last executing test programs: 2m18.49272369s ago: executing program 2 (id=1968): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00"], 0x0) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000280), 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) 2m17.12718133s ago: executing program 2 (id=1969): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) writev(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 2m15.613206391s ago: executing program 2 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x66) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x803, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, {0xa, 0x4e20, 0x1ff, @mcast2, 0x9}, 0xffffffffffffffff, 0x6}}, 0x48) 2m14.489334976s ago: executing program 2 (id=1975): socket$inet_udp(0x2, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x6, 0x9c, 0xd, 0x4, 0x3, "5f1cc6e1592fa422"}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m12.164220228s ago: executing program 2 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) 2m10.564501081s ago: executing program 2 (id=1984): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x2711, @host}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 2m9.620282793s ago: executing program 32 (id=1984): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x2711, @host}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 9.343477571s ago: executing program 1 (id=2275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000ac0), 0x602800, 0x0) rt_sigaction(0x40, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000640)) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 6.822079486s ago: executing program 3 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.324148113s ago: executing program 0 (id=2283): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x64008090}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r2, r2, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000237c0)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) getresuid(&(0x7f00000239c0), 0x0, &(0x7f0000023a40)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) 6.121612426s ago: executing program 3 (id=2284): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000240), 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) writev(r4, 0x0, 0x0) shutdown(r4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 5.139266199s ago: executing program 4 (id=2286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000380)) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc14) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) keyctl$reject(0x13, 0x0, 0x7, 0x8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) gettid() setresgid(0x0, 0xee01, 0xffffffffffffffff) 5.09530489s ago: executing program 0 (id=2287): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) writev(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 4.079961804s ago: executing program 0 (id=2288): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) mount$fuseblk(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0) 4.079514434s ago: executing program 4 (id=2289): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003700), 0x2, 0x0) ppoll(&(0x7f0000003740), 0x0, &(0x7f00000037c0), 0x0, 0x0) 4.022353435s ago: executing program 0 (id=2290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) 3.901901156s ago: executing program 0 (id=2291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) open$dir(0x0, 0x40, 0x86) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x4000000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYRES8=r4]) 3.856742767s ago: executing program 1 (id=2292): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.838779377s ago: executing program 4 (id=2293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='ufshcd_command\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) creat(&(0x7f0000000180)='./file0/file0\x00', 0x16f) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.859991661s ago: executing program 4 (id=2294): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x24442, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000880)) 2.839514711s ago: executing program 3 (id=2295): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x64008090}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r2, r2, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000237c0)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) getresuid(&(0x7f00000239c0), 0x0, &(0x7f0000023a40)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) 2.777274722s ago: executing program 0 (id=2296): r0 = socket(0x10, 0x80003, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x24, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x20808}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x6, "0de7353d"}]}}, 0x0}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x43, 0x24, 0x21, 0x8, 0x13d8, 0x1, 0x3062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x97, 0x9d}}]}}]}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x110, r0, 0xf8a7c000) r6 = socket$rds(0x15, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x264, &(0x7f0000000480)=ANY=[@ANYBLOB="1600004eb4f7b5214c85ccfe170c109852a5ea9a44bf0353430500001200004ed67e85894ff6a2556d71b0b214d129ba863200004600004e662786d1f748ff76677e90e49cb746eebd65a3e8b4a441aa77f640a2ad46fe94daf231c90c8bd4e12cb5f671502280e41cccb24e200f28902a7c7dc4ba01a9f1aa1ae3b34fd70000ad00004ef81f98397e811fb80247e360bf670c11fe4f3f13a189817dd87a103ed9b8bcc5c5823d06b90191457763b0ceb6b581d2317f3278e68d3b4fc139c16ad4c9155ef83e085118e964f68c03492300a03463078d1ad127dbc06748934ecb70e0884e04000557da1b97176dae8be6fddefd839f31e2542b2ca1c108d8d88beaaff4a3138943c95774ac09eec40fcbfecb5d12a10daa9f434062931f60d154acc23bea81dbd30165c1385f7f80b24c7c0000005f00004ee4405f5f9996fee33a1e26b07aec147fb5413782270828164a578a3f8b6ed65c6ccf2becf34bc63aa70627c2508838bfb2f84489e9b938b1d43b58f2fee784b73cc6c1f6f3e15ce19d3f1836ae14f205856c4b102f67c678f298acdff5a75100c700004e8c57050ee969c3a3833cfadf351c768d914e1a660185d831e9ad93f22a0628a8b419b1682c624f02cffe6183734751c1786101203e645a0259e58623469d834b0402a94ad5b0a1d37400b84446e9efc855f2a05998766e6a269213daf6a789f66648f2a1b2ac352103c91506171b506ce748ff0eb5a6d07383fa98d4cfbbb4620164d15877eacfdf7d45fccd311d9af9f60740e5adee4b805bd11e25d067dfde1b1fdd1d0c5b82dec759bc77daa287b5f4eb728a6314f0ee4cabf3031ea8a1e2452026c3f127c400"]) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x80031, 0xffffffffffffffff, 0x80000000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='devlink_hwerr\x00', r7, 0x0, 0xfffffffdfffffffd}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.712912943s ago: executing program 1 (id=2297): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) writev(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 2.20312972s ago: executing program 4 (id=2298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000380)) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) keyctl$reject(0x13, 0x0, 0x7, 0x8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) gettid() setresgid(0x0, 0xee01, 0xffffffffffffffff) 1.304677072s ago: executing program 1 (id=2299): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) mount$fuseblk(&(0x7f0000002440), 0x0, &(0x7f0000000100), 0x4000, 0x0) 1.286209323s ago: executing program 3 (id=2300): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x2) 1.109693525s ago: executing program 1 (id=2301): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003700), 0x2, 0x0) ppoll(&(0x7f0000003740), 0x0, &(0x7f00000037c0), 0x0, 0x0) 1.043988026s ago: executing program 3 (id=2302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='ufshcd_command\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) creat(&(0x7f0000000180)='./file0/file0\x00', 0x16f) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 905.599118ms ago: executing program 1 (id=2303): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) dup(r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syslog(0x4, &(0x7f0000000140)=""/27, 0x1b) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r6, 0x11, 0xd, 0x0, &(0x7f0000002280)) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000000)=0x2, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r7, 0x4095, 0xdf61, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 51.86285ms ago: executing program 4 (id=2304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) open$dir(0x0, 0x40, 0x86) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x4000000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYRES8=r4]) 0s ago: executing program 3 (id=2305): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000240), 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) writev(r4, 0x0, 0x0) shutdown(r4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) kernel console output (not intermixed with test programs): lem. [ 62.208915][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.233818][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.241165][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.267430][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.291575][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.298807][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.324916][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.343341][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.350468][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.376900][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.390753][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.420432][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.475232][ T5779] hsr_slave_0: entered promiscuous mode [ 62.481822][ T5779] hsr_slave_1: entered promiscuous mode [ 62.502994][ T5777] hsr_slave_0: entered promiscuous mode [ 62.509684][ T5777] hsr_slave_1: entered promiscuous mode [ 62.515864][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.524214][ T5777] Cannot create hsr debugfs directory [ 62.581558][ T5780] team0: Port device team_slave_0 added [ 62.594650][ T5778] hsr_slave_0: entered promiscuous mode [ 62.601733][ T5778] hsr_slave_1: entered promiscuous mode [ 62.608317][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.616405][ T5778] Cannot create hsr debugfs directory [ 62.634834][ T5780] team0: Port device team_slave_1 added [ 62.718356][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.725339][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.751340][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.767992][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.774995][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.787534][ T5793] Bluetooth: hci2: command tx timeout [ 62.801155][ T5786] Bluetooth: hci3: command tx timeout [ 62.801414][ T5786] Bluetooth: hci1: command tx timeout [ 62.811837][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.812380][ T5783] Bluetooth: hci0: command tx timeout [ 62.958207][ T5780] hsr_slave_0: entered promiscuous mode [ 62.964609][ T5780] hsr_slave_1: entered promiscuous mode [ 62.971219][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.979191][ T5780] Cannot create hsr debugfs directory [ 63.139414][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.154625][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.164675][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.197247][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.292697][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.302733][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.313432][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.325189][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.421426][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.432458][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.444871][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.455159][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.537360][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.547140][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.557476][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.568305][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.638966][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.688529][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.721443][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.743915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.751319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.781451][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.788667][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.805904][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.821217][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.837829][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.844968][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.887675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.894889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.943217][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.954530][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.982021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.989153][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.015304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.022604][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.041935][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.072929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.080155][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.105513][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.134362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.141500][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.205410][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.473121][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.554257][ T5779] veth0_vlan: entered promiscuous mode [ 64.624047][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.650554][ T5779] veth1_vlan: entered promiscuous mode [ 64.667852][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.692326][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.762673][ T5780] veth0_vlan: entered promiscuous mode [ 64.805310][ T5780] veth1_vlan: entered promiscuous mode [ 64.828554][ T5777] veth0_vlan: entered promiscuous mode [ 64.839077][ T5779] veth0_macvtap: entered promiscuous mode [ 64.858826][ T5779] veth1_macvtap: entered promiscuous mode [ 64.873602][ T5786] Bluetooth: hci3: command tx timeout [ 64.880835][ T5788] Bluetooth: hci0: command tx timeout [ 64.884071][ T5793] Bluetooth: hci1: command tx timeout [ 64.886623][ T5783] Bluetooth: hci2: command tx timeout [ 64.901255][ T5777] veth1_vlan: entered promiscuous mode [ 64.924324][ T5778] veth0_vlan: entered promiscuous mode [ 64.941413][ T5780] veth0_macvtap: entered promiscuous mode [ 64.970440][ T5780] veth1_macvtap: entered promiscuous mode [ 64.979698][ T5778] veth1_vlan: entered promiscuous mode [ 64.989754][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.013565][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.038710][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.049477][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058564][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.067483][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.090144][ T5777] veth0_macvtap: entered promiscuous mode [ 65.102053][ T5777] veth1_macvtap: entered promiscuous mode [ 65.122844][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.134002][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.147900][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.177416][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.189257][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.202475][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.214791][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.225414][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.234285][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243345][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.292806][ T5778] veth0_macvtap: entered promiscuous mode [ 65.321673][ T5778] veth1_macvtap: entered promiscuous mode [ 65.334641][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.348462][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.358797][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.369283][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.382691][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.418499][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.419642][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.439912][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.452883][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.463412][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.474226][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.485744][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.530458][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.543104][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555796][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.566691][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.576956][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.587842][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599847][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.610455][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.619610][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629269][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.638163][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687169][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.699090][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.709006][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.720909][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.730880][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.741361][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.753355][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.768551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.784460][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.810750][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.824978][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.832630][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832691][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832713][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832734][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.978675][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.005579][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.052818][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.064854][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.148089][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.158566][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.204928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.236317][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.258893][ T5866] dvmrp0: entered allmulticast mode [ 66.286718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.295649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.962984][ T5783] Bluetooth: hci1: command tx timeout [ 66.963286][ T5793] Bluetooth: hci2: command tx timeout [ 66.969096][ T5793] Bluetooth: hci3: command tx timeout [ 66.974835][ T5786] Bluetooth: hci0: command tx timeout [ 66.999908][ T5878] fuse: Bad value for 'fd' [ 67.678406][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.976117][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 67.985178][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.001144][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.015405][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 68.025520][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.032291][ T5891] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 68.034760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.145145][ T8] usb 2-1: config 0 descriptor?? [ 68.204900][ T5892] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9'. [ 68.629523][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'. [ 68.816662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.825415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.834548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.854664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.863700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.872791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.881911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.890915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.899876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 69.028419][ T5788] Bluetooth: hci2: command tx timeout [ 69.028419][ T5793] Bluetooth: hci1: command tx timeout [ 69.028470][ T5783] Bluetooth: hci0: command tx timeout [ 69.044796][ T5786] Bluetooth: hci3: command tx timeout [ 69.373507][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 69.604777][ T5896] ceph: No mds server is up or the cluster is laggy [ 69.629841][ T8] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 69.642461][ T5881] delete_channel: no stack [ 69.665187][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 69.726648][ T5905] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 69.986950][ T5907] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11'. [ 70.073200][ T8] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 70.238055][ T8] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 70.411343][ T8] usb 2-1: USB disconnect, device number 2 [ 70.477692][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 70.485810][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 71.415136][ T5924] fuse: Bad value for 'fd' [ 71.476592][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.655757][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 71.687257][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.694083][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.731702][ T5935] bridge_slave_1: left allmulticast mode [ 71.740502][ T5935] bridge_slave_1: left promiscuous mode [ 71.750151][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.771031][ T5935] bridge_slave_0: left allmulticast mode [ 71.777945][ T5935] bridge_slave_0: left promiscuous mode [ 71.786607][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.701975][ T5943] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 72.821518][ T5946] netlink: 11 bytes leftover after parsing attributes in process `syz.3.21'. [ 72.928056][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 73.556026][ T5769] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.399444][ T5769] usb 1-1: Using ep0 maxpacket: 16 [ 74.406992][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 74.623293][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.646131][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.864399][ T5957] overlayfs: conflicting lowerdir path [ 74.901198][ T5769] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 74.936175][ T5955] 9pnet: Could not find request transport: 0xffffffffffffffff [ 74.951133][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.962321][ T5769] usb 1-1: config 0 descriptor?? [ 75.112174][ T5960] fuse: Bad value for 'fd' [ 75.396967][ T5769] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 75.591694][ T5769] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 76.108909][ T5963] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 76.116023][ T5769] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 76.130725][ T5947] delete_channel: no stack [ 76.138008][ T5769] usb 1-1: USB disconnect, device number 2 [ 76.626613][ T5951] syz.2.22 (5951): drop_caches: 3 [ 77.547399][ T5996] fuse: Bad value for 'fd' [ 78.052444][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 80.137454][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 80.195727][ T6011] ceph: No mds server is up or the cluster is laggy [ 80.250718][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 81.107176][ T6026] fuse: Bad value for 'fd' [ 81.346204][ T5781] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.526916][ T6037] input: syz0 as /devices/virtual/input/input5 [ 82.416787][ T5781] usb 1-1: Using ep0 maxpacket: 16 [ 82.476540][ T3545] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.506264][ T787] cfg80211: failed to load regulatory.db [ 82.515083][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.580830][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.621388][ T5781] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 82.641323][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.653607][ T5781] usb 1-1: config 0 descriptor?? [ 82.810432][ T3545] usb 2-1: Using ep0 maxpacket: 8 [ 82.819758][ T3545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.832941][ T3545] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.847037][ T3545] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 82.860552][ T3545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.589327][ T5781] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0 [ 83.608846][ T3545] usb 2-1: config 0 descriptor?? [ 83.620765][ T6021] delete_channel: no stack [ 83.676218][ T5781] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 83.693348][ T5781] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 83.755742][ T5781] usb 1-1: USB disconnect, device number 3 [ 83.827116][ T6035] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 84.455439][ T6056] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 84.465446][ T6056] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.752608][ T5847] usb 2-1: USB disconnect, device number 3 [ 85.994986][ T6061] ceph: No mds server is up or the cluster is laggy [ 86.003663][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 86.576830][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 86.868720][ T6068] fuse: Bad value for 'fd' [ 87.220908][ T6073] overlayfs: missing 'lowerdir' [ 87.760502][ T6072] xt_TCPMSS: Only works on TCP SYN packets [ 88.034959][ T6079] input: syz0 as /devices/virtual/input/input6 [ 89.533140][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 89.689805][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 89.986144][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.206016][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 90.225539][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.296081][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.319518][ T27] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 90.344218][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.380733][ T27] usb 1-1: config 0 descriptor?? [ 90.805059][ T27] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 90.889612][ T27] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 90.911087][ T27] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 91.004347][ T6088] delete_channel: no stack [ 91.073532][ T27] usb 1-1: USB disconnect, device number 4 [ 91.941045][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.086090][ T3545] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.276330][ T3545] usb 4-1: Using ep0 maxpacket: 8 [ 92.288174][ T3545] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.299827][ T3545] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.313516][ T6105] fuse: Bad value for 'fd' [ 92.318127][ T3545] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 92.336049][ T3545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.357895][ T3545] usb 4-1: config 0 descriptor?? [ 93.195748][ T6115] input: syz0 as /devices/virtual/input/input7 [ 95.306946][ T787] usb 4-1: USB disconnect, device number 2 [ 95.467924][ T6111] syz.0.66 (6111) used greatest stack depth: 16936 bytes left [ 95.702662][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 95.761324][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 96.686045][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.926009][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 96.951320][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.999825][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.049271][ T5864] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 97.083258][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.117121][ T5864] usb 4-1: config 0 descriptor?? [ 97.396902][ T6139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.553663][ T5864] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 97.637769][ T5864] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 97.653391][ T5864] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 97.734047][ T6149] input: syz0 as /devices/virtual/input/input8 [ 99.319026][ T5847] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.523255][ T6133] delete_channel: no stack [ 99.537025][ T5864] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 99.686876][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 99.698822][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.732310][ T5847] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.764176][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 99.808645][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.873228][ T5847] usb 1-1: config 0 descriptor?? [ 100.415296][ T3545] usb 4-1: USB disconnect, device number 3 [ 101.094394][ T6178] input: syz0 as /devices/virtual/input/input9 [ 103.365158][ T8] usb 1-1: USB disconnect, device number 5 [ 104.806112][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.978654][ T6204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.92'. [ 105.006099][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 105.127234][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.374268][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.524812][ T5847] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 105.553205][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.598224][ T5847] usb 3-1: config 0 descriptor?? [ 105.777458][ T6215] fuse: Bad value for 'fd' [ 106.028599][ T5847] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 106.456585][ T5847] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 106.861051][ T5847] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 106.986084][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.114730][ T6227] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 107.129507][ T6227] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.186092][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 107.201866][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.213725][ T5864] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.227650][ T5864] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 107.239226][ T5847] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 107.240028][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.267512][ T5864] usb 4-1: config 0 descriptor?? [ 107.962930][ T6197] delete_channel: no stack [ 108.876192][ T5827] usb 3-1: USB disconnect, device number 2 [ 111.090933][ T5847] usb 4-1: USB disconnect, device number 4 [ 111.467206][ T6244] netlink: 64 bytes leftover after parsing attributes in process `syz.1.103'. [ 112.230094][ T6248] fuse: Bad value for 'fd' [ 113.419937][ T6258] ceph: No mds server is up or the cluster is laggy [ 113.429104][ T3545] libceph: connect (1)[c::]:6789 error -101 [ 113.435114][ T3545] libceph: mon0 (1)[c::]:6789 connect error [ 113.676197][ T6268] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 113.725685][ T6268] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.866306][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.117232][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 115.147682][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.158529][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.168478][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 115.178451][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.202170][ T27] usb 3-1: config 0 descriptor?? [ 118.345090][ T5864] usb 3-1: USB disconnect, device number 3 [ 118.611997][ T6296] fuse: Bad value for 'fd' [ 120.135255][ T6303] ceph: No mds server is up or the cluster is laggy [ 120.144566][ T8] libceph: connect (1)[c::]:6789 error -101 [ 120.162961][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 121.266181][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.466036][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 121.485399][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.510956][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.536219][ T5864] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 121.559295][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.582830][ T5864] usb 3-1: config 0 descriptor?? [ 121.710102][ T6323] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 121.746330][ T6323] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.020275][ T5864] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 122.117228][ T5864] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 122.125654][ T5864] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 122.243079][ T5864] usb 3-1: USB disconnect, device number 4 [ 122.247064][ T6318] delete_channel: no stack [ 125.941903][ T6339] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.018987][ T6342] netlink: 11 bytes leftover after parsing attributes in process `syz.3.131'. [ 126.050227][ T6342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 127.181069][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.125708][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 130.148586][ T6370] bridge_slave_1: left allmulticast mode [ 130.154286][ T6370] bridge_slave_1: left promiscuous mode [ 130.174493][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.317874][ T6370] bridge_slave_0: left allmulticast mode [ 130.323690][ T6370] bridge_slave_0: left promiscuous mode [ 130.336366][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.127743][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134566][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.221553][ T6443] input: syz0 as /devices/virtual/input/input10 [ 144.463546][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 146.293224][ T6466] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 146.571357][ T6472] netlink: 11 bytes leftover after parsing attributes in process `syz.1.170'. [ 146.572894][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.170'. [ 146.878664][ T6476] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 147.460248][ T6473] input: syz0 as /devices/virtual/input/input11 [ 147.534355][ T6479] Zero length message leads to an empty skb [ 148.474286][ T6480] syz.0.175 (6480): drop_caches: 2 [ 149.308773][ T6485] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 149.593735][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 149.638217][ T6492] bridge_slave_1: left allmulticast mode [ 149.655833][ T6492] bridge_slave_1: left promiscuous mode [ 149.672448][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.694869][ T6492] bridge_slave_0: left allmulticast mode [ 149.700792][ T6492] bridge_slave_0: left promiscuous mode [ 149.725485][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.966378][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.103780][ T6513] input: syz0 as /devices/virtual/input/input12 [ 151.106110][ T5864] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.166403][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 151.200858][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.212956][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.222312][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 151.232587][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.262034][ T8] usb 3-1: config 0 descriptor?? [ 151.335990][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 151.347693][ T5864] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.356395][ T5864] usb 1-1: config 0 has no interface number 0 [ 151.368101][ T5864] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.378029][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.387057][ T5864] usb 1-1: Product: syz [ 151.391613][ T5864] usb 1-1: Manufacturer: syz [ 151.396626][ T5864] usb 1-1: SerialNumber: syz [ 151.425697][ T5864] usb 1-1: config 0 descriptor?? [ 151.439667][ T5864] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.681706][ T5864] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 151.719477][ T5864] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.109594][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 152.654004][ T8] usb 3-1: USB disconnect, device number 5 [ 153.554474][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.182'. [ 153.589974][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.595003][ T787] usb 1-1: USB disconnect, device number 6 [ 153.676580][ T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.733351][ T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.823672][ T787] quatech2 1-1:0.51: device disconnected [ 154.111823][ T6520] syz.1.186 (6520): drop_caches: 2 [ 154.137778][ T6525] ceph: No mds server is up or the cluster is laggy [ 154.144792][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 154.165397][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 155.442041][ T6545] input: syz0 as /devices/virtual/input/input13 [ 155.623407][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 155.660690][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 155.696595][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.266038][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 156.286245][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.361899][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.597036][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.616191][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 156.625825][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.646323][ T8] usb 1-1: config 0 descriptor?? [ 156.796118][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 156.803650][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.824057][ T787] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.849196][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.876140][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.899136][ T787] usb 4-1: config 0 descriptor?? [ 157.069904][ T8] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 157.147335][ T8] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 157.161547][ T8] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 159.065484][ T787] usb 4-1: USB disconnect, device number 5 [ 159.077625][ T6542] delete_channel: no stack [ 159.086036][ T8] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 159.523487][ T6562] syz.1.199 (6562): drop_caches: 2 [ 159.552720][ T787] libceph: connect (1)[c::]:6789 error -101 [ 159.571616][ T6573] ceph: No mds server is up or the cluster is laggy [ 159.592955][ T6579] input: syz0 as /devices/virtual/input/input14 [ 159.716219][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 160.022493][ T5827] usb 1-1: USB disconnect, device number 7 [ 160.815831][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 160.829411][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 160.971606][ T6584] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 160.980880][ T6584] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 161.020882][ T6597] netlink: 64 bytes leftover after parsing attributes in process `syz.0.209'. [ 162.885486][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.656051][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 164.677682][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.438377][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.512922][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 165.566244][ T6606] delete_channel: no stack [ 165.566472][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.610378][ T8] usb 1-1: config 0 descriptor?? [ 165.629661][ T8] usb 1-1: can't set config #0, error -71 [ 165.661792][ T8] usb 1-1: USB disconnect, device number 8 [ 165.738480][ T6627] fuse: Bad value for 'fd' [ 167.697219][ T6648] overlayfs: conflicting lowerdir path [ 167.724431][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 167.929474][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 168.029670][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 168.285812][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 168.546016][ T5864] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.748333][ T6663] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 168.762358][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 168.824026][ T6664] netlink: 11 bytes leftover after parsing attributes in process `syz.1.228'. [ 169.209660][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.221045][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.303808][ T5864] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 169.345476][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.390256][ T5864] usb 1-1: config 0 descriptor?? [ 169.488972][ T6671] fuse: Bad value for 'fd' [ 169.850415][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 169.974027][ T6652] delete_channel: no stack [ 169.986515][ T5864] usbhid: probe of 1-1:0.0 failed with error -71 [ 170.005848][ T5864] usb 1-1: USB disconnect, device number 9 [ 172.362831][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 172.371841][ T6691] bridge_slave_1: left allmulticast mode [ 172.378987][ T6691] bridge_slave_1: left promiscuous mode [ 172.385853][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.403886][ T6691] bridge_slave_0: left allmulticast mode [ 172.409679][ T6691] bridge_slave_0: left promiscuous mode [ 172.415419][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.470047][ T6693] fuse: Unknown parameter 'group_i00000000000000000000' [ 172.707446][ T6697] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 172.864941][ T6698] netlink: 11 bytes leftover after parsing attributes in process `syz.1.240'. [ 173.470155][ T6706] netlink: 156 bytes leftover after parsing attributes in process `syz.1.241'. [ 175.404760][ T6715] ubi31: attaching mtd0 [ 175.412111][ T6715] ubi31: scanning is finished [ 175.416915][ T6715] ubi31: empty MTD device detected [ 176.055550][ T6715] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 176.063795][ T6715] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 176.071459][ T6715] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 176.078748][ T6715] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 176.086390][ T6715] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 176.093303][ T6715] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 176.101441][ T6715] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2398313134 [ 176.111574][ T6715] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 176.122599][ T6721] ubi31: background thread "ubi_bgt31d" started, PID 6721 [ 176.228373][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 176.242667][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 176.544085][ T6727] input: syz0 as /devices/virtual/input/input15 [ 176.762968][ T6734] fuse: Bad value for 'fd' [ 177.214213][ T6741] netlink: 156 bytes leftover after parsing attributes in process `syz.0.251'. [ 179.002595][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 179.028550][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 179.096010][ T5864] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.285992][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 179.305991][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.317535][ T5864] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.348618][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 179.371512][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.402600][ T5864] usb 1-1: config 0 descriptor?? [ 179.990791][ T6763] input: syz0 as /devices/virtual/input/input16 [ 180.421756][ T6773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.261'. [ 181.205677][ T27] usb 1-1: USB disconnect, device number 10 [ 181.773658][ T6783] ubi: mtd0 is already attached to ubi31 [ 183.284938][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 183.299102][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 183.513664][ T6797] input: syz0 as /devices/virtual/input/input17 [ 184.400895][ T6807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.271'. [ 186.402923][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 186.403201][ T5100] Bluetooth: hci0: command 0x0406 tx timeout [ 186.410307][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 186.417492][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 186.879513][ T6824] input: syz0 as /devices/virtual/input/input18 [ 187.611000][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 187.650969][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 188.452686][ T6845] netlink: 156 bytes leftover after parsing attributes in process `syz.0.284'. [ 190.527953][ T6854] veth0_to_team: entered promiscuous mode [ 190.533736][ T6854] veth0_to_team: entered allmulticast mode [ 190.724656][ T6858] input: syz0 as /devices/virtual/input/input19 [ 192.847264][ T6886] fuse: Bad value for 'user_id' [ 193.627414][ T6887] veth0_to_team: entered promiscuous mode [ 193.633200][ T6887] veth0_to_team: entered allmulticast mode [ 193.846448][ T6892] input: syz0 as /devices/virtual/input/input20 [ 194.189332][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 194.280089][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 194.563710][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571089][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.977129][ T6910] syz.3.306 (6910): drop_caches: 2 [ 195.982516][ T6910] syz.3.306 (6910): drop_caches: 2 [ 197.183055][ T6922] veth0_to_team: entered promiscuous mode [ 197.189162][ T6922] veth0_to_team: entered allmulticast mode [ 199.494054][ T6948] syz.0.316 (6948): drop_caches: 2 [ 199.499528][ T6948] syz.0.316 (6948): drop_caches: 2 [ 200.696362][ T6952] veth0_to_team: entered promiscuous mode [ 200.702148][ T6952] veth0_to_team: entered allmulticast mode [ 202.586303][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 202.881026][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 203.301260][ T6986] ceph: No mds server is up or the cluster is laggy [ 203.529858][ T27] libceph: connect (1)[c::]:6789 error -101 [ 203.574539][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 205.137939][ T7004] fuse: Bad value for 'group_id' [ 205.168272][ T7006] netlink: 156 bytes leftover after parsing attributes in process `syz.0.331'. [ 210.021295][ T7037] netlink: 156 bytes leftover after parsing attributes in process `syz.1.341'. [ 210.539103][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 210.554253][ T7048] fuse: Bad value for 'group_id' [ 210.557761][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 211.741020][ T7054] xt_TCPMSS: Only works on TCP SYN packets [ 211.762070][ T7054] overlayfs: missing 'lowerdir' [ 213.930675][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 214.374703][ T7078] netlink: 156 bytes leftover after parsing attributes in process `syz.2.353'. [ 215.123721][ T7075] 9pnet: Could not find request transport: 0xffffffffffffffff [ 215.127256][ T7071] overlayfs: conflicting lowerdir path [ 218.693261][ T7114] ubi: mtd0 is already attached to ubi31 [ 219.073779][ T7118] netlink: 156 bytes leftover after parsing attributes in process `syz.1.363'. [ 220.769308][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 220.883343][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 221.556690][ T7134] xt_TCPMSS: Only works on TCP SYN packets [ 221.574937][ T7134] overlayfs: missing 'lowerdir' [ 226.066085][ T7172] xt_TCPMSS: Only works on TCP SYN packets [ 226.073736][ T7172] overlayfs: missing 'lowerdir' [ 226.131431][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 228.478887][ T7189] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 228.492002][ T7189] netlink: 11 bytes leftover after parsing attributes in process `syz.0.385'. [ 228.505029][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'. [ 229.072737][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 229.100091][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 229.808193][ T787] libceph: connect (1)[c::]:6789 error -101 [ 229.815099][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 230.720773][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 231.080701][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 231.148142][ T7201] ceph: No mds server is up or the cluster is laggy [ 232.839187][ T7243] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 232.848866][ T7243] netlink: 11 bytes leftover after parsing attributes in process `syz.3.396'. [ 232.859258][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.396'. [ 232.958480][ T7245] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 233.764221][ T7256] 9pnet_fd: Insufficient options for proto=fd [ 235.026111][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.287714][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 235.312430][ T787] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.383961][ T787] usb 2-1: config 0 has no interface number 0 [ 235.527423][ T787] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.539984][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.549237][ T787] usb 2-1: Product: syz [ 235.553837][ T787] usb 2-1: Manufacturer: syz [ 235.564902][ T787] usb 2-1: SerialNumber: syz [ 235.577987][ T787] usb 2-1: config 0 descriptor?? [ 235.598927][ T787] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.635416][ T7281] overlayfs: missing 'lowerdir' [ 235.727681][ T7284] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 235.973161][ T787] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 236.236563][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 236.299877][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 236.307519][ T787] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 236.320768][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 236.330896][ T7284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.410'. [ 236.414371][ T7288] ceph: No mds server is up or the cluster is laggy [ 237.035772][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 237.036209][ T23] usb 2-1: USB disconnect, device number 4 [ 237.076689][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 237.103662][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 237.225001][ T23] quatech2 2-1:0.51: device disconnected [ 239.461320][ T7331] xt_TCPMSS: Only works on TCP SYN packets [ 239.477849][ T7331] overlayfs: missing 'lowerdir' [ 240.126179][ T787] libceph: connect (1)[c::]:6789 error -101 [ 240.139205][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 240.192166][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 240.291337][ T7341] ceph: No mds server is up or the cluster is laggy [ 242.408407][ T7376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.433'. [ 243.369442][ T7390] xt_TCPMSS: Only works on TCP SYN packets [ 243.386759][ T7390] overlayfs: missing 'lowerdir' [ 244.992159][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.441'. [ 247.957580][ T7438] xt_TCPMSS: Only works on TCP SYN packets [ 247.983870][ T7438] overlayfs: missing 'lowerdir' [ 252.052181][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 256.381108][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.389369][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.619250][ T7499] fuse: Unknown parameter 'grou00000000000000000000' [ 258.379075][ T7517] netlink: 11 bytes leftover after parsing attributes in process `syz.0.473'. [ 258.392946][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'. [ 261.710983][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 261.875979][ T3545] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.156027][ T3545] usb 1-1: Using ep0 maxpacket: 8 [ 262.179251][ T3545] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.216875][ T3545] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.244453][ T3545] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 262.271088][ T3545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.301893][ T3545] usb 1-1: config 0 descriptor?? [ 263.632099][ T7555] fuse: Unknown parameter 'grou00000000000000000000' [ 264.529043][ T3545] usb 1-1: USB disconnect, device number 11 [ 265.280221][ T7571] xt_TCPMSS: Only works on TCP SYN packets [ 265.287582][ T7571] overlayfs: missing 'lowerdir' [ 265.491722][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.490'. [ 270.147615][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 270.293093][ T7610] fuse: Unknown parameter 'grou00000000000000000000' [ 270.335979][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 270.343941][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.428675][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.438744][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 270.448712][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.548192][ T7614] xt_TCPMSS: Only works on TCP SYN packets [ 270.564153][ T7614] overlayfs: missing 'lowerdir' [ 271.099944][ T23] usb 1-1: config 0 descriptor?? [ 271.323856][ T23] usb 1-1: USB disconnect, device number 12 [ 274.946153][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 275.186102][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 275.238930][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.249827][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.259375][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 275.270191][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.525615][ T23] usb 1-1: config 0 descriptor?? [ 276.503792][ C1] hrtimer: interrupt took 42707 ns [ 277.537865][ T5847] usb 1-1: USB disconnect, device number 13 [ 278.442092][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 278.916059][ T7695] xt_TCPMSS: Only works on TCP SYN packets [ 278.932113][ T7695] overlayfs: missing 'lowerdir' [ 287.277873][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 292.165876][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 292.172110][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 292.418364][ T7808] xt_TCPMSS: Only works on TCP SYN packets [ 292.436146][ T7808] overlayfs: missing 'lowerdir' [ 292.987145][ T27] libceph: connect (1)[c::]:6789 error -101 [ 293.057109][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 293.112045][ T7800] ceph: No mds server is up or the cluster is laggy [ 295.966082][ T7841] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 295.975640][ T7841] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 296.939687][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 299.576452][ T7878] xt_TCPMSS: Only works on TCP SYN packets [ 299.589871][ T7878] overlayfs: missing 'lowerdir' [ 301.651624][ T7895] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 301.676116][ T7895] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 301.926003][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 302.136037][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 302.148082][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.192604][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.219759][ T8] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 302.238338][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.254508][ T8] usb 3-1: config 0 descriptor?? [ 302.495481][ T7893] delete_channel: no stack [ 302.506441][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 303.258235][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 303.335207][ T8] usb 3-1: USB disconnect, device number 6 [ 303.489824][ T7913] fuse: Unknown parameter '0x0000000000000004' [ 305.323498][ T7930] netlink: 11 bytes leftover after parsing attributes in process `syz.2.585'. [ 305.361998][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.585'. [ 305.826267][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 306.916457][ T7946] fuse: Unknown parameter '0x0000000000000004' [ 308.797548][ T7965] netlink: 11 bytes leftover after parsing attributes in process `syz.0.596'. [ 308.839644][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.596'. [ 309.434900][ T7968] xt_TCPMSS: Only works on TCP SYN packets [ 309.448283][ T7968] overlayfs: missing 'lowerdir' [ 310.848294][ T7981] fuse: Unknown parameter '0x0000000000000004' [ 311.268173][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 311.283983][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 312.662050][ T8] libceph: connect (1)[c::]:6789 error -101 [ 312.669029][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 312.830122][ T7999] ceph: No mds server is up or the cluster is laggy [ 313.483148][ T8011] ubi: mtd0 is already attached to ubi31 [ 314.371895][ T8017] xt_TCPMSS: Only works on TCP SYN packets [ 316.140917][ T8025] fuse: Unknown parameter 'fd0x0000000000000004' [ 317.512952][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.527804][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.563299][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 320.581078][ T8062] fuse: Bad value for 'user_id' [ 320.638722][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 320.945065][ T8068] ubi: mtd0 is already attached to ubi31 [ 322.164169][ T8071] delete_channel: no stack [ 322.915997][ T8084] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 322.924637][ T8084] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 325.455183][ T8105] fuse: Bad value for 'user_id' [ 326.203345][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 326.421102][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 326.982031][ T8123] ubi: mtd0 is already attached to ubi31 [ 329.665739][ T8141] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 329.674420][ T8141] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 332.771144][ T8171] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 333.746909][ T8184] ubi: mtd0 is already attached to ubi31 [ 334.413749][ T8187] delete_channel: no stack [ 335.920529][ T8205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.662'. [ 337.460234][ T8219] fuse: Bad value for 'fd' [ 338.725021][ T8240] ubi: mtd0 is already attached to ubi31 [ 339.984608][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.675'. [ 343.869101][ T8293] trusted_key: syz.2.688 sent an empty control message without MSG_MORE. [ 343.973709][ T8298] ubi: mtd0 is already attached to ubi31 [ 344.845060][ T8293] netlink: 'syz.2.688': attribute type 21 has an invalid length. [ 350.304349][ T8346] netlink: 'syz.0.702': attribute type 21 has an invalid length. [ 350.335310][ T8355] fuse: Bad value for 'fd' [ 350.621700][ T8361] ubi: mtd0 is already attached to ubi31 [ 353.815222][ T8393] fuse: Bad value for 'fd' [ 353.817944][ T8389] delete_channel: no stack [ 353.874901][ T8394] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 353.886355][ T8394] netlink: 11 bytes leftover after parsing attributes in process `syz.2.716'. [ 353.901176][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.716'. [ 354.083386][ T8401] capability: warning: `syz.2.719' uses deprecated v2 capabilities in a way that may be insecure [ 354.427250][ T5788] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 355.220359][ T8414] ubi: mtd0 is already attached to ubi31 [ 359.035527][ T8429] delete_channel: no stack [ 359.049241][ T8434] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 359.155407][ T8435] netlink: 11 bytes leftover after parsing attributes in process `syz.1.728'. [ 359.229484][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.728'. [ 360.227236][ T8447] fuse: Bad value for 'fd' [ 361.689165][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 362.060297][ T8465] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 362.824689][ T8473] delete_channel: no stack [ 362.981711][ T8479] ubi: mtd0 is already attached to ubi31 [ 363.926675][ T8485] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 364.007843][ T8486] veth0_to_team: left allmulticast mode [ 364.280252][ T8489] netlink: 11 bytes leftover after parsing attributes in process `syz.3.741'. [ 364.439346][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 367.119585][ T8514] delete_channel: no stack [ 367.247521][ T8521] fuse: Bad value for 'fd' [ 368.974210][ T8537] ubi: mtd0 is already attached to ubi31 [ 373.980750][ T8559] delete_channel: no stack [ 374.503049][ T8564] fuse: Invalid rootmode [ 375.508257][ T8570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 376.317883][ T8570] netlink: 11 bytes leftover after parsing attributes in process `syz.1.765'. [ 376.327755][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 377.096961][ T8585] ubi: mtd0 is already attached to ubi31 [ 378.871438][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969527][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.089138][ T8621] fuse: Invalid rootmode [ 383.332133][ T8624] delete_channel: no stack [ 383.386178][ T28] audit: type=1326 audit(1751683469.157:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 383.739203][ T8634] ubi: mtd0 is already attached to ubi31 [ 385.304026][ T28] audit: type=1326 audit(1751683469.187:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.409904][ T28] audit: type=1326 audit(1751683469.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.493135][ T28] audit: type=1326 audit(1751683469.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.563708][ T28] audit: type=1326 audit(1751683469.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.612812][ T28] audit: type=1326 audit(1751683469.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.661337][ T28] audit: type=1326 audit(1751683469.207:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.714868][ T28] audit: type=1326 audit(1751683469.467:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.765531][ T28] audit: type=1326 audit(1751683469.477:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 385.812274][ T28] audit: type=1326 audit(1751683469.487:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14db38e929 code=0x7ffc0000 [ 391.249473][ T8683] fuse: Invalid rootmode [ 393.623901][ T8699] sched: RT throttling activated [ 394.045956][ T8703] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.176366][ T8722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.806'. [ 396.193486][ T8727] overlayfs: failed to get inode (-116) [ 396.216123][ T8727] overlayfs: failed to get inode (-116) [ 398.408424][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 398.564449][ T8740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 398.860675][ T8750] ubi: mtd0 is already attached to ubi31 [ 400.157023][ T8757] fuse: Bad value for 'rootmode' [ 401.756659][ T8775] delete_channel: no stack [ 401.855679][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 403.833125][ T8796] fuse: Bad value for 'rootmode' [ 404.273946][ T8805] ubi: mtd0 is already attached to ubi31 [ 406.773734][ T8829] xt_TCPMSS: Only works on TCP SYN packets [ 406.790456][ T8829] overlayfs: missing 'lowerdir' [ 408.938339][ T8848] fuse: Bad value for 'rootmode' [ 410.478519][ T8868] ubi: mtd0 is already attached to ubi31 [ 413.881172][ T8882] delete_channel: no stack [ 417.588617][ T8913] ubi: mtd0 is already attached to ubi31 [ 419.753275][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 419.828284][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 419.936757][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 419.945704][ T8925] ceph: No mds server is up or the cluster is laggy [ 419.999811][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 430.276292][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.889'. [ 433.478900][ T9043] fuse: Unknown parameter 'user_i00000000000000000000' [ 433.881196][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 433.939348][ T28] audit: type=1800 audit(1751683519.637:34): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.898" name="bus" dev="overlay" ino=1149 res=0 errno=0 [ 435.264821][ T9057] veth0_to_team: left allmulticast mode [ 440.345331][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.524285][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.941893][ T9100] fuse: Bad value for 'fd' [ 442.649063][ T9112] delete_channel: no stack [ 444.488407][ T9132] veth0_to_team: left allmulticast mode [ 449.745009][ T9200] delete_channel: no stack [ 450.631332][ T9206] IPv6: Can't replace route, no match found [ 451.031266][ T9215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.943'. [ 451.223221][ T9225] netlink: 208 bytes leftover after parsing attributes in process `syz.3.945'. [ 452.646315][ T9232] delete_channel: no stack [ 453.876326][ T9247] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 455.774589][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.957'. [ 456.348363][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.421443][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.440279][ T9291] delete_channel: no stack [ 456.605252][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.811703][ T23] libceph: connect (1)[c::]:6789 error -101 [ 456.835256][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 456.995375][ T9302] ceph: No mds server is up or the cluster is laggy [ 457.157876][ T23] libceph: connect (1)[c::]:6789 error -101 [ 457.208556][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 459.915641][ T9333] delete_channel: no stack [ 460.237166][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 463.084262][ T9373] delete_channel: no stack [ 464.993386][ T9395] hpfs: Bad magic ... probably not HPFS [ 465.257358][ T9398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.986'. [ 466.896321][ T9421] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 467.038300][ T9423] netlink: 11 bytes leftover after parsing attributes in process `syz.2.992'. [ 467.107644][ T9423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.992'. [ 470.396962][ T9453] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 470.428087][ T9453] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 472.120233][ T9473] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 472.255386][ T9475] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1003'. [ 472.296594][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1003'. [ 475.138052][ T9502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 476.274410][ T9514] delete_channel: no stack [ 476.347881][ T9517] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 476.750712][ T9518] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1015'. [ 477.085696][ T9517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1015'. [ 479.427418][ T9551] hpfs: Bad magic ... probably not HPFS [ 479.496788][ T9552] delete_channel: no stack [ 482.708111][ T9588] delete_channel: no stack [ 484.317066][ T9607] Bluetooth: MGMT ver 1.22 [ 485.440961][ T9616] delete_channel: no stack [ 491.715033][ T9709] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 491.874918][ T9715] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 491.916221][ T9714] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1069'. [ 491.969237][ T9714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1069'. [ 492.927821][ T9721] fuse: Unknown parameter 'grou00000000000000000000' [ 495.254408][ T9738] overlayfs: failed to resolve './file1': -2 [ 495.551463][ T3545] libceph: connect (1)[c::]:6789 error -101 [ 495.627280][ T3545] libceph: mon0 (1)[c::]:6789 connect error [ 495.769882][ T9743] ceph: No mds server is up or the cluster is laggy [ 497.514054][ T9763] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 497.525885][ T9763] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 497.719803][ T9770] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 497.858055][ T9770] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1085'. [ 497.936504][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1085'. [ 498.030139][ T9774] overlayfs: failed to resolve './file1': -2 [ 499.699017][ T9782] ceph: No mds server is up or the cluster is laggy [ 499.706454][ T23] libceph: connect (1)[c::]:6789 error -101 [ 499.735062][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 501.342423][ T9795] hpfs: Bad magic ... probably not HPFS [ 501.752647][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.759456][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.959109][ T9833] IPv6: Can't replace route, no match found [ 504.590123][ T9837] overlayfs: failed to resolve './file1': -2 [ 507.305298][ T9870] fuse: Unknown parameter '0x0000000000000004' [ 510.468605][ T9900] fuse: Unknown parameter 'group_i00000000000000000000' [ 511.116980][ T9915] fuse: Unknown parameter '0x0000000000000004' [ 512.057587][ T9920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.143139][ T9920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.765785][ T9935] xt_TCPMSS: Only works on TCP SYN packets [ 512.797012][ T9935] overlayfs: missing 'lowerdir' [ 513.561039][ T9943] fuse: Unknown parameter 'group_i00000000000000000000' [ 515.553806][ T9974] fuse: Unknown parameter '0x0000000000000004' [ 515.764205][ T9972] xt_TCPMSS: Only works on TCP SYN packets [ 515.772522][ T9972] overlayfs: missing 'lowerdir' [ 516.019566][ T9981] fuse: Unknown parameter 'group_i00000000000000000000' [ 518.595099][T10014] xt_TCPMSS: Only works on TCP SYN packets [ 518.602970][T10014] overlayfs: missing 'lowerdir' [ 518.865204][T10019] fuse: Unknown parameter 'group_id00000000000000000000' [ 519.027976][T10022] IPv6: Can't replace route, no match found [ 520.081519][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.238506][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.295816][T10035] fuse: Unknown parameter '0x0000000000000004' [ 521.987934][T10054] fuse: Unknown parameter 'group_id00000000000000000000' [ 521.999692][T10055] xt_TCPMSS: Only works on TCP SYN packets [ 522.007318][T10055] overlayfs: missing 'lowerdir' [ 523.793788][T10077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1172'. [ 525.068861][T10100] fuse: Unknown parameter 'group_id00000000000000000000' [ 525.110898][T10102] fuse: Unknown parameter '0x0000000000000004' [ 525.475989][ T3545] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 525.685924][ T3545] usb 1-1: Using ep0 maxpacket: 16 [ 525.700697][ T3545] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 525.709572][ T3545] usb 1-1: config 0 has no interface number 0 [ 525.729113][ T3545] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 525.738815][ T3545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.747015][ T3545] usb 1-1: Product: syz [ 525.751920][ T3545] usb 1-1: Manufacturer: syz [ 525.758445][ T3545] usb 1-1: SerialNumber: syz [ 525.815776][ T3545] usb 1-1: config 0 descriptor?? [ 525.988249][T10113] xt_TCPMSS: Only works on TCP SYN packets [ 525.995906][T10113] overlayfs: missing 'lowerdir' [ 526.042616][ T3545] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 526.923245][ T3545] gspca_spca1528: reg_w err -71 [ 526.966338][ T3545] spca1528: probe of 1-1:0.1 failed with error -71 [ 527.030845][ T3545] usb 1-1: USB disconnect, device number 14 [ 528.465496][T10129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1184'. [ 529.283662][T10138] fuse: Bad value for 'user_id' [ 530.234805][T10153] xt_TCPMSS: Only works on TCP SYN packets [ 530.242375][T10153] overlayfs: missing 'lowerdir' [ 530.402285][T10157] fuse: Unknown parameter '0x0000000000000004' [ 532.413856][T10168] delete_channel: no stack [ 533.782872][T10182] fuse: Bad value for 'user_id' [ 535.084503][T10202] delete_channel: no stack [ 536.848261][T10215] fuse: Unknown parameter 'fd0x0000000000000004' [ 537.367935][T10217] fuse: Bad value for 'user_id' [ 538.977313][ T5769] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 539.535437][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 539.571060][ T5769] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.590711][ T5769] usb 4-1: config 0 has no interface number 0 [ 540.285257][ T5769] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 540.314881][T10249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1217'. [ 540.350317][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.396360][ T5769] usb 4-1: Product: syz [ 540.401563][ T5769] usb 4-1: Manufacturer: syz [ 540.406527][ T5769] usb 4-1: SerialNumber: syz [ 540.413615][ T5769] usb 4-1: config 0 descriptor?? [ 540.744238][ T5769] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 541.191850][T10260] fuse: Bad value for 'fd' [ 541.501850][ T5769] gspca_spca1528: reg_w err -71 [ 541.535902][ T5769] spca1528: probe of 4-1:0.1 failed with error -71 [ 541.554633][ T5769] usb 4-1: USB disconnect, device number 6 [ 542.219230][T10274] xt_TCPMSS: Only works on TCP SYN packets [ 542.232361][T10274] overlayfs: missing 'lowerdir' [ 544.178482][T10292] fuse: Bad value for 'fd' [ 544.566287][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1232'. [ 548.410427][T10331] fuse: Bad value for 'fd' [ 549.490392][T10344] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 549.636018][T10344] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 554.770488][T10391] xt_TCPMSS: Only works on TCP SYN packets [ 554.785600][T10391] overlayfs: missing 'lowerdir' [ 555.510494][T10398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.901567][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 558.012310][T10417] ceph: No mds server is up or the cluster is laggy [ 558.304345][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 560.129507][T10444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.191830][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.199692][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.529242][T10481] fuse: Bad value for 'fd' [ 564.777625][T10496] hpfs: Bad magic ... probably not HPFS [ 565.096322][T10499] IPv6: Can't replace route, no match found [ 565.991367][T10505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1289'. [ 566.503937][T10514] fuse: Invalid rootmode [ 567.132056][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 568.090077][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 568.389939][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.412647][ T8] usb 2-1: config 0 has no interface number 0 [ 568.517000][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 568.535962][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.544006][ T8] usb 2-1: Product: syz [ 568.591059][ T8] usb 2-1: Manufacturer: syz [ 568.605926][ T8] usb 2-1: SerialNumber: syz [ 568.624869][ T8] usb 2-1: config 0 descriptor?? [ 568.826516][T10541] IPv6: Can't replace route, no match found [ 569.032711][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 569.842569][T10548] fuse: Invalid rootmode [ 570.160723][ T8] gspca_spca1528: reg_w err -71 [ 570.201164][ T8] spca1528: probe of 2-1:0.1 failed with error -71 [ 570.222103][ T8] usb 2-1: USB disconnect, device number 5 [ 572.207740][T10565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1307'. [ 572.275603][T10577] IPv6: Can't replace route, no match found [ 572.494949][T10580] fuse: Invalid rootmode [ 575.274698][T10597] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 575.334396][T10614] IPv6: Can't replace route, no match found [ 575.470181][T10597] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 575.632349][T10618] fuse: Unknown parameter '00000000000000000000' [ 576.397785][T10626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1325'. [ 578.864057][T10650] fuse: Unknown parameter '00000000000000000000' [ 579.907162][T10666] xt_TCPMSS: Only works on TCP SYN packets [ 579.914579][T10666] overlayfs: missing 'lowerdir' [ 580.266560][T10664] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1337'. [ 582.781727][T10685] netlink: set zone limit has 8 unknown bytes [ 583.100885][T10686] fuse: Unknown parameter '00000000000000000000' [ 583.139723][T10685] hfsplus: unable to find HFS+ superblock [ 583.358285][T10688] IPv6: Can't replace route, no match found [ 587.234464][T10728] IPv6: Can't replace route, no match found [ 588.564341][T10746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1359'. [ 590.751576][T10764] IPv6: Can't replace route, no match found [ 592.013598][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 593.275372][T10784] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 593.651480][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1370'. [ 594.260262][T10810] IPv6: Can't replace route, no match found [ 594.941383][T10817] ceph: No mds server is up or the cluster is laggy [ 595.526185][ T23] libceph: connect (1)[c::]:6789 error -101 [ 595.532215][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 596.135283][T10835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1381'. [ 597.406451][T10847] fuse: Unknown parameter 'user00000000000000000000' [ 599.630237][T10879] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 599.648802][T10879] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 599.654882][T10881] fuse: Unknown parameter 'user_i00000000000000000000' [ 599.673434][T10878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1393'. [ 600.068715][T10889] hpfs: Bad magic ... probably not HPFS [ 600.119565][T10892] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 600.141993][T10892] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 602.373499][T10924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1403'. [ 602.459862][T10923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1405'. [ 603.343235][T10938] hpfs: Bad magic ... probably not HPFS [ 603.447025][T10943] fuse: Unknown parameter 'user_i00000000000000000000' [ 603.933795][T10952] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 603.943200][T10952] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 605.327259][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1416'. [ 605.689123][T10975] fuse: Unknown parameter 'user_id00000000000000000000' [ 606.293585][T10977] hpfs: Bad magic ... probably not HPFS [ 606.376433][T10984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1418'. [ 606.905935][ T5847] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 607.736012][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 607.764922][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 607.821385][ T5847] usb 1-1: config 0 has no interface number 0 [ 608.011101][ T5847] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 608.187058][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.209006][ T5847] usb 1-1: Product: syz [ 608.213187][ T5847] usb 1-1: Manufacturer: syz [ 608.265876][ T5847] usb 1-1: SerialNumber: syz [ 608.291180][ T5847] usb 1-1: config 0 descriptor?? [ 608.394842][T11009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'. [ 608.442699][T11011] fuse: Unknown parameter 'user_id00000000000000000000' [ 608.559310][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 608.576360][ T5847] gspca_spca1528: reg_w err -71 [ 608.669992][ T5847] spca1528: probe of 1-1:0.1 failed with error -71 [ 608.701163][ T5847] usb 1-1: USB disconnect, device number 15 [ 612.216994][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1440'. [ 612.612366][T11052] fuse: Bad value for 'fd' [ 613.666411][ T5827] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 614.055845][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 614.169225][ T5827] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.395009][ T5827] usb 1-1: config 0 has no interface number 0 [ 614.560139][ T5827] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 614.683889][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.683914][ T5827] usb 1-1: Product: syz [ 614.683928][ T5827] usb 1-1: Manufacturer: syz [ 614.683941][ T5827] usb 1-1: SerialNumber: syz [ 614.695864][ T5827] usb 1-1: config 0 descriptor?? [ 614.954123][ T5827] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 615.064607][ T5827] gspca_spca1528: reg_w err -71 [ 615.144271][ T5827] spca1528: probe of 1-1:0.1 failed with error -71 [ 615.266864][ T5827] usb 1-1: USB disconnect, device number 16 [ 617.293220][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1451'. [ 618.116627][T11097] fuse: Bad value for 'fd' [ 620.681615][T11135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1464'. [ 621.235267][T11137] fuse: Bad value for 'fd' [ 623.721742][T11165] fuse: Bad value for 'fd' [ 623.743152][T11164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1474'. [ 624.701704][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.713794][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.198658][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 629.866839][T11204] fuse: Unknown parameter '0x0000000000000003' [ 629.939833][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1486'. [ 631.487388][T11229] ubi: mtd0 is already attached to ubi31 [ 633.159409][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 633.341757][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 633.405150][T11235] ceph: No mds server is up or the cluster is laggy [ 633.489993][T11249] fuse: Unknown parameter '0x0000000000000003' [ 633.670609][T11254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.570536][T11279] fuse: Unknown parameter '0x0000000000000003' [ 643.538058][T11393] binder_alloc: 11392: binder_alloc_buf, no vma [ 645.003948][T11426] binder_alloc: 11423: binder_alloc_buf, no vma [ 646.186850][T11443] hpfs: Bad magic ... probably not HPFS [ 646.564898][T11447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 646.716754][T11447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 650.579030][T11492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 650.589815][T11492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 653.547908][T11523] veth0_to_team: left allmulticast mode [ 653.651283][T11528] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 653.652001][T11526] IPv6: Can't replace route, no match found [ 653.760716][T11528] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 655.520374][T11565] overlayfs: missing 'lowerdir' [ 655.639333][T11567] IPv6: Can't replace route, no match found [ 655.981444][T11570] ubi: mtd0 is already attached to ubi31 [ 657.595943][T11581] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 657.605315][T11581] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 659.609334][T11601] overlayfs: missing 'lowerdir' [ 659.952426][T11612] ubi: mtd0 is already attached to ubi31 [ 661.467649][T11624] xt_TCPMSS: Only works on TCP SYN packets [ 661.483721][T11624] overlayfs: missing 'lowerdir' [ 662.408699][T11636] overlayfs: missing 'lowerdir' [ 664.364371][T11665] hpfs: Bad magic ... probably not HPFS [ 664.865984][T11668] xt_TCPMSS: Only works on TCP SYN packets [ 664.874366][T11668] overlayfs: missing 'lowerdir' [ 667.374201][T11706] hpfs: Bad magic ... probably not HPFS [ 667.726283][T11707] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 668.069022][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 670.343999][T11719] xt_TCPMSS: Only works on TCP SYN packets [ 670.369062][T11719] overlayfs: missing 'lowerdir' [ 671.174169][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1646'. [ 672.555134][T11745] ======================================================= [ 672.555134][T11745] WARNING: The mand mount option has been deprecated and [ 672.555134][T11745] and is ignored by this kernel. Remove the mand [ 672.555134][T11745] option from the mount to silence this warning. [ 672.555134][T11745] ======================================================= [ 672.892600][T11752] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 673.150024][T11759] xt_TCPMSS: Only works on TCP SYN packets [ 673.165395][T11759] overlayfs: missing 'lowerdir' [ 675.414485][T11770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1660'. [ 677.003873][T11797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1668'. [ 678.098961][T11824] IPv6: Can't replace route, no match found [ 681.365971][T11868] IPv6: Can't replace route, no match found [ 682.581182][T11884] ubi: mtd0 is already attached to ubi31 [ 686.068842][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.166026][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.172743][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 686.355818][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 686.384296][ T5847] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.409411][ T5847] usb 4-1: config 0 has no interface number 0 [ 686.423430][ T5847] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 686.433021][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.453904][ T5847] usb 4-1: Product: syz [ 686.469390][ T5847] usb 4-1: Manufacturer: syz [ 686.481603][ T5847] usb 4-1: SerialNumber: syz [ 686.507591][ T5847] usb 4-1: config 0 descriptor?? [ 686.539061][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 687.007978][T11925] ubi: mtd0 is already attached to ubi31 [ 687.516157][ T5847] gspca_spca1528: reg_w err -71 [ 687.650559][ T5847] spca1528: probe of 4-1:0.1 failed with error -71 [ 687.790307][ T5847] usb 4-1: USB disconnect, device number 7 [ 688.189979][T11934] xt_TCPMSS: Only works on TCP SYN packets [ 688.201131][T11934] overlayfs: missing 'lowerdir' [ 689.422819][T11941] hpfs: Bad magic ... probably not HPFS [ 689.733278][T11955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1714'. [ 689.946259][T11958] ubi: mtd0 is already attached to ubi31 [ 690.705424][T11967] ubi: mtd0 is already attached to ubi31 [ 692.024256][T11981] hpfs: Bad magic ... probably not HPFS [ 692.444823][T11988] lo speed is unknown, defaulting to 1000 [ 692.451382][T11988] lo speed is unknown, defaulting to 1000 [ 692.462787][T11988] lo speed is unknown, defaulting to 1000 [ 692.481581][T11988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 692.506848][T11988] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 692.729088][T11988] lo speed is unknown, defaulting to 1000 [ 692.816848][T11988] lo speed is unknown, defaulting to 1000 [ 692.824027][T11988] lo speed is unknown, defaulting to 1000 [ 692.831284][T11988] lo speed is unknown, defaulting to 1000 [ 693.975944][ T28] audit: type=1326 audit(1751683779.737:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700c98e929 code=0x7fc00000 [ 693.998229][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.041746][ T28] audit: type=1326 audit(1751683779.737:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f700c98e929 code=0x7fc00000 [ 694.074975][ T28] audit: type=1326 audit(1751683779.737:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700c98e929 code=0x7fc00000 [ 694.104312][ T28] audit: type=1326 audit(1751683779.737:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700c98e929 code=0x7fc00000 [ 694.278698][T11998] ubi: mtd0 is already attached to ubi31 [ 694.284825][ T28] audit: type=1326 audit(1751683779.737:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.3.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700c98e929 code=0x7fc00000 [ 698.275845][T12038] ubi: mtd0 is already attached to ubi31 [ 701.443475][T12061] lo speed is unknown, defaulting to 1000 [ 704.693874][T12103] IPv6: Can't replace route, no match found [ 704.705513][ T23] libceph: connect (1)[c::]:6789 error -101 [ 704.718148][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 704.905254][T12102] ceph: No mds server is up or the cluster is laggy [ 707.817470][T11995] libceph: connect (1)[c::]:6789 error -101 [ 707.834122][T11995] libceph: mon0 (1)[c::]:6789 connect error [ 708.018780][T12144] ceph: No mds server is up or the cluster is laggy [ 711.666594][T12180] IPv6: Can't replace route, no match found [ 716.300475][T11995] libceph: connect (1)[c::]:6789 error -101 [ 716.325155][T11995] libceph: mon0 (1)[c::]:6789 connect error [ 716.386729][T12223] hpfs: Bad magic ... probably not HPFS [ 716.474637][T12217] ceph: No mds server is up or the cluster is laggy [ 717.654172][T12243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.516355][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 720.630298][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 720.773130][T12262] ceph: No mds server is up or the cluster is laggy [ 721.902704][T12288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.123682][T12290] hpfs: Bad magic ... probably not HPFS [ 723.025929][T12305] xt_TCPMSS: Only works on TCP SYN packets [ 723.033430][T12305] overlayfs: missing 'lowerdir' [ 724.064478][ T5769] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 724.306154][ T5769] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 724.320601][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.333259][ T5769] usb 3-1: config 0 descriptor?? [ 724.522308][T12317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1816'. [ 725.218842][T12332] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 725.218842][T12332] The task syz.2.1812 (12332) triggered the difference, watch for misbehavior. [ 725.536837][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.592186][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.668687][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.689710][T12339] hpfs: Bad magic ... probably not HPFS [ 725.814109][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.441903][T12346] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 726.652525][T12348] IPv6: Can't replace route, no match found [ 726.882580][ T5769] pegasus: probe of 3-1:0.0 failed with error -110 [ 727.215736][ T5769] usb 3-1: USB disconnect, device number 7 [ 729.464591][T12380] 9pnet_virtio: no channels available for device 127.0.0.1 [ 729.847531][T12374] hpfs: Bad magic ... probably not HPFS [ 729.956546][T12384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.256314][T12405] IPv6: Can't replace route, no match found [ 731.512349][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 735.024609][T12432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.162247][T12435] binder: 12434:12435 ioctl 4018620d 0 returned -22 [ 737.007952][T12457] syzkaller0: entered promiscuous mode [ 737.013674][T12457] syzkaller0: entered allmulticast mode [ 737.358465][T12470] binder: 12469:12470 ioctl 4018620d 0 returned -22 [ 739.456246][T12471] IPv6: Can't replace route, no match found [ 740.197693][T12486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.223821][T12482] hpfs: Bad magic ... probably not HPFS [ 740.593019][T12495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1865'. [ 740.908219][T12502] binder: BINDER_SET_CONTEXT_MGR already set [ 740.947327][T12502] binder: 12501:12502 ioctl 4018620d 2000000002c0 returned -16 [ 743.575532][T12526] IPv6: Can't replace route, no match found [ 744.039832][T12535] netlink: 'syz.0.1875': attribute type 4 has an invalid length. [ 744.065746][T12535] netlink: 'syz.0.1875': attribute type 2 has an invalid length. [ 744.294475][ T8] libceph: connect (1)[c::]:6789 error -101 [ 744.372043][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 744.490522][T12538] ceph: No mds server is up or the cluster is laggy [ 745.083640][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 747.576516][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.582938][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.630711][T12596] xt_TCPMSS: Only works on TCP SYN packets [ 748.641920][T12596] overlayfs: missing 'lowerdir' [ 753.180797][ T3545] IPVS: starting estimator thread 0... [ 753.333711][T12636] IPVS: using max 35 ests per chain, 84000 per kthread [ 754.433069][T12649] IPv6: Can't replace route, no match found [ 754.561438][T12650] binder: 12647:12650 ioctl c0306201 0 returned -14 [ 754.994389][T12656] ubi: mtd0 is already attached to ubi31 [ 756.154038][T12669] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1910'. [ 759.113699][T12702] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1920'. [ 762.059740][T12727] IPv6: Can't replace route, no match found [ 764.042612][T12751] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1930'. [ 764.092655][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 766.239972][T12773] IPv6: Can't replace route, no match found [ 769.548465][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 770.872400][T12816] IPv6: Can't replace route, no match found [ 774.312397][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 779.538497][T12899] ubi: mtd0 is already attached to ubi31 [ 786.756670][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.865770][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.998176][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.071066][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.674451][T12976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.689126][T12976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.708177][T12976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.719867][T12976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.730964][T12976] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 788.741129][T12976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.621883][T12974] syz.3.1989[12974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 789.681747][T12974] kvm: kvm [12973]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xad84 [ 789.766068][T12974] kvm: kvm [12973]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xad84 [ 789.795165][T12972] lo speed is unknown, defaulting to 1000 [ 790.786090][ T5788] Bluetooth: hci3: command tx timeout [ 791.268936][T13006] 9pnet_virtio: no channels available for device 127.0.0.1 [ 791.967660][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.270791][T13022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1998'. [ 792.535112][T12972] chnl_net:caif_netlink_parms(): no params data found [ 792.667032][ T8228] libceph: connect (1)[c::]:6789 error -101 [ 792.673583][ T8228] libceph: mon0 (1)[c::]:6789 connect error [ 792.790229][T13031] ceph: No mds server is up or the cluster is laggy [ 792.873649][ T5788] Bluetooth: hci3: command tx timeout [ 792.948103][ T8228] libceph: connect (1)[c::]:6789 error -101 [ 793.420958][ T8228] libceph: mon0 (1)[c::]:6789 connect error [ 793.835715][ T48] hsr_slave_0: left promiscuous mode [ 793.871720][ T48] hsr_slave_1: left promiscuous mode [ 793.893258][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.936010][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.008465][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.016841][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.239208][ T48] veth1_macvtap: left promiscuous mode [ 794.262792][ T48] veth0_macvtap: left promiscuous mode [ 794.278599][ T48] veth1_vlan: left promiscuous mode [ 794.299186][ T48] veth0_vlan: left promiscuous mode [ 794.945917][ T5788] Bluetooth: hci3: command tx timeout [ 795.258249][ T48] team0 (unregistering): Port device team_slave_1 removed [ 795.305514][ T48] team0 (unregistering): Port device team_slave_0 removed [ 795.356647][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.403353][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.856288][ T48] bond0 (unregistering): Released all slaves [ 797.025700][ T5788] Bluetooth: hci3: command tx timeout [ 797.970657][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 798.063678][T13084] 9pnet_virtio: no channels available for device 127.0.0.1 [ 798.324309][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.362137][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.450385][T12972] bridge_slave_0: entered allmulticast mode [ 798.510211][T12972] bridge_slave_0: entered promiscuous mode [ 798.764451][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.881668][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.890301][T12972] bridge_slave_1: entered allmulticast mode [ 798.916134][T12972] bridge_slave_1: entered promiscuous mode [ 799.070468][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.116109][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.213184][ T23] libceph: connect (1)[c::]:6789 error -101 [ 799.270145][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 799.309248][T13094] ceph: No mds server is up or the cluster is laggy [ 800.163093][T12972] team0: Port device team_slave_0 added [ 800.205942][T12972] team0: Port device team_slave_1 added [ 800.224952][T11995] IPVS: starting estimator thread 0... [ 800.340406][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.351543][T13114] IPVS: using max 19 ests per chain, 45600 per kthread [ 800.361883][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.712650][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.926274][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.933270][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.936407][T13105] delete_channel: no stack [ 801.037975][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.484094][T12972] hsr_slave_0: entered promiscuous mode [ 802.619454][T12972] hsr_slave_1: entered promiscuous mode [ 802.644240][T12972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.653169][T12972] Cannot create hsr debugfs directory [ 804.304450][T13151] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 805.184151][T12972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 805.215982][T12972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 805.230249][T12972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.243279][T12972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 805.886136][T12972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.945970][T13168] delete_channel: no stack [ 805.973663][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.011392][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.018550][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.163443][ T2105] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.170753][ T2105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.448260][T13196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.793104][T12972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.533498][T12972] veth0_vlan: entered promiscuous mode [ 808.947876][T12972] veth1_vlan: entered promiscuous mode [ 808.962552][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.969550][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.225275][T12972] veth0_macvtap: entered promiscuous mode [ 809.301757][T13252] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2039'. [ 809.347917][T12972] veth1_macvtap: entered promiscuous mode [ 809.419595][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.464975][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.479313][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.507067][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.525639][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.539541][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.557637][T12972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.056409][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.107119][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.145280][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.189585][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.216088][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.227639][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 810.270260][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.299755][T12972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.455900][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 810.482702][T12972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.518318][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 810.606445][T12972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.644911][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.654111][T12972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.663778][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 810.663814][ T8] usb 4-1: config 1 has no interface number 1 [ 810.673086][T12972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.937604][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 811.013439][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.052771][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.054450][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.074969][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.078846][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.092109][ T8] usb 4-1: Product: syz [ 811.111313][ T8] usb 4-1: Manufacturer: syz [ 811.133679][ T8] usb 4-1: SerialNumber: syz [ 811.227574][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.269263][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.527266][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.542376][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.676357][ T8] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 811.684977][ T8] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 811.692938][ T8] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 811.741933][ T8] usb 4-1: USB disconnect, device number 8 [ 811.856770][T12857] udevd[12857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.955231][T13296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2048'. [ 813.598724][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 813.756157][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 813.846972][T13315] ceph: No mds server is up or the cluster is laggy [ 814.397449][T13331] veth0_to_team: entered allmulticast mode [ 817.688018][T13369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.113960][T13385] veth0_to_team: entered promiscuous mode [ 819.119931][T13385] veth0_to_team: entered allmulticast mode [ 819.445462][ T5827] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 819.645876][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 819.653107][T13403] IPv6: Can't replace route, no match found [ 819.712333][ T5827] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 819.842526][ T5827] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 819.960706][ T5827] usb 4-1: can't read configurations, error -61 [ 820.277590][ T5827] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 820.545696][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 820.556369][ T5827] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 820.561934][ T5827] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 820.561971][ T5827] usb 4-1: can't read configurations, error -61 [ 820.563143][ T5827] usb usb4-port1: attempt power cycle [ 821.017005][ T5827] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 821.088078][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 821.110393][ T5827] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 821.164331][ T5827] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 821.182507][ T5827] usb 4-1: can't read configurations, error -61 [ 821.365663][ T5827] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 821.481275][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 821.498134][ T5827] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 821.525735][ T5827] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 821.533378][ T5827] usb 4-1: can't read configurations, error -61 [ 821.596257][ T5827] usb usb4-port1: unable to enumerate USB device [ 822.577184][T13438] veth0_to_team: entered allmulticast mode [ 823.461156][T13440] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2078'. [ 823.471415][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2078'. [ 824.985787][T13469] 9pnet_virtio: no channels available for device 127.0.0.1 [ 825.418153][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 825.665806][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 825.716121][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 825.752964][ T27] usb 5-1: no configurations [ 825.786954][ T27] usb 5-1: can't read configurations, error -22 [ 826.016019][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 826.271451][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 826.402547][ T27] usb 5-1: no configurations [ 826.441022][ T27] usb 5-1: can't read configurations, error -22 [ 826.529838][ T27] usb usb5-port1: attempt power cycle [ 827.027987][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 827.100009][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 827.108867][ T27] usb 5-1: no configurations [ 827.113504][ T27] usb 5-1: can't read configurations, error -22 [ 827.825764][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 828.019233][ T27] usb 5-1: device descriptor read/8, error -71 [ 828.159720][ T27] usb usb5-port1: unable to enumerate USB device [ 829.465251][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 832.007996][ T3545] libceph: connect (1)[c::]:6789 error -101 [ 832.036149][T13261] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 832.093529][ T3545] libceph: mon0 (1)[c::]:6789 connect error [ 832.108927][T13536] ceph: No mds server is up or the cluster is laggy [ 832.456158][T13261] usb 5-1: Using ep0 maxpacket: 16 [ 832.470020][T13261] usb 5-1: no configurations [ 832.474832][T13261] usb 5-1: can't read configurations, error -22 [ 832.725975][T13261] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 832.915634][T13261] usb 5-1: Using ep0 maxpacket: 16 [ 833.084931][T13261] usb 5-1: no configurations [ 833.302870][T13261] usb 5-1: can't read configurations, error -22 [ 833.328101][T13261] usb usb5-port1: attempt power cycle [ 834.045811][T13261] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 834.495662][T13261] usb 5-1: device descriptor read/8, error -71 [ 836.026384][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 836.047139][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 836.141974][T13584] ceph: No mds server is up or the cluster is laggy [ 837.237608][T13597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2113'. [ 838.386826][ T8228] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 838.595883][ T8228] usb 4-1: Using ep0 maxpacket: 16 [ 838.630967][ T8228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.642579][ T8228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 838.665876][ T8228] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 838.675724][ T8228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.683854][ T8228] usb 4-1: Product: syz [ 838.689006][ T8228] usb 4-1: Manufacturer: syz [ 838.694325][ T8228] usb 4-1: SerialNumber: syz [ 838.722173][ T8228] usb 4-1: config 0 descriptor?? [ 838.990168][ T8228] usb 4-1: USB disconnect, device number 13 [ 839.594207][T13632] 9pnet_virtio: no channels available for device 127.0.0.1 [ 841.639166][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 847.452307][T13696] sctp: failed to load transform for md5: -2 [ 848.811368][T13723] 9pnet_virtio: no channels available for device 127.0.0.1 [ 851.706216][T13740] delete_channel: no stack [ 853.833914][ T3545] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 854.585216][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 854.636326][T13765] ceph: No mds server is up or the cluster is laggy [ 854.707308][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 854.958454][ T3545] usb 5-1: Using ep0 maxpacket: 16 [ 854.965478][ T3545] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.990904][ T3545] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 855.031406][ T3545] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 855.059227][ T3545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.113898][ T3545] usb 5-1: Product: syz [ 855.118773][ T3545] usb 5-1: Manufacturer: syz [ 855.128831][ T3545] usb 5-1: SerialNumber: syz [ 855.147568][ T3545] usb 5-1: config 0 descriptor?? [ 855.418866][ T3545] usb 5-1: USB disconnect, device number 10 [ 857.807124][T13800] delete_channel: no stack [ 858.725963][T13811] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2156'. [ 859.857699][T13824] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2160'. [ 859.869907][T13824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2160'. [ 860.935129][T13842] delete_channel: no stack [ 861.822893][T13854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2167'. [ 865.378463][T13880] delete_channel: no stack [ 866.287368][T13891] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2173'. [ 866.297452][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2173'. [ 868.349638][T13915] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2180'. [ 869.247365][T13933] delete_channel: no stack [ 870.198354][T13521] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 870.620161][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.626769][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.745916][T13521] usb 5-1: Using ep0 maxpacket: 16 [ 870.808623][T13521] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.861669][T13521] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 870.903617][T13521] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 870.981562][T13521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.089813][T13521] usb 5-1: Product: syz [ 871.146950][T13521] usb 5-1: Manufacturer: syz [ 871.209014][T13521] usb 5-1: SerialNumber: syz [ 871.361586][T13521] usb 5-1: config 0 descriptor?? [ 871.951640][ T5847] usb 5-1: USB disconnect, device number 11 [ 872.627676][T13970] veth0_to_team: left allmulticast mode [ 872.705149][T13966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2192'. [ 875.605837][ T5847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 876.251111][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 876.391247][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.407199][ T5847] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 876.464865][ T5847] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 876.474920][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.488199][ T5847] usb 1-1: Product: syz [ 876.492383][ T5847] usb 1-1: Manufacturer: syz [ 877.367853][T14027] 9pnet_virtio: no channels available for device 127.0.0.1 [ 877.540837][ T5847] usb 1-1: SerialNumber: syz [ 877.584051][ T5847] usb 1-1: config 0 descriptor?? [ 877.821633][ T5847] usb 1-1: can't set config #0, error -71 [ 878.537419][ T5847] usb 1-1: USB disconnect, device number 17 [ 879.029689][T14050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2210'. [ 882.105773][T13261] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 882.285636][T13261] usb 4-1: Using ep0 maxpacket: 16 [ 882.295438][T13261] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 882.308470][T13261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.327985][T13261] usb 4-1: Product: syz [ 882.332289][T13261] usb 4-1: Manufacturer: syz [ 882.341237][T14097] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 882.341567][T13261] usb 4-1: SerialNumber: syz [ 882.361830][T13261] usb 4-1: config 0 descriptor?? [ 882.361859][T14097] netlink: 'syz.0.2220': attribute type 2 has an invalid length. [ 882.932649][T13261] usb 4-1: USB disconnect, device number 14 [ 888.177086][T14146] loop6: detected capacity change from 0 to 7 [ 888.207615][T14146] Dev loop6: unable to read RDB block 7 [ 888.213672][T14146] loop6: AHDI p1 p2 p3 [ 888.218129][T14146] loop6: partition table partially beyond EOD, truncated [ 888.229973][T14146] loop6: p1 start 1601398130 is beyond EOD, truncated [ 888.236998][T14146] loop6: p2 start 1702059890 is beyond EOD, truncated [ 890.715470][ T3545] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 890.976292][ T3545] usb 1-1: Using ep0 maxpacket: 16 [ 891.640485][ T3545] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 891.650219][ T3545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.658582][ T3545] usb 1-1: Product: syz [ 891.662759][ T3545] usb 1-1: Manufacturer: syz [ 891.684120][ T3545] usb 1-1: SerialNumber: syz [ 891.851216][ T3545] usb 1-1: config 0 descriptor?? [ 891.894795][T14179] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2239'. [ 891.926339][T14179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2239'. [ 892.158571][ T3545] usb 1-1: USB disconnect, device number 18 [ 893.233816][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 894.960104][T14194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2244'. [ 894.970415][T14194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2244'. [ 895.207337][T14203] input: syz0 as /devices/virtual/input/input21 [ 897.126649][T14189] delete_channel: no stack [ 900.705708][T13521] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 901.235714][T13521] usb 5-1: Using ep0 maxpacket: 16 [ 901.249787][T13521] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 901.259786][T13521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.268041][T13521] usb 5-1: Product: syz [ 901.809419][T13521] usb 5-1: Manufacturer: syz [ 901.817303][T13521] usb 5-1: SerialNumber: syz [ 901.944107][T13521] usb 5-1: config 0 descriptor?? [ 902.375673][T13521] usb 5-1: USB disconnect, device number 12 [ 911.224135][T14324] veth0_to_team: left allmulticast mode [ 911.378537][T14329] ax25_connect(): syz.4.2285 uses autobind, please contact jreuter@yaina.de [ 913.538628][T12976] Bluetooth: hci3: command 0x0406 tx timeout [ 914.615652][T13261] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 915.205588][T13261] usb 1-1: Using ep0 maxpacket: 32 [ 915.237042][T13261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.256512][T13261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.266784][T13261] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 915.279358][T13261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.300153][T13261] usb 1-1: config 0 descriptor?? [ 916.528024][T13261] hid-u2fzero 0003:10C4:8ACF.0009: unknown main item tag 0x6 [ 916.557472][T13261] hid-u2fzero 0003:10C4:8ACF.0009: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 916.566179][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.612893][T13261] hid-u2fzero 0003:10C4:8ACF.0009: U2F Zero LED initialised [ 916.631286][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.643119][T13261] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 916.654901][T13261] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 916.663344][T13261] CPU: 0 PID: 13261 Comm: kworker/0:1 Not tainted 6.6.95-syzkaller #0 [ 916.671498][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 916.681583][T13261] Workqueue: usb_hub_wq hub_event [ 916.686651][T13261] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 916.692365][T13261] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 916.711967][T13261] RSP: 0018:ffffc90003a16780 EFLAGS: 00010202 [ 916.718025][T13261] RAX: 0000000000000015 RBX: ffff88802394a030 RCX: dffffc0000000000 [ 916.725991][T13261] RDX: 0000000000000000 RSI: ffffc90003a168a0 RDI: ffff88805e165968 [ 916.733952][T13261] RBP: ffffc90003a16998 R08: 0000000000000000 R09: 0000000000000000 [ 916.741921][T13261] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802394a300 [ 916.749885][T13261] R13: 1ffff92000742cf8 R14: ffff88802394a418 R15: 00000000000000a8 [ 916.757854][T13261] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 916.766776][T13261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.773349][T13261] CR2: 00007fae3e771d60 CR3: 000000002e9c8000 CR4: 00000000003506f0 [ 916.781314][T13261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 916.789277][T13261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 916.797237][T13261] Call Trace: [ 916.800506][T13261] [ 916.803433][T13261] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 916.808977][T13261] ? add_early_randomness+0x1e/0x1a0 [ 916.814257][T13261] ? mutex_unlock+0x10/0x10 [ 916.818777][T13261] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 916.824310][T13261] add_early_randomness+0x7a/0x1a0 [ 916.829421][T13261] hwrng_register+0x3db/0x4a0 [ 916.834086][T13261] devm_hwrng_register+0x47/0xb0 [ 916.839013][T13261] u2fzero_probe+0x348/0x460 [ 916.843623][T13261] hid_device_probe+0x293/0x5b0 [ 916.848475][T13261] ? hid_uevent+0x350/0x350 [ 916.852969][T13261] really_probe+0x25b/0xb40 [ 916.857470][T13261] ? pm_runtime_barrier+0x14b/0x1c0 [ 916.862670][T13261] __driver_probe_device+0x18c/0x330 [ 916.868039][T13261] driver_probe_device+0x4f/0x420 [ 916.873057][T13261] __device_attach_driver+0x2ca/0x520 [ 916.878424][T13261] bus_for_each_drv+0x24b/0x2d0 [ 916.883267][T13261] ? coredump_store+0x90/0x90 [ 916.887934][T13261] ? bus_find_device+0x320/0x320 [ 916.892867][T13261] __device_attach+0x2b5/0x400 [ 916.897888][T13261] ? device_attach+0x20/0x20 [ 916.902476][T13261] ? do_raw_spin_unlock+0x121/0x230 [ 916.907845][T13261] bus_probe_device+0x180/0x260 [ 916.912690][T13261] device_add+0x85b/0xc20 [ 916.917015][T13261] hid_add_device+0x38d/0x530 [ 916.921694][T13261] usbhid_probe+0xe02/0x1220 [ 916.926277][T13261] usb_probe_interface+0x5a4/0xb00 [ 916.931383][T13261] ? usb_register_driver+0x3d0/0x3d0 [ 916.936682][T13261] really_probe+0x25b/0xb40 [ 916.941179][T13261] ? pm_runtime_barrier+0x14b/0x1c0 [ 916.946369][T13261] __driver_probe_device+0x18c/0x330 [ 916.951655][T13261] driver_probe_device+0x4f/0x420 [ 916.956674][T13261] __device_attach_driver+0x2ca/0x520 [ 916.962052][T13261] bus_for_each_drv+0x24b/0x2d0 [ 916.966903][T13261] ? coredump_store+0x90/0x90 [ 916.971578][T13261] ? bus_find_device+0x320/0x320 [ 916.976508][T13261] __device_attach+0x2b5/0x400 [ 916.981266][T13261] ? device_attach+0x20/0x20 [ 916.985851][T13261] ? __kmem_cache_free+0xba/0x1f0 [ 916.990871][T13261] ? do_raw_spin_unlock+0x121/0x230 [ 916.996125][T13261] bus_probe_device+0x180/0x260 [ 917.000978][T13261] device_add+0x85b/0xc20 [ 917.005334][T13261] usb_set_configuration+0x1a79/0x20c0 [ 917.010802][T13261] usb_generic_driver_probe+0x8d/0x150 [ 917.016323][T13261] usb_probe_device+0x13d/0x280 [ 917.021171][T13261] ? usb_register_device_driver+0x230/0x230 [ 917.027051][T13261] really_probe+0x25b/0xb40 [ 917.031566][T13261] ? pm_runtime_barrier+0x14b/0x1c0 [ 917.036770][T13261] __driver_probe_device+0x18c/0x330 [ 917.042062][T13261] driver_probe_device+0x4f/0x420 [ 917.047089][T13261] __device_attach_driver+0x2ca/0x520 [ 917.052495][T13261] bus_for_each_drv+0x24b/0x2d0 [ 917.057345][T13261] ? coredump_store+0x90/0x90 [ 917.062038][T13261] ? bus_find_device+0x320/0x320 [ 917.066966][T13261] __device_attach+0x2b5/0x400 [ 917.071723][T13261] ? device_attach+0x20/0x20 [ 917.076304][T13261] ? __kmem_cache_free+0xba/0x1f0 [ 917.081320][T13261] ? do_raw_spin_unlock+0x121/0x230 [ 917.086512][T13261] bus_probe_device+0x180/0x260 [ 917.091353][T13261] device_add+0x85b/0xc20 [ 917.095672][T13261] usb_new_device+0xa31/0x1630 [ 917.100429][T13261] ? usb_disconnect+0x8a0/0x8a0 [ 917.105285][T13261] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.110486][T13261] ? lockdep_hardirqs_on+0x98/0x150 [ 917.115675][T13261] hub_event+0x2957/0x49c0 [ 917.120099][T13261] ? led_work+0x720/0x720 [ 917.124445][T13261] ? read_lock_is_recursive+0x20/0x20 [ 917.129820][T13261] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.135021][T13261] ? process_scheduled_works+0x957/0x15b0 [ 917.140733][T13261] ? process_scheduled_works+0x957/0x15b0 [ 917.146449][T13261] process_scheduled_works+0xa45/0x15b0 [ 917.151994][T13261] ? assign_work+0x400/0x400 [ 917.156574][T13261] ? assign_work+0x39e/0x400 [ 917.161154][T13261] worker_thread+0xa55/0xfc0 [ 917.165733][T13261] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 917.171613][T13261] ? _raw_spin_unlock+0x40/0x40 [ 917.176450][T13261] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 917.182336][T13261] kthread+0x2fa/0x390 [ 917.186392][T13261] ? pr_cont_work+0x560/0x560 [ 917.191057][T13261] ? kthread_blkcg+0xd0/0xd0 [ 917.195631][T13261] ret_from_fork+0x48/0x80 [ 917.200049][T13261] ? kthread_blkcg+0xd0/0xd0 [ 917.204624][T13261] ret_from_fork_asm+0x11/0x20 [ 917.209387][T13261] [ 917.212398][T13261] Modules linked in: [ 917.578090][T14361] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 917.739095][T13261] ---[ end trace 0000000000000000 ]--- [ 917.766854][T13261] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 917.773314][T13261] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 917.820313][T13261] RSP: 0018:ffffc90003a16780 EFLAGS: 00010202 [ 917.829216][T13261] RAX: 0000000000000015 RBX: ffff88802394a030 RCX: dffffc0000000000 [ 917.839203][T13261] RDX: 0000000000000000 RSI: ffffc90003a168a0 RDI: ffff88805e165968 [ 917.848604][T13261] RBP: ffffc90003a16998 R08: 0000000000000000 R09: 0000000000000000 [ 917.861330][T13261] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802394a300 [ 917.869444][T13261] R13: 1ffff92000742cf8 R14: ffff88802394a418 R15: 00000000000000a8 [ 917.880527][T13261] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 917.890646][T13261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.897300][T13261] CR2: 00007f2ff5f9e1e8 CR3: 0000000069d53000 CR4: 00000000003506f0 [ 917.905325][T13261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 917.913396][T13261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 917.921611][T13261] Kernel panic - not syncing: Fatal exception [ 917.927964][T13261] Kernel Offset: disabled [ 917.932276][T13261] Rebooting in 86400 seconds..