last executing test programs: 22m9.056113881s ago: executing program 2 (id=234): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22m7.050272283s ago: executing program 2 (id=237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x0, 0x2, 0x6, 0x10187, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3ff, 0x0, @void, @value, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000002) 22m5.695513735s ago: executing program 2 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x34}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) 22m2.511973465s ago: executing program 2 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) pipe(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x141241) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x4, 0x0, 0x5, 0x10001, &(0x7f0000000940)}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x100010, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x7f, 0x8, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 21m57.491207562s ago: executing program 2 (id=252): sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0xd4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0xffffff45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffb, 0x0) socket(0x2c, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x124, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x2, 0x0, r6}, {0x43, 0x1, 0x18e8, 0x0, 0x6, 0x2, 0x9, 0x5471}, {0xd48a, 0x1, 0x6, 0x8000}, 0x10001, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x124}}, 0x4000800) 21m55.607602328s ago: executing program 2 (id=256): connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) pause() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 21m38.872859137s ago: executing program 32 (id=256): connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) pause() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 10m49.016581758s ago: executing program 0 (id=1637): unshare(0x4020400) syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2d02) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 10m46.333184657s ago: executing program 0 (id=1647): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0xffffffffffffff37, 0xb, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004b40)=ANY=[], 0x184}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0xfffffff3}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0xe8d}], 0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0], &(0x7f0000033840), 0x0, 0x1, 0x0, 0x0, r4}) 10m45.401758296s ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 10m43.220123587s ago: executing program 0 (id=1660): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x6, 0x3, 0xc, 0x7}, {0x6f39, 0x7f, 0xe, 0x4}]}) socket$netlink(0x10, 0x3, 0x0) 10m38.818147435s ago: executing program 0 (id=1672): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 10m38.399777839s ago: executing program 0 (id=1675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x89a3, &(0x7f0000000100)) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010000000000000000000a0000000000000006000700080000000c000880060006000000000008000500", @ANYRES32=r5], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_newnexthop={0x100, 0x68, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @NHA_GROUP={0x3c, 0x2, [{0x2, 0x4}, {0x0, 0xe}, {0x0, 0x3}, {0x2, 0xd2}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x44}]}, @NHA_ID={0x8}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe}]}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x80}]}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x94}, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 10m37.611547192s ago: executing program 33 (id=1675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x89a3, &(0x7f0000000100)) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010000000000000000000a0000000000000006000700080000000c000880060006000000000008000500", @ANYRES32=r5], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_newnexthop={0x100, 0x68, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @NHA_GROUP={0x3c, 0x2, [{0x2, 0x4}, {0x0, 0xe}, {0x0, 0x3}, {0x2, 0xd2}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x44}]}, @NHA_ID={0x8}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe}]}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x80}]}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x400}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x94}, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2502010080150002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d4a8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5a474c8a725ac129eda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bfd81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64726152dbe767337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000"], 0x114}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 10m30.587970253s ago: executing program 4 (id=1697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x6, 0x7, 0x2, "a1757bfbb8187f00002fd0af5bff412142a07a41cbf3fbaca7161375cd1d0cd51409b701000e27a80e1a7d55466a268a57f47144d394b9748d53be49fe3600", 0x31}, 0x60) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) fdatasync(0xffffffffffffffff) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x36) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 10m29.876345984s ago: executing program 4 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10m28.530668903s ago: executing program 4 (id=1701): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) rename(0x0, &(0x7f0000000140)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e23, 0x1008, @loopback, 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 10m27.684582572s ago: executing program 4 (id=1706): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) 10m26.352971718s ago: executing program 4 (id=1709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 10m23.247395188s ago: executing program 4 (id=1718): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) 10m22.280225592s ago: executing program 34 (id=1718): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) 53.423794974s ago: executing program 1 (id=2890): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r0, &(0x7f00000000c0)=""/75, 0x4b) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[], 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r3, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 49.594679269s ago: executing program 1 (id=2898): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000240)=0xffe) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 45.646192332s ago: executing program 1 (id=2905): r0 = socket$kcm(0x10, 0x2, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2000084) bind$inet6(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) rename(0x0, &(0x7f0000000140)='./file0\x00') r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e23, 0x1008, @loopback, 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0x40, 0xff, 0x0, r4}}}, 0x28) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="620604037f680200fc0100000000000000d3be0000000000fe8000000000000000000000000000aafe880000000000000000000000000001"], 0x38) r5 = dup2(r3, r3) write$uinput_user_dev(r5, &(0x7f0000000980)={'syz0\x00', {0x0, 0x77b, 0xb200, 0xa4}, 0x3f, [0x5, 0x411d, 0xa9, 0x6, 0xfffffffe, 0xfffffff8, 0xc3, 0x2, 0x200, 0x6, 0x7, 0xd, 0x8000, 0xa3, 0x2, 0x0, 0x7, 0x1, 0x5ef, 0x4, 0x5b, 0x6, 0x8001, 0x1, 0x0, 0x40, 0x2, 0x30, 0x5a1, 0x2, 0x3c3c14ed, 0x54, 0x7, 0x1, 0x2, 0x3, 0x8, 0xc76, 0x8, 0x80, 0x5, 0x4, 0x10, 0x3, 0xc11, 0x7f, 0x2, 0x7, 0x1, 0x401, 0xd10, 0x1, 0x6, 0x4, 0x1, 0xc, 0xa, 0x2, 0x4, 0x7, 0x9, 0x7, 0x40, 0x4], [0x0, 0xffffffff, 0x0, 0x8001, 0x3, 0x0, 0x4, 0x909, 0x1, 0x10, 0x7, 0x7ff, 0x2, 0x401, 0x0, 0x6, 0x0, 0xff, 0x8, 0x0, 0x5, 0xa6, 0x2, 0x0, 0x9, 0xfffffffc, 0x5, 0x3ff, 0x7, 0x5, 0x800, 0x3ff, 0x0, 0xa, 0x4d9b, 0x3, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x10001, 0x6, 0xfffffbff, 0x0, 0xd, 0x4, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x9, 0x2, 0x6, 0x8, 0x3, 0xffff, 0x1, 0x8000, 0x7, 0x3], [0x8, 0xe7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x7, 0x8, 0x1, 0x8, 0xb, 0x3, 0x1, 0x80000001, 0x1, 0x81, 0x7, 0x918, 0xfffffffa, 0x2, 0x20, 0x7ff, 0x9, 0x1, 0x3, 0x6, 0x0, 0x8, 0x7f, 0x6, 0xca, 0x5, 0x0, 0x1, 0x9, 0x3, 0x9, 0xfffffffd, 0x27, 0x7, 0x1, 0xd6d9, 0x5, 0x5, 0x0, 0xfffffff8, 0x6, 0x400, 0xfffffff9, 0x6, 0x4, 0x3e, 0x10, 0x2, 0x8, 0x549, 0x80000000, 0x5, 0x1, 0x80, 0xfffffbb5, 0x10000000, 0x6, 0x2], [0x669, 0xfffffff8, 0xfffffffb, 0x8009, 0x4, 0x6, 0x2698, 0x1, 0x80, 0x1, 0x6, 0x10001, 0x10001, 0x2, 0x8, 0xfffffff3, 0x6, 0x5, 0x1, 0x9, 0x7fff, 0x0, 0xb, 0xd, 0xffff, 0x100, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x200, 0x7, 0x8, 0x0, 0x40, 0x7, 0x80, 0xfffffff7, 0x8000, 0x3, 0x80000000, 0xffffffff, 0x2d, 0x7592, 0x3, 0x80, 0x80, 0x93b, 0x1798, 0x1, 0x9, 0xf, 0x9, 0x82, 0x6, 0x6dd75fa8, 0x9, 0x80000000, 0x80, 0x3, 0x379, 0x6000]}, 0x45c) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f00000003c0)='-6', 0x2}], 0x1) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES8], 0x48) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 44.811592771s ago: executing program 1 (id=2908): socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c0000"], 0x26c0}}, 0x4010) 42.829567595s ago: executing program 1 (id=2914): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 37.618484144s ago: executing program 1 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000c00)={0x18}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed", 0xf}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) personality(0x5000004) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) fstat(0xffffffffffffffff, &(0x7f0000000200)) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 11.201034889s ago: executing program 6 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x82ce485}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x2000000, [{0x401, 0x7}, {0x0, 0x6df6}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 9.839845741s ago: executing program 6 (id=2978): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 9.603907222s ago: executing program 3 (id=2979): socket$inet6_tcp(0xa, 0x1, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x3, 0x2, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r0 = socket(0x18, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0x2, 0x2, 0x7, {0x6, 0x0, 0x2, 0xb}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x765, 0x8, 0x8008000, 0x2d1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) 8.839029662s ago: executing program 5 (id=2980): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.781954096s ago: executing program 7 (id=2981): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8.664143852s ago: executing program 3 (id=2982): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 7.767281283s ago: executing program 7 (id=2983): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) writev(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000002480)="d4", 0x1}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x87, @loopback, 0x4e23, 0x4, 'sh\x00', 0x37, 0x1, 0x31}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e21, 0x0, 0x4, 0x6, 0x3}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x6, 0x1}, {0x30}, {0x1, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 6.331422883s ago: executing program 5 (id=2984): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 6.330838979s ago: executing program 6 (id=2985): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x100, 0x3, 0x4, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 6.300880472s ago: executing program 3 (id=2986): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x683e3057}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00') read$FUSE(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockname$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0x2d8, 0x20000000, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xa, 0x77, 0x1000000000000, 0x0, 0x8000000000000001, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x4}) 6.274259802s ago: executing program 7 (id=2987): fsopen(&(0x7f0000000040)='binder\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES64=r0], 0x20) 5.933554846s ago: executing program 6 (id=2988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.103105837s ago: executing program 7 (id=2989): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r1, &(0x7f00000000c0)=""/75, 0x4b) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e16800000000000000000000000102", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r4, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4.902406206s ago: executing program 3 (id=2990): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.780341596s ago: executing program 5 (id=2991): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r1, &(0x7f00000000c0)=""/75, 0x4b) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r4, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4.723550916s ago: executing program 6 (id=2992): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r0, &(0x7f00000000c0)=""/75, 0x4b) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[], 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = gettid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) bind$x25(0xffffffffffffffff, 0x0, 0x0) 2.537437619s ago: executing program 7 (id=2993): r0 = socket$kcm(0x10, 0x2, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2000084) bind$inet6(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) rename(0x0, &(0x7f0000000140)='./file0\x00') r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e23, 0x1008, @loopback, 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0x40, 0xff, 0x0, r4}}}, 0x28) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="620604037f680200fc0100000000000000d3be0000000000fe8000000000000000000000000000aafe880000000000000000000000000001"], 0x38) r5 = dup2(r3, r3) write$uinput_user_dev(r5, &(0x7f0000000980)={'syz0\x00', {0x0, 0x77b, 0xb200, 0xa4}, 0x3f, [0x5, 0x411d, 0xa9, 0x6, 0xfffffffe, 0xfffffff8, 0xc3, 0x2, 0x200, 0x6, 0x7, 0xd, 0x8000, 0xa3, 0x2, 0x0, 0x7, 0x1, 0x5ef, 0x4, 0x5b, 0x6, 0x8001, 0x1, 0x0, 0x40, 0x2, 0x30, 0x5a1, 0x2, 0x3c3c14ed, 0x54, 0x7, 0x1, 0x2, 0x3, 0x8, 0xc76, 0x8, 0x80, 0x5, 0x4, 0x10, 0x3, 0xc11, 0x7f, 0x2, 0x7, 0x1, 0x401, 0xd10, 0x1, 0x6, 0x4, 0x1, 0xc, 0xa, 0x2, 0x4, 0x7, 0x9, 0x7, 0x40, 0x4], [0x0, 0xffffffff, 0x0, 0x8001, 0x3, 0x0, 0x4, 0x909, 0x1, 0x10, 0x7, 0x7ff, 0x2, 0x401, 0x0, 0x6, 0x0, 0xff, 0x8, 0x0, 0x5, 0xa6, 0x2, 0x0, 0x9, 0xfffffffc, 0x5, 0x3ff, 0x7, 0x5, 0x800, 0x3ff, 0x0, 0xa, 0x4d9b, 0x3, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x10001, 0x6, 0xfffffbff, 0x0, 0xd, 0x4, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x9, 0x2, 0x6, 0x8, 0x3, 0xffff, 0x1, 0x8000, 0x7, 0x3], [0x8, 0xe7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x7, 0x8, 0x1, 0x8, 0xb, 0x3, 0x1, 0x80000001, 0x1, 0x81, 0x7, 0x918, 0xfffffffa, 0x2, 0x20, 0x7ff, 0x9, 0x1, 0x3, 0x6, 0x0, 0x8, 0x7f, 0x6, 0xca, 0x5, 0x0, 0x1, 0x9, 0x3, 0x9, 0xfffffffd, 0x27, 0x7, 0x1, 0xd6d9, 0x5, 0x5, 0x0, 0xfffffff8, 0x6, 0x400, 0xfffffff9, 0x6, 0x4, 0x3e, 0x10, 0x2, 0x8, 0x549, 0x80000000, 0x5, 0x1, 0x80, 0xfffffbb5, 0x10000000, 0x6, 0x2], [0x669, 0xfffffff8, 0xfffffffb, 0x8009, 0x4, 0x6, 0x2698, 0x1, 0x80, 0x1, 0x6, 0x10001, 0x10001, 0x2, 0x8, 0xfffffff3, 0x6, 0x5, 0x1, 0x9, 0x7fff, 0x0, 0xb, 0xd, 0xffff, 0x100, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x200, 0x7, 0x8, 0x0, 0x40, 0x7, 0x80, 0xfffffff7, 0x8000, 0x3, 0x80000000, 0xffffffff, 0x2d, 0x7592, 0x3, 0x80, 0x80, 0x93b, 0x1798, 0x1, 0x9, 0xf, 0x9, 0x82, 0x6, 0x6dd75fa8, 0x9, 0x80000000, 0x80, 0x3, 0x379, 0x6000]}, 0x45c) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)}, {&(0x7f00000003c0)='-6', 0x2}], 0x2) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES8], 0x48) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.458954051s ago: executing program 6 (id=2994): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) 1.72349459s ago: executing program 5 (id=2995): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 1.587361224s ago: executing program 7 (id=2996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 1.415666267s ago: executing program 5 (id=2997): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x100, 0x3, 0x4, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 1.350403922s ago: executing program 3 (id=2998): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={0x0, 0x3d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') listxattr(&(0x7f0000000380)='./cgroup\x00', 0x0, 0x0) 1.081554229s ago: executing program 5 (id=2999): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r1, &(0x7f00000000c0)=""/75, 0x4b) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r4, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 0s ago: executing program 3 (id=3000): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x6) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000004c0)={0x1, @sliced={0x6, [0x101, 0x7, 0x6, 0x8, 0x7, 0xb, 0xfffb, 0xd89, 0x4d26, 0x5, 0x6, 0x0, 0xfffe, 0x3, 0x180, 0xfe00, 0x1000, 0x2, 0x401, 0x8, 0x5, 0x4, 0x8, 0x3d2, 0x3, 0xfff, 0x9273, 0x2, 0xd5f, 0xffdf, 0x3, 0xa, 0x86a, 0x0, 0xcc92, 0x667, 0x3, 0xff36, 0x0, 0x1, 0x1, 0xffff, 0xfffc, 0x1, 0x38, 0x5, 0x80, 0x2], 0x9}}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) kernel console output (not intermixed with test programs): z [ 914.723243][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.850194][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.905885][ T9462] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 914.924668][ T9462] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 914.952267][ T9462] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 915.864744][ T976] usb 2-1: USB disconnect, device number 37 [ 915.875757][ T976] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 915.946031][ T976] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 915.977897][ T976] visor 2-1:1.0: device disconnected [ 916.368818][T12354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 916.379113][T12354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.387097][T12354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.395284][T12354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.403957][T12354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.428079][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 916.436669][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.444731][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.453211][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.461028][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 917.513749][T12356] overlayfs: missing 'lowerdir' [ 918.013786][ T49] bridge_slave_1: left allmulticast mode [ 918.025423][T12367] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 918.098651][ T49] bridge_slave_1: left promiscuous mode [ 918.142540][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.312049][ T49] bridge_slave_0: left allmulticast mode [ 918.417109][ T49] bridge_slave_0: left promiscuous mode [ 918.459246][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.663101][T12354] Bluetooth: hci0: command tx timeout [ 920.631577][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.647265][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.666325][ T49] bond0 (unregistering): Released all slaves [ 920.885778][T12354] Bluetooth: hci0: command tx timeout [ 922.889150][T12420] overlayfs: missing 'lowerdir' [ 923.163225][T12354] Bluetooth: hci0: command tx timeout [ 923.679286][T12419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 924.028405][ T49] hsr_slave_0: left promiscuous mode [ 924.073067][ T49] hsr_slave_1: left promiscuous mode [ 924.092219][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.113997][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.152051][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.233849][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.710670][ T49] veth1_macvtap: left promiscuous mode [ 924.720104][ T49] veth0_macvtap: left promiscuous mode [ 924.731437][ T49] veth1_vlan: left promiscuous mode [ 925.472764][T12354] Bluetooth: hci0: command tx timeout [ 925.497094][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 925.497132][ T30] audit: type=1326 audit(1748665809.922:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 925.524896][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.535739][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.546087][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.049440][ T30] audit: type=1326 audit(1748665809.922:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.147539][ T30] audit: type=1326 audit(1748665809.922:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.185924][ T30] audit: type=1326 audit(1748665809.922:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.234440][ T30] audit: type=1326 audit(1748665809.922:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.300169][ T30] audit: type=1326 audit(1748665809.931:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067c52ab39 code=0x7ffc0000 [ 926.376780][ T30] audit: type=1326 audit(1748665809.931:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.439288][ T30] audit: type=1326 audit(1748665809.950:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067c52ab39 code=0x7ffc0000 [ 926.466441][ T30] audit: type=1326 audit(1748665809.950:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067c58e969 code=0x7ffc0000 [ 926.504074][ T30] audit: type=1326 audit(1748665809.997:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12434 comm="syz.4.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067c52ab39 code=0x7ffc0000 [ 927.886207][ T49] team0 (unregistering): Port device team_slave_1 removed [ 928.004861][ T49] team0 (unregistering): Port device team_slave_0 removed [ 929.106906][ T5821] Bluetooth: hci0: command 0x0405 tx timeout [ 929.617484][T12353] chnl_net:caif_netlink_parms(): no params data found [ 930.115382][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.165679][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.172995][T12353] bridge_slave_0: entered allmulticast mode [ 930.240642][T12353] bridge_slave_0: entered promiscuous mode [ 930.497619][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.516845][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.570967][T12353] bridge_slave_1: entered allmulticast mode [ 930.618706][T12353] bridge_slave_1: entered promiscuous mode [ 930.774397][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.079098][T12354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.088316][T12354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.100900][T12354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.132488][T12354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.148162][T12354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.185749][ T5867] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 933.075114][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.141935][T12353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.158941][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 933.171139][ T5867] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 933.178718][T12353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.201593][ T5867] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 933.213905][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.222062][ T5867] usb 2-1: Product: syz [ 933.255142][ T5867] usb 2-1: Manufacturer: syz [ 933.259816][ T5867] usb 2-1: SerialNumber: syz [ 933.302407][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.314495][T12354] Bluetooth: hci1: command tx timeout [ 934.467223][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.525039][T12353] team0: Port device team_slave_0 added [ 934.571122][T12353] team0: Port device team_slave_1 added [ 934.789424][T12353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.796973][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.079305][T12353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.402180][T12554] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 935.904106][T12353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.929270][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.955202][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.037614][ T9462] usb 2-1: USB disconnect, device number 38 [ 936.108922][T12353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.547906][T12354] Bluetooth: hci1: command tx timeout [ 937.902719][T12576] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 938.040548][T12353] hsr_slave_0: entered promiscuous mode [ 938.150797][T12353] hsr_slave_1: entered promiscuous mode [ 938.194015][T12353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 938.212039][T12353] Cannot create hsr debugfs directory [ 938.452571][ T49] bridge_slave_1: left allmulticast mode [ 938.460410][ T49] bridge_slave_1: left promiscuous mode [ 938.466388][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.480590][ T49] bridge_slave_0: left allmulticast mode [ 938.486542][ T49] bridge_slave_0: left promiscuous mode [ 938.492841][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.439546][T12354] Bluetooth: hci1: command tx timeout [ 940.462408][ T5867] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 940.862085][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 940.892113][ T5867] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 940.927995][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.954425][ T5867] usb 6-1: Product: syz [ 940.958674][ T5867] usb 6-1: Manufacturer: syz [ 940.972852][ T5867] usb 6-1: SerialNumber: syz [ 941.291085][T12617] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.344567][ T5867] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 941.376012][ T5867] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 941.477415][ T5867] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 941.480736][ T5867] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 941.668631][T12354] Bluetooth: hci1: command tx timeout [ 942.094349][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.116610][ T5942] usb 6-1: USB disconnect, device number 30 [ 942.150447][ T5942] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 942.155944][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.193266][ T5942] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 942.210460][ T49] bond0 (unregistering): Released all slaves [ 942.213273][ T5942] visor 6-1:1.0: device disconnected [ 943.037412][ T49] IPVS: stopping master sync thread 8560 ... [ 943.367434][T12514] chnl_net:caif_netlink_parms(): no params data found [ 943.681380][T12635] overlayfs: missing 'lowerdir' [ 946.930024][ T49] hsr_slave_0: left promiscuous mode [ 947.122257][ T49] hsr_slave_1: left promiscuous mode [ 947.129244][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.167990][T12664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 947.200150][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.220457][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.232764][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.285171][ T49] veth1_macvtap: left promiscuous mode [ 947.312335][ T49] veth0_macvtap: left promiscuous mode [ 947.381006][ T49] veth1_vlan: left promiscuous mode [ 948.571113][T12685] overlayfs: missing 'lowerdir' [ 950.850167][ T49] team0 (unregistering): Port device team_slave_1 removed [ 950.904153][ T49] team0 (unregistering): Port device team_slave_0 removed [ 952.393741][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.403527][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.422385][T12514] bridge_slave_0: entered allmulticast mode [ 952.441144][T12514] bridge_slave_0: entered promiscuous mode [ 952.510365][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.517568][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.546301][T12514] bridge_slave_1: entered allmulticast mode [ 952.991914][T12514] bridge_slave_1: entered promiscuous mode [ 953.175854][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.194416][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.548325][T12514] team0: Port device team_slave_0 added [ 953.560043][ T49] IPVS: stop unused estimator thread 0... [ 953.563604][T12353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 954.241675][T12730] overlayfs: missing 'lowerdir' [ 955.635598][ T9462] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 955.671042][T12353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 955.739323][T12514] team0: Port device team_slave_1 added [ 955.767728][T12353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 956.104786][T12353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 956.135295][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.178026][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.224076][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.261908][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.285076][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.318616][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.649031][T12514] hsr_slave_0: entered promiscuous mode [ 956.674582][T12514] hsr_slave_1: entered promiscuous mode [ 956.696070][T12514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.704109][T12514] Cannot create hsr debugfs directory [ 957.240232][T12723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 957.246280][T12723] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 957.501577][T12723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 957.507592][T12723] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 957.622794][ T9462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 957.644319][ T9462] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 957.652173][ T9462] usb 4-1: can't read configurations, error -71 [ 958.193925][T12764] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 958.809004][T12353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.071428][T12353] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.759736][T12353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 959.770403][T12353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 959.896469][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.903710][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.464612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.471824][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.750126][T12514] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 961.930155][T12795] overlayfs: missing 'lowerdir' [ 962.569682][T12514] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.090568][T12514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 963.257827][T12514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 963.394180][T12353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.495081][T12514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.551660][T12514] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.552358][ T5942] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 963.593949][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.601180][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.645032][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.652305][ T7401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.966085][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 963.996676][ T5942] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 964.007639][ T5942] usb 4-1: can't read configurations, error -71 [ 966.064097][T12353] veth0_vlan: entered promiscuous mode [ 966.144523][T12353] veth1_vlan: entered promiscuous mode [ 966.256476][T12353] veth0_macvtap: entered promiscuous mode [ 966.287804][T12353] veth1_macvtap: entered promiscuous mode [ 966.385972][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.523033][T12859] overlayfs: missing 'lowerdir' [ 967.156081][T12353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.193004][T12353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.224188][T12353] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.407857][T12353] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.429610][T12353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.445601][T12353] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.022257][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.100643][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.188749][T12019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.197858][ T5867] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 968.231268][T12019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.519389][T12881] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 968.618267][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 968.660745][ T5867] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 968.674545][ T5867] usb 2-1: can't read configurations, error -71 [ 969.041493][T12514] veth0_vlan: entered promiscuous mode [ 969.084962][T12514] veth1_vlan: entered promiscuous mode [ 969.905934][T12514] veth0_macvtap: entered promiscuous mode [ 969.918455][T12514] veth1_macvtap: entered promiscuous mode [ 969.958309][T12514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.984167][T12514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.016093][T12514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.027765][T12514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.041832][T12514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.050772][T12514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.252035][T12899] fuse: Bad value for 'fd' [ 970.364051][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.425057][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.305607][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.387251][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.125561][T12925] overlayfs: missing 'lowerdir' [ 974.982550][T12924] veth0_vlan: entered allmulticast mode [ 975.468989][ T5871] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 976.099642][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 976.492173][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 976.507609][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 976.538122][ T5871] usb 2-1: can't read configurations, error -71 [ 979.175236][T12980] overlayfs: missing 'lowerdir' [ 980.746178][T12999] kAFS: No cell specified [ 980.797911][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 981.726528][ T5151] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 982.016683][ T5151] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 982.049458][ T5151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.341278][T13021] overlayfs: failed to resolve './file1': -2 [ 982.904161][ T5151] usb 6-1: config 0 descriptor?? [ 983.572110][T13025] overlayfs: missing 'lowerdir' [ 987.490437][ T43] usb 6-1: USB disconnect, device number 31 [ 987.734418][T13068] overlayfs: failed to resolve './file1': -2 [ 991.219781][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.226285][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.371668][T13104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 993.653723][T13117] overlayfs: failed to resolve './file1': -2 [ 995.486637][T13126] veth0_vlan: entered allmulticast mode [ 996.450298][T13149] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 996.459548][T13149] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 998.030722][T13168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1000.127644][T13185] block nbd7: NBD_DISCONNECT [ 1000.132745][T13185] block nbd7: Send disconnect failed -107 [ 1001.010857][T13193] block nbd7: Disconnected due to user request. [ 1001.022661][T13193] block nbd7: shutting down sockets [ 1001.480420][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1001.500275][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1002.121158][T13198] ceph: No mds server is up or the cluster is laggy [ 1002.137518][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1002.153244][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1003.738057][ T5151] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1003.941228][ T5151] usb 6-1: Using ep0 maxpacket: 16 [ 1003.989544][ T5151] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1004.095170][ T5151] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1004.149183][ T5151] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.209387][ T5151] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1004.297086][ T5151] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1004.306485][ T5151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.314533][ T5151] usb 6-1: Product: syz [ 1004.376183][ T5151] usb 6-1: Manufacturer: syz [ 1004.419330][ T5151] usb 6-1: SerialNumber: syz [ 1005.835662][ T9] IPVS: starting estimator thread 0... [ 1005.961641][T13247] IPVS: using max 39 ests per chain, 93600 per kthread [ 1006.835765][T13260] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1009.865135][ T5151] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1010.716349][ T24] usb 6-1: USB disconnect, device number 32 [ 1017.325786][T13352] random: crng reseeded on system resumption [ 1018.792166][T13365] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1020.538466][T13379] kAFS: No cell specified [ 1021.999664][ T976] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1022.521376][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 1022.529614][ T976] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.537920][ T976] usb 6-1: config 0 has no interface number 0 [ 1022.546270][ T976] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1022.578465][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.612955][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1929'. [ 1022.644965][ T976] usb 6-1: Product: syz [ 1022.706483][ T976] usb 6-1: Manufacturer: syz [ 1022.737077][ T976] usb 6-1: SerialNumber: syz [ 1022.771997][ T976] usb 6-1: config 0 descriptor?? [ 1022.806516][ T976] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1022.856753][ T976] usb 6-1: selecting invalid altsetting 1 [ 1022.884477][ T976] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1023.654880][ T976] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1023.698133][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1023.706494][ T976] usb 6-1: media controller created [ 1023.738527][T13407] netlink: 'syz.5.1926': attribute type 21 has an invalid length. [ 1024.326352][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.449008][ T976] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1024.466392][ T976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1025.405773][ T976] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1025.818248][ T976] usb 6-1: USB disconnect, device number 33 [ 1026.245889][T13429] overlayfs: missing 'lowerdir' [ 1026.344801][T13430] overlayfs: missing 'lowerdir' [ 1027.254408][T13442] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1027.404381][T13443] random: crng reseeded on system resumption [ 1027.565932][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 1029.313122][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1030.314842][ T976] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1030.764707][ T976] usb 8-1: Using ep0 maxpacket: 16 [ 1031.060894][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1031.084803][ T976] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1031.098230][ T976] usb 8-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.120907][ T976] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1031.395061][ T5151] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1031.597929][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 1031.862921][ T5151] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1031.886390][ T5151] usb 2-1: config 0 has no interface number 0 [ 1031.969442][T13498] overlayfs: missing 'lowerdir' [ 1032.052326][T13499] overlayfs: missing 'lowerdir' [ 1032.749206][ T5151] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1032.759186][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.913110][ T5151] usb 2-1: Product: syz [ 1032.917391][ T5151] usb 2-1: Manufacturer: syz [ 1032.922110][ T5151] usb 2-1: SerialNumber: syz [ 1033.022209][ T5151] usb 2-1: config 0 descriptor?? [ 1033.080308][ T5151] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1033.116010][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1033.138031][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1033.144238][ T5151] usb 2-1: selecting invalid altsetting 1 [ 1033.156063][ T5151] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1033.291080][T13502] ceph: No mds server is up or the cluster is laggy [ 1033.314176][ T5151] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1033.421379][ T5151] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1033.430327][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1033.755295][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1033.757480][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1033.847102][ T5151] usb 2-1: media controller created [ 1033.903518][T13518] netlink: 'syz.1.1948': attribute type 21 has an invalid length. [ 1034.381290][ T5151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1034.531655][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.601749][ T43] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.612694][ T5151] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1034.648630][ T5151] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1034.694017][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.698931][ T5151] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1034.723555][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.779276][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1035.239498][T13525] overlayfs: missing 'lowerdir' [ 1035.703683][T13527] overlayfs: missing 'workdir' [ 1036.077456][ T43] usb 7-1: invalid MIDI out EP 0 [ 1036.093758][ T976] usb 8-1: string descriptor 0 read error: -71 [ 1036.573216][ T976] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1036.586727][ T5151] usb 2-1: USB disconnect, device number 43 [ 1036.594889][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.616605][ T976] usb 8-1: can't set config #1, error -71 [ 1036.625751][ T976] usb 8-1: USB disconnect, device number 2 [ 1037.268768][T13533] udevd[13533]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.297409][ T43] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1037.388170][T13541] overlayfs: failed to resolve './file1': -2 [ 1037.611621][T13539] kAFS: No cell specified [ 1038.050393][ T5151] usb 7-1: USB disconnect, device number 2 [ 1038.369410][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1959'. [ 1042.089852][T13583] overlayfs: missing 'lowerdir' [ 1042.239358][T13587] overlayfs: missing 'workdir' [ 1043.237992][T13594] overlayfs: missing 'lowerdir' [ 1044.235316][ T5151] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1044.416611][ T9462] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1044.427265][ T5151] usb 8-1: Using ep0 maxpacket: 32 [ 1044.444609][ T5151] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1044.453443][ T5151] usb 8-1: config 0 has no interface number 0 [ 1044.628763][ T5151] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1044.661017][ T5151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.669954][ T5151] usb 8-1: Product: syz [ 1045.296304][ T43] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1045.326166][ T9462] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1045.411727][ T5151] usb 8-1: Manufacturer: syz [ 1045.416400][ T5151] usb 8-1: SerialNumber: syz [ 1045.446295][ T5151] usb 8-1: config 0 descriptor?? [ 1045.447345][ T9462] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.467856][ T5151] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1045.496170][ T9462] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1045.512776][ T5151] usb 8-1: selecting invalid altsetting 1 [ 1045.532879][ T9462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.541034][ T5151] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1045.552830][ T5151] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1045.564912][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1975'. [ 1045.576782][ T5151] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1045.599031][ T43] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1045.602644][ T5151] usb 8-1: media controller created [ 1045.632718][ T9462] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.639849][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.679742][ T9462] usb 2-1: invalid MIDI out EP 0 [ 1045.761524][T13619] netlink: 'syz.7.1969': attribute type 21 has an invalid length. [ 1045.769773][T13619] IPv6: NLM_F_CREATE should be specified when creating new route [ 1045.911396][ T5151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1047.069670][ T43] usb 6-1: config 0 descriptor?? [ 1047.272784][ T5151] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1047.362575][ T5151] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1047.373889][ T5151] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1047.375600][ T43] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1047.460707][T13470] udevd[13470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.770628][ T9462] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1047.947577][ T43] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1047.992089][ T5151] usb 8-1: USB disconnect, device number 3 [ 1048.018066][ T43] [drm] Initialized udl on minor 2 [ 1048.066102][ T9462] usb 2-1: USB disconnect, device number 44 [ 1048.087830][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1048.132195][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1048.178014][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1048.593134][T13651] overlayfs: missing 'lowerdir' [ 1048.658227][T13653] overlayfs: missing 'workdir' [ 1049.333867][T13654] overlayfs: missing 'lowerdir' [ 1051.448832][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1051.457366][ T43] usb 6-1: USB disconnect, device number 34 [ 1051.507464][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1052.596488][T13672] kAFS: No cell specified [ 1052.612747][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1986'. [ 1053.588401][ T5871] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1053.857595][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 1053.887169][ T5871] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1053.936079][ T5871] usb 6-1: config 0 has no interface number 0 [ 1053.978619][ T5871] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1054.002915][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.175793][ T5871] usb 6-1: Product: syz [ 1054.181355][ T5871] usb 6-1: Manufacturer: syz [ 1054.185992][ T5871] usb 6-1: SerialNumber: syz [ 1054.194890][ T5871] usb 6-1: config 0 descriptor?? [ 1054.216054][ T5871] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1054.233381][ T5871] usb 6-1: selecting invalid altsetting 1 [ 1054.239162][ T5871] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1054.964373][ T5871] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1055.059019][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1055.067640][ T5871] usb 6-1: media controller created [ 1055.170507][T13690] netlink: 'syz.5.1987': attribute type 21 has an invalid length. [ 1055.582570][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.698516][ T5871] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1055.721794][ T5871] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1055.888341][ T5871] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1056.878474][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.885234][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.947248][ T5871] usb 6-1: USB disconnect, device number 35 [ 1058.357769][T13714] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1058.367224][T13714] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1060.626174][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1998'. [ 1063.338581][T13754] kAFS: No cell specified [ 1064.097340][ T5942] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1064.400532][ T5942] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1064.471884][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.535316][ T5942] usb 4-1: config 0 descriptor?? [ 1067.127487][ T43] usb 4-1: USB disconnect, device number 28 [ 1067.192092][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2011'. [ 1068.809305][T13802] overlayfs: missing 'lowerdir' [ 1068.817477][T13804] overlayfs: missing 'lowerdir' [ 1069.592728][T13810] random: crng reseeded on system resumption [ 1071.047717][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1072.213301][T13825] ceph: No mds server is up or the cluster is laggy [ 1072.248384][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1072.287177][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1072.959726][ T5942] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1073.061475][T13862] overlayfs: missing 'lowerdir' [ 1074.073446][ T5942] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1074.100367][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.218799][ T5942] usb 6-1: config 0 descriptor?? [ 1076.017996][T13878] overlayfs: missing 'lowerdir' [ 1076.556081][ T5942] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1076.580523][ T5942] [drm:udl_init] *ERROR* Selecting channel failed [ 1076.796134][ T5942] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1076.817304][ T5942] [drm] Initialized udl on minor 2 [ 1077.674419][ T5942] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1077.745329][ T5942] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1077.753976][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1077.914662][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2039'. [ 1077.960010][T13890] kAFS: No cell specified [ 1077.966787][ T5942] usb 6-1: USB disconnect, device number 36 [ 1078.045185][T13892] overlayfs: missing 'lowerdir' [ 1078.638373][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1078.646420][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1079.582962][T13905] overlayfs: missing 'lowerdir' [ 1083.597314][T13939] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1083.606272][T13939] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1084.790035][T13961] kAFS: No cell specified [ 1085.094762][T13967] kAFS: No cell specified [ 1087.107500][T13994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1087.116616][T13994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1088.215544][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1088.420687][ T43] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1088.456530][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.359806][ T43] usb 7-1: config 0 descriptor?? [ 1093.731893][T14060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1093.740986][T14060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1094.473387][ T5942] usb 7-1: USB disconnect, device number 3 [ 1094.695185][T14069] kAFS: No cell specified [ 1097.858278][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1097.893586][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2095'. [ 1099.341527][T14130] kAFS: No cell specified [ 1101.236857][ T5942] usb 2-1: unable to read config index 0 descriptor/all [ 1101.243897][ T5942] usb 2-1: can't read configurations, error -71 [ 1101.728326][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1102.381250][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1102.420322][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.520881][ T24] usb 6-1: config 0 descriptor?? [ 1103.144074][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2111'. [ 1105.028342][ T24] usb 6-1: can't set config #0, error -71 [ 1105.078208][ T24] usb 6-1: USB disconnect, device number 37 [ 1106.692246][T14215] netlink: 'syz.1.2118': attribute type 10 has an invalid length. [ 1107.414441][T14219] qrtr: Invalid version 0 [ 1107.424053][T14219] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[14219] [ 1109.286504][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1109.469006][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1109.472978][T14248] kAFS: No cell specified [ 1109.673245][ T5871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.687512][ T5871] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1109.721972][ T5871] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1109.764181][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.785148][ T5871] usb 7-1: Product: syz [ 1110.418631][ T5871] usb 7-1: Manufacturer: syz [ 1110.425825][ T5871] usb 7-1: SerialNumber: syz [ 1113.173922][ T5871] usb 7-1: USB disconnect, device number 4 [ 1113.459781][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1113.470437][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1113.746166][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1113.762309][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1113.769237][T14285] ceph: No mds server is up or the cluster is laggy [ 1116.006130][T14312] overlayfs: missing 'lowerdir' [ 1118.436369][T14335] qrtr: Invalid version 0 [ 1118.444718][T14335] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[14335] [ 1121.380003][T14356] kAFS: No cell specified [ 1123.001942][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.013909][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.424358][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1125.175026][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1125.201852][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.242155][ T24] usb 2-1: config 0 descriptor?? [ 1125.512295][ T976] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1126.319492][T14383] overlayfs: missing 'lowerdir' [ 1126.670939][ T9462] usb 2-1: USB disconnect, device number 47 [ 1126.701382][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 1126.734178][ T976] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1126.743294][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.920485][ T976] usb 6-1: Product: syz [ 1126.924719][ T976] usb 6-1: Manufacturer: syz [ 1127.016519][ T976] usb 6-1: SerialNumber: syz [ 1127.300141][ T976] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1127.350482][ T976] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1127.443818][ T976] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1127.516865][ T9462] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1127.685705][ T9462] usb 2-1: Using ep0 maxpacket: 32 [ 1127.710702][ T9462] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1127.759851][ T9462] usb 2-1: config 0 has no interface number 0 [ 1127.781381][ T9462] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1127.790904][ T9462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.799066][ T9462] usb 2-1: Product: syz [ 1127.803427][ T9462] usb 2-1: Manufacturer: syz [ 1127.808081][ T9462] usb 2-1: SerialNumber: syz [ 1127.836213][ T9462] usb 2-1: config 0 descriptor?? [ 1128.035494][ T9462] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1128.048456][ T9462] usb 2-1: selecting invalid altsetting 1 [ 1128.057188][ T9462] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1128.361876][ T9462] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1128.376891][ T9462] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1128.385955][ T9462] usb 2-1: media controller created [ 1129.354395][ T9462] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.401764][ T5871] usb 6-1: USB disconnect, device number 38 [ 1129.451093][ T5871] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1129.520705][ T5871] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1129.581633][ T5871] visor 6-1:1.0: device disconnected [ 1129.604647][ T9462] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1129.624295][ T9462] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1129.653134][ T9462] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1129.874787][ T9462] usb 2-1: USB disconnect, device number 48 [ 1132.688906][T14451] kAFS: No cell specified [ 1132.844196][T14459] fuse: Bad value for 'group_id' [ 1132.869922][T14459] fuse: Bad value for 'group_id' [ 1133.918749][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2178'. [ 1134.644656][ T9462] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1134.996566][ T9462] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1135.732787][ T9462] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.756961][ T9462] usb 7-1: config 0 descriptor?? [ 1136.048183][ T9462] usb 7-1: USB disconnect, device number 5 [ 1140.216049][T14549] overlayfs: missing 'lowerdir' [ 1140.225201][ T5942] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1140.934010][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1140.940193][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1140.942006][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 1141.284781][T14551] ceph: No mds server is up or the cluster is laggy [ 1141.337059][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1141.464533][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1146.682746][T14618] overlayfs: missing 'lowerdir' [ 1147.141941][ T5942] usb 7-1: device descriptor read/all, error -110 [ 1147.694951][ T5942] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1148.361669][T14630] netlink: 'syz.1.2208': attribute type 21 has an invalid length. [ 1149.853038][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1150.395679][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1150.412997][T14647] ceph: No mds server is up or the cluster is laggy [ 1150.891986][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1150.930005][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1156.453643][T14714] overlayfs: missing 'lowerdir' [ 1158.698393][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1158.962998][T14732] 9pnet_fd: Insufficient options for proto=fd [ 1159.232020][T14735] netlink: 'syz.3.2227': attribute type 10 has an invalid length. [ 1159.275785][ T43] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1159.419001][T14735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.448656][T14735] bond0: (slave team0): Enslaving as an active interface with an up link [ 1159.735619][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1159.828177][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.990619][ T43] usb 6-1: config 0 has no interface number 0 [ 1160.027519][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1160.086386][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.118293][ T43] usb 6-1: Product: syz [ 1160.123883][ T43] usb 6-1: Manufacturer: syz [ 1160.128651][ T43] usb 6-1: SerialNumber: syz [ 1160.758900][T14745] vivid-003: kernel_thread() failed [ 1160.972447][ T43] usb 6-1: config 0 descriptor?? [ 1161.445429][ T43] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1162.034213][ T43] usb 6-1: selecting invalid altsetting 1 [ 1162.040043][ T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1162.093034][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1162.149537][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1162.169557][ T43] usb 6-1: media controller created [ 1162.285547][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.408709][ T43] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1162.439262][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1162.471052][ T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1163.105537][ T43] usb 6-1: USB disconnect, device number 39 [ 1163.260456][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1163.285184][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1163.712700][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1163.764399][T14774] ceph: No mds server is up or the cluster is laggy [ 1163.808891][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1166.016806][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1166.440082][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2243'. [ 1171.452643][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2254'. [ 1173.152976][T14867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2257'. [ 1175.897748][ T9462] libceph: connect (1)[c::]:6789 error -101 [ 1175.904117][ T9462] libceph: mon0 (1)[c::]:6789 connect error [ 1176.108409][T14887] ceph: No mds server is up or the cluster is laggy [ 1176.456226][ T9462] libceph: connect (1)[c::]:6789 error -101 [ 1176.462353][ T9462] libceph: mon0 (1)[c::]:6789 connect error [ 1176.765983][ T976] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1176.941331][ T976] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1176.954563][ T976] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.978532][ T976] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1176.996073][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.091464][ T976] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.280010][ T976] usb 2-1: invalid MIDI out EP 0 [ 1178.417030][ T976] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1179.662868][T14916] udevd[14916]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.699557][T14922] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1180.458491][ T9462] usb 2-1: USB disconnect, device number 49 [ 1181.099573][T14939] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1182.817554][ T5151] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1184.422221][ T5151] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1184.468725][ T5151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.528839][ T5151] usb 7-1: config 0 descriptor?? [ 1184.870571][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1185.819147][ T5151] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1186.011666][ T5151] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1186.034707][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1186.109779][ T5151] [drm] Initialized udl on minor 2 [ 1186.159622][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.187566][ T5151] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1186.221994][ T5151] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1186.231332][ T5871] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1186.260213][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1186.294015][ T5871] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1186.356721][ T5151] usb 7-1: USB disconnect, device number 8 [ 1186.378255][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.398181][ T5871] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1186.478886][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1186.523516][ T9] usb 2-1: invalid MIDI out EP 0 [ 1186.547806][T14998] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1186.965509][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1186.976898][T14761] udevd[14761]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.890206][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1187.952491][T15007] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1187.969303][T15009] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1187.988189][T15009] bond3: (slave wireguard1): Error -95 calling set_mac_address [ 1188.255711][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.263545][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.969126][ T5871] usb 2-1: USB disconnect, device number 50 [ 1192.358178][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1192.364421][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1192.447653][T15036] ceph: No mds server is up or the cluster is laggy [ 1192.450559][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1192.527986][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1192.653401][ T5871] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1192.923816][ T5871] usb 7-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 1192.979420][ T5871] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1193.030757][ T5871] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1193.428999][T15072] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1193.690223][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.717137][ T5871] usb 7-1: config 0 descriptor?? [ 1193.756932][T15074] loop6: detected capacity change from 0 to 63 [ 1193.800002][T15074] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1193.892348][T15074] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1194.032983][T15074] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1194.056923][ T24] usb 7-1: USB disconnect, device number 9 [ 1194.116018][T15074] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1194.222429][T15074] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1194.263237][T15074] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1194.277709][T15074] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 1194.347871][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 1194.367868][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 1194.389227][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 1194.412136][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 1194.598004][T15085] ceph: No mds server is up or the cluster is laggy [ 1194.704935][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1194.718614][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1202.360437][ T5151] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1202.733430][ T5151] usb 6-1: Using ep0 maxpacket: 32 [ 1203.109478][ T5151] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1203.293487][ T5151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.607868][ T5151] usb 6-1: Product: syz [ 1203.612218][ T5151] usb 6-1: Manufacturer: syz [ 1203.616850][ T5151] usb 6-1: SerialNumber: syz [ 1204.637648][ T5151] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 1204.645371][ T5151] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1204.996391][ T5151] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1205.139976][ T5151] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1205.246318][ T5151] usb 6-1: USB disconnect, device number 40 [ 1205.278249][ T5151] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1205.300651][ T5151] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1205.369536][ T5151] visor 6-1:1.0: device disconnected [ 1206.304351][ T5151] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1207.064294][ T5151] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1207.212128][ T5151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.251674][ T5151] usb 6-1: config 0 descriptor?? [ 1208.027584][ T5151] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1208.061343][ T5151] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1208.108233][ T5151] [drm] Initialized udl on minor 2 [ 1208.345837][ T5151] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1208.354078][ T5151] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1208.408557][ T976] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1208.448187][ T976] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1209.165322][ T5151] usb 6-1: USB disconnect, device number 41 [ 1209.171530][ T976] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1210.708200][T13530] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1211.332402][T13530] usb 2-1: Using ep0 maxpacket: 32 [ 1211.348784][T13530] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1211.392367][T13530] usb 2-1: config 0 has no interface number 0 [ 1211.426400][T13530] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1211.456470][T13530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.495368][T13530] usb 2-1: Product: syz [ 1211.700035][T13530] usb 2-1: Manufacturer: syz [ 1211.834038][T15214] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2333'. [ 1212.370942][T13530] usb 2-1: SerialNumber: syz [ 1212.416082][T13530] usb 2-1: config 0 descriptor?? [ 1212.584199][T13530] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1212.586619][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 1212.602233][T13530] usb 2-1: selecting invalid altsetting 1 [ 1212.611628][T13530] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1212.695432][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 1212.703549][T13530] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1212.745546][T13530] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1212.793007][T15215] ceph: No mds server is up or the cluster is laggy [ 1213.148221][T13530] usb 2-1: media controller created [ 1213.170001][ T5151] libceph: connect (1)[c::]:6789 error -101 [ 1213.176132][ T5151] libceph: mon0 (1)[c::]:6789 connect error [ 1213.706959][T13530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1213.844102][T13530] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1213.856748][T13530] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1214.407965][T13530] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1215.053907][T13530] usb 2-1: USB disconnect, device number 51 [ 1221.108856][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2350'. [ 1223.255845][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1223.893426][T15315] overlayfs: missing 'lowerdir' [ 1224.873640][ T5151] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1225.078845][ T5151] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1225.200459][ T5151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.568486][ T5942] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1225.749000][ T5942] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1226.122347][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.387096][ T5942] usb 4-1: config 0 descriptor?? [ 1226.858326][ T5151] usb 6-1: config 0 descriptor?? [ 1227.498536][ T5151] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1227.609459][ T5151] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1227.636324][ T5151] [drm] Initialized udl on minor 2 [ 1227.814914][ T5151] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1227.826902][ T5151] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1227.837692][T13530] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1227.847350][ T5151] usb 6-1: USB disconnect, device number 42 [ 1228.452629][T13530] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1228.678357][ T5942] usb 4-1: USB disconnect, device number 29 [ 1229.651461][T15359] kAFS: No cell specified [ 1232.795761][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1233.168220][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1233.251818][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.691832][ T24] usb 4-1: config 0 descriptor?? [ 1234.681478][ T5942] usb 4-1: USB disconnect, device number 30 [ 1235.200570][ T24] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1235.783517][ T24] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1235.799004][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.828001][ T24] usb 7-1: config 0 descriptor?? [ 1236.123689][ T24] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1237.025507][ T24] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1237.142138][ T24] [drm] Initialized udl on minor 2 [ 1237.257581][ T24] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.425909][ T24] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.537612][ T5942] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.574066][ T24] usb 7-1: USB disconnect, device number 10 [ 1237.606284][ T5942] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1238.542188][T15432] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2396'. [ 1242.970991][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1243.071288][T15468] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1243.205793][ T43] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1243.526862][ T43] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1243.728496][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.741712][ T43] usb 2-1: config 0 descriptor?? [ 1244.250598][ T43] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1244.593252][T15476] overlayfs: missing 'lowerdir' [ 1245.281598][ T43] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1245.296227][ T43] [drm] Initialized udl on minor 2 [ 1245.304116][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1245.409601][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1245.429062][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1245.448492][ T43] usb 2-1: USB disconnect, device number 52 [ 1245.466938][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1245.987558][T15481] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2411'. [ 1246.853992][ T5151] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1246.972203][T15497] loop6: detected capacity change from 0 to 63 [ 1246.997037][T14625] Buffer I/O error on dev loop6, logical block 0, async page read [ 1247.021428][ T5151] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1247.183051][ T5151] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1247.197351][ T5151] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1247.229750][ T5151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.249964][T15497] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1247.280807][T15497] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1247.316560][ T5151] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1248.128898][ T5151] usb 8-1: invalid MIDI out EP 0 [ 1248.726418][ T5151] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1248.744651][T15497] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1248.754057][T15497] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1249.000826][T15497] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1249.010200][T15497] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1249.024961][T15497] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 1249.031703][T14624] udevd[14624]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1249.221311][T15515] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1250.263730][ T5151] usb 8-1: USB disconnect, device number 4 [ 1250.403590][T15523] block nbd3: NBD_DISCONNECT [ 1250.416440][T15523] block nbd3: Send disconnect failed -107 [ 1251.181095][T15527] block nbd3: Disconnected due to user request. [ 1251.188048][T15527] block nbd3: shutting down sockets [ 1251.963558][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1252.177251][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1252.244931][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1252.327498][ T24] usb 4-1: config 0 has no interface number 0 [ 1252.436635][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1252.467846][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.489107][ T24] usb 4-1: Product: syz [ 1252.493562][ T24] usb 4-1: Manufacturer: syz [ 1252.504679][ T24] usb 4-1: SerialNumber: syz [ 1252.556986][ T5942] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1252.568951][ T24] usb 4-1: config 0 descriptor?? [ 1252.606460][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1252.620350][ T24] usb 4-1: selecting invalid altsetting 1 [ 1252.652835][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1252.694781][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1252.708024][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1252.718884][ T24] usb 4-1: media controller created [ 1252.752200][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.777230][ T5942] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1252.798408][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.828965][ T5942] usb 6-1: config 0 descriptor?? [ 1253.996464][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.002934][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.011646][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1254.036657][ T5942] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1254.057028][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1254.168061][ T5942] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1254.174836][ T5942] [drm] Initialized udl on minor 2 [ 1254.393890][ T5942] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1255.430736][T15559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1255.964134][ T5942] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1255.976714][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1256.145952][ T5942] usb 6-1: USB disconnect, device number 43 [ 1256.153089][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1256.185328][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1256.939907][ T9] usb 4-1: USB disconnect, device number 31 [ 1260.818371][T15598] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1260.824954][T15598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.832768][T15598] vhci_hcd vhci_hcd.0: Device attached [ 1261.263864][ T5871] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1262.401062][T15612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1263.205876][T15599] vhci_hcd: connection reset by peer [ 1263.298448][T12831] vhci_hcd: stop threads [ 1263.379735][T12831] vhci_hcd: release socket [ 1263.461948][T12831] vhci_hcd: disconnect device [ 1263.778904][T15618] loop6: detected capacity change from 0 to 63 [ 1263.983413][T15622] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1263.993718][T15622] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1264.003679][T15622] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1264.014793][T15622] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1264.031635][T15622] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1264.041674][T15622] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1264.051630][T15622] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 1265.472597][T15638] afs: Bad value for 'source' [ 1266.823598][ T5871] vhci_hcd: vhci_device speed not set [ 1267.098869][ T5942] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1267.970840][T15658] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1268.436017][ T5942] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1268.445212][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.841211][ T5942] usb 7-1: config 0 descriptor?? [ 1269.153946][T15663] random: crng reseeded on system resumption [ 1269.191571][ T5942] usb 7-1: can't set config #0, error -71 [ 1269.240624][ T5942] usb 7-1: USB disconnect, device number 11 [ 1272.289388][T15693] afs: Bad value for 'source' [ 1273.615314][ T5942] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1274.221292][ T5942] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1274.313176][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.942249][ T5942] usb 6-1: config 0 descriptor?? [ 1274.952001][T15710] afs: Bad value for 'source' [ 1275.675145][ T5942] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1276.212845][ T5942] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1276.237869][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.291281][ T5942] usb 2-1: config 0 descriptor?? [ 1276.527129][T15727] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1277.411872][ T5942] usb 6-1: USB disconnect, device number 44 [ 1278.254758][ T24] usb 2-1: USB disconnect, device number 53 [ 1280.293492][ T5942] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1280.679153][ T5942] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1280.738334][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.893277][ T5942] usb 2-1: config 0 descriptor?? [ 1280.914582][T15768] afs: Bad value for 'source' [ 1281.940022][ T5942] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1282.180048][ T5942] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1282.223278][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.268190][ T5942] usb 8-1: config 0 descriptor?? [ 1283.113587][ T5942] usb 2-1: USB disconnect, device number 54 [ 1283.198111][T15780] qrtr: Invalid version 0 [ 1283.208435][T15780] ptrace attach of "./syz-executor exec"[12353] was attempted by "./syz-executor exec"[15780] [ 1284.028548][ T9462] usb 8-1: USB disconnect, device number 5 [ 1286.868401][T15807] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1288.738277][T15816] afs: Bad value for 'source' [ 1289.391159][ T5942] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1289.651187][ T5942] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1289.716834][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.898533][ T5942] usb 4-1: config 0 descriptor?? [ 1292.134277][ T24] usb 4-1: USB disconnect, device number 32 [ 1293.807764][T15852] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.2514'. [ 1295.022734][T15859] afs: Bad value for 'source' [ 1295.652730][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1296.035980][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1296.126362][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.177955][ T24] usb 6-1: config 0 descriptor?? [ 1296.251992][T15876] afs: Bad value for 'source' [ 1297.515932][ T5871] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1297.603597][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1298.071859][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1298.091205][ T5871] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1298.116713][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1298.126691][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.145734][ T5871] usb 7-1: config 0 has no interface number 0 [ 1298.149448][ T24] usb 4-1: config 0 descriptor?? [ 1298.873783][ T24] usb 6-1: USB disconnect, device number 45 [ 1298.885021][ T5871] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1298.905824][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.913985][ T5871] usb 7-1: Product: syz [ 1298.959106][ T5871] usb 7-1: Manufacturer: syz [ 1298.963771][ T5871] usb 7-1: SerialNumber: syz [ 1298.986767][ T5871] usb 7-1: config 0 descriptor?? [ 1299.506971][T15897] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.2527'. [ 1300.071159][ T5871] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1300.080002][ T5871] usb 7-1: selecting invalid altsetting 1 [ 1300.088820][ T5871] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1300.529205][ T24] usb 4-1: USB disconnect, device number 33 [ 1300.544403][ T5871] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1300.613433][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1300.642331][ T5871] usb 7-1: media controller created [ 1300.783863][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1300.873226][ T5871] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1300.880281][ T5871] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1300.914758][ T5871] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1301.606391][ T5871] usb 7-1: USB disconnect, device number 12 [ 1304.401567][T15926] afs: Bad value for 'source' [ 1310.152273][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1310.365999][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1310.436570][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.484692][ T24] usb 4-1: config 0 has no interface number 0 [ 1310.575340][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1310.609745][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.699109][ T24] usb 4-1: Product: syz [ 1310.722103][ T24] usb 4-1: Manufacturer: syz [ 1310.739628][ T24] usb 4-1: SerialNumber: syz [ 1310.770877][ T24] usb 4-1: config 0 descriptor?? [ 1310.829382][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1310.859190][ T24] usb 4-1: selecting invalid altsetting 1 [ 1310.915302][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1310.974500][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1310.994031][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1311.004985][ T24] usb 4-1: media controller created [ 1311.181671][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.184225][T15954] netlink: 'syz.3.2540': attribute type 21 has an invalid length. [ 1311.198236][T15954] IPv6: NLM_F_CREATE should be specified when creating new route [ 1311.669871][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1311.719686][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1312.128146][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1314.304286][ T24] usb 4-1: USB disconnect, device number 34 [ 1314.888675][T15972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1314.895236][T15972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1314.904149][T15972] vhci_hcd vhci_hcd.0: Device attached [ 1315.241434][ T5151] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1316.067122][T15973] vhci_hcd: connection closed [ 1316.109346][ T7401] vhci_hcd: stop threads [ 1316.118545][ T7401] vhci_hcd: release socket [ 1316.123193][ T7401] vhci_hcd: disconnect device [ 1316.428983][T15981] afs: Bad value for 'source' [ 1316.673945][T15984] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.2551'. [ 1317.774976][ T43] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1318.418607][ T43] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1318.543372][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.639076][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1318.728088][ T43] usb 7-1: config 0 descriptor?? [ 1320.194233][ T976] usb 7-1: USB disconnect, device number 13 [ 1320.246845][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1320.253159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1321.559465][ T5151] vhci_hcd: vhci_device speed not set [ 1322.041630][T16030] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1324.588894][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1327.267607][T16074] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1330.006175][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1330.012516][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1330.263258][T16090] ceph: No mds server is up or the cluster is laggy [ 1330.312088][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1330.792629][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1331.289189][T16099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1333.116202][T16117] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1333.122780][T16117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1333.130825][T16117] vhci_hcd vhci_hcd.0: Device attached [ 1334.580365][T16118] vhci_hcd: connection closed [ 1334.659923][ T7401] vhci_hcd: stop threads [ 1334.669421][ T7401] vhci_hcd: release socket [ 1334.673848][ T7401] vhci_hcd: disconnect device [ 1335.926457][T16137] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.2594'. [ 1338.528540][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1338.766087][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2598'. [ 1338.815898][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.901462][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1338.962408][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.999461][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.127877][ T24] usb 8-1: config 0 descriptor?? [ 1339.315498][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1340.122834][ T5151] usb 8-1: USB disconnect, device number 6 [ 1340.995598][T16180] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2609'. [ 1343.012433][T16194] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2613'. [ 1343.165093][ T5823] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1343.168069][T16197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2615'. [ 1343.764357][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1343.795019][ T5823] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1343.827618][ T5823] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.848584][ T5823] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1343.891312][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.956749][ T5823] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1343.997618][ T5823] usb 7-1: invalid MIDI out EP 0 [ 1345.839377][ T5823] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1346.511928][ T5823] usb 7-1: USB disconnect, device number 14 [ 1348.867905][T16243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1350.158622][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2628'. [ 1351.717748][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'. [ 1353.953426][T16279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2640'. [ 1356.239641][ T5865] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1356.474856][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 1356.682757][ T5865] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1356.699632][ T5865] usb 7-1: config 0 has no interface number 0 [ 1356.712923][ T5865] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1356.728316][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.736886][ T5865] usb 7-1: Product: syz [ 1356.739493][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1356.741253][ T5865] usb 7-1: Manufacturer: syz [ 1356.761517][ T5865] usb 7-1: SerialNumber: syz [ 1356.771858][ T5865] usb 7-1: config 0 descriptor?? [ 1356.787502][ T5865] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1356.801631][ T5865] usb 7-1: selecting invalid altsetting 1 [ 1356.807859][ T5865] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1357.045733][ T5865] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1357.682136][T16318] netlink: 'syz.6.2642': attribute type 21 has an invalid length. [ 1357.682355][ T5865] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1357.699846][T16318] IPv6: NLM_F_CREATE should be specified when creating new route [ 1357.744943][ T5865] usb 7-1: media controller created [ 1359.792691][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1359.874707][ T5865] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1359.882880][ T5865] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1359.906527][ T5865] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1359.980424][ T5865] usb 7-1: USB disconnect, device number 15 [ 1360.110455][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1360.462310][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1360.502295][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.526720][T16332] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2651'. [ 1360.553269][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1360.590294][ T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1360.638825][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.665357][ T9] usb 6-1: Product: syz [ 1360.676089][ T9] usb 6-1: Manufacturer: syz [ 1360.687611][ T9] usb 6-1: SerialNumber: syz [ 1360.723767][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1360.743143][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1361.205254][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1361.320602][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1362.656528][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1362.662680][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1363.588734][T16335] ceph: No mds server is up or the cluster is laggy [ 1364.465517][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2659'. [ 1364.668315][ T5865] usb 6-1: USB disconnect, device number 46 [ 1364.782263][T16374] random: crng reseeded on system resumption [ 1364.856084][ T5871] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1367.539422][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 1367.569126][ T5871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1367.598971][ T5871] usb 2-1: config 0 has no interface number 0 [ 1367.639807][ T5871] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1367.684674][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.558335][ T5871] usb 2-1: Product: syz [ 1368.562700][ T5871] usb 2-1: Manufacturer: syz [ 1368.568862][ T5871] usb 2-1: SerialNumber: syz [ 1368.578642][ T5871] usb 2-1: config 0 descriptor?? [ 1368.867961][ T5871] usb 2-1: can't set config #0, error -71 [ 1368.875668][ T5871] usb 2-1: USB disconnect, device number 55 [ 1369.332097][T16400] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.2666'. [ 1372.675758][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1380.480611][T16467] kAFS: No cell specified [ 1382.060534][ T5871] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1382.132240][ T5823] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1382.497912][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1382.658350][ T5823] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1383.232357][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.261934][ T5823] usb 8-1: config 0 descriptor?? [ 1383.271303][ T5871] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1383.476053][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.498453][ T5871] usb 4-1: Product: syz [ 1383.508185][ T5871] usb 4-1: Manufacturer: syz [ 1383.513153][ T5871] usb 4-1: SerialNumber: syz [ 1383.972817][ T5871] usb 4-1: can't set config #1, error -71 [ 1383.995557][ T5871] usb 4-1: USB disconnect, device number 35 [ 1384.678065][ T5823] usb 8-1: USB disconnect, device number 7 [ 1385.351645][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1385.358052][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.740139][T16506] fuse: Bad value for 'fd' [ 1388.936044][T16527] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1388.942634][T16527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1388.951282][T16527] vhci_hcd vhci_hcd.0: Device attached [ 1389.741255][T16528] vhci_hcd: connection closed [ 1389.773380][ T36] vhci_hcd: stop threads [ 1389.971137][ T36] vhci_hcd: release socket [ 1390.121813][ T36] vhci_hcd: disconnect device [ 1390.142435][ T24] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1390.175691][ T24] usb 47-1: enqueue for inactive port 0 [ 1390.283807][ T24] vhci_hcd: vhci_device speed not set [ 1391.298509][T16545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1391.305092][T16545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1391.313042][T16545] vhci_hcd vhci_hcd.0: Device attached [ 1391.731363][ T5151] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 1391.971803][T16548] vhci_hcd: connection closed [ 1392.000753][ T36] vhci_hcd: stop threads [ 1392.162210][ T36] vhci_hcd: release socket [ 1392.241485][ T36] vhci_hcd: disconnect device [ 1392.474288][T16558] random: crng reseeded on system resumption [ 1392.888080][T16561] fuse: Bad value for 'fd' [ 1396.356031][T16579] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1396.362704][T16579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1396.370537][T16579] vhci_hcd vhci_hcd.0: Device attached [ 1396.393909][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1396.652491][T16582] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1396.659083][T16582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1396.667418][T16582] vhci_hcd vhci_hcd.0: Device attached [ 1396.917307][T13530] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1396.996627][ T5867] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1397.543796][ T5151] vhci_hcd: vhci_device speed not set [ 1397.682063][T16580] vhci_hcd: connection reset by peer [ 1397.695666][T16585] vhci_hcd: connection reset by peer [ 1397.779427][ T1330] vhci_hcd: stop threads [ 1397.828366][ T1330] vhci_hcd: release socket [ 1397.883681][ T1330] vhci_hcd: disconnect device [ 1397.962986][ T1330] vhci_hcd: stop threads [ 1398.020207][ T1330] vhci_hcd: release socket [ 1398.068907][ T1330] vhci_hcd: disconnect device [ 1398.098189][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1398.240804][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1398.254769][ T24] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1398.263877][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.304689][ T24] usb 6-1: Product: syz [ 1398.317647][ T24] usb 6-1: Manufacturer: syz [ 1398.322322][ T24] usb 6-1: SerialNumber: syz [ 1401.653888][ T976] usb 6-1: USB disconnect, device number 47 [ 1401.759413][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1401.828427][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1401.866435][T16624] ceph: No mds server is up or the cluster is laggy [ 1402.465668][T13530] vhci_hcd: vhci_device speed not set [ 1402.509888][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1402.553060][ T5867] vhci_hcd: vhci_device speed not set [ 1402.629873][T16644] overlayfs: missing 'lowerdir' [ 1403.530532][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1405.024850][T16658] kAFS: No cell specified [ 1406.100600][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1406.339009][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1406.381440][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.467217][ T24] usb 2-1: config 0 descriptor?? [ 1407.160699][T16672] random: crng reseeded on system resumption [ 1408.933851][ T5823] usb 2-1: USB disconnect, device number 56 [ 1411.919876][T16693] overlayfs: missing 'lowerdir' [ 1414.303668][T16713] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1417.900161][T16732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1419.029058][ T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1419.722897][ T43] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1421.372856][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.319252][ T43] usb 6-1: config 0 descriptor?? [ 1422.333068][ T43] usb 6-1: can't set config #0, error -71 [ 1422.340720][ T43] usb 6-1: USB disconnect, device number 48 [ 1424.598176][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1424.605689][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1424.616031][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1424.681098][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1425.034908][T16780] ceph: No mds server is up or the cluster is laggy [ 1425.464404][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1425.531265][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1430.583982][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1430.596380][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1431.764822][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1431.777814][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1431.952283][T16820] ceph: No mds server is up or the cluster is laggy [ 1433.644611][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1433.650922][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1433.904658][T16838] ceph: No mds server is up or the cluster is laggy [ 1433.928532][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1433.934804][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1435.672777][T16856] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1435.682245][T16856] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1443.940902][T16908] random: crng reseeded on system resumption [ 1444.096045][T16911] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1444.105667][T16911] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1446.716010][T16925] random: crng reseeded on system resumption [ 1450.690499][T16952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1450.700113][T16952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1450.710186][T16952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1450.738058][T16952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1450.764883][T16952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1450.834046][T12354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1450.848214][T12354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1450.855811][T12354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1450.868778][T12354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1450.877113][T12354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1450.975610][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1450.982025][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1452.062517][T16965] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1452.069088][T16965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1452.077083][T16965] vhci_hcd vhci_hcd.0: Device attached [ 1453.064411][T16968] vhci_hcd: connection closed [ 1453.117809][ T36] vhci_hcd: stop threads [ 1453.181967][T16952] Bluetooth: hci3: command tx timeout [ 1453.215141][T13530] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1453.233447][ T36] vhci_hcd: release socket [ 1453.257454][ T36] vhci_hcd: disconnect device [ 1453.391208][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1453.397463][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1453.751624][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1453.757756][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1453.819748][T16977] ceph: No mds server is up or the cluster is laggy [ 1455.245542][T16949] chnl_net:caif_netlink_parms(): no params data found [ 1455.354510][T16952] Bluetooth: hci3: command tx timeout [ 1455.506134][T16993] random: crng reseeded on system resumption [ 1457.591568][T16952] Bluetooth: hci3: command tx timeout [ 1457.938073][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.989470][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.001326][T16949] bridge_slave_0: entered allmulticast mode [ 1458.059649][T16949] bridge_slave_0: entered promiscuous mode [ 1458.103236][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.140929][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.156320][T16949] bridge_slave_1: entered allmulticast mode [ 1458.220214][T16949] bridge_slave_1: entered promiscuous mode [ 1458.281483][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1458.463235][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1458.834245][ T43] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1458.846258][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.912637][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.912771][T13530] vhci_hcd: vhci_device speed not set [ 1459.222614][ T43] usb 7-1: Product: syz [ 1459.233870][ T43] usb 7-1: Manufacturer: syz [ 1459.257782][ T43] usb 7-1: SerialNumber: syz [ 1459.374634][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1459.532260][ T43] usb 7-1: can't set config #1, error -71 [ 1459.555488][ T43] usb 7-1: USB disconnect, device number 16 [ 1459.792020][T16952] Bluetooth: hci3: command tx timeout [ 1459.821223][T16949] team0: Port device team_slave_0 added [ 1459.832760][T16949] team0: Port device team_slave_1 added [ 1459.971592][T17023] random: crng reseeded on system resumption [ 1461.042490][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.049491][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.077344][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.098367][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.106864][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.208590][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.104675][T16949] hsr_slave_0: entered promiscuous mode [ 1463.130890][T16949] hsr_slave_1: entered promiscuous mode [ 1463.275920][T16949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1463.283540][T16949] Cannot create hsr debugfs directory [ 1466.120269][T16949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.881950][T16949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.083403][T16949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.208210][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1467.228451][T16949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.379192][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1467.407987][ T43] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1467.428362][ T43] usb 8-1: config 0 has no interface number 0 [ 1467.440402][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1467.454332][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1467.460702][ T43] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1467.474040][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.553490][T17074] ceph: No mds server is up or the cluster is laggy [ 1467.855952][ T43] usb 8-1: Product: syz [ 1467.904868][ T43] usb 8-1: Manufacturer: syz [ 1467.909864][ T43] usb 8-1: SerialNumber: syz [ 1467.970842][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1467.976912][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1468.009561][ T43] usb 8-1: config 0 descriptor?? [ 1468.062212][T16949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1468.085097][ T43] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1468.110701][ T43] usb 8-1: selecting invalid altsetting 1 [ 1468.130332][T16949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1468.152524][ T43] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1468.163778][ T43] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1468.342753][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1468.363743][T16949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1469.055750][T17084] netlink: 'syz.7.2828': attribute type 21 has an invalid length. [ 1469.210383][ T43] usb 8-1: media controller created [ 1469.598451][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.657684][T16949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1469.796687][ T43] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1469.803750][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1469.859876][ T43] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1470.821540][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1470.881769][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.276292][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1471.386327][ T9] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.694291][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.712279][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1471.750909][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.758120][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.813469][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.822275][ T43] usb 8-1: USB disconnect, device number 8 [ 1471.893666][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1471.910508][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.917802][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.944863][ T9] usb 6-1: invalid MIDI out EP 0 [ 1472.373315][T17087] udevd[17087]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1474.213704][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1474.273582][T17122] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1475.077045][ T43] usb 6-1: USB disconnect, device number 49 [ 1475.316978][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.460970][T16949] veth0_vlan: entered promiscuous mode [ 1475.514401][T16949] veth1_vlan: entered promiscuous mode [ 1476.141472][T16949] veth0_macvtap: entered promiscuous mode [ 1476.341021][T16949] veth1_macvtap: entered promiscuous mode [ 1477.026020][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.048906][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.178366][T16949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.229806][T16949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.238898][T16949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.252681][T16949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.158573][T13530] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1478.271551][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'. [ 1478.347729][T13530] usb 6-1: Using ep0 maxpacket: 32 [ 1478.994530][T13530] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1479.139458][T13530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.147575][T13530] usb 6-1: Product: syz [ 1479.214173][T13530] usb 6-1: Manufacturer: syz [ 1479.224310][T13530] usb 6-1: SerialNumber: syz [ 1479.531655][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.566914][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.691735][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.713888][T13530] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1479.731952][T13530] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1479.754687][T13530] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1479.759017][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.433156][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1480.573070][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1480.963718][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1480.982851][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1481.075734][T17163] ceph: No mds server is up or the cluster is laggy [ 1481.563907][ T43] usb 6-1: USB disconnect, device number 50 [ 1481.578347][ T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1481.628297][ T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1481.815624][ T43] visor 6-1:1.0: device disconnected [ 1483.063116][T17187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1483.069675][T17187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1483.093720][T17187] vhci_hcd vhci_hcd.0: Device attached [ 1483.487105][T16005] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 1483.800841][T17188] vhci_hcd: connection reset by peer [ 1483.868350][T12831] vhci_hcd: stop threads [ 1483.926770][T12831] vhci_hcd: release socket [ 1483.990265][T12831] vhci_hcd: disconnect device [ 1484.928883][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1485.722852][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1486.439540][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1486.605860][T17218] ceph: No mds server is up or the cluster is laggy [ 1486.785304][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1486.846820][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1487.065560][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1487.179340][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1488.408037][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1488.414158][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1488.420759][T13530] libceph: connect (1)[c::]:6789 error -101 [ 1488.426799][T13530] libceph: mon0 (1)[c::]:6789 connect error [ 1488.459283][T17222] ceph: No mds server is up or the cluster is laggy [ 1488.931362][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1489.017233][T16005] vhci_hcd: vhci_device speed not set [ 1489.364769][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1489.489817][ T9] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.503123][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1489.512489][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.765257][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.781779][ T9] usb 7-1: invalid MIDI out EP 0 [ 1492.148377][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1492.204583][ T9] usb 7-1: USB disconnect, device number 17 [ 1495.184653][T17285] kAFS: No cell specified [ 1495.792446][T16005] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1495.815462][T17292] kAFS: No cell specified [ 1495.905428][T17296] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.2880'. [ 1496.010011][T17298] syz.1.2882: attempt to access beyond end of device [ 1496.010011][T17298] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1496.067496][T17298] FAT-fs (loop1): unable to read boot sector [ 1496.153724][T16005] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1496.828760][T16005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.861910][T16005] usb 8-1: config 0 descriptor?? [ 1497.111116][ T5865] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1497.365227][ T5865] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1497.368329][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1497.391359][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.514600][ T5865] usb 7-1: config 0 descriptor?? [ 1498.221390][T16005] usb 8-1: USB disconnect, device number 9 [ 1498.471422][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1498.479469][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1498.639743][T17323] ceph: No mds server is up or the cluster is laggy [ 1498.749231][T16005] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1498.756433][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1498.893648][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1498.986725][ T5865] usb 7-1: USB disconnect, device number 18 [ 1499.339150][T16005] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1499.374740][T16005] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1499.409643][T16005] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1499.586348][T16005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.607616][T16005] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1499.634561][T16005] usb 8-1: invalid MIDI out EP 0 [ 1500.576201][T16005] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1501.348586][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1501.360924][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1501.367001][T17066] udevd[17066]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.482966][T17339] ceph: No mds server is up or the cluster is laggy [ 1501.945946][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1501.958953][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1502.201839][T17349] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2893'. [ 1502.494913][T16005] usb 8-1: USB disconnect, device number 10 [ 1502.629407][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1502.766834][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1502.802983][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1502.883629][T17352] ceph: No mds server is up or the cluster is laggy [ 1503.204904][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1503.254057][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1503.357767][T17366] kAFS: No cell specified [ 1504.061407][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1504.067537][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1504.912950][T17370] syz.7.2900: attempt to access beyond end of device [ 1504.912950][T17370] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1504.925967][T17370] FAT-fs (loop7): unable to read boot sector [ 1507.553386][T17396] syz.5.2906: attempt to access beyond end of device [ 1507.553386][T17396] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1507.566619][T17396] FAT-fs (loop5): unable to read boot sector [ 1508.600530][T17408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1508.618306][T17409] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.2908'. [ 1510.528724][T17426] random: crng reseeded on system resumption [ 1511.693020][T17429] ceph: No mds server is up or the cluster is laggy [ 1511.812210][ T976] libceph: connect (1)[c::]:6789 error -101 [ 1512.129229][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1513.130350][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1513.136704][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1513.905994][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1514.044585][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1514.509541][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2923'. [ 1514.749967][T17462] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.2924'. [ 1516.670292][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1516.676816][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1517.976710][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1517.999203][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1518.569362][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1518.624107][T17482] ceph: No mds server is up or the cluster is laggy [ 1518.674977][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1519.261700][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1519.287053][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1520.695169][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1520.701731][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1520.885015][T17507] ceph: No mds server is up or the cluster is laggy [ 1521.078393][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1521.232237][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1521.279586][T17519] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2936'. [ 1521.859551][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1522.217592][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1522.269656][T12354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1522.288180][T12354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1522.304651][T12354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1522.318298][T12354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1522.331786][T12354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1523.316119][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1523.327980][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1523.343458][T12533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.412300][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 1524.012896][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1524.030361][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1524.053628][T17537] random: crng reseeded on system resumption [ 1524.358688][T17539] ceph: No mds server is up or the cluster is laggy [ 1524.659986][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1524.756093][T12354] Bluetooth: hci4: command tx timeout [ 1524.794579][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1525.010845][T12533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.130842][T12533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.180596][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1525.189699][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1525.339800][T17554] ceph: No mds server is up or the cluster is laggy [ 1525.754651][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1525.765753][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1525.986149][T17564] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2946'. [ 1526.014447][T12533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.925926][T12354] Bluetooth: hci4: command tx timeout [ 1527.024572][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1527.030832][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1527.145088][T17564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.153808][T17564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.437479][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1527.452514][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1527.505354][T17521] chnl_net:caif_netlink_parms(): no params data found [ 1527.770765][T16005] libceph: connect (1)[c::]:6789 error -101 [ 1527.776917][T16005] libceph: mon0 (1)[c::]:6789 connect error [ 1527.899769][T17586] overlayfs: missing 'lowerdir' [ 1528.829508][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1528.836395][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1529.149297][T12354] Bluetooth: hci4: command tx timeout [ 1529.177345][T17581] capability: warning: `syz.5.2950' uses 32-bit capabilities (legacy support in use) [ 1529.189497][T17581] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2950'. [ 1529.333568][T17574] ceph: No mds server is up or the cluster is laggy [ 1529.768519][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.789544][T17521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.805151][T17521] bridge_slave_0: entered allmulticast mode [ 1529.814150][T17601] kAFS: No cell specified [ 1530.081641][T17521] bridge_slave_0: entered promiscuous mode [ 1530.091639][T12533] bridge_slave_1: left allmulticast mode [ 1530.097324][T12533] bridge_slave_1: left promiscuous mode [ 1530.184300][T17604] overlayfs: missing 'lowerdir' [ 1531.116858][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.287677][T16005] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1531.362313][T12354] Bluetooth: hci4: command tx timeout [ 1531.519504][T12533] bridge_slave_0: left allmulticast mode [ 1531.553115][T16005] usb 8-1: device descriptor read/64, error -71 [ 1531.589985][T12533] bridge_slave_0: left promiscuous mode [ 1531.619047][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.801068][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1531.878735][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1531.884611][T16005] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1531.901303][T17611] ceph: No mds server is up or the cluster is laggy [ 1532.025503][T16005] usb 8-1: device descriptor read/64, error -71 [ 1532.250414][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1532.257848][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1532.506909][T16005] usb usb8-port1: attempt power cycle [ 1532.885580][T16005] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1532.946568][T16005] usb 8-1: device descriptor read/8, error -71 [ 1538.956338][T17657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2968'. [ 1539.359357][T12533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.578093][T12533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.622084][T12533] bond0 (unregistering): (slave team0): Releasing backup interface [ 1539.638595][T12533] bond0 (unregistering): Released all slaves [ 1539.677387][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.690616][T17521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.699626][T17521] bridge_slave_1: entered allmulticast mode [ 1539.708721][T17521] bridge_slave_1: entered promiscuous mode [ 1539.821169][T12533] IPVS: stopping master sync thread 13365 ... [ 1541.005583][ T5865] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1541.021501][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.046092][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.179777][ T5865] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1541.218550][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.246598][ T5865] usb 6-1: config 0 descriptor?? [ 1541.385706][T17521] team0: Port device team_slave_0 added [ 1541.441816][T17521] team0: Port device team_slave_1 added [ 1541.606316][ T5865] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1541.713177][T17691] overlayfs: missing 'lowerdir' [ 1542.353324][ T5865] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1542.360128][ T5865] [drm] Initialized udl on minor 2 [ 1542.452704][ T5865] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1542.465957][ T5865] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1542.484000][T17693] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1542.494280][ T5865] usb 6-1: USB disconnect, device number 51 [ 1542.611914][T17693] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1542.721153][T17686] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1542.721153][T17686] program syz.7.2976 not setting count and/or reply_len properly [ 1542.810354][T12533] hsr_slave_0: left promiscuous mode [ 1542.831654][T12533] hsr_slave_1: left promiscuous mode [ 1542.855998][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.887909][T12533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.903610][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.316847][T12533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.495468][T12533] veth1_macvtap: left promiscuous mode [ 1543.513275][T12533] veth0_macvtap: left promiscuous mode [ 1543.523259][T12533] veth1_vlan: left promiscuous mode [ 1543.629809][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1543.645688][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1543.989640][T17713] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1543.989640][T17713] program syz.3.2982 not setting count and/or reply_len properly [ 1544.070212][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1544.141523][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1544.477463][T17705] ceph: No mds server is up or the cluster is laggy [ 1545.324668][T12533] team0 (unregistering): Port device team_slave_1 removed [ 1545.370576][T12533] team0 (unregistering): Port device team_slave_0 removed [ 1545.787639][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.797531][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.824861][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.839737][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.847129][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.879374][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.751974][T17521] hsr_slave_0: entered promiscuous mode [ 1546.803639][T17521] hsr_slave_1: entered promiscuous mode [ 1546.833473][T17521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1546.854581][T17521] Cannot create hsr debugfs directory [ 1547.272458][T17725] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1547.272458][T17725] program syz.5.2984 not setting count and/or reply_len properly [ 1547.709368][T17693] libceph: connect (1)[c::]:6789 error -101 [ 1547.715504][T17693] libceph: mon0 (1)[c::]:6789 connect error [ 1547.843276][T17738] ceph: No mds server is up or the cluster is laggy [ 1547.992235][ T5867] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1548.037923][T17693] libceph: connect (1)[c::]:6789 error -101 [ 1548.342215][T17693] libceph: mon0 (1)[c::]:6789 connect error [ 1548.899930][ T5867] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1548.909257][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.916740][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1548.926469][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1549.162612][ T5867] usb 4-1: config 0 descriptor?? [ 1549.184678][T17750] ceph: No mds server is up or the cluster is laggy [ 1549.427788][T16631] libceph: connect (1)[c::]:6789 error -101 [ 1549.440271][T16631] libceph: mon0 (1)[c::]:6789 connect error [ 1549.719625][ T5867] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1549.807436][ T5867] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1549.846498][ T5867] [drm] Initialized udl on minor 2 [ 1549.961177][ T5867] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1550.569569][ T5867] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1550.579662][T16631] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1550.615613][T16631] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1550.625788][ T5867] usb 4-1: USB disconnect, device number 36 [ 1550.651282][T16631] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1550.725666][T17521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1550.778167][T17521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1550.863580][T17521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1550.927063][T17521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1551.450881][T17521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.323722][T17521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.418372][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.425590][T17567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.524846][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.532022][T17567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.898634][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1664.905653][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17763/1:b..l [ 1664.914160][ C0] rcu: (detected by 0, t=10502 jiffies, g=76705, q=67 ncpus=2) [ 1664.921825][ C0] task:syz.6.2994 state:R running task stack:25496 pid:17763 tgid:17761 ppid:12353 task_flags:0x40054c flags:0x00004002 [ 1664.936247][ C0] Call Trace: [ 1664.939559][ C0] [ 1664.942520][ C0] __schedule+0x16a2/0x4cb0 [ 1664.947089][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1664.952419][ C0] ? __pfx___schedule+0x10/0x10 [ 1664.957305][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1664.963510][ C0] ? __lock_acquire+0xab9/0xd20 [ 1664.968403][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1664.973733][ C0] preempt_schedule_irq+0xb5/0x150 [ 1664.978891][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1664.984707][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1664.990549][ C0] irqentry_exit+0x6f/0x90 [ 1664.994987][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1665.000998][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1665.007798][ C0] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 70 98 92 65 8b 0d 18 2f d8 10 81 e1 00 01 ff 00 [ 1665.027425][ C0] RSP: 0018:ffffc90003dbf068 EFLAGS: 00000246 [ 1665.033516][ C0] RAX: ffffffff822c3e62 RBX: ffffffff822c3e32 RCX: ffff888030e9da00 [ 1665.041523][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 1665.049512][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822c3e32 [ 1665.057503][ C0] R10: dffffc0000000000 R11: fffff94000089407 R12: 0000000000000000 [ 1665.065491][ C0] R13: 0000000000000000 R14: ffffea000044a000 R15: 000001697fb598e9 [ 1665.073488][ C0] ? page_ext_get+0x22/0x2f0 [ 1665.078111][ C0] ? page_ext_get+0x22/0x2f0 [ 1665.082733][ C0] ? page_ext_get+0x52/0x2f0 [ 1665.087363][ C0] ? page_ext_get+0x3e/0x2f0 [ 1665.091989][ C0] page_ext_get+0x52/0x2f0 [ 1665.096446][ C0] __reset_page_owner+0x28/0x1f0 [ 1665.101416][ C0] free_unref_folios+0xcb8/0x1540 [ 1665.106481][ C0] folios_put_refs+0x559/0x640 [ 1665.111279][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1665.116593][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 1665.122949][ C0] shmem_undo_range+0x49e/0x14b0 [ 1665.127935][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1665.133365][ C0] ? __lock_acquire+0xab9/0xd20 [ 1665.138281][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 1665.143939][ C0] shmem_evict_inode+0x272/0xa70 [ 1665.148912][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 1665.154566][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1665.160052][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1665.166150][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1665.171385][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1665.176870][ C0] evict+0x501/0x9c0 [ 1665.180807][ C0] ? __pfx_evict+0x10/0x10 [ 1665.185423][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1665.190659][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1665.195553][ C0] ? iput+0x6d8/0x9d0 [ 1665.199569][ C0] __dentry_kill+0x209/0x660 [ 1665.204181][ C0] ? dput+0x37/0x2b0 [ 1665.208108][ C0] dput+0x19f/0x2b0 [ 1665.211954][ C0] __fput+0x68e/0xa70 [ 1665.215974][ C0] task_work_run+0x1d1/0x260 [ 1665.220604][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1665.225769][ C0] do_exit+0x8d1/0x2550 [ 1665.229964][ C0] ? __lock_acquire+0xab9/0xd20 [ 1665.234851][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1665.239904][ C0] ? __pfx_do_exit+0x10/0x10 [ 1665.244522][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1665.249942][ C0] do_group_exit+0x21c/0x2d0 [ 1665.254573][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1665.259801][ C0] get_signal+0x125e/0x1310 [ 1665.264355][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1665.269950][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1665.276163][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1665.281649][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1665.286958][ C0] do_syscall_64+0x2bd/0x3b0 [ 1665.291576][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1665.296793][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.302883][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1665.307584][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.313520][ C0] RIP: 0033:0x7f7eabb8e969 [ 1665.317964][ C0] RSP: 002b:00007f7eaca2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1665.326440][ C0] RAX: 0000200000000000 RBX: 00007f7eabdb6080 RCX: 00007f7eabb8e969 [ 1665.334430][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1665.342419][ C0] RBP: 00007f7eabc10ab1 R08: ffffffffffffffff R09: 0000000000000000 [ 1665.350406][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1665.358395][ C0] R13: 0000000000000000 R14: 00007f7eabdb6080 R15: 00007ffd8b1697d8 [ 1665.366412][ C0] [ 1665.369445][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g76705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1665.380657][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1665.390640][ C0] rcu: RCU grace-period kthread stack dump: [ 1665.396551][ C0] task:rcu_preempt state:R running task stack:26920 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1665.410096][ C0] Call Trace: [ 1665.413398][ C0] [ 1665.416347][ C0] __schedule+0x16a2/0x4cb0 [ 1665.420903][ C0] ? schedule+0x165/0x360 [ 1665.425275][ C0] ? __pfx___schedule+0x10/0x10 [ 1665.430173][ C0] ? schedule+0x91/0x360 [ 1665.434453][ C0] schedule+0x165/0x360 [ 1665.438642][ C0] schedule_timeout+0x12b/0x270 [ 1665.443522][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1665.448925][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1665.454245][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1665.459825][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1665.464700][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1665.469928][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1665.474903][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1665.480231][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1665.485575][ C0] ? finish_swait+0xcd/0x1f0 [ 1665.490207][ C0] rcu_gp_kthread+0x99/0x390 [ 1665.494831][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1665.500054][ C0] ? __kthread_parkme+0x7b/0x200 [ 1665.505021][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1665.510076][ C0] kthread+0x70e/0x8a0 [ 1665.514179][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1665.519396][ C0] ? __pfx_kthread+0x10/0x10 [ 1665.524030][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1665.529259][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1665.534475][ C0] ? __pfx_kthread+0x10/0x10 [ 1665.539096][ C0] ret_from_fork+0x3fc/0x770 [ 1665.543709][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1665.548898][ C0] ? __switch_to_asm+0x39/0x70 [ 1665.553680][ C0] ? __switch_to_asm+0x33/0x70 [ 1665.558464][ C0] ? __pfx_kthread+0x10/0x10 [ 1665.563107][ C0] ret_from_fork_asm+0x1a/0x30 [ 1665.567911][ C0] [ 1665.570951][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1665.577305][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1665.588622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1665.598730][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1665.604485][ C0] Code: 03 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b2 2b 00 f3 0f 1e fa fb f4 d8 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1665.624114][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1665.630208][ C0] RAX: 4564c0ef1b37fb00 RBX: ffffffff819752a8 RCX: 4564c0ef1b37fb00 [ 1665.638197][ C0] RDX: 0000000000000001 RSI: ffffffff8d95adbe RDI: ffffffff8be19200 [ 1665.646187][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1665.654176][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9f7ef0 [ 1665.662170][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a48 [ 1665.670161][ C0] FS: 0000000000000000(0000) GS:ffff888125c99000(0000) knlGS:0000000000000000 [ 1665.679113][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1665.685718][ C0] CR2: 0000001b2e41bff8 CR3: 0000000068ed8000 CR4: 00000000003526f0 [ 1665.693709][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1665.701709][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1665.709698][ C0] Call Trace: [ 1665.712990][ C0] [ 1665.715936][ C0] default_idle+0x13/0x20 [ 1665.720312][ C0] default_idle_call+0x74/0xb0 [ 1665.725104][ C0] do_idle+0x1e8/0x510 [ 1665.729207][ C0] ? __pfx_do_idle+0x10/0x10 [ 1665.733852][ C0] cpu_startup_entry+0x44/0x60 [ 1665.738643][ C0] rest_init+0x2de/0x300 [ 1665.742911][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1665.748508][ C0] start_kernel+0x478/0x500 [ 1665.753034][ C0] x86_64_start_reservations+0x24/0x30 [ 1665.758517][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1665.763655][ C0] common_startup_64+0x13e/0x147 [ 1665.768650][ C0]