last executing test programs: 19.201411534s ago: executing program 0 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) 11.104588146s ago: executing program 0 (id=1345): mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0xc8}}, 0x40000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='nfs\x00', 0x47ef70bc3f47aed4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x12) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0xbcaca8d8eab778ad, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) accept$alg(r5, 0x0, 0x0) 10.330630716s ago: executing program 2 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.250700471s ago: executing program 1 (id=1349): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) writev(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 8.746725779s ago: executing program 0 (id=1350): uname(&(0x7f0000000000)=""/73) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x448000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`', @ANYRES32=0x0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="0400460005003400fe000000080026008a090000300051802800"], 0x60}}, 0x40080) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, &(0x7f00000002c0)) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x1008000, &(0x7f00000003c0)=ANY=[@ANYRES16=r7]) 8.705077029s ago: executing program 3 (id=1351): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x7780, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 8.194832636s ago: executing program 2 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x803, 0x0) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x40080) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r2, 0xffffffffffffffff, 0x0) 7.87833047s ago: executing program 1 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) 5.113840388s ago: executing program 3 (id=1354): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x42303159, 0x2, @stepwise={0xa000, 0x5, 0x8, 0x6, 0x7, 0xe2a1}}) 5.02326843s ago: executing program 0 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fanotify_init(0x4, 0x101000) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f00000023c0)='./file0\x00', 0x40, 0x86) fanotify_mark(r4, 0x641, 0x1019, r6, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x0) fanotify_init(0xf00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYRES8=r5]) 4.842702533s ago: executing program 3 (id=1356): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3.966140565s ago: executing program 0 (id=1357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r12, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 3.893109006s ago: executing program 2 (id=1358): mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0xc8}}, 0x40000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='nfs\x00', 0x47ef70bc3f47aed4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x12) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0xbcaca8d8eab778ad, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) accept$alg(r5, 0x0, 0x0) 3.61486934s ago: executing program 3 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2.998737488s ago: executing program 1 (id=1360): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0xc801) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="61030602061bf3a2ff0ca57b2b117ac5fe02"], 0x12) 2.374908467s ago: executing program 2 (id=1361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x14, r1, 0x8083540e3272eb67, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x40840) 1.770433075s ago: executing program 3 (id=1362): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240), 0x4) 1.654688606s ago: executing program 0 (id=1363): r0 = socket(0x10, 0x80003, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x24, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x20808}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x6, "0de7353d"}]}}, 0x0}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x43, 0x24, 0x21, 0x8, 0x13d8, 0x1, 0x3062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x97, 0x9d}}]}}]}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x110, r0, 0xf8a7c000) r6 = socket$rds(0x15, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x264, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x80031, 0xffffffffffffffff, 0x80000000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='devlink_hwerr\x00', r7, 0x0, 0xfffffffdfffffffd}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.654384167s ago: executing program 2 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) open$dir(0x0, 0x40, 0x86) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x4000000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYRES8=r4]) 1.576551478s ago: executing program 3 (id=1365): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffffff], 0x0, 0x0, {0x800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f00000004c0)) chdir(&(0x7f0000000480)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 1.541504698s ago: executing program 1 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fanotify_init(0x4, 0x101000) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f00000023c0)='./file0\x00', 0x40, 0x86) fanotify_mark(r4, 0x641, 0x1019, r6, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x0) fanotify_init(0xf00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, 0x0) 589.825631ms ago: executing program 1 (id=1367): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 575.231972ms ago: executing program 2 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0xa0) 0s ago: executing program 1 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 82.167305][ T5782] cgroup: Unknown subsys name 'net' [ 82.301662][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.987720][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.620056][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.628434][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.636815][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.645741][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.653620][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.661053][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.683948][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.692836][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.703463][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.712215][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.720103][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.732087][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.756989][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.765377][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.773071][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.782450][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.792270][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.799788][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.812767][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.825717][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.834069][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.847919][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.856045][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.865436][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.299178][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 86.370378][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 86.519949][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 86.531624][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539033][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.546959][ T5792] bridge_slave_0: entered allmulticast mode [ 86.555330][ T5792] bridge_slave_0: entered promiscuous mode [ 86.626071][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.633454][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.640633][ T5792] bridge_slave_1: entered allmulticast mode [ 86.648459][ T5792] bridge_slave_1: entered promiscuous mode [ 86.715339][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.722870][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.730131][ T5796] bridge_slave_0: entered allmulticast mode [ 86.737720][ T5796] bridge_slave_0: entered promiscuous mode [ 86.766257][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.775965][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.784682][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.794490][ T5796] bridge_slave_1: entered allmulticast mode [ 86.803143][ T5796] bridge_slave_1: entered promiscuous mode [ 86.830560][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.912263][ T5792] team0: Port device team_slave_0 added [ 86.921156][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.934197][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.944907][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.952489][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.959661][ T5804] bridge_slave_0: entered allmulticast mode [ 86.966789][ T5804] bridge_slave_0: entered promiscuous mode [ 86.974423][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 86.987198][ T5792] team0: Port device team_slave_1 added [ 87.016967][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.032133][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.039393][ T5804] bridge_slave_1: entered allmulticast mode [ 87.051139][ T5804] bridge_slave_1: entered promiscuous mode [ 87.192323][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.199329][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.227159][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.248594][ T5796] team0: Port device team_slave_0 added [ 87.389113][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.405789][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.414289][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.456833][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.481682][ T5796] team0: Port device team_slave_1 added [ 87.498677][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.540847][ T5804] team0: Port device team_slave_0 added [ 87.589814][ T5804] team0: Port device team_slave_1 added [ 87.637556][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.645261][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.652938][ T5800] bridge_slave_0: entered allmulticast mode [ 87.659921][ T5800] bridge_slave_0: entered promiscuous mode [ 87.680744][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.688137][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.714856][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.739958][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748239][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.748265][ T50] Bluetooth: hci0: command tx timeout [ 87.756232][ T5800] bridge_slave_1: entered allmulticast mode [ 87.768197][ T5800] bridge_slave_1: entered promiscuous mode [ 87.775996][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.783366][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.809348][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.821211][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.828683][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.832051][ T5798] Bluetooth: hci1: command tx timeout [ 87.854754][ T50] Bluetooth: hci2: command tx timeout [ 87.866315][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.882027][ T5792] hsr_slave_0: entered promiscuous mode [ 87.888839][ T5792] hsr_slave_1: entered promiscuous mode [ 87.901997][ T5798] Bluetooth: hci3: command tx timeout [ 87.914160][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.921152][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.947375][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.018640][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.061303][ T5804] hsr_slave_0: entered promiscuous mode [ 88.069805][ T5804] hsr_slave_1: entered promiscuous mode [ 88.077487][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.085611][ T5804] Cannot create hsr debugfs directory [ 88.094830][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.133088][ T5796] hsr_slave_0: entered promiscuous mode [ 88.139785][ T5796] hsr_slave_1: entered promiscuous mode [ 88.146312][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.154684][ T5796] Cannot create hsr debugfs directory [ 88.184472][ T5800] team0: Port device team_slave_0 added [ 88.230855][ T5800] team0: Port device team_slave_1 added [ 88.330045][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.337142][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.363711][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.403599][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.410584][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.436836][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.588172][ T5800] hsr_slave_0: entered promiscuous mode [ 88.595160][ T5800] hsr_slave_1: entered promiscuous mode [ 88.601324][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.609114][ T5800] Cannot create hsr debugfs directory [ 88.766371][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.801692][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.812598][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.836111][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.912738][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.930160][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.940439][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.957401][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.021648][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.040322][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.078423][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.091124][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.150519][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.169036][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.198405][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.208595][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.316367][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.344565][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.418654][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.429878][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.452090][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.459508][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.478802][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.486033][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.534909][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.542141][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.553821][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.560979][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.593277][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.621066][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.687481][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.712768][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.719937][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.739555][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.767161][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.774369][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.791721][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.799059][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.822407][ T5798] Bluetooth: hci0: command tx timeout [ 89.858862][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.866066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.902461][ T5798] Bluetooth: hci1: command tx timeout [ 89.902471][ T50] Bluetooth: hci2: command tx timeout [ 89.982800][ T5798] Bluetooth: hci3: command tx timeout [ 90.019020][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.110305][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.297970][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.361497][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.454244][ T5796] veth0_vlan: entered promiscuous mode [ 90.496152][ T5796] veth1_vlan: entered promiscuous mode [ 90.520038][ T5792] veth0_vlan: entered promiscuous mode [ 90.551227][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.585540][ T5792] veth1_vlan: entered promiscuous mode [ 90.640080][ T5796] veth0_macvtap: entered promiscuous mode [ 90.665950][ T5796] veth1_macvtap: entered promiscuous mode [ 90.691250][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.733858][ T5792] veth0_macvtap: entered promiscuous mode [ 90.745935][ T5792] veth1_macvtap: entered promiscuous mode [ 90.756380][ T5804] veth0_vlan: entered promiscuous mode [ 90.774200][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.790139][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.834337][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.846275][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.855544][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.864940][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885925][ T5804] veth1_vlan: entered promiscuous mode [ 90.921040][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.937018][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.949479][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.967422][ T5800] veth0_vlan: entered promiscuous mode [ 90.996395][ T5800] veth1_vlan: entered promiscuous mode [ 91.033600][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.052955][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.065885][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.111654][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121449][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.133916][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.143723][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.188540][ T5804] veth0_macvtap: entered promiscuous mode [ 91.205857][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.214575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.243272][ T5804] veth1_macvtap: entered promiscuous mode [ 91.351216][ T5800] veth0_macvtap: entered promiscuous mode [ 91.359571][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.375501][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.381398][ T5800] veth1_macvtap: entered promiscuous mode [ 91.390548][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.398644][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.433135][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.457680][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.468173][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.479000][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.492529][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.511149][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.522543][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.534441][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.544972][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.557175][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.611638][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.628224][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.647461][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.658909][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.674380][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.691355][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.710395][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.735523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.759623][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.770204][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.787222][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.796275][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.805489][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.827389][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.839720][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.853972][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.864797][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.876598][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.898852][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.910426][ T5798] Bluetooth: hci0: command tx timeout [ 91.926285][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.950287][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.964639][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.973990][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.985478][ T5798] Bluetooth: hci2: command tx timeout [ 91.985796][ T50] Bluetooth: hci1: command tx timeout [ 91.991186][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081889][ T50] Bluetooth: hci3: command tx timeout [ 92.835822][ T786] cfg80211: failed to load regulatory.db [ 92.983476][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.991364][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.570878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.601659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.670138][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.685821][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.703060][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.711444][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.008151][ T50] Bluetooth: hci0: command tx timeout [ 94.062968][ T5798] Bluetooth: hci1: command tx timeout [ 94.068870][ T5795] Bluetooth: hci2: command tx timeout [ 94.143068][ T50] Bluetooth: hci3: command tx timeout [ 94.265786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.368192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.675367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.992841][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.503206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.542591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.644964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.662540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.670763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.742318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.751555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.623884][ T5952] Zero length message leads to an empty skb [ 102.327063][ T5949] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.366270][ T5949] netlink: 11 bytes leftover after parsing attributes in process `syz.3.19'. [ 102.409112][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'. [ 102.772431][ T5958] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18'. [ 106.791200][ T5993] delete_channel: no stack [ 107.068126][ T5996] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 107.091357][ T5996] netlink: 11 bytes leftover after parsing attributes in process `syz.1.29'. [ 107.105583][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 107.535400][ T6006] netlink: 168 bytes leftover after parsing attributes in process `syz.0.30'. [ 110.939444][ T6038] fuse: Bad value for 'fd' [ 111.652468][ T6050] netlink: 64 bytes leftover after parsing attributes in process `syz.2.43'. [ 111.863424][ T6051] netlink: 168 bytes leftover after parsing attributes in process `syz.1.42'. [ 116.774823][ T6093] netlink: 168 bytes leftover after parsing attributes in process `syz.2.53'. [ 120.445078][ T6132] netlink: 168 bytes leftover after parsing attributes in process `syz.1.63'. [ 125.610044][ T6175] xt_TCPMSS: Only works on TCP SYN packets [ 125.632927][ T6175] overlayfs: missing 'lowerdir' [ 128.505041][ T28] audit: type=1326 audit(1751683457.668:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 128.606264][ T28] audit: type=1326 audit(1751683457.668:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 128.966035][ T28] audit: type=1326 audit(1751683457.718:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 128.996558][ T28] audit: type=1326 audit(1751683457.718:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.020594][ T28] audit: type=1326 audit(1751683457.718:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.256942][ T28] audit: type=1326 audit(1751683457.758:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.390586][ T28] audit: type=1326 audit(1751683457.758:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.465198][ T28] audit: type=1326 audit(1751683457.758:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.571339][ T28] audit: type=1326 audit(1751683457.798:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.653749][ T28] audit: type=1326 audit(1751683457.808:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f18e929 code=0x7ffc0000 [ 129.985439][ T6218] xt_TCPMSS: Only works on TCP SYN packets [ 130.003912][ T6218] overlayfs: missing 'lowerdir' [ 133.374351][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.390464][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.218410][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 134.241133][ T6256] dummy0: entered promiscuous mode [ 134.247992][ T6256] gretap0: entered promiscuous mode [ 134.825143][ T6263] xt_TCPMSS: Only works on TCP SYN packets [ 134.841543][ T6263] overlayfs: missing 'lowerdir' [ 139.146666][ T6304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.105'. [ 144.952776][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 146.316525][ T6355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 148.301814][ T6381] xt_TCPMSS: Only works on TCP SYN packets [ 148.319535][ T6381] overlayfs: missing 'lowerdir' [ 149.465745][ T6386] ubi31: attaching mtd0 [ 149.472651][ T6386] ubi31: scanning is finished [ 149.477420][ T6386] ubi31: empty MTD device detected [ 150.356612][ T6386] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 150.364287][ T6386] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 150.371588][ T6386] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 150.378756][ T6386] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 150.387360][ T6386] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 150.394407][ T6386] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 150.402533][ T6386] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2602093027 [ 150.412687][ T6386] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.429839][ T6390] ubi31: background thread "ubi_bgt31d" started, PID 6390 [ 151.256880][ T6394] netlink: 64 bytes leftover after parsing attributes in process `syz.1.127'. [ 162.565426][ T6467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.143'. [ 163.913628][ T6484] ceph: No mds server is up or the cluster is laggy [ 164.152711][ T1750] libceph: connect (1)[c::]:6789 error -101 [ 164.206363][ T1750] libceph: mon0 (1)[c::]:6789 connect error [ 168.363594][ T6522] xt_TCPMSS: Only works on TCP SYN packets [ 168.379492][ T6522] overlayfs: missing 'lowerdir' [ 172.124948][ T6551] fuse: Unknown parameter 'use00000000000000000000' [ 173.399405][ T6567] delete_channel: no stack [ 175.348236][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'. [ 175.841143][ T6603] delete_channel: no stack [ 176.240274][ T6613] fuse: Unknown parameter 'use00000000000000000000' [ 179.144875][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 179.144892][ T28] audit: type=1800 audit(1751683508.308:35): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.192" name="bus" dev="overlay" ino=303 res=0 errno=0 [ 179.940627][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.194'. [ 180.847937][ T6655] ubi: mtd0 is already attached to ubi31 [ 184.321592][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.206'. [ 189.682368][ T6753] ubi: mtd0 is already attached to ubi31 [ 191.028958][ T6746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.222'. [ 192.172436][ T6770] delete_channel: no stack [ 192.519084][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 193.856556][ T6797] delete_channel: no stack [ 194.852635][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.859099][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.941575][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'. [ 195.257091][ T6812] ubi: mtd0 is already attached to ubi31 [ 196.576402][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 196.836920][ T5883] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.846312][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.879691][ T5883] usb 1-1: config 0 descriptor?? [ 196.943058][ T5883] cp210x 1-1:0.0: cp210x converter detected [ 197.974750][ T5883] usb 1-1: cp210x converter now attached to ttyUSB0 [ 198.180392][ T5866] usb 1-1: USB disconnect, device number 2 [ 198.558390][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.958385][ T5866] cp210x 1-1:0.0: device disconnected [ 202.104220][ T6870] ubi: mtd0 is already attached to ubi31 [ 203.025780][ T28] audit: type=1800 audit(1751683532.188:36): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.252" name="bus" dev="overlay" ino=358 res=0 errno=0 [ 204.397250][ T6889] fuse: Unknown parameter 'user_i00000000000000000000' [ 205.182658][ T6900] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 205.340244][ T6902] netlink: 11 bytes leftover after parsing attributes in process `syz.2.261'. [ 205.375302][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.261'. [ 208.311833][ T6915] veth0_to_team: entered promiscuous mode [ 208.317620][ T6915] veth0_to_team: entered allmulticast mode [ 208.908316][ T6928] ubi: mtd0 is already attached to ubi31 [ 210.615000][ T6937] fuse: Bad value for 'group_id' [ 210.694977][ T6939] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 210.785247][ T6940] netlink: 11 bytes leftover after parsing attributes in process `syz.0.273'. [ 210.799037][ T6940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.273'. [ 212.713399][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.731393][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 212.775401][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.872198][ T6957] fuse: Unknown parameter 'user_id00000000000000000000' [ 214.863383][ T6976] fuse: Bad value for 'group_id' [ 214.942549][ T6978] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 215.065226][ T6979] netlink: 11 bytes leftover after parsing attributes in process `syz.3.283'. [ 215.115122][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'. [ 216.946489][ T6995] ubi: mtd0 is already attached to ubi31 [ 218.260863][ T6991] veth0_to_team: entered promiscuous mode [ 218.266947][ T6991] veth0_to_team: entered allmulticast mode [ 219.496913][ T7003] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 219.936868][ T7016] fuse: Unknown parameter 'user_id00000000000000000000' [ 219.971204][ T7014] fuse: Bad value for 'group_id' [ 219.982838][ T7018] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 220.065669][ T7019] netlink: 11 bytes leftover after parsing attributes in process `syz.1.294'. [ 220.118607][ T7019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.294'. [ 222.889014][ T7037] ubi: mtd0 is already attached to ubi31 [ 223.877729][ T7041] delete_channel: no stack [ 224.673052][ T7061] IPv6: Can't replace route, no match found [ 226.369965][ T7065] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.198866][ T7073] delete_channel: no stack [ 231.208312][ T7102] IPv6: Can't replace route, no match found [ 232.285241][ T7110] ubi: mtd0 is already attached to ubi31 [ 233.123476][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.243326][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.364717][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.693977][ T7139] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 235.701821][ T7139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 239.747881][ T7163] ubi: mtd0 is already attached to ubi31 [ 241.364412][ T7175] hpfs: Bad magic ... probably not HPFS [ 242.355077][ T7183] netlink: 200 bytes leftover after parsing attributes in process `syz.3.339'. [ 247.514096][ T7234] netlink: 200 bytes leftover after parsing attributes in process `syz.3.350'. [ 250.012018][ T1750] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.532015][ T1750] usb 1-1: Using ep0 maxpacket: 16 [ 250.551878][ T1750] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.560046][ T1750] usb 1-1: config 0 has no interface number 0 [ 250.570018][ T1750] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 250.579940][ T1750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.588103][ T1750] usb 1-1: Product: syz [ 250.592573][ T1750] usb 1-1: Manufacturer: syz [ 250.597735][ T1750] usb 1-1: SerialNumber: syz [ 250.607632][ T1750] usb 1-1: config 0 descriptor?? [ 250.863566][ T7273] netlink: 200 bytes leftover after parsing attributes in process `syz.1.362'. [ 250.911856][ T1750] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 251.645671][ T1750] gspca_spca1528: reg_w err -71 [ 251.695229][ T1750] spca1528: probe of 1-1:0.1 failed with error -71 [ 251.859779][ T1750] usb 1-1: USB disconnect, device number 3 [ 252.445777][ T7284] hpfs: Bad magic ... probably not HPFS [ 255.397143][ T7308] xt_TCPMSS: Only works on TCP SYN packets [ 255.412869][ T7308] overlayfs: missing 'lowerdir' [ 255.992596][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.999020][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.692651][ T7319] Bluetooth: MGMT ver 1.22 [ 260.827461][ T7356] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 261.427628][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.391'. [ 263.482938][ T7385] hpfs: Bad magic ... probably not HPFS [ 263.976883][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 265.637883][ T7395] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 266.650769][ T7409] xt_TCPMSS: Only works on TCP SYN packets [ 266.668063][ T7409] overlayfs: missing 'lowerdir' [ 267.878626][ T7418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.403'. [ 270.407547][ T7436] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 270.579642][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 273.273604][ T7466] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 273.468692][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.545172][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.972996][ T7490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.423'. [ 277.142858][ T7510] ceph: No mds server is up or the cluster is laggy [ 277.431878][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 277.898909][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 279.906545][ T7544] IPv6: Can't replace route, no match found [ 284.841048][ T7577] ubi: mtd0 is already attached to ubi31 [ 286.163751][ T7573] veth0_to_team: left allmulticast mode [ 288.150753][ T7608] overlayfs: failed to resolve './file0': -2 [ 290.873816][ T7623] hpfs: Bad magic ... probably not HPFS [ 291.565648][ T7625] IPv6: Can't replace route, no match found [ 292.811252][ T7630] veth0_to_team: left allmulticast mode [ 293.223529][ T7641] overlayfs: failed to resolve './file0': -2 [ 294.541189][ T7654] delete_channel: no stack [ 295.182144][ T7664] IPv6: Can't replace route, no match found [ 299.272027][ T7707] IPv6: Can't replace route, no match found [ 300.447438][ T7718] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 300.534699][ T7720] netlink: 11 bytes leftover after parsing attributes in process `syz.3.487'. [ 300.583412][ T7720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.487'. [ 303.053642][ T7747] IPv6: Can't replace route, no match found [ 303.141975][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 303.332067][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 303.347221][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.356011][ T8] usb 1-1: config 0 has no interface number 0 [ 303.368595][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 303.378341][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.386902][ T8] usb 1-1: Product: syz [ 303.391274][ T8] usb 1-1: Manufacturer: syz [ 303.396969][ T8] usb 1-1: SerialNumber: syz [ 303.412765][ T8] usb 1-1: config 0 descriptor?? [ 304.347854][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 305.501251][ T8] gspca_spca1528: reg_w err -71 [ 305.541891][ T8] spca1528: probe of 1-1:0.1 failed with error -71 [ 305.559706][ T8] usb 1-1: USB disconnect, device number 4 [ 305.881384][ T7771] ceph: No mds server is up or the cluster is laggy [ 306.035072][ T23] libceph: connect (1)[c::]:6789 error -101 [ 306.498253][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 306.760339][ T7782] netlink: 11 bytes leftover after parsing attributes in process `syz.1.501'. [ 307.050053][ T7782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'. [ 308.003694][ T7792] syz.0.504 uses obsolete (PF_INET,SOCK_PACKET) [ 308.305607][ T7793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.502'. [ 308.397408][ T7797] IPv6: Can't replace route, no match found [ 309.876106][ T54] libceph: connect (1)[c::]:6789 error -101 [ 309.993746][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 310.124596][ T7828] ceph: No mds server is up or the cluster is laggy [ 311.821065][ T7852] netlink: 11 bytes leftover after parsing attributes in process `syz.3.514'. [ 312.701087][ T7863] IPv6: Can't replace route, no match found [ 313.414685][ T7873] netlink: set zone limit has 8 unknown bytes [ 315.341308][ T7873] hfsplus: unable to find HFS+ superblock [ 317.293637][ T7893] netlink: 11 bytes leftover after parsing attributes in process `syz.2.526'. [ 317.303456][ T7893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.526'. [ 317.453866][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459184][ T7902] fuse: Bad value for 'fd' [ 317.461461][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.892635][ T7913] IPv6: Can't replace route, no match found [ 323.383558][ T7954] veth0_to_team: entered allmulticast mode [ 327.022376][ T7989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.550'. [ 328.225217][ T7996] veth0_to_team: entered allmulticast mode [ 331.879281][ T8033] veth0_to_team: entered promiscuous mode [ 331.885480][ T8033] veth0_to_team: entered allmulticast mode [ 332.869048][ T8034] ceph: No mds server is up or the cluster is laggy [ 333.079805][ T27] libceph: connect (1)[c::]:6789 error -101 [ 333.154118][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 333.624182][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 333.630225][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 333.799654][ T8043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.563'. [ 337.497355][ T27] libceph: connect (1)[c::]:6789 error -101 [ 337.583376][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 337.621488][ T8088] ceph: No mds server is up or the cluster is laggy [ 338.233741][ T8094] delete_channel: no stack [ 338.406646][ T8098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.578'. [ 341.841481][ T8132] delete_channel: no stack [ 341.950603][ T8135] hpfs: Bad magic ... probably not HPFS [ 342.295406][ T8140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.589'. [ 343.454214][ T8143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.590'. [ 344.552108][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 344.792162][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 344.930256][ T54] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.963952][ T54] usb 1-1: config 0 has no interface number 0 [ 345.061811][ T54] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 345.190094][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.216830][ T54] usb 1-1: Product: syz [ 345.223580][ T54] usb 1-1: Manufacturer: syz [ 345.228285][ T54] usb 1-1: SerialNumber: syz [ 345.250687][ T54] usb 1-1: config 0 descriptor?? [ 345.488818][ T54] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 346.332014][ T54] gspca_spca1528: reg_w err -71 [ 346.421850][ T54] spca1528: probe of 1-1:0.1 failed with error -71 [ 346.477238][ T54] usb 1-1: USB disconnect, device number 5 [ 346.580045][ T8167] delete_channel: no stack [ 347.702325][ T8178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.599'. [ 351.089863][ T8210] delete_channel: no stack [ 353.031988][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 353.241873][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 353.261067][ T786] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.272928][ T786] usb 2-1: config 0 has no interface number 0 [ 353.294604][ T786] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 353.304086][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.316024][ T786] usb 2-1: Product: syz [ 353.320341][ T786] usb 2-1: Manufacturer: syz [ 353.325105][ T786] usb 2-1: SerialNumber: syz [ 353.346034][ T786] usb 2-1: config 0 descriptor?? [ 353.545831][ T8226] overlayfs: failed to resolve './file1': -2 [ 353.559913][ T786] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 354.844748][ T786] gspca_spca1528: reg_w err -110 [ 354.966515][ T8228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 355.009264][ T786] spca1528: probe of 2-1:0.1 failed with error -110 [ 355.149660][ T786] usb 2-1: USB disconnect, device number 2 [ 355.332033][ T8249] delete_channel: no stack [ 359.851820][ T8284] delete_channel: no stack [ 361.062193][ T8300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.088415][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 362.870164][ T8301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.631'. [ 365.100698][ T8318] veth0_to_team: entered promiscuous mode [ 365.107682][ T8318] veth0_to_team: entered allmulticast mode [ 367.046347][ T8336] delete_channel: no stack [ 367.248218][ T8346] hpfs: Bad magic ... probably not HPFS [ 367.374261][ T8349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.644'. [ 368.021788][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.643'. [ 372.291081][ T8398] delete_channel: no stack [ 374.469001][ T8422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.656'. [ 375.465755][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'. [ 376.592362][ T8448] delete_channel: no stack [ 379.056315][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.064382][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.976936][ T8493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.670'. [ 381.074973][ T8497] delete_channel: no stack [ 381.283177][ T8500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.674'. [ 381.337056][ T8505] ref_ctr_offset mismatch. inode: 0x3fa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa04 [ 381.442511][ T8504] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 381.451613][ T8504] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 384.418107][ T8540] delete_channel: no stack [ 387.915475][ T8579] delete_channel: no stack [ 394.471548][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 396.784779][ T8643] hpfs: Bad magic ... probably not HPFS [ 398.247481][ T8656] fuse: Unknown parameter '0x0000000000000003' [ 403.623199][ T8711] delete_channel: no stack [ 403.860085][ T8713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.732'. [ 403.949064][ T8721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.733'. [ 404.435848][ T8733] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 404.454809][ T8733] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 405.430705][ T1750] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 405.942025][ T1750] usb 4-1: Using ep0 maxpacket: 16 [ 406.224127][ T1750] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.336486][ T1750] usb 4-1: config 0 has no interface number 0 [ 406.364840][ T1750] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.378810][ T1750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.418434][ T1750] usb 4-1: Product: syz [ 406.431759][ T1750] usb 4-1: Manufacturer: syz [ 406.448442][ T1750] usb 4-1: SerialNumber: syz [ 406.724911][ T1750] usb 4-1: config 0 descriptor?? [ 406.847703][ T8752] delete_channel: no stack [ 406.981400][ T1750] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.023027][ T1750] gspca_spca1528: reg_w err -71 [ 407.056975][ T1750] spca1528: probe of 4-1:0.1 failed with error -71 [ 407.093068][ T1750] usb 4-1: USB disconnect, device number 2 [ 407.408425][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.744'. [ 408.277460][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.746'. [ 408.573463][ T8781] ubi: mtd0 is already attached to ubi31 [ 410.248300][ T8795] delete_channel: no stack [ 413.550700][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 414.394682][ T8831] delete_channel: no stack [ 416.316169][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 416.402795][ T8856] netlink: 100 bytes leftover after parsing attributes in process `syz.0.768'. [ 417.232477][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 417.505955][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 417.512989][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 417.625138][ T8848] ceph: No mds server is up or the cluster is laggy [ 419.217939][ T8866] delete_channel: no stack [ 420.247382][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.433222][ T8907] delete_channel: no stack [ 424.692019][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.078599][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 426.118841][ T8942] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.126538][ T8943] delete_channel: no stack [ 426.169650][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 429.002787][ T8979] veth0_to_team: left allmulticast mode [ 429.051865][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.889589][ T8982] delete_channel: no stack [ 434.994791][ T9001] delete_channel: no stack [ 435.100699][ T9008] ubi: mtd0 is already attached to ubi31 [ 435.553263][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.906086][ T9044] veth0_to_team: entered allmulticast mode [ 438.776674][ T9049] delete_channel: no stack [ 439.712435][ T9064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.310818][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318272][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.745964][ T9081] netlink: 11 bytes leftover after parsing attributes in process `syz.2.836'. [ 441.759819][ T9081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.836'. [ 441.879141][ T9084] delete_channel: no stack [ 442.227029][ T9096] veth0_to_team: left allmulticast mode [ 442.329082][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.224633][ T9112] delete_channel: no stack [ 446.799537][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.147391][ T9144] IPv6: Can't replace route, no match found [ 449.174004][ T9154] delete_channel: no stack [ 451.709091][ T9174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.319954][ T9182] delete_channel: no stack [ 453.766242][ T9196] ubi: mtd0 is already attached to ubi31 [ 455.953134][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.082833][ T9215] delete_channel: no stack [ 458.282816][ T9242] hpfs: Bad magic ... probably not HPFS [ 459.032642][ T9247] delete_channel: no stack [ 461.538509][ T9259] ubi: mtd0 is already attached to ubi31 [ 462.711893][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.980433][ T9277] delete_channel: no stack [ 465.114635][ T9286] xt_TCPMSS: Only works on TCP SYN packets [ 465.125774][ T9286] overlayfs: missing 'lowerdir' [ 466.783142][ T9302] lo speed is unknown, defaulting to 1000 [ 466.789299][ T9302] lo speed is unknown, defaulting to 1000 [ 466.799432][ T9302] lo speed is unknown, defaulting to 1000 [ 466.811943][ T9302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 466.829869][ T9302] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 467.443117][ T9306] ubi: mtd0 is already attached to ubi31 [ 467.952263][ T9302] lo speed is unknown, defaulting to 1000 [ 467.959932][ T9302] lo speed is unknown, defaulting to 1000 [ 467.968246][ T9302] lo speed is unknown, defaulting to 1000 [ 467.975553][ T9302] lo speed is unknown, defaulting to 1000 [ 468.221395][ T28] audit: type=1326 audit(1751683797.268:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9293 comm="syz.3.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7fc00000 [ 468.293955][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.387593][ T9321] delete_channel: no stack [ 470.599425][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.045570][ T9356] delete_channel: no stack [ 471.103823][ T9359] ubi: mtd0 is already attached to ubi31 [ 472.351763][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 472.541784][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 474.091524][ T5847] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.104689][ T5847] usb 3-1: config 0 has no interface number 0 [ 474.137929][ T5847] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 474.178464][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.191523][ T5847] usb 3-1: Product: syz [ 474.196998][ T5847] usb 3-1: Manufacturer: syz [ 474.202583][ T5847] usb 3-1: SerialNumber: syz [ 474.272027][ T5847] usb 3-1: config 0 descriptor?? [ 474.579913][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 474.639184][ T5847] gspca_spca1528: reg_w err -71 [ 475.463684][ T5847] spca1528: probe of 3-1:0.1 failed with error -71 [ 475.548856][ T5847] usb 3-1: USB disconnect, device number 2 [ 475.902814][ T9389] delete_channel: no stack [ 476.183964][ T9392] veth0_to_team: left allmulticast mode [ 477.206383][ T9411] ubi: mtd0 is already attached to ubi31 [ 478.024099][ T28] audit: type=1326 audit(1751683807.188:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 478.191786][ T28] audit: type=1326 audit(1751683807.208:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 478.215051][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.241883][ T28] audit: type=1326 audit(1751683807.208:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 478.290467][ T28] audit: type=1326 audit(1751683807.208:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 478.475413][ T28] audit: type=1326 audit(1751683807.208:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 478.765534][ T28] audit: type=1326 audit(1751683807.208:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 479.072506][ T28] audit: type=1326 audit(1751683807.208:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 479.211952][ T5847] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 480.080024][ T28] audit: type=1326 audit(1751683807.208:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 480.102668][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.227704][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 480.322311][ T5847] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.330384][ T5847] usb 4-1: config 0 has no interface number 0 [ 480.348624][ T28] audit: type=1326 audit(1751683807.208:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 480.407885][ T5847] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 480.425110][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.444546][ T28] audit: type=1326 audit(1751683807.208:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5f98e929 code=0x7ffc0000 [ 480.466703][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.489447][ T5847] usb 4-1: Product: syz [ 480.506635][ T5847] usb 4-1: Manufacturer: syz [ 480.520527][ T5847] usb 4-1: SerialNumber: syz [ 480.541218][ T5847] usb 4-1: config 0 descriptor?? [ 480.577609][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 481.823815][ T1750] libceph: connect (1)[c::]:6789 error -101 [ 481.887515][ T1750] libceph: mon0 (1)[c::]:6789 connect error [ 482.010929][ T9436] ceph: No mds server is up or the cluster is laggy [ 482.022795][ T1750] libceph: connect (1)[c::]:6789 error -101 [ 482.120472][ T1750] libceph: mon0 (1)[c::]:6789 connect error [ 482.143395][ T5847] gspca_spca1528: reg_w err -71 [ 482.249484][ T5847] spca1528: probe of 4-1:0.1 failed with error -71 [ 482.398881][ T5847] usb 4-1: USB disconnect, device number 3 [ 485.163629][ T9473] xt_TCPMSS: Only works on TCP SYN packets [ 485.176066][ T9473] overlayfs: missing 'lowerdir' [ 488.019501][ T9501] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 488.027648][ T9501] bridge0: port 3(team0) entered blocking state [ 488.034540][ T9501] bridge0: port 3(team0) entered disabled state [ 488.041227][ T9501] team0: entered allmulticast mode [ 488.047038][ T9501] team_slave_0: entered allmulticast mode [ 488.053538][ T9501] team_slave_1: entered allmulticast mode [ 488.091424][ T9501] team0: entered promiscuous mode [ 488.099289][ T9501] team_slave_0: entered promiscuous mode [ 488.136080][ T9501] team_slave_1: entered promiscuous mode [ 488.145057][ T9501] bridge0: port 3(team0) entered blocking state [ 488.151847][ T9501] bridge0: port 3(team0) entered forwarding state [ 489.918004][ T9521] 9pnet_virtio: no channels available for device 127.0.0.1 [ 492.801336][ T9543] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 492.883143][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.969'. [ 494.403797][ T9577] xt_hashlimit: max too large, truncated to 1048576 [ 494.414418][ T9577] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 497.763480][ T9603] xt_TCPMSS: Only works on TCP SYN packets [ 497.774133][ T9603] overlayfs: missing 'lowerdir' [ 501.785742][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.798722][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.124988][ T9655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 504.493156][ T9676] ubi: mtd0 is already attached to ubi31 [ 505.971799][ T54] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 506.199530][ T54] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 506.213969][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.239479][ T54] usb 4-1: config 0 descriptor?? [ 507.228160][ T9696] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 507.228160][ T9696] The task syz.3.998 (9696) triggered the difference, watch for misbehavior. [ 507.588139][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.630584][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.668873][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1004'. [ 507.689939][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.731078][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.792419][ T54] pegasus: probe of 4-1:0.0 failed with error -110 [ 509.975659][ T5847] usb 4-1: USB disconnect, device number 4 [ 511.028703][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 511.617854][ T9741] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 511.636006][ T9741] netlink: 'syz.2.1013': attribute type 2 has an invalid length. [ 516.339549][ T9768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1022'. [ 518.294398][ T9785] veth0_to_team: entered allmulticast mode [ 519.266480][ T9788] xt_TCPMSS: Only works on TCP SYN packets [ 519.274248][ T9788] overlayfs: missing 'lowerdir' [ 520.319131][ T9798] ubi: mtd0 is already attached to ubi31 [ 522.401749][ T9806] 9pnet_virtio: no channels available for device 127.0.0.1 [ 525.266267][ T9830] ubi: mtd0 is already attached to ubi31 [ 528.936033][ T9856] 9pnet_virtio: no channels available for device 127.0.0.1 [ 530.405273][ T9869] ubi: mtd0 is already attached to ubi31 [ 532.090801][ T54] IPVS: starting estimator thread 0... [ 532.704231][ T9885] IPVS: using max 18 ests per chain, 43200 per kthread [ 535.687376][ T9901] 9pnet_virtio: no channels available for device 127.0.0.1 [ 536.819093][ T9906] syz.0.1058[9906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 536.867910][ T9906] kvm: kvm [9905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xad84 [ 536.877671][ T9906] kvm: kvm [9905]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xad84 [ 539.830771][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 541.179089][ T9946] 9pnet_virtio: no channels available for device 127.0.0.1 [ 544.527288][ T9970] veth0_to_team: entered allmulticast mode [ 546.797270][ T9989] IPv6: Can't replace route, no match found [ 546.917224][ T1750] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 547.102089][ T1750] usb 3-1: device descriptor read/64, error -71 [ 547.884487][ T1750] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 548.231772][ T1750] usb 3-1: device descriptor read/64, error -71 [ 548.851740][ T1750] usb usb3-port1: attempt power cycle [ 550.439799][T10019] veth0_to_team: left allmulticast mode [ 550.998242][T10035] IPv6: Can't replace route, no match found [ 553.391886][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.100374][T10070] IPv6: Can't replace route, no match found [ 558.579700][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.622743][T10113] IPv6: Can't replace route, no match found [ 563.187266][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.158299][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.554500][T10135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'. [ 565.633092][T10162] IPv6: Can't replace route, no match found [ 568.522280][T10178] 9pnet_virtio: no channels available for device 127.0.0.1 [ 572.712660][T10212] IPv6: Can't replace route, no match found [ 573.050921][T10203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1138'. [ 574.059634][T10220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1142'. [ 575.598817][T10243] 9pnet_virtio: no channels available for device 127.0.0.1 [ 579.399091][T10273] ubi: mtd0 is already attached to ubi31 [ 580.001574][ C0] sched: RT throttling activated [ 580.352815][T10282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1158'. [ 580.900535][T10286] IPv6: Can't replace route, no match found [ 582.924115][ T9386] libceph: connect (1)[c::]:6789 error -101 [ 582.989608][ T9386] libceph: mon0 (1)[c::]:6789 connect error [ 583.061135][T10299] ceph: No mds server is up or the cluster is laggy [ 585.048111][T10318] xt_TCPMSS: Only works on TCP SYN packets [ 585.059432][T10318] overlayfs: missing 'lowerdir' [ 585.767324][T10323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1168'. [ 585.882951][T10322] delete_channel: no stack [ 587.504365][T10342] ubi: mtd0 is already attached to ubi31 [ 589.138031][T10356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1178'. [ 589.332596][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 589.667287][T10361] xt_TCPMSS: Only works on TCP SYN packets [ 589.679365][T10361] overlayfs: missing 'lowerdir' [ 589.687398][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 589.714412][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 589.724647][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.737858][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.749205][ T9] usb 4-1: config 1 has no interface number 1 [ 589.757339][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 589.805605][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.885847][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.427941][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.436684][ T9] usb 4-1: Product: syz [ 590.440904][ T9] usb 4-1: Manufacturer: syz [ 590.445986][ T9] usb 4-1: SerialNumber: syz [ 590.536698][T10364] delete_channel: no stack [ 591.747034][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.782430][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.454367][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 592.504546][ T9] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 592.558763][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 592.594544][T10387] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1185'. [ 592.611951][ T9] usb 4-1: USB disconnect, device number 5 [ 592.677129][T10386] udevd[10386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.453324][T10405] xt_TCPMSS: Only works on TCP SYN packets [ 594.454869][T10405] overlayfs: missing 'lowerdir' [ 599.380329][T10429] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1196'. [ 599.401882][T10429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1196'. [ 599.466273][T10434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1197'. [ 601.536745][T10449] xt_TCPMSS: Only works on TCP SYN packets [ 601.547875][T10449] overlayfs: missing 'lowerdir' [ 602.741826][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 602.991898][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 603.043364][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.126605][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.225995][ T5866] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 603.237851][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.260957][ T5866] usb 2-1: Product: syz [ 603.287092][ T5866] usb 2-1: Manufacturer: syz [ 603.304903][ T5866] usb 2-1: SerialNumber: syz [ 603.330767][ T5866] usb 2-1: config 0 descriptor?? [ 603.571838][ T5866] usb 2-1: USB disconnect, device number 3 [ 604.855558][T10471] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1208'. [ 604.947135][T10471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1208'. [ 605.707624][T10481] ubi: mtd0 is already attached to ubi31 [ 607.105856][T10492] xt_TCPMSS: Only works on TCP SYN packets [ 607.117566][T10492] overlayfs: missing 'lowerdir' [ 607.820771][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1213'. [ 608.800431][T10508] capability: warning: `syz.3.1217' uses deprecated v2 capabilities in a way that may be insecure [ 609.812959][T10512] sctp: failed to load transform for md5: -2 [ 611.270390][T10544] xt_TCPMSS: Only works on TCP SYN packets [ 611.282038][T10544] overlayfs: missing 'lowerdir' [ 612.038561][T10548] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1226'. [ 612.073051][T10548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1226'. [ 612.844381][T10558] ubi: mtd0 is already attached to ubi31 [ 617.752574][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 617.847877][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 617.935368][T10580] ceph: No mds server is up or the cluster is laggy [ 617.945440][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 618.016725][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 619.004488][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 619.033986][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 619.059933][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 621.657207][T10604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1242'. [ 621.871885][T10609] ubi: mtd0 is already attached to ubi31 [ 625.152236][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.159550][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.507660][ T54] libceph: connect (1)[c::]:6789 error -101 [ 626.323038][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 626.427483][T10627] ceph: No mds server is up or the cluster is laggy [ 628.172098][ T9] libceph: connect (1)[c::]:6789 error -101 [ 628.178828][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 629.282937][T10656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1253'. [ 629.574447][T10667] veth0_to_team: entered allmulticast mode [ 641.888122][T10739] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1273'. [ 641.954537][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1273'. [ 647.409317][T10767] ubi: mtd0 is already attached to ubi31 [ 648.073078][T10774] 9pnet_virtio: no channels available for device 127.0.0.1 [ 651.730196][T10806] loop6: detected capacity change from 0 to 7 [ 652.599515][T10806] Dev loop6: unable to read RDB block 7 [ 652.605519][T10806] loop6: AHDI p1 p2 p3 [ 652.609746][T10806] loop6: partition table partially beyond EOD, truncated [ 652.617686][T10806] loop6: p1 start 1601398130 is beyond EOD, truncated [ 652.624572][T10806] loop6: p2 start 1702059890 is beyond EOD, truncated [ 653.371211][T10815] ubi: mtd0 is already attached to ubi31 [ 654.222127][T10823] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1295'. [ 654.403270][T10823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1295'. [ 655.638183][T10837] input: syz0 as /devices/virtual/input/input5 [ 656.087411][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 660.166091][T10864] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1307'. [ 660.179798][T10864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1307'. [ 661.033717][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 663.034312][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1313'. [ 663.064447][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1313'. [ 664.125019][T10878] delete_channel: no stack [ 664.151081][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1314'. [ 666.323465][T10910] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1321'. [ 668.234938][T10919] 9pnet_virtio: no channels available for device 127.0.0.1 [ 670.119412][T10930] process 'syz.3.1326' launched './file0' with NULL argv: empty string added [ 670.724084][T10934] ubi: mtd0 is already attached to ubi31 [ 676.087565][T10966] 9pnet_virtio: no channels available for device 127.0.0.1 [ 677.897507][T10979] ax25_connect(): syz.3.1341 uses autobind, please contact jreuter@yaina.de [ 681.609698][T11012] ubi: mtd0 is already attached to ubi31 [ 681.620960][T11006] 9pnet_virtio: no channels available for device 127.0.0.1 [ 681.873431][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 686.075029][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.266615][T11031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1357'. [ 686.295813][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.760837][T11069] xt_TCPMSS: Only works on TCP SYN packets [ 688.773646][T11069] overlayfs: missing 'lowerdir' [ 688.782729][ T1750] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 688.981664][ T1750] usb 1-1: Using ep0 maxpacket: 32 [ 689.040759][ T1750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.089653][ T1750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.134143][ T1750] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 689.178343][ T1750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.243577][ T1750] usb 1-1: config 0 descriptor?? [ 689.535759][T11079] ubi: mtd0 is already attached to ubi31 [ 689.746959][ T1750] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x6 [ 689.804462][ T1750] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 689.867761][ T1750] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised [ 689.891005][ T1750] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 689.902780][ T1750] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 689.911238][ T1750] CPU: 0 PID: 1750 Comm: kworker/0:3 Not tainted 6.6.95-syzkaller #0 [ 689.919329][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.929410][ T1750] Workqueue: usb_hub_wq hub_event [ 689.934502][ T1750] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 689.940178][ T1750] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 689.959929][ T1750] RSP: 0018:ffffc90004ba6780 EFLAGS: 00010202 [ 689.966041][ T1750] RAX: 0000000000000015 RBX: ffff88823bdaa830 RCX: dffffc0000000000 [ 689.974052][ T1750] RDX: 0000000000000000 RSI: ffffc90004ba68a0 RDI: ffff888024520468 [ 689.982066][ T1750] RBP: ffffc90004ba6998 R08: 0000000000000000 R09: 0000000000000000 [ 689.990071][ T1750] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88823bdaab00 [ 689.998068][ T1750] R13: 1ffff92000974cf8 R14: ffff88823bdaac18 R15: 00000000000000a8 [ 690.006053][ T1750] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 690.015012][ T1750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.021615][ T1750] CR2: 00005587ddad2da0 CR3: 000000007cf3d000 CR4: 00000000003506f0 [ 690.029614][ T1750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 690.037615][ T1750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 690.045609][ T1750] Call Trace: [ 690.048900][ T1750] [ 690.051848][ T1750] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 690.057420][ T1750] ? add_early_randomness+0x1e/0x1a0 [ 690.062723][ T1750] ? mutex_unlock+0x10/0x10 [ 690.067252][ T1750] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 690.072805][ T1750] add_early_randomness+0x7a/0x1a0 [ 690.077943][ T1750] hwrng_register+0x3db/0x4a0 [ 690.082637][ T1750] devm_hwrng_register+0x47/0xb0 [ 690.087592][ T1750] u2fzero_probe+0x348/0x460 [ 690.092199][ T1750] hid_device_probe+0x293/0x5b0 [ 690.097069][ T1750] ? hid_uevent+0x350/0x350 [ 690.101591][ T1750] really_probe+0x25b/0xb40 [ 690.106259][ T1750] ? pm_runtime_barrier+0x14b/0x1c0 [ 690.111772][ T1750] __driver_probe_device+0x18c/0x330 [ 690.118968][ T1750] driver_probe_device+0x4f/0x420 [ 690.125067][ T1750] __device_attach_driver+0x2ca/0x520 [ 690.130464][ T1750] bus_for_each_drv+0x24b/0x2d0 [ 690.135338][ T1750] ? coredump_store+0x90/0x90 [ 690.140031][ T1750] ? bus_find_device+0x320/0x320 [ 690.145009][ T1750] __device_attach+0x2b5/0x400 [ 690.149802][ T1750] ? device_attach+0x20/0x20 [ 690.154425][ T1750] ? do_raw_spin_unlock+0x121/0x230 [ 690.159651][ T1750] bus_probe_device+0x180/0x260 [ 690.164519][ T1750] device_add+0x85b/0xc20 [ 690.168867][ T1750] hid_add_device+0x38d/0x530 [ 690.173568][ T1750] usbhid_probe+0xe02/0x1220 [ 690.178176][ T1750] usb_probe_interface+0x5a4/0xb00 [ 690.183299][ T1750] ? usb_register_driver+0x3d0/0x3d0 [ 690.188588][ T1750] really_probe+0x25b/0xb40 [ 690.193112][ T1750] ? pm_runtime_barrier+0x14b/0x1c0 [ 690.198328][ T1750] __driver_probe_device+0x18c/0x330 [ 690.203629][ T1750] driver_probe_device+0x4f/0x420 [ 690.208675][ T1750] __device_attach_driver+0x2ca/0x520 [ 690.214064][ T1750] bus_for_each_drv+0x24b/0x2d0 [ 690.218925][ T1750] ? coredump_store+0x90/0x90 [ 690.223619][ T1750] ? bus_find_device+0x320/0x320 [ 690.228573][ T1750] __device_attach+0x2b5/0x400 [ 690.233359][ T1750] ? device_attach+0x20/0x20 [ 690.237975][ T1750] ? __kmem_cache_free+0xba/0x1f0 [ 690.243039][ T1750] ? do_raw_spin_unlock+0x121/0x230 [ 690.248270][ T1750] bus_probe_device+0x180/0x260 [ 690.253153][ T1750] device_add+0x85b/0xc20 [ 690.257497][ T1750] usb_set_configuration+0x1a79/0x20c0 [ 690.262995][ T1750] usb_generic_driver_probe+0x8d/0x150 [ 690.268470][ T1750] usb_probe_device+0x13d/0x280 [ 690.273328][ T1750] ? usb_register_device_driver+0x230/0x230 [ 690.279231][ T1750] really_probe+0x25b/0xb40 [ 690.283750][ T1750] ? pm_runtime_barrier+0x14b/0x1c0 [ 690.288963][ T1750] __driver_probe_device+0x18c/0x330 [ 690.294262][ T1750] driver_probe_device+0x4f/0x420 [ 690.299301][ T1750] __device_attach_driver+0x2ca/0x520 [ 690.304687][ T1750] bus_for_each_drv+0x24b/0x2d0 [ 690.309549][ T1750] ? coredump_store+0x90/0x90 [ 690.314236][ T1750] ? bus_find_device+0x320/0x320 [ 690.319184][ T1750] __device_attach+0x2b5/0x400 [ 690.323959][ T1750] ? device_attach+0x20/0x20 [ 690.328565][ T1750] ? __kmem_cache_free+0xba/0x1f0 [ 690.333598][ T1750] ? do_raw_spin_unlock+0x121/0x230 [ 690.338823][ T1750] bus_probe_device+0x180/0x260 [ 690.343687][ T1750] device_add+0x85b/0xc20 [ 690.348028][ T1750] usb_new_device+0xa31/0x1630 [ 690.352814][ T1750] ? usb_disconnect+0x8a0/0x8a0 [ 690.357681][ T1750] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.362891][ T1750] ? lockdep_hardirqs_on+0x98/0x150 [ 690.368097][ T1750] hub_event+0x2957/0x49c0 [ 690.372555][ T1750] ? led_work+0x720/0x720 [ 690.376895][ T1750] ? read_lock_is_recursive+0x20/0x20 [ 690.382279][ T1750] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.387484][ T1750] ? process_scheduled_works+0x957/0x15b0 [ 690.393219][ T1750] ? process_scheduled_works+0x957/0x15b0 [ 690.398954][ T1750] process_scheduled_works+0xa45/0x15b0 [ 690.404540][ T1750] ? assign_work+0x400/0x400 [ 690.409144][ T1750] ? assign_work+0x39e/0x400 [ 690.414255][ T1750] worker_thread+0xa55/0xfc0 [ 690.418877][ T1750] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 690.424804][ T1750] ? _raw_spin_unlock+0x40/0x40 [ 690.429669][ T1750] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 690.435583][ T1750] kthread+0x2fa/0x390 [ 690.439669][ T1750] ? pr_cont_work+0x560/0x560 [ 690.444374][ T1750] ? kthread_blkcg+0xd0/0xd0 [ 690.448988][ T1750] ret_from_fork+0x48/0x80 [ 690.453425][ T1750] ? kthread_blkcg+0xd0/0xd0 [ 690.458031][ T1750] ret_from_fork_asm+0x11/0x20 [ 690.462833][ T1750] [ 690.465967][ T1750] Modules linked in: [ 690.616152][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.630070][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.646743][T11053] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 690.651950][ T1750] ---[ end trace 0000000000000000 ]--- [ 690.664419][ T1750] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 690.670128][ T1750] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 690.690404][ T1750] RSP: 0018:ffffc90004ba6780 EFLAGS: 00010202 [ 690.704177][ T1750] RAX: 0000000000000015 RBX: ffff88823bdaa830 RCX: dffffc0000000000 [ 690.712809][ T1750] RDX: 0000000000000000 RSI: ffffc90004ba68a0 RDI: ffff888024520468 [ 690.720960][ T1750] RBP: ffffc90004ba6998 R08: 0000000000000000 R09: 0000000000000000 [ 690.729576][ T1750] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88823bdaab00 [ 690.738728][ T1750] R13: 1ffff92000974cf8 R14: ffff88823bdaac18 R15: 00000000000000a8 [ 690.747542][ T1750] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 690.756767][ T1750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.763677][ T1750] CR2: 00007f7f5fb81ab8 CR3: 0000000030fc2000 CR4: 00000000003506f0 [ 690.772113][ T1750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 690.780135][ T1750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 690.788688][ T1750] Kernel panic - not syncing: Fatal exception [ 690.795020][ T1750] Kernel Offset: disabled [ 690.799345][ T1750] Rebooting in 86400 seconds..