver [ 1265.421428][ T5815] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1265.531440][ C0] gadgetfs: connected [ 1265.547805][ T5815] gadgetfs: disconnected [ 1265.765765][T17564] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3062'. [ 1265.821034][ C0] gadgetfs: connected [ 1265.829714][ T5815] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1265.882269][T17554] gadgetfs: suspended from state 3 [ 1265.887623][T17554] gadgetfs: disconnected [ 1265.938789][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1265.961064][T17564] netlink: 'syz.0.3062': attribute type 10 has an invalid length. [ 1265.978543][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.030845][ T5815] usb 1-1: can't set config #1, error -71 [ 1266.039096][T17564] md: couldn't update array info. -22 [ 1266.045760][T17564] md: could not open device unknown-block(1,1). [ 1266.063217][T17564] md: md_import_device returned -16 [ 1266.073198][ T5815] usb 1-1: USB disconnect, device number 93 [ 1266.083223][T17568] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1266.092315][T17568] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1266.111923][T17564] netlink: 'syz.0.3062': attribute type 10 has an invalid length. [ 1267.448477][T17588] hub 1-0:1.0: USB hub found [ 1267.454207][T17588] hub 1-0:1.0: 1 port detected [ 1267.813055][T17590] jffs2: notice: (17590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1269.945716][T17603] gadgetfs: bound to dummy_udc driver [ 1269.964073][ T28] audit: type=1800 audit(1791599990.757:5758): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3068" name="file0" dev="overlay" ino=845 res=0 errno=0 [ 1270.215578][T17595] ceph: No mds server is up or the cluster is laggy [ 1270.224274][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1270.247782][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1270.396017][T17611] jffs2: notice: (17611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1270.418222][T17614] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3074'. [ 1270.435347][T17614] netlink: 'syz.2.3074': attribute type 10 has an invalid length. [ 1270.461754][T17614] md: couldn't update array info. -22 [ 1270.467604][T17614] md: could not open device unknown-block(1,1). [ 1270.501425][T17614] md: md_import_device returned -16 [ 1270.518214][T17614] netlink: 'syz.2.3074': attribute type 10 has an invalid length. [ 1270.536616][T17611] overlayfs: missing 'lowerdir' [ 1270.763371][T17630] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1270.772446][T17630] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1271.755428][T17645] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1271.812605][T17646] gadgetfs: bound to dummy_udc driver [ 1272.093268][T12540] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1272.168369][ C1] gadgetfs: connected [ 1272.178606][T12540] gadgetfs: disconnected [ 1272.462514][ C1] gadgetfs: connected [ 1272.491370][T12540] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1272.556159][T17641] gadgetfs: suspended from state 3 [ 1272.561620][T17641] gadgetfs: disconnected [ 1272.602151][T12540] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1272.640620][T12540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.656771][T17652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.710551][T12540] usb 1-1: can't set config #1, error -71 [ 1272.868274][T17654] jffs2: notice: (17654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1273.821401][T12540] usb 1-1: USB disconnect, device number 94 [ 1274.060480][T14240] libceph: connect (1)[c::]:6789 error -101 [ 1274.066566][T14240] libceph: mon0 (1)[c::]:6789 connect error [ 1274.131294][T17667] ceph: No mds server is up or the cluster is laggy [ 1274.150308][ T28] audit: type=1800 audit(1791599996.457:5759): pid=17658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3082" name="file0" dev="overlay" ino=1208 res=0 errno=0 [ 1274.323718][T17675] overlayfs: missing 'lowerdir' [ 1274.420364][T14240] libceph: connect (1)[c::]:6789 error -101 [ 1274.792478][T14240] libceph: mon0 (1)[c::]:6789 connect error [ 1275.091315][T17680] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3086'. [ 1275.136179][T17680] netlink: 'syz.3.3086': attribute type 10 has an invalid length. [ 1275.170340][T17680] md: couldn't update array info. -22 [ 1275.183005][T17680] md: could not open device unknown-block(1,1). [ 1275.189355][T17680] md: md_import_device returned -16 [ 1275.246726][T17691] netlink: 'syz.3.3086': attribute type 10 has an invalid length. [ 1275.332370][T17689] hub 1-0:1.0: USB hub found [ 1275.337968][T17689] hub 1-0:1.0: 1 port detected [ 1276.543066][T17717] jffs2: notice: (17717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1276.641095][T17714] overlayfs: missing 'workdir' [ 1276.809607][ T28] audit: type=1800 audit(1791599999.177:5760): pid=17725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3096" name="file0" dev="overlay" ino=903 res=0 errno=0 [ 1277.797664][T17743] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3100'. [ 1277.807591][T17743] netlink: 'syz.3.3100': attribute type 10 has an invalid length. [ 1277.823807][T17743] md: couldn't update array info. -22 [ 1277.829685][T17743] md: could not open device unknown-block(1,1). [ 1277.836111][T17743] md: md_import_device returned -16 [ 1277.843056][T17743] netlink: 'syz.3.3100': attribute type 10 has an invalid length. [ 1278.043100][T17750] hub 1-0:1.0: USB hub found [ 1278.048775][T17750] hub 1-0:1.0: 1 port detected [ 1279.191471][T17774] jffs2: notice: (17774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1279.365623][ T28] audit: type=1800 audit(1791600001.737:5761): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3107" name="file0" dev="overlay" ino=1270 res=0 errno=0 [ 1281.148287][T17774] overlayfs: missing 'workdir' [ 1282.937031][T17801] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3110'. [ 1282.954712][T17801] netlink: 'syz.3.3110': attribute type 10 has an invalid length. [ 1282.979523][T17801] md: couldn't update array info. -22 [ 1282.999063][T17801] md: could not open device unknown-block(1,1). [ 1283.008772][T17801] md: md_import_device returned -16 [ 1283.025020][T17801] netlink: 'syz.3.3110': attribute type 10 has an invalid length. [ 1283.156469][T17809] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1284.116481][T17821] jffs2: notice: (17821) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1284.236981][T17825] overlayfs: missing 'workdir' [ 1285.399038][ T28] audit: type=1800 audit(1791600007.497:5762): pid=17833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3118" name="file0" dev="overlay" ino=869 res=0 errno=0 [ 1287.338522][T17848] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1287.349025][T17848] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 1287.364776][T17848] md: couldn't update array info. -22 [ 1287.372394][T17848] md: could not open device unknown-block(1,1). [ 1287.378731][T17848] md: md_import_device returned -16 [ 1287.386493][T17848] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 1288.472021][T17865] jffs2: notice: (17865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1288.532597][T17865] overlayfs: missing 'lowerdir' [ 1288.797057][ T28] audit: type=1800 audit(1791600011.167:5763): pid=17873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3132" name="file0" dev="overlay" ino=894 res=0 errno=0 [ 1290.281864][T17876] syzkaller0: entered promiscuous mode [ 1290.287399][T17876] syzkaller0: entered allmulticast mode [ 1290.428412][T17879] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1290.552139][T17886] md: couldn't update array info. -22 [ 1290.700716][T17889] md: could not open device unknown-block(1,1). [ 1290.809148][T17889] md: md_import_device returned -16 [ 1291.922425][T17906] hub 1-0:1.0: USB hub found [ 1291.928000][T17906] hub 1-0:1.0: 1 port detected [ 1293.009110][T17914] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1293.024544][T17914] md: couldn't update array info. -22 [ 1293.030564][T17914] md: could not open device unknown-block(1,1). [ 1293.037005][T17914] md: md_import_device returned -16 [ 1294.433271][T17879] netlink: 'syz.3.3134': attribute type 10 has an invalid length. [ 1294.442750][T17886] netlink: 'syz.3.3134': attribute type 10 has an invalid length. [ 1294.457482][T17914] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 1294.606458][T17921] jffs2: notice: (17921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1295.272426][T17924] overlayfs: missing 'lowerdir' [ 1296.438777][T14240] libceph: connect (1)[c::]:6789 error -101 [ 1296.440289][T17941] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1296.444944][T14240] libceph: mon0 (1)[c::]:6789 connect error [ 1296.499455][T17936] ceph: No mds server is up or the cluster is laggy [ 1296.652555][T17950] netlink: 'syz.0.3148': attribute type 11 has an invalid length. [ 1296.680530][T17950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1296.703192][T17959] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3150'. [ 1296.783007][T17959] md: couldn't update array info. -22 [ 1296.811045][T17959] md: could not open device unknown-block(1,1). [ 1296.817399][T17959] md: md_import_device returned -16 [ 1296.844403][T17959] netlink: 'syz.3.3150': attribute type 10 has an invalid length. [ 1297.905725][T17972] syzkaller0: entered promiscuous mode [ 1297.912884][T17972] syzkaller0: entered allmulticast mode [ 1298.872951][T17991] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1299.015352][T17998] block nbd0: not configured, cannot reconfigure [ 1299.156452][T18004] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1299.175345][T18004] md: couldn't update array info. -22 [ 1299.192617][T18004] md: could not open device unknown-block(1,1). [ 1299.198985][T18004] md: md_import_device returned -16 [ 1300.305296][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.311889][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.323603][ T1294] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1300.332765][ T1294] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1301.007256][T18001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3161'. [ 1301.035855][T18004] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 1301.345162][T18019] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1301.354348][T18019] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1303.027556][T18029] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3169'. [ 1303.303236][T18037] syzkaller0: entered promiscuous mode [ 1303.325641][T18037] syzkaller0: entered allmulticast mode [ 1303.337029][T18035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3172'. [ 1303.550476][T18056] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3176'. [ 1303.641149][T18059] md: couldn't update array info. -22 [ 1303.649186][T18059] md: could not open device unknown-block(1,1). [ 1303.656560][T18059] md: md_import_device returned -16 [ 1304.936829][ T28] audit: type=1800 audit(1791600027.307:5764): pid=18071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3179" name="file0" dev="overlay" ino=1045 res=0 errno=0 [ 1307.045659][T18056] netlink: 'syz.0.3176': attribute type 10 has an invalid length. [ 1307.063068][T18059] netlink: 'syz.0.3176': attribute type 10 has an invalid length. [ 1307.079454][T18074] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1307.100571][T18074] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1307.304443][T18082] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1307.313865][T18082] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1308.438264][T18095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3186'. [ 1308.573840][T18108] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1308.591079][T18108] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 1308.604514][T18108] md: couldn't update array info. -22 [ 1308.622107][T18108] md: could not open device unknown-block(1,1). [ 1308.638430][T18108] md: md_import_device returned -16 [ 1308.664674][T18108] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 1308.716738][T18114] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1308.725832][T18114] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1309.889257][T18119] syzkaller0: entered promiscuous mode [ 1309.933167][T18119] syzkaller0: entered allmulticast mode [ 1313.166597][T18145] tipc: Enabling of bearer rejected, failed to enable media [ 1313.274032][T18173] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3200'. [ 1313.298953][T18173] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 1313.347163][T18173] md: couldn't update array info. -22 [ 1313.360532][T18173] md: could not open device unknown-block(1,1). [ 1313.375683][T18173] md: md_import_device returned -16 [ 1313.387537][T18173] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 1313.535849][T18187] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1313.545438][T18187] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1316.237183][T18203] syzkaller0: entered promiscuous mode [ 1316.251580][T18203] syzkaller0: entered allmulticast mode [ 1316.351025][T18205] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1316.360137][T18205] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1317.130189][T18229] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3211'. [ 1317.359323][T18237] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1317.517555][T18242] md: couldn't update array info. -22 [ 1317.523688][T18242] md: could not open device unknown-block(1,1). [ 1317.530643][T18242] md: md_import_device returned -16 [ 1319.837491][T18224] tipc: Enabling of bearer rejected, failed to enable media [ 1319.847751][T18237] netlink: 'syz.0.3212': attribute type 10 has an invalid length. [ 1319.864233][T18242] netlink: 'syz.0.3212': attribute type 10 has an invalid length. [ 1319.887754][T18249] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1319.920144][T18249] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1320.248701][T18269] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3220'. [ 1321.087236][T18274] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1321.102731][T18274] netlink: 'syz.0.3224': attribute type 10 has an invalid length. [ 1321.125577][T18274] md: couldn't update array info. -22 [ 1321.131498][T18274] md: could not open device unknown-block(1,1). [ 1321.137893][T18274] md: md_import_device returned -16 [ 1321.151552][T18274] netlink: 'syz.0.3224': attribute type 10 has an invalid length. [ 1322.254726][T18290] syzkaller0: entered promiscuous mode [ 1322.260443][T18290] syzkaller0: entered allmulticast mode [ 1324.262292][T18293] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1324.299571][T18293] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1325.631646][T18323] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3235'. [ 1325.732442][T18325] netlink: 'syz.2.3233': attribute type 10 has an invalid length. [ 1325.803096][T18325] md: couldn't update array info. -22 [ 1325.820464][T18325] md: could not open device unknown-block(1,1). [ 1325.835219][T18325] md: md_import_device returned -16 [ 1325.861791][T18325] netlink: 'syz.2.3233': attribute type 10 has an invalid length. [ 1326.053022][T18343] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1326.063066][T18343] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1328.745507][T18364] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3245'. [ 1328.961972][T18371] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 1329.118207][T18377] netlink: 'syz.3.3249': attribute type 10 has an invalid length. [ 1329.184897][T18380] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1329.194493][T18380] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1329.387688][T18377] md: couldn't update array info. -22 [ 1329.467655][T18377] md: could not open device unknown-block(1,1). [ 1329.544217][T18377] md: md_import_device returned -16 [ 1329.649220][T18384] netlink: 'syz.3.3249': attribute type 10 has an invalid length. [ 1330.225729][T18398] block nbd3: shutting down sockets [ 1330.510403][ T5815] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1330.792388][ T5815] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.984932][ T5815] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1331.179117][ T5815] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.392521][ T5815] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1331.465749][T18403] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1331.538594][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.977091][ T5815] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1332.171567][ T5815] usb 4-1: invalid MIDI out EP 0 [ 1333.297639][ T5815] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1333.413439][ T5815] usb 4-1: USB disconnect, device number 49 [ 1333.700363][T18422] syzkaller0: entered promiscuous mode [ 1333.706079][T18422] syzkaller0: entered allmulticast mode [ 1333.715541][T18431] netlink: 'syz.1.3261': attribute type 10 has an invalid length. [ 1333.740014][T18431] md: couldn't update array info. -22 [ 1333.750094][T18431] md: could not open device unknown-block(1,1). [ 1333.812165][T18431] md: md_import_device returned -16 [ 1333.972501][T18431] netlink: 'syz.1.3261': attribute type 10 has an invalid length. [ 1335.887502][T18472] block nbd1: shutting down sockets [ 1336.183576][ T2183] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1336.438164][ T2183] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.509420][ T2183] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1336.600240][ T2183] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.746253][ T2183] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1336.854188][ T2183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.063331][ T2183] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1337.193076][ T2183] usb 2-1: invalid MIDI out EP 0 [ 1338.708402][ T2183] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1338.766148][ T2183] usb 2-1: USB disconnect, device number 49 [ 1340.849073][T18486] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1340.860075][T18486] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1341.038230][T18492] netlink: 'syz.1.3272': attribute type 10 has an invalid length. [ 1341.087094][T18492] md: couldn't update array info. -22 [ 1341.095566][T18492] md: could not open device unknown-block(1,1). [ 1341.120486][T18492] md: md_import_device returned -16 [ 1341.137519][T18492] netlink: 'syz.1.3272': attribute type 10 has an invalid length. [ 1341.615056][T18517] block nbd3: shutting down sockets [ 1341.900509][T12540] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1342.235660][T12540] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.355317][T12540] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1343.583723][T18523] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1343.592848][T18523] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1343.801473][T12540] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.823890][T12540] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1343.833039][T12540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.855389][T12540] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1343.865120][T12540] usb 4-1: invalid MIDI out EP 0 [ 1343.908992][T12540] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1344.003389][T18410] udevd[18410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.158090][ T28] audit: type=1800 audit(1791600066.527:5765): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3281" name="file0" dev="overlay" ino=1422 res=0 errno=0 [ 1344.496063][T12540] usb 4-1: USB disconnect, device number 50 [ 1345.022206][T18536] syzkaller0: entered promiscuous mode [ 1345.027745][T18536] syzkaller0: entered allmulticast mode [ 1345.319287][T18552] md: couldn't update array info. -22 [ 1345.340702][T18552] md: could not open device unknown-block(1,1). [ 1345.347095][T18552] md: md_import_device returned -16 [ 1348.008150][T18548] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 1348.018397][T18552] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 1348.068544][T18563] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1348.110418][T18563] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1348.485494][ T28] audit: type=1800 audit(1791600070.857:5766): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3294" name="file0" dev="overlay" ino=1525 res=0 errno=0 [ 1349.224180][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1349.236947][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1349.473905][T18596] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 1349.980280][T18596] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 1350.329309][T18609] syzkaller0: entered promiscuous mode [ 1350.344339][T18609] syzkaller0: entered allmulticast mode [ 1352.115420][ T28] audit: type=1800 audit(1791600074.427:5767): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3308" name="file0" dev="overlay" ino=1573 res=0 errno=0 [ 1354.266330][T18616] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1354.319188][T18616] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1354.505665][T18652] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1354.654191][T18652] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 1354.987281][T18652] md: couldn't update array info. -22 [ 1355.058045][T18656] md: could not open device unknown-block(1,1). [ 1355.128720][T18656] md: md_import_device returned -16 [ 1355.244583][T18652] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 1356.278732][T18704] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1356.287995][T18704] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1358.091779][T18718] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1358.101693][T18718] netlink: 'syz.1.3325': attribute type 10 has an invalid length. [ 1358.116831][T18718] md: couldn't update array info. -22 [ 1358.123061][T18718] md: could not open device unknown-block(1,1). [ 1358.129433][T18718] md: md_import_device returned -16 [ 1358.147700][T18718] netlink: 'syz.1.3325': attribute type 10 has an invalid length. [ 1358.433795][T18728] block nbd3: shutting down sockets [ 1359.950308][T12540] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1360.248609][T18742] syzkaller0: entered promiscuous mode [ 1360.272558][T18742] syzkaller0: entered allmulticast mode [ 1360.283536][T12540] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.308998][T18742] tipc: Enabled bearer , priority 0 [ 1360.316488][T12540] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1360.376801][T12540] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.450458][T18741] tipc: Resetting bearer [ 1360.544380][T12540] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1360.679734][T12540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.018752][T18741] tipc: Disabling bearer [ 1361.064368][T12540] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1361.176374][T12540] usb 4-1: invalid MIDI out EP 0 [ 1361.415099][T12540] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1361.466143][T12540] usb 4-1: USB disconnect, device number 51 [ 1361.745256][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.751995][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.783227][ T1294] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1361.798502][ T1294] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1363.478375][T18769] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1363.519066][T18769] netlink: 'syz.1.3337': attribute type 10 has an invalid length. [ 1363.553645][T18769] md: couldn't update array info. -22 [ 1363.560282][T18769] md: could not open device unknown-block(1,1). [ 1363.566618][T18769] md: md_import_device returned -16 [ 1363.574213][T18769] netlink: 'syz.1.3337': attribute type 10 has an invalid length. [ 1363.754419][T18784] syzkaller0: entered promiscuous mode [ 1363.765462][T18784] syzkaller0: entered allmulticast mode [ 1363.774915][T18784] tipc: Enabled bearer , priority 0 [ 1363.789167][T18783] tipc: Resetting bearer [ 1363.828000][T18783] tipc: Disabling bearer [ 1363.989276][T18793] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1363.998540][T18793] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1365.108338][T18811] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1365.140629][T18811] hub 1-0:1.0: USB hub found [ 1365.146908][T18811] hub 1-0:1.0: 1 port detected [ 1365.261826][T18816] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1365.276504][T18816] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 1365.308123][T18816] md: couldn't update array info. -22 [ 1365.328685][T18816] md: could not open device unknown-block(1,1). [ 1365.335670][T18816] md: md_import_device returned -16 [ 1365.343559][T18816] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 1365.469283][T18824] syzkaller0: entered promiscuous mode [ 1365.475087][T18824] syzkaller0: entered allmulticast mode [ 1365.487400][T18824] tipc: Enabled bearer , priority 0 [ 1365.496626][T18823] tipc: Resetting bearer [ 1365.531337][T18823] tipc: Disabling bearer [ 1365.661739][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 1365.798542][T18837] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1365.807723][T18837] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1366.733682][T18847] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1366.820878][T18847] hub 1-0:1.0: USB hub found [ 1366.825764][T18847] hub 1-0:1.0: 1 port detected [ 1367.685781][T18854] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1367.747189][T18854] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 1367.756621][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1367.777921][T18854] md: couldn't update array info. -22 [ 1367.790233][T18857] syzkaller0: entered promiscuous mode [ 1367.795761][T18857] syzkaller0: entered allmulticast mode [ 1367.816053][T18854] md: could not open device unknown-block(1,1). [ 1367.853897][T18854] md: md_import_device returned -16 [ 1367.867684][T18866] tipc: Enabled bearer , priority 0 [ 1367.895221][T18854] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 1367.917751][T18855] tipc: Resetting bearer [ 1367.977174][T18855] tipc: Disabling bearer [ 1368.257955][T18884] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1368.267200][T18884] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1369.038569][T18887] jffs2: notice: (18887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1369.248209][ T28] audit: type=1800 audit(1791600091.617:5768): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3366" name="file0" dev="overlay" ino=1313 res=0 errno=0 [ 1369.720189][T18897] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1369.788281][T18897] hub 1-0:1.0: USB hub found [ 1369.793948][T18897] hub 1-0:1.0: 1 port detected [ 1369.965130][T18900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.017713][T18907] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1370.042799][T18907] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 1370.088502][T18907] md: couldn't update array info. -22 [ 1370.120309][T18907] md: could not open device unknown-block(1,1). [ 1370.126794][T18907] md: md_import_device returned -16 [ 1370.163773][T18900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.204718][T18907] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 1370.215757][T18915] syzkaller0: entered promiscuous mode [ 1370.227821][T18915] syzkaller0: entered allmulticast mode [ 1370.316526][T18900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.342412][T18910] tipc: Enabled bearer , priority 0 [ 1370.400289][T18909] tipc: Resetting bearer [ 1370.446886][T18909] tipc: Disabling bearer [ 1370.551018][T18900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.791188][T18943] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1370.822724][T18900] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.845584][T18943] netlink: 'syz.1.3377': attribute type 10 has an invalid length. [ 1370.868865][T18943] md: couldn't update array info. -22 [ 1370.873918][T18900] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.875234][T18943] md: could not open device unknown-block(1,1). [ 1370.889352][T18943] md: md_import_device returned -16 [ 1370.907263][T18943] netlink: 'syz.1.3377': attribute type 10 has an invalid length. [ 1370.951319][T18900] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.968629][T18900] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.460899][T18969] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1371.481835][T18969] netlink: 'syz.0.3383': attribute type 10 has an invalid length. [ 1371.497875][T18969] md: couldn't update array info. -22 [ 1371.510220][T18969] md: could not open device unknown-block(1,1). [ 1371.526690][T18969] md: md_import_device returned -16 [ 1371.553809][T18969] netlink: 'syz.0.3383': attribute type 10 has an invalid length. [ 1371.762102][T18981] syzkaller0: entered promiscuous mode [ 1371.770697][T18983] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1371.783075][T18981] syzkaller0: entered allmulticast mode [ 1371.797794][T18983] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 1371.819236][T18981] tipc: Enabled bearer , priority 0 [ 1371.847897][T18983] md: couldn't update array info. -22 [ 1371.853694][T18980] tipc: Resetting bearer [ 1371.854321][T18983] md: could not open device unknown-block(1,1). [ 1371.868644][T18983] md: md_import_device returned -16 [ 1371.951644][T18980] tipc: Disabling bearer [ 1371.978915][T18983] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 1372.445300][T19016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1372.458595][T19016] netlink: 'syz.2.3393': attribute type 10 has an invalid length. [ 1372.476255][T19016] md: couldn't update array info. -22 [ 1372.482806][T19016] md: could not open device unknown-block(1,1). [ 1372.489154][T19016] md: md_import_device returned -16 [ 1372.496996][T19016] netlink: 'syz.2.3393': attribute type 10 has an invalid length. [ 1373.218311][T19046] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1373.261218][T19046] md: couldn't update array info. -22 [ 1373.267197][T19046] md: could not open device unknown-block(1,1). [ 1373.277384][T19046] md: md_import_device returned -16 [ 1373.441141][T19054] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1373.527559][T19054] hub 1-0:1.0: USB hub found [ 1373.533743][T19054] hub 1-0:1.0: 1 port detected [ 1373.755527][T19067] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3402'. [ 1373.772803][T19067] md: couldn't update array info. -22 [ 1373.778823][T19067] md: could not open device unknown-block(1,1). [ 1373.787912][T19067] md: md_import_device returned -16 [ 1374.136121][T19085] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3407'. [ 1374.155677][T19085] md: couldn't update array info. -22 [ 1374.161733][T19085] md: could not open device unknown-block(1,1). [ 1374.168069][T19085] md: md_import_device returned -16 [ 1374.332069][T19094] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1374.361060][T19094] hub 1-0:1.0: USB hub found [ 1374.365928][T19094] hub 1-0:1.0: 1 port detected [ 1374.638430][T19105] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1374.665784][T19105] md: couldn't update array info. -22 [ 1374.675826][T19105] md: could not open device unknown-block(1,1). [ 1374.684789][T19105] md: md_import_device returned -16 [ 1375.033824][T19121] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1375.059723][T19121] validate_nla: 11 callbacks suppressed [ 1375.059741][T19121] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 1375.168900][T19125] md: couldn't update array info. -22 [ 1375.190802][T19121] md: could not open device unknown-block(1,1). [ 1375.219376][T19121] md: md_import_device returned -16 [ 1375.243382][T19121] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 1375.609149][T19138] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1375.643313][T19138] hub 1-0:1.0: USB hub found [ 1375.648208][T19138] hub 1-0:1.0: 1 port detected [ 1376.197772][T19166] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1376.227706][T19166] netlink: 'syz.3.3425': attribute type 10 has an invalid length. [ 1376.342224][T19173] md: couldn't update array info. -22 [ 1376.354372][T19173] md: could not open device unknown-block(1,1). [ 1376.387889][T19173] md: md_import_device returned -16 [ 1376.582940][T19173] netlink: 'syz.3.3425': attribute type 10 has an invalid length. [ 1377.241297][T19184] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1377.290570][T19184] hub 1-0:1.0: USB hub found [ 1377.295406][T19184] hub 1-0:1.0: 1 port detected [ 1377.373423][T19188] syzkaller0: entered promiscuous mode [ 1377.382821][T19188] syzkaller0: entered allmulticast mode [ 1377.441758][T19191] tipc: Enabled bearer , priority 0 [ 1377.484551][T19187] tipc: Resetting bearer [ 1377.514430][T19193] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1377.695153][T19187] tipc: Disabling bearer [ 1378.337250][T19223] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1378.346442][T19223] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1379.195608][T19228] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1379.250813][T19228] netlink: 'syz.2.3440': attribute type 10 has an invalid length. [ 1379.375147][T19234] md: couldn't update array info. -22 [ 1379.383636][T19239] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1379.400564][T19228] md: could not open device unknown-block(1,1). [ 1379.426629][T19228] md: md_import_device returned -16 [ 1379.437807][T19239] hub 1-0:1.0: USB hub found [ 1379.442955][T19239] hub 1-0:1.0: 1 port detected [ 1379.473398][T19228] netlink: 'syz.2.3440': attribute type 10 has an invalid length. [ 1379.748156][T19248] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3444'. [ 1379.805832][T19249] syzkaller0: entered promiscuous mode [ 1379.821170][T19249] syzkaller0: entered allmulticast mode [ 1379.845249][T19249] tipc: Enabled bearer , priority 0 [ 1379.864721][T19246] tipc: Resetting bearer [ 1379.946583][T19246] tipc: Disabling bearer [ 1381.209759][T19283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1381.219867][T19283] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 1381.234306][T19283] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 1381.323790][T19287] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1381.345218][T19291] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3455'. [ 1381.379366][T19287] hub 1-0:1.0: USB hub found [ 1381.384404][T19287] hub 1-0:1.0: 1 port detected [ 1381.877206][T19311] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1381.912970][T19311] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 1381.943604][T19311] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 1383.532814][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1383.549426][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1386.287727][T19411] Bluetooth: MGMT ver 1.22 [ 1388.220642][T19483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1388.581747][T19502] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 1388.861268][T19514] hub 1-0:1.0: USB hub found [ 1388.866870][T19514] hub 1-0:1.0: 1 port detected [ 1389.471902][T19521] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1389.481068][T19521] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1390.416233][T19529] syzkaller0: entered promiscuous mode [ 1390.422057][T19529] syzkaller0: entered allmulticast mode [ 1390.450586][T19529] 0: reclassify loop, rule prio 0, protocol 700 [ 1390.814355][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3515'. [ 1391.070066][T19565] syzkaller0: entered promiscuous mode [ 1391.093110][T19565] syzkaller0: entered allmulticast mode [ 1394.121787][T19570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1394.271584][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 1394.302523][T19590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.483511][T19590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.716720][T19596] tipc: Enabled bearer , priority 0 [ 1394.816410][T19605] syzkaller0: entered promiscuous mode [ 1394.826420][T19605] syzkaller0: entered allmulticast mode [ 1395.898555][T19628] jffs2: notice: (19628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1396.126044][ T28] audit: type=1800 audit(1791600118.497:5769): pid=19632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3533" name="file0" dev="overlay" ino=1478 res=0 errno=0 [ 1398.607558][T19595] tipc: Disabling bearer [ 1398.626064][T12953] tipc: Node number set to 782052744 [ 1398.651108][T19635] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1398.672119][T19635] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1398.929598][ C0] [ 1398.931989][ C0] ================================ [ 1398.937116][ C0] WARNING: inconsistent lock state [ 1398.942255][ C0] syzkaller #0 Tainted: G S [ 1398.948157][ C0] -------------------------------- [ 1398.953261][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1398.960101][ C0] syz.3.3538/19646 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1398.966513][ C0] ffff888079306130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1398.975832][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1398.981541][ C0] lock_acquire+0x19e/0x420 [ 1398.986135][ C0] lock_sock_nested+0x48/0x100 [ 1398.990993][ C0] x25_release+0xa0/0x3a0 [ 1398.995412][ C0] sock_close+0xa7/0x210 [ 1398.999744][ C0] __fput+0x221/0x940 [ 1399.003807][ C0] task_work_run+0x1d4/0x260 [ 1399.008485][ C0] do_exit+0x986/0x2530 [ 1399.012731][ C0] do_group_exit+0x22d/0x2f0 [ 1399.017453][ C0] get_signal+0x12a6/0x1390 [ 1399.022062][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1399.027741][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1399.033121][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1399.038761][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 1399.044307][ C0] do_syscall_64+0x61/0xb0 [ 1399.048802][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.054799][ C0] irq event stamp: 1102 [ 1399.058941][ C0] hardirqs last enabled at (1102): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1399.068828][ C0] hardirqs last disabled at (1101): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1399.078631][ C0] softirqs last enabled at (678): [] __dev_queue_xmit+0x272/0x37e0 [ 1399.088172][ C0] softirqs last disabled at (679): [] do_softirq+0xfa/0x1a0 [ 1399.097020][ C0] [ 1399.097020][ C0] other info that might help us debug this: [ 1399.105071][ C0] Possible unsafe locking scenario: [ 1399.105071][ C0] [ 1399.112510][ C0] CPU0 [ 1399.115782][ C0] ---- [ 1399.119077][ C0] lock(sk_lock-AF_X25); [ 1399.123436][ C0] [ 1399.126879][ C0] lock(sk_lock-AF_X25); [ 1399.131377][ C0] [ 1399.131377][ C0] *** DEADLOCK *** [ 1399.131377][ C0] [ 1399.139509][ C0] 2 locks held by syz.3.3538/19646: [ 1399.144697][ C0] #0: ffff888079306130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_connect+0x5c/0x890 [ 1399.153850][ C0] #1: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1399.163856][ C0] [ 1399.163856][ C0] stack backtrace: [ 1399.169737][ C0] CPU: 0 PID: 19646 Comm: syz.3.3538 Tainted: G S syzkaller #0 [ 1399.178666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1399.188717][ C0] Call Trace: [ 1399.191995][ C0] [ 1399.194834][ C0] dump_stack_lvl+0x18c/0x250 [ 1399.199516][ C0] ? show_regs_print_info+0x20/0x20 [ 1399.204714][ C0] ? __kernel_text_address+0xd/0x30 [ 1399.209921][ C0] ? unwind_get_return_address+0x91/0xc0 [ 1399.215550][ C0] valid_state+0x13b/0x1d0 [ 1399.219972][ C0] mark_lock_irq+0xad/0x900 [ 1399.224486][ C0] ? stack_trace_save+0xaa/0x100 [ 1399.229423][ C0] ? save_trace+0xcd0/0xcd0 [ 1399.233930][ C0] ? save_trace+0x5d/0xcd0 [ 1399.238350][ C0] mark_lock+0x208/0x320 [ 1399.242598][ C0] __lock_acquire+0xdf7/0x7eb0 [ 1399.247374][ C0] ? verify_lock_unused+0x140/0x140 [ 1399.252599][ C0] ? verify_lock_unused+0x140/0x140 [ 1399.257796][ C0] ? kmem_cache_free+0xf8/0x290 [ 1399.262660][ C0] ? x25_lapb_receive_frame+0x9e/0xef0 [ 1399.268123][ C0] ? netif_receive_skb_core+0x16a/0x230 [ 1399.273672][ C0] ? lapbeth_napi_poll+0x42/0x80 [ 1399.278611][ C0] ? __napi_poll+0xbb/0x460 [ 1399.283123][ C0] ? net_rx_action+0x65f/0xcc0 [ 1399.287896][ C0] ? verify_lock_unused+0x140/0x140 [ 1399.293101][ C0] ? __dev_queue_xmit+0x1329/0x37e0 [ 1399.298296][ C0] ? x25_write_internal+0x9df/0xe40 [ 1399.303495][ C0] ? x25_process_rx_frame+0x55f/0x2780 [ 1399.308953][ C0] ? x25_backlog_rcv+0x1e/0x50 [ 1399.313714][ C0] ? __release_sock+0x1ea/0x460 [ 1399.318559][ C0] ? release_sock+0x5f/0x1c0 [ 1399.323151][ C0] ? x25_wait_for_connection_establishment+0x2b7/0x520 [ 1399.330009][ C0] ? x25_connect+0x562/0x890 [ 1399.334594][ C0] ? __sys_connect+0x3da/0x470 [ 1399.339358][ C0] ? do_syscall_64+0x55/0xb0 [ 1399.344034][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.350125][ C0] lock_acquire+0x19e/0x420 [ 1399.354639][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1399.359754][ C0] ? lock_chain_count+0x20/0x20 [ 1399.364601][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1399.369992][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1399.375365][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1399.380566][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1399.385938][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1399.390788][ C0] lock_sock_nested+0x48/0x100 [ 1399.395552][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1399.400674][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1399.405617][ C0] x25_link_control+0xa6/0xb60 [ 1399.410397][ C0] x25_lapb_receive_frame+0x3d3/0xef0 [ 1399.415773][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1399.421259][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1399.426928][ C0] ? x25_device_event+0x280/0x280 [ 1399.431970][ C0] netif_receive_skb_core+0x16a/0x230 [ 1399.437353][ C0] lapbeth_napi_poll+0x42/0x80 [ 1399.442127][ C0] __napi_poll+0xbb/0x460 [ 1399.446463][ C0] net_rx_action+0x65f/0xcc0 [ 1399.451061][ C0] ? net_tx_action+0x950/0x950 [ 1399.455832][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1399.461839][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1399.467126][ C0] ? lock_chain_count+0x20/0x20 [ 1399.471982][ C0] handle_softirqs+0x27d/0x820 [ 1399.476749][ C0] ? do_softirq+0xfa/0x1a0 [ 1399.481174][ C0] ? do_softirq+0x1a0/0x1a0 [ 1399.485680][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1399.490790][ C0] do_softirq+0xfa/0x1a0 [ 1399.495038][ C0] [ 1399.497964][ C0] [ 1399.500891][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1399.506263][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1399.512243][ C0] ? rcu_is_watching+0x15/0xb0 [ 1399.517010][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1399.522208][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1399.527059][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1399.532167][ C0] __dev_queue_xmit+0x1329/0x37e0 [ 1399.537189][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1399.542303][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1399.547325][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1399.552605][ C0] ? rcu_is_watching+0x15/0xb0 [ 1399.557371][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1399.562835][ C0] ? kmalloc_reserve+0x95/0x240 [ 1399.567689][ C0] ? __build_skb_around+0x245/0x3c0 [ 1399.572887][ C0] ? skb_push+0x20/0xe0 [ 1399.577048][ C0] ? x25_send_frame+0xea/0x200 [ 1399.581818][ C0] x25_write_internal+0x9df/0xe40 [ 1399.586940][ C0] ? x25_validate_nr+0x1a0/0x1a0 [ 1399.591879][ C0] ? x25_decode+0x293/0xb40 [ 1399.596395][ C0] x25_process_rx_frame+0x55f/0x2780 [ 1399.601686][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1399.607678][ C0] ? x25_limit_facilities+0x1c0/0x1c0 [ 1399.613055][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1399.618427][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1399.623794][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1399.628643][ C0] x25_backlog_rcv+0x1e/0x50 [ 1399.633233][ C0] __release_sock+0x1ea/0x460 [ 1399.637918][ C0] release_sock+0x5f/0x1c0 [ 1399.642330][ C0] x25_wait_for_connection_establishment+0x2b7/0x520 [ 1399.649008][ C0] ? x25_wait_for_connection_establishment+0x115/0x520 [ 1399.655857][ C0] ? x25_new_lci+0x110/0x110 [ 1399.660444][ C0] ? do_task_dead+0xd0/0xd0 [ 1399.664944][ C0] x25_connect+0x562/0x890 [ 1399.669360][ C0] __sys_connect+0x3da/0x470 [ 1399.673948][ C0] ? __sys_connect_file+0x170/0x170 [ 1399.679153][ C0] __x64_sys_connect+0x7a/0x90 [ 1399.683917][ C0] do_syscall_64+0x55/0xb0 [ 1399.688332][ C0] ? clear_bhb_loop+0x40/0x90 [ 1399.693004][ C0] ? clear_bhb_loop+0x40/0x90 [ 1399.697673][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.703566][ C0] RIP: 0033:0x7f6ea3f9e1d9 [ 1399.707976][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.727577][ C0] RSP: 002b:00007f6ea4f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1399.735989][ C0] RAX: ffffffffffffffda RBX: 00007f6ea4225fa0 RCX: 00007f6ea3f9e1d9 [ 1399.743956][ C0] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 1399.751924][ C0] RBP: 00007f6ea4035888 R08: 0000000000000000 R09: 0000000000000000 [ 1399.759889][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.767856][ C0] R13: 00007f6ea4226038 R14: 00007f6ea4225fa0 R15: 00007ffdd1a04dd8 [ 1399.775832][ C0] [ 1399.778956][ C0] ------------[ cut here ]------------ [ 1399.784461][ C0] do not call blocking ops when !TASK_RUNNING; state=1 set at [] x25_wait_for_connection_establishment+0x115/0x520 [ 1399.798267][ C0] WARNING: CPU: 0 PID: 19646 at kernel/sched/core.c:10139 __might_sleep+0xa6/0xe0 [ 1399.807553][ C0] Modules linked in: [ 1399.811500][ C0] CPU: 0 PID: 19646 Comm: syz.3.3538 Tainted: G S syzkaller #0 [ 1399.820485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1399.830579][ C0] RIP: 0010:__might_sleep+0xa6/0xe0 [ 1399.835824][ C0] Code: 5d e9 5e 00 00 00 c6 05 0f 22 f8 0d 01 48 89 fb 48 c7 c7 20 61 ca 8a 41 89 f6 89 ee 48 89 ca e8 90 96 f2 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 1399.855487][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1399.861708][ C0] RAX: 68f32e8936267000 RBX: ffffffff8bc40340 RCX: ffff888066b61e00 [ 1399.869712][ C0] RDX: 0000000000000100 RSI: 0000000000000dd9 RDI: ffffffff8bc40340 [ 1399.877748][ C0] RBP: 0000000000000001 R08: ffffc90000007747 R09: 1ffff92000000ee8 [ 1399.885775][ C0] R10: dffffc0000000000 R11: fffff52000000ee9 R12: dffffc0000000000 [ 1399.893806][ C0] R13: ffff888079306538 R14: 0000000000000dd9 R15: dffffc0000000000 [ 1399.901838][ C0] FS: 00007f6ea4f326c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1399.910839][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.917446][ C0] CR2: 0000001b31321ff8 CR3: 000000004add3000 CR4: 00000000003506f0 [ 1399.925498][ C0] Call Trace: [ 1399.928808][ C0] [ 1399.931699][ C0] lock_sock_nested+0x5d/0x100 [ 1399.936509][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1399.941505][ C0] x25_link_control+0xa6/0xb60 [ 1399.946319][ C0] x25_lapb_receive_frame+0x3d3/0xef0 [ 1399.951759][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1399.957259][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1399.962807][ C0] ? x25_device_event+0x280/0x280 [ 1399.967884][ C0] netif_receive_skb_core+0x16a/0x230 [ 1399.973324][ C0] lapbeth_napi_poll+0x42/0x80 [ 1399.978134][ C0] __napi_poll+0xbb/0x460 [ 1399.982543][ C0] net_rx_action+0x65f/0xcc0 [ 1399.987182][ C0] ? net_tx_action+0x950/0x950 [ 1399.992020][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1399.998031][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1400.003376][ C0] ? lock_chain_count+0x20/0x20 [ 1400.008262][ C0] handle_softirqs+0x27d/0x820 [ 1400.013092][ C0] ? do_softirq+0xfa/0x1a0 [ 1400.017546][ C0] ? do_softirq+0x1a0/0x1a0 [ 1400.022112][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.027260][ C0] do_softirq+0xfa/0x1a0 [ 1400.031571][ C0] [ 1400.034553][ C0] [ 1400.037511][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1400.042942][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1400.048960][ C0] ? rcu_is_watching+0x15/0xb0 [ 1400.053795][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1400.059020][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1400.063944][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.069085][ C0] __dev_queue_xmit+0x1329/0x37e0 [ 1400.074168][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.079315][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1400.084401][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1400.089732][ C0] ? rcu_is_watching+0x15/0xb0 [ 1400.094639][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1400.100168][ C0] ? kmalloc_reserve+0x95/0x240 [ 1400.105061][ C0] ? __build_skb_around+0x245/0x3c0 [ 1400.110323][ C0] ? skb_push+0x20/0xe0 [ 1400.114509][ C0] ? x25_send_frame+0xea/0x200 [ 1400.119306][ C0] x25_write_internal+0x9df/0xe40 [ 1400.124394][ C0] ? x25_validate_nr+0x1a0/0x1a0 [ 1400.129368][ C0] ? x25_decode+0x293/0xb40 [ 1400.133942][ C0] x25_process_rx_frame+0x55f/0x2780 [ 1400.139262][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1400.145297][ C0] ? x25_limit_facilities+0x1c0/0x1c0 [ 1400.150737][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1400.156138][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1400.161569][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1400.166457][ C0] x25_backlog_rcv+0x1e/0x50 [ 1400.171123][ C0] __release_sock+0x1ea/0x460 [ 1400.175834][ C0] release_sock+0x5f/0x1c0 [ 1400.180314][ C0] x25_wait_for_connection_establishment+0x2b7/0x520 [ 1400.187032][ C0] ? x25_wait_for_connection_establishment+0x115/0x520 [ 1400.193960][ C0] ? x25_new_lci+0x110/0x110 [ 1400.198588][ C0] ? do_task_dead+0xd0/0xd0 [ 1400.203166][ C0] x25_connect+0x562/0x890 [ 1400.207630][ C0] __sys_connect+0x3da/0x470 [ 1400.212320][ C0] ? __sys_connect_file+0x170/0x170 [ 1400.217558][ C0] __x64_sys_connect+0x7a/0x90 [ 1400.222397][ C0] do_syscall_64+0x55/0xb0 [ 1400.226844][ C0] ? clear_bhb_loop+0x40/0x90 [ 1400.231968][ C0] ? clear_bhb_loop+0x40/0x90 [ 1400.236774][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.242755][ C0] RIP: 0033:0x7f6ea3f9e1d9 [ 1400.247193][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.266869][ C0] RSP: 002b:00007f6ea4f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1400.275338][ C0] RAX: ffffffffffffffda RBX: 00007f6ea4225fa0 RCX: 00007f6ea3f9e1d9 [ 1400.283402][ C0] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 1400.291521][ C0] RBP: 00007f6ea4035888 R08: 0000000000000000 R09: 0000000000000000 [ 1400.299516][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.307555][ C0] R13: 00007f6ea4226038 R14: 00007f6ea4225fa0 R15: 00007ffdd1a04dd8 [ 1400.315586][ C0] [ 1400.318633][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1400.326024][ C0] CPU: 0 PID: 19646 Comm: syz.3.3538 Tainted: G S syzkaller #0 [ 1400.334993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1400.345075][ C0] Call Trace: [ 1400.348381][ C0] [ 1400.351244][ C0] dump_stack_lvl+0x18c/0x250 [ 1400.355959][ C0] ? show_regs_print_info+0x20/0x20 [ 1400.361187][ C0] ? load_image+0x420/0x420 [ 1400.365734][ C0] panic+0x2ca/0x720 [ 1400.369659][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1400.374200][ C0] __warn+0x2e0/0x470 [ 1400.378212][ C0] ? __might_sleep+0xa6/0xe0 [ 1400.382840][ C0] ? __might_sleep+0xa6/0xe0 [ 1400.387464][ C0] report_bug+0x2be/0x4f0 [ 1400.391829][ C0] ? __might_sleep+0xa6/0xe0 [ 1400.396452][ C0] ? __might_sleep+0xa6/0xe0 [ 1400.401086][ C0] ? __might_sleep+0xa8/0xe0 [ 1400.405703][ C0] handle_bug+0xcf/0x120 [ 1400.409971][ C0] exc_invalid_op+0x1a/0x50 [ 1400.414491][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1400.419340][ C0] RIP: 0010:__might_sleep+0xa6/0xe0 [ 1400.424539][ C0] Code: 5d e9 5e 00 00 00 c6 05 0f 22 f8 0d 01 48 89 fb 48 c7 c7 20 61 ca 8a 41 89 f6 89 ee 48 89 ca e8 90 96 f2 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 1400.444143][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1400.450204][ C0] RAX: 68f32e8936267000 RBX: ffffffff8bc40340 RCX: ffff888066b61e00 [ 1400.458171][ C0] RDX: 0000000000000100 RSI: 0000000000000dd9 RDI: ffffffff8bc40340 [ 1400.466139][ C0] RBP: 0000000000000001 R08: ffffc90000007747 R09: 1ffff92000000ee8 [ 1400.474107][ C0] R10: dffffc0000000000 R11: fffff52000000ee9 R12: dffffc0000000000 [ 1400.482071][ C0] R13: ffff888079306538 R14: 0000000000000dd9 R15: dffffc0000000000 [ 1400.490059][ C0] ? __might_sleep+0xa0/0xe0 [ 1400.494659][ C0] lock_sock_nested+0x5d/0x100 [ 1400.499435][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1400.504390][ C0] x25_link_control+0xa6/0xb60 [ 1400.509164][ C0] x25_lapb_receive_frame+0x3d3/0xef0 [ 1400.514537][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1400.519998][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1400.525451][ C0] ? x25_device_event+0x280/0x280 [ 1400.530473][ C0] netif_receive_skb_core+0x16a/0x230 [ 1400.535936][ C0] lapbeth_napi_poll+0x42/0x80 [ 1400.540701][ C0] __napi_poll+0xbb/0x460 [ 1400.545034][ C0] net_rx_action+0x65f/0xcc0 [ 1400.549630][ C0] ? net_tx_action+0x950/0x950 [ 1400.554395][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1400.560368][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 1400.565646][ C0] ? lock_chain_count+0x20/0x20 [ 1400.570501][ C0] handle_softirqs+0x27d/0x820 [ 1400.575260][ C0] ? do_softirq+0xfa/0x1a0 [ 1400.579755][ C0] ? do_softirq+0x1a0/0x1a0 [ 1400.584268][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.589393][ C0] do_softirq+0xfa/0x1a0 [ 1400.593650][ C0] [ 1400.596577][ C0] [ 1400.599505][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1400.604887][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1400.610868][ C0] ? rcu_is_watching+0x15/0xb0 [ 1400.615640][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1400.620835][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1400.625680][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.630787][ C0] __dev_queue_xmit+0x1329/0x37e0 [ 1400.635804][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1400.640938][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1400.645957][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1400.651239][ C0] ? rcu_is_watching+0x15/0xb0 [ 1400.656002][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1400.661461][ C0] ? kmalloc_reserve+0x95/0x240 [ 1400.666312][ C0] ? __build_skb_around+0x245/0x3c0 [ 1400.671524][ C0] ? skb_push+0x20/0xe0 [ 1400.675677][ C0] ? x25_send_frame+0xea/0x200 [ 1400.680437][ C0] x25_write_internal+0x9df/0xe40 [ 1400.685459][ C0] ? x25_validate_nr+0x1a0/0x1a0 [ 1400.690391][ C0] ? x25_decode+0x293/0xb40 [ 1400.694892][ C0] x25_process_rx_frame+0x55f/0x2780 [ 1400.700176][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1400.706152][ C0] ? x25_limit_facilities+0x1c0/0x1c0 [ 1400.711541][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1400.716994][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1400.722375][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1400.727226][ C0] x25_backlog_rcv+0x1e/0x50 [ 1400.731819][ C0] __release_sock+0x1ea/0x460 [ 1400.736497][ C0] release_sock+0x5f/0x1c0 [ 1400.740916][ C0] x25_wait_for_connection_establishment+0x2b7/0x520 [ 1400.747597][ C0] ? x25_wait_for_connection_establishment+0x115/0x520 [ 1400.754444][ C0] ? x25_new_lci+0x110/0x110 [ 1400.759035][ C0] ? do_task_dead+0xd0/0xd0 [ 1400.763535][ C0] x25_connect+0x562/0x890 [ 1400.767948][ C0] __sys_connect+0x3da/0x470 [ 1400.772539][ C0] ? __sys_connect_file+0x170/0x170 [ 1400.777753][ C0] __x64_sys_connect+0x7a/0x90 [ 1400.782526][ C0] do_syscall_64+0x55/0xb0 [ 1400.786938][ C0] ? clear_bhb_loop+0x40/0x90 [ 1400.791608][ C0] ? clear_bhb_loop+0x40/0x90 [ 1400.796276][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.802200][ C0] RIP: 0033:0x7f6ea3f9e1d9 [ 1400.806628][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.826271][ C0] RSP: 002b:00007f6ea4f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1400.834699][ C0] RAX: ffffffffffffffda RBX: 00007f6ea4225fa0 RCX: 00007f6ea3f9e1d9 [ 1400.842671][ C0] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 1400.850637][ C0] RBP: 00007f6ea4035888 R08: 0000000000000000 R09: 0000000000000000 [ 1400.858599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.866563][ C0] R13: 00007f6ea4226038 R14: 00007f6ea4225fa0 R15: 00007ffdd1a04dd8 [ 1400.874537][ C0] [ 1400.877824][ C0] Kernel Offset: disabled [ 1400.882135][ C0] Rebooting in 86400 seconds..