last executing test programs: 4m49.491559636s ago: executing program 3 (id=460): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x6, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/131) 4m48.375081166s ago: executing program 3 (id=462): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff1, 0x1}, {0x1c, 0xfff1}}}, 0xfca7}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4m47.07525938s ago: executing program 3 (id=467): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000011401002bbd7000fcdbdf"], 0x18}, 0x1, 0x0, 0x0, 0x24008040}, 0x4004c884) 4m44.992376797s ago: executing program 3 (id=470): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 4m42.517248526s ago: executing program 3 (id=484): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x94002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capget(&(0x7f00000003c0)={0x20071026}, 0x0) 4m41.172657444s ago: executing program 3 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = dup3(r1, r0, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000005c0)="c4c1c5f6ba00000000111d008000000f546f040ffc9f00000000c744240008000000c744240207000000c7442406000000000f011424b9800000c00f3235001000000f30d9ee670f01c03e660fc77000c74424000d000000c74424022c000000c7442406000000000f011424", 0x6c}], 0x1, 0x22, &(0x7f0000000400)=[@flags={0x3, 0x149}, @dstype3={0x7, 0x1}], 0x2) 4m25.290319638s ago: executing program 32 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = dup3(r1, r0, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000005c0)="c4c1c5f6ba00000000111d008000000f546f040ffc9f00000000c744240008000000c744240207000000c7442406000000000f011424b9800000c00f3235001000000f30d9ee670f01c03e660fc77000c74424000d000000c74424022c000000c7442406000000000f011424", 0x6c}], 0x1, 0x22, &(0x7f0000000400)=[@flags={0x3, 0x149}, @dstype3={0x7, 0x1}], 0x2) 10.367043638s ago: executing program 0 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0xfffffffe}, 0x24}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000040)) 9.349869669s ago: executing program 1 (id=1155): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 9.349667839s ago: executing program 2 (id=1156): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)='@\'', 0x2}], 0x1) 8.663792474s ago: executing program 0 (id=1158): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, 0x0) 8.527690175s ago: executing program 2 (id=1159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf2503000000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 7.767794316s ago: executing program 1 (id=1160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="238f98fe", 0x4) 7.711596801s ago: executing program 0 (id=1161): syz_io_uring_setup(0x71e2, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x5, 0xffffffff}, 0x0, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000280)={0x8001}, 0x1) 7.371602008s ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = fsopen(0x0, 0x0) sched_getscheduler(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r3, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='auto_da_alloc', 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28, 0x100, 0x0, 0x0) 6.871320408s ago: executing program 0 (id=1164): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000600)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 6.60016424s ago: executing program 4 (id=1166): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 6.307106163s ago: executing program 4 (id=1167): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.709510362s ago: executing program 5 (id=1168): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000), 0x11000, 0x800, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) 5.411829015s ago: executing program 5 (id=1169): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'batadv0\x00'}}, 0x1e) 5.243908219s ago: executing program 5 (id=1170): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 5.197686912s ago: executing program 2 (id=1171): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0xc000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) 4.247256389s ago: executing program 4 (id=1172): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, 0x0) 3.98451514s ago: executing program 5 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) socket$nl_generic(0x10, 0x3, 0x10) 3.927328084s ago: executing program 4 (id=1174): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, &(0x7f0000000600)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3.923274284s ago: executing program 1 (id=1175): r0 = syz_open_dev$video(0x0, 0x5, 0x2800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r5 = socket(0x40000000015, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8e8bf4edc8c7a783, 0x1, r0, &(0x7f00000000c0)="42f81a5beb5a0f5602e1d0794131938cd9cbb219e6a6f026e506eb2e29394159d5ca06e567d9a393065d8f7d", 0x2c, 0xa}]) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) 3.776377236s ago: executing program 2 (id=1176): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 2.876631019s ago: executing program 5 (id=1177): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 1.940692234s ago: executing program 1 (id=1178): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1.874110509s ago: executing program 5 (id=1179): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00004dd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.873626299s ago: executing program 0 (id=1180): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.571639633s ago: executing program 0 (id=1181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf2503000000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 1.571139963s ago: executing program 1 (id=1182): migrate_pages(0x0, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.031745127s ago: executing program 2 (id=1183): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 692.698644ms ago: executing program 2 (id=1184): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 590.182412ms ago: executing program 4 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = fsopen(0x0, 0x0) sched_getscheduler(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r3, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='auto_da_alloc', 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28, 0x100, 0x0, 0x0) 0s ago: executing program 4 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000200)={0x3, 0x0, @ioapic={0x4, 0x3, 0x2, 0x10, 0x0, [{0xaa, 0x8, 0xf8}, {0x1, 0x6, 0x9, '\x00', 0x4}, {0x0, 0xb, 0x0, '\x00', 0x78}, {0x7e, 0xa, 0xb, '\x00', 0x1}, {0xa7, 0x81, 0x9}, {0x2, 0x5, 0x3, '\x00', 0xde}, {0xcf, 0x9b, 0xd, '\x00', 0x8}, {0x6, 0x5a, 0x5, '\x00', 0x89}, {0xc, 0x5, 0x0, '\x00', 0x8}, {0x4, 0x5, 0xe, '\x00', 0xb}, {0x6, 0x0, 0x7, '\x00', 0x4}, {0x7, 0x2, 0xa, '\x00', 0x6}, {0x0, 0x9, 0xb8, '\x00', 0x6e}, {0x0, 0xf6, 0x4, '\x00', 0xfa}, {0x4, 0x3, 0x2, '\x00', 0xe}, {0x2, 0xff, 0xa6, '\x00', 0x6}, {0x3, 0x7, 0x1, '\x00', 0x6}, {0x3, 0x3, 0x2, '\x00', 0x8}, {0xb, 0x8, 0x7, '\x00', 0xff}, {0x6, 0x1, 0x5, '\x00', 0x2}, {0x9, 0x4, 0x5, '\x00', 0x3}, {0x6, 0x4, 0x0, '\x00', 0x8}, {0x2, 0x5a, 0x8, '\x00', 0x8}, {0x10, 0x1, 0x1, '\x00', 0x5}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) kernel console output (not intermixed with test programs): king state [ 73.852344][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.865327][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.905284][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.917882][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.929177][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.939387][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.948679][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.957847][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.967220][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.976212][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.985508][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.992626][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.006170][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.015860][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.024471][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.035314][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.050725][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.062548][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.088106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.097701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.106524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.116625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.127921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.137417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.146576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.155879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.164711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.173588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.182332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.191279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.200945][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.216904][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.235626][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.251033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.260896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.269126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.279027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.302755][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.321718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.337186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.349353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.358783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.372999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.381107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.393335][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 74.395093][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 74.399349][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 74.405580][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 74.436974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.447426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.459041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.468136][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 74.480780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.489901][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.497047][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.506832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.522913][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.532017][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.595327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.608145][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.624772][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.631896][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.657334][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.666685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.689296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.710110][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.725648][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.734941][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.744194][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.771805][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.786382][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.816822][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.834080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.854348][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.876065][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.915978][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.946073][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.964214][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.978826][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.986939][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.994686][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.002394][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.012424][ T4270] device veth0_vlan entered promiscuous mode [ 75.025434][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.055391][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.078608][ T4270] device veth1_vlan entered promiscuous mode [ 75.095363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.114569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.122053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.153292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.160853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.187796][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.223921][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.239802][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.249130][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.285919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.296527][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.319495][ T4269] device veth0_vlan entered promiscuous mode [ 75.351535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.366006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.379843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.391804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.406314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.417811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.430483][ T4270] device veth0_macvtap entered promiscuous mode [ 75.448765][ T4269] device veth1_vlan entered promiscuous mode [ 75.462167][ T4265] device veth0_vlan entered promiscuous mode [ 75.469803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.484293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.492169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.505632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.516215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.524483][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.536894][ T4270] device veth1_macvtap entered promiscuous mode [ 75.559880][ T4265] device veth1_vlan entered promiscuous mode [ 75.607510][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.622468][ T4269] device veth0_macvtap entered promiscuous mode [ 75.637419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.651824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.661084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.671082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.680663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.690058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.700145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.721039][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.736776][ T4269] device veth1_macvtap entered promiscuous mode [ 75.748391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.756568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.766506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.774836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.784311][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.807927][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.817377][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826594][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835567][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.852040][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.861715][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.870750][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.878734][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.888820][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.897514][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.921123][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.932005][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.943679][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.954589][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.965315][ T4265] device veth0_macvtap entered promiscuous mode [ 75.975317][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.983474][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.991950][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.001132][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.009489][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.019779][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.030400][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.042273][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.058345][ T4265] device veth1_macvtap entered promiscuous mode [ 76.070765][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.079972][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.088455][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.096513][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.116528][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.134235][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142948][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.152375][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.161460][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.185000][ T4272] device veth0_vlan entered promiscuous mode [ 76.218281][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.229915][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.253324][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.265140][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.275576][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.286240][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.297345][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.314152][ T4272] device veth1_vlan entered promiscuous mode [ 76.355101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.369858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.378755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.395980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.408076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.436642][ T4271] device veth0_vlan entered promiscuous mode [ 76.455695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.463377][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 76.470121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.477547][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 76.477563][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 76.483649][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 76.492095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.522918][ T4271] device veth1_vlan entered promiscuous mode [ 76.544604][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 76.557194][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.568090][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.578564][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.589264][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.600505][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.610013][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.634935][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.674579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.682726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.697740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.709165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.720833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.731843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.746667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.770048][ T4272] device veth0_macvtap entered promiscuous mode [ 76.782125][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.794005][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802730][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.811726][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.834315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.844606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.855491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.869708][ T4271] device veth0_macvtap entered promiscuous mode [ 76.881062][ T4272] device veth1_macvtap entered promiscuous mode [ 76.919274][ T4271] device veth1_macvtap entered promiscuous mode [ 76.963582][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.971561][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.988721][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.000373][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.012492][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.023010][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.038784][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.049268][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.060200][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.081163][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.089783][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.091091][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.107597][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.111537][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.116795][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.131786][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.141111][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.151848][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.161806][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.172437][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.182745][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.195326][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.205287][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.216280][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.227481][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.241859][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.252579][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.262438][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.274195][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.284077][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.294582][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.310128][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.324872][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.342960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.355183][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.363941][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.374649][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.385900][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.396449][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.407083][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.418629][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.429638][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.439539][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.450187][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.461373][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.471154][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480994][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490126][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.499000][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.523370][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.532055][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.545842][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.559445][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.569735][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.593205][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.628851][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.654044][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.671720][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.681779][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.682608][ T4384] 9pnet_fd: Insufficient options for proto=fd [ 77.745533][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.760163][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.816713][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.856778][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.879911][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.894768][ T4387] libceph: resolve 'šlrk' (ret=-3): failed [ 77.904248][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.923275][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.931338][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.939228][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.974641][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.013943][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.190335][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.198424][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.571113][ T4397] mmap: syz.0.7 (4397) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.589444][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 78.589482][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 78.589801][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 78.590870][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 78.648199][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 78.686909][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.696483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.707108][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.715180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.883179][ T4314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.433549][ T14] cfg80211: failed to load regulatory.db [ 81.903183][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 81.917960][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.952237][ T4314] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 81.984489][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.038476][ T4314] usb 4-1: config 0 descriptor?? [ 82.063656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.071898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 82.080219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 82.088501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 82.096836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.105119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.113709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.181857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 82.203132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.211474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.323100][ T4273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.072267][ T4314] usbhid 4-1:0.0: can't add hid device: -71 [ 83.122337][ T4314] usbhid: probe of 4-1:0.0 failed with error -71 [ 83.169718][ T4430] 9pnet_fd: Insufficient options for proto=fd [ 83.185336][ T4314] usb 4-1: USB disconnect, device number 2 [ 83.195311][ T4273] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 83.223192][ T4273] usb 1-1: config 0 has no interface number 0 [ 83.257924][ T4273] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 83.293833][ T4433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.321381][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.372353][ T4273] usb 1-1: Product: syz [ 83.382574][ T4273] usb 1-1: Manufacturer: syz [ 83.388855][ T4273] usb 1-1: SerialNumber: syz [ 83.411513][ T4273] usb 1-1: config 0 descriptor?? [ 83.433184][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 84.384161][ T4273] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 84.402827][ T4273] usb 1-1: No valid video chain found. [ 84.433018][ T4273] usb 1-1: USB disconnect, device number 2 [ 85.781443][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 85.808161][ T4455] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 89.155489][ T4488] 9pnet_fd: Insufficient options for proto=fd [ 90.282235][ T4504] ======================================================= [ 90.282235][ T4504] WARNING: The mand mount option has been deprecated and [ 90.282235][ T4504] and is ignored by this kernel. Remove the mand [ 90.282235][ T4504] option from the mount to silence this warning. [ 90.282235][ T4504] ======================================================= [ 90.321712][ T4505] overlayfs: overlapping lowerdir path [ 91.123113][ T4273] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.583377][ T4273] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 91.684939][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 91.693836][ T4521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 91.703221][ T4521] Zero length message leads to an empty skb [ 91.856357][ T4273] usb 2-1: config 0 has no interface number 0 [ 92.176777][ T4273] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 92.417906][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.464411][ T4273] usb 2-1: Product: syz [ 92.474072][ T4273] usb 2-1: Manufacturer: syz [ 92.478845][ T4273] usb 2-1: SerialNumber: syz [ 92.511798][ T4273] usb 2-1: config 0 descriptor?? [ 92.772386][ T4273] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 92.827093][ T4273] usb 2-1: No valid video chain found. [ 92.854519][ T4273] usb 2-1: USB disconnect, device number 2 [ 92.875080][ T4528] 9pnet_fd: Insufficient options for proto=fd [ 94.245731][ T4543] 9pnet_fd: Insufficient options for proto=fd [ 94.283266][ T4544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 94.292164][ T4544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 95.527316][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 95.536282][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 95.988209][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 96.228373][ T4552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.46'. [ 96.263670][ T4552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.46'. [ 97.553292][ T4578] 9pnet_fd: Insufficient options for proto=fd [ 97.693204][ T4350] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.878301][ T4350] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 97.900551][ T4350] usb 1-1: config 0 has no interface number 0 [ 97.971018][ T4350] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 98.041935][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.109258][ T4350] usb 1-1: Product: syz [ 98.142305][ T4350] usb 1-1: Manufacturer: syz [ 98.172998][ T4350] usb 1-1: SerialNumber: syz [ 98.322697][ T4350] usb 1-1: config 0 descriptor?? [ 98.619144][ T4350] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 98.661297][ T4350] usb 1-1: No valid video chain found. [ 98.711818][ T4350] usb 1-1: USB disconnect, device number 3 [ 102.702656][ T4273] libceph: connect (1)[c::]:6789 error -101 [ 102.709443][ T4273] libceph: mon0 (1)[c::]:6789 connect error [ 102.737801][ T4624] ceph: No mds server is up or the cluster is laggy [ 103.263133][ T4349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.470724][ T4273] libceph: connect (1)[c::]:6789 error -101 [ 103.476925][ T4273] libceph: mon0 (1)[c::]:6789 connect error [ 103.496633][ T4349] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 103.522927][ T4349] usb 1-1: config 0 has no interface number 0 [ 103.562117][ T4349] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 103.614451][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.670240][ T4349] usb 1-1: Product: syz [ 103.677982][ T4349] usb 1-1: Manufacturer: syz [ 103.682674][ T4349] usb 1-1: SerialNumber: syz [ 103.729328][ T4349] usb 1-1: config 0 descriptor?? [ 103.750324][ T4645] tipc: Started in network mode [ 103.755881][ T4645] tipc: Node identity 264b2fd40a86, cluster identity 4711 [ 103.764702][ T4645] tipc: Enabled bearer , priority 0 [ 103.772182][ T4645] device syzkaller0 entered promiscuous mode [ 103.796177][ T4644] tipc: Resetting bearer [ 103.867682][ T4644] tipc: Disabling bearer [ 103.991076][ T4652] syz.3.78 uses obsolete (PF_INET,SOCK_PACKET) [ 103.999653][ T4349] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 104.006106][ T4321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.014537][ T4349] usb 1-1: No valid video chain found. [ 104.036086][ T4349] usb 1-1: USB disconnect, device number 4 [ 104.262242][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'. [ 104.276412][ T4321] usb 2-1: Using ep0 maxpacket: 8 [ 104.951024][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.975923][ T4661] sctp: failed to load transform for md5: -2 [ 105.213460][ T4321] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 105.226594][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 105.236681][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 105.277729][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.336481][ T4321] usb 2-1: config 0 descriptor?? [ 106.326245][ T4321] usbhid 2-1:0.0: can't add hid device: -71 [ 106.359268][ T4321] usbhid: probe of 2-1:0.0 failed with error -71 [ 106.411870][ T4321] usb 2-1: USB disconnect, device number 3 [ 107.896547][ T4698] tipc: Started in network mode [ 107.918886][ T4698] tipc: Node identity 926a878a9559, cluster identity 4711 [ 107.991827][ T4698] tipc: Enabled bearer , priority 0 [ 108.054763][ T4703] device syzkaller0 entered promiscuous mode [ 108.192321][ T4698] tipc: Resetting bearer [ 109.110144][ T4697] tipc: Resetting bearer [ 109.118579][ T4350] tipc: Node number set to 120817546 [ 109.167361][ T4697] tipc: Disabling bearer [ 112.758641][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 113.747933][ T4447] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.325941][ T4755] tipc: Enabled bearer , priority 0 [ 114.345518][ T4755] device syzkaller0 entered promiscuous mode [ 114.378650][ T4755] tipc: Resetting bearer [ 114.394864][ T4754] tipc: Resetting bearer [ 114.432305][ T4754] tipc: Disabling bearer [ 114.715701][ T4273] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.742197][ T4273] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.962301][ T4765] libceph: resolve 'šlrk' (ret=-3): failed [ 115.031575][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.040688][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.066856][ T4766] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.075865][ T4766] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.084627][ T4766] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.093433][ T4766] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.583696][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.184638][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 116.193638][ T4776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 117.039729][ T4781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 117.320304][ T4781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 117.353161][ T4781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 122.765927][ T4803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.869145][ T4878] libceph: resolve 'šlrk' (ret=-3): failed [ 126.961366][ T4874] nvme_fabrics: missing parameter 'transport=%s' [ 126.973375][ T4874] nvme_fabrics: missing parameter 'nqn=%s' [ 127.650429][ T4886] wg1 speed is unknown, defaulting to 1000 [ 127.755431][ T4886] wg1 speed is unknown, defaulting to 1000 [ 127.876784][ T4886] wg1 speed is unknown, defaulting to 1000 [ 130.261965][ T4909] Bluetooth: MGMT ver 1.22 [ 130.292027][ T4909] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 130.314199][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 130.417203][ T4886] infiniband syz0: set active [ 130.423418][ T4273] wg1 speed is unknown, defaulting to 1000 [ 130.464558][ T4886] infiniband syz0: added wg1 [ 130.497964][ T4886] rdma_rxe: unable to create cq [ 130.510339][ T4886] infiniband syz0: Couldn't create ib_mad CQ [ 130.536722][ T4886] infiniband syz0: Couldn't open port 1 [ 130.619310][ T4886] RDS/IB: syz0: added [ 130.632230][ T4886] smc: adding ib device syz0 with port count 1 [ 130.653005][ T4886] smc: ib device syz0 port 1 has pnetid [ 130.666815][ T4350] wg1 speed is unknown, defaulting to 1000 [ 130.678660][ T4886] wg1 speed is unknown, defaulting to 1000 [ 131.762405][ T4886] wg1 speed is unknown, defaulting to 1000 [ 131.972488][ T4886] wg1 speed is unknown, defaulting to 1000 [ 132.214550][ T4886] wg1 speed is unknown, defaulting to 1000 [ 132.485144][ T4886] wg1 speed is unknown, defaulting to 1000 [ 132.636653][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.643792][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.027431][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.788146][ T4944] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 138.702279][ T4281] Bluetooth: hci4: link tx timeout [ 138.707935][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.718411][ T4281] Bluetooth: hci4: link tx timeout [ 138.723639][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.784024][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 141.509077][ T5029] netlink: 'syz.3.184': attribute type 11 has an invalid length. [ 141.556490][ T5029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.184'. [ 142.864710][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 144.343172][ T4477] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.548438][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 144.576413][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 144.611793][ T4477] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 144.653102][ T4477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.661121][ T4477] usb 2-1: Product: syz [ 144.718683][ T4477] usb 2-1: Manufacturer: syz [ 144.733874][ T4477] usb 2-1: SerialNumber: syz [ 144.761101][ T4477] usb 2-1: config 0 descriptor?? [ 144.766689][ T5067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.789852][ T5067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.844178][ T4477] usb 2-1: ucan: probing device on interface #0 [ 144.850479][ T4477] usb 2-1: ucan: invalid EP count (1) [ 144.868397][ T4477] usb 2-1: ucan: probe failed; try to update the device firmware [ 147.971362][ T3598] usb 2-1: USB disconnect, device number 4 [ 148.651963][ T5108] rdma_rxe: rxe_register_device failed with error -23 [ 148.663167][ T3598] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.719142][ T5108] rdma_rxe: failed to add wg1 [ 148.863281][ T3598] usb 2-1: Using ep0 maxpacket: 8 [ 148.870157][ T3598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 148.968634][ T3598] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 148.996879][ T3598] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 149.033664][ T3598] usb 2-1: Product: syz [ 149.040146][ T3598] usb 2-1: Manufacturer: syz [ 149.216784][ T3598] usb 2-1: SerialNumber: syz [ 149.896172][ T3598] usb 2-1: Invalid connection information received from device [ 150.098586][ T4477] usb 2-1: USB disconnect, device number 5 [ 150.425143][ T5121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 150.431833][ T5121] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.443917][ T5121] vhci_hcd vhci_hcd.0: Device attached [ 150.468936][ T5123] vhci_hcd: connection closed [ 150.470406][ T9] vhci_hcd: stop threads [ 150.482674][ T9] vhci_hcd: release socket [ 150.490013][ T9] vhci_hcd: disconnect device [ 150.734334][ T5129] 9p: Unknown Cache mode readahead [ 152.807760][ T5146] tipc: Started in network mode [ 153.520408][ T5146] tipc: Node identity be5bb8ef4607, cluster identity 4711 [ 153.542648][ T5146] tipc: Enabled bearer , priority 0 [ 153.615241][ T5154] device syzkaller0 entered promiscuous mode [ 153.795281][ T5145] tipc: Resetting bearer [ 153.849085][ T5145] tipc: Disabling bearer [ 155.876855][ T126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.899746][ T126] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.452007][ T5196] tipc: Enabled bearer , priority 0 [ 157.551730][ T5201] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 157.570276][ T5201] ubi31: attaching mtd0 [ 157.589306][ T5201] ubi31: scanning is finished [ 157.594174][ T5201] ubi31: empty MTD device detected [ 158.117979][ T5201] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 158.191633][ T5196] device syzkaller0 entered promiscuous mode [ 158.243297][ T5196] tipc: Resetting bearer [ 158.458067][ T5195] tipc: Resetting bearer [ 158.500290][ T5195] tipc: Disabling bearer [ 165.251287][ T5269] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 167.197587][ T5287] fuse: Bad value for 'fd' [ 168.804418][ T5314] rdma_rxe: already configured on wg1 [ 169.942421][ T5331] 9pnet_fd: Insufficient options for proto=fd [ 172.031272][ T5368] fuse: Bad value for 'fd' [ 172.585614][ T5375] rdma_rxe: already configured on wg1 [ 175.144663][ T5415] ubi31: attaching mtd0 [ 175.175098][ T5415] ubi31: scanning is finished [ 175.448257][ T5415] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.524576][ T5415] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 175.593568][ T5415] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.600656][ T5415] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 175.703309][ T5415] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.884819][ T5415] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 175.941412][ T5415] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3523552250 [ 176.004800][ T5415] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 176.049908][ T5418] ubi31: background thread "ubi_bgt31d" started, PID 5418 [ 178.832981][ T3598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 179.033122][ T3598] usb 4-1: Using ep0 maxpacket: 8 [ 179.039976][ T3598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 179.091878][ T3598] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 179.266324][ T3598] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 179.293150][ T3598] usb 4-1: Product: syz [ 179.303921][ T3598] usb 4-1: Manufacturer: syz [ 179.308662][ T3598] usb 4-1: SerialNumber: syz [ 179.533077][ T3598] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 179.542035][ T3598] visor: probe of 4-1:1.0 failed with error -71 [ 179.593334][ T3598] usb 4-1: USB disconnect, device number 3 [ 185.513260][ T4273] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 185.627379][ T4268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 185.639218][ T4268] CPU: 0 PID: 4268 Comm: kworker/u5:2 Not tainted 6.1.148-syzkaller #0 [ 185.647509][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.657590][ T4268] Workqueue: hci2 hci_rx_work [ 185.662329][ T4268] Call Trace: [ 185.665632][ T4268] [ 185.668582][ T4268] dump_stack_lvl+0x168/0x22e [ 185.673284][ T4268] ? show_regs_print_info+0x12/0x12 [ 185.678536][ T4268] ? load_image+0x3b0/0x3b0 [ 185.683077][ T4268] sysfs_create_dir_ns+0x252/0x280 [ 185.688208][ T4268] ? hci_rx_work+0x3eb/0xd40 [ 185.692829][ T4268] ? sysfs_warn_dup+0xa0/0xa0 [ 185.697513][ T4268] ? do_raw_spin_unlock+0x11d/0x230 [ 185.702721][ T4268] kobject_add_internal+0x6b8/0xc80 [ 185.707938][ T4268] kobject_add+0x152/0x210 [ 185.712373][ T4268] ? kobject_init+0x1d0/0x1d0 [ 185.717056][ T4268] ? klist_children_get+0x50/0x50 [ 185.722082][ T4268] ? get_device_parent+0x121/0x3f0 [ 185.727204][ T4268] device_add+0x483/0xfb0 [ 185.731560][ T4268] ? kmem_cache_free+0xf7/0x290 [ 185.736417][ T4268] hci_conn_add_sysfs+0xd1/0x1e0 [ 185.741359][ T4268] le_conn_complete_evt+0xd1d/0x1320 [ 185.746702][ T4268] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 185.752962][ T4268] ? lockdep_hardirqs_on+0x94/0x140 [ 185.758167][ T4268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 185.764339][ T4268] ? cs_le_create_conn+0x490/0x490 [ 185.769469][ T4268] hci_le_conn_complete_evt+0x183/0x440 [ 185.775023][ T4268] ? hci_remote_host_features_evt+0x270/0x270 [ 185.781096][ T4268] hci_event_packet+0x791/0x1210 [ 185.786055][ T4268] ? bis_list+0x280/0x280 [ 185.790391][ T4268] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 185.796292][ T4268] ? kcov_remote_start+0x4c7/0x7e0 [ 185.801412][ T4268] ? mt_dump_node+0xbd0/0x1930 [ 185.806179][ T4268] ? hci_send_to_monitor+0x9c/0x4a0 [ 185.811403][ T4268] hci_rx_work+0x3eb/0xd40 [ 185.815831][ T4268] ? _raw_spin_unlock+0x40/0x40 [ 185.820692][ T4268] ? process_one_work+0x7a1/0x1160 [ 185.825805][ T4268] process_one_work+0x898/0x1160 [ 185.830750][ T4268] ? worker_detach_from_pool+0x240/0x240 [ 185.836387][ T4268] ? _raw_spin_lock_irq+0xab/0xe0 [ 185.841412][ T4268] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 185.846785][ T4268] ? kthread_data+0x4b/0xc0 [ 185.851303][ T4268] worker_thread+0xaa2/0x1250 [ 185.855994][ T4268] kthread+0x29d/0x330 [ 185.860071][ T4268] ? worker_clr_flags+0x1a0/0x1a0 [ 185.865091][ T4268] ? kthread_blkcg+0xd0/0xd0 [ 185.869684][ T4268] ret_from_fork+0x1f/0x30 [ 185.874124][ T4268] [ 185.879001][ T4268] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.896962][ T4268] Bluetooth: hci2: failed to register connection device [ 185.909056][ T4273] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 186.013674][ T4273] usb 4-1: config 0 has no interface number 0 [ 186.035196][ T4273] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 186.051264][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.072159][ T4273] usb 4-1: Product: syz [ 186.231181][ T4273] usb 4-1: Manufacturer: syz [ 186.236342][ T4273] usb 4-1: SerialNumber: syz [ 186.250921][ T4273] usb 4-1: config 0 descriptor?? [ 187.062081][ T4273] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 187.068582][ T4273] usb 4-1: No valid video chain found. [ 187.085896][ T4273] usb 4-1: USB disconnect, device number 4 [ 190.353310][ T4477] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.429756][ T4477] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 191.458271][ T4477] usb 1-1: config 0 has no interface number 0 [ 191.491482][ T4477] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 191.541149][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.597783][ T4477] usb 1-1: Product: syz [ 191.962880][ T4477] usb 1-1: Manufacturer: syz [ 191.973833][ T4477] usb 1-1: SerialNumber: syz [ 192.265365][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 192.391864][ T4477] usb 1-1: config 0 descriptor?? [ 192.659750][ T4477] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 192.673211][ T4477] usb 1-1: No valid video chain found. [ 192.681335][ T4477] usb 1-1: USB disconnect, device number 5 [ 192.730201][ T5605] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 193.002831][ T5605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.003226][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.075319][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082209][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.143121][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 196.149259][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 196.153149][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 196.161628][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 197.333171][ T4385] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.533499][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 197.592050][ T4385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.603849][ T4385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.653336][ T4385] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 197.671303][ T4385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.750549][ T4321] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 197.770339][ T4385] usb 1-1: config 0 descriptor?? [ 197.896919][ T4321] usb 3-1: config 0 has no interface number 0 [ 197.908112][ T4321] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 197.917232][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.925411][ T4321] usb 3-1: Product: syz [ 197.929683][ T4321] usb 3-1: Manufacturer: syz [ 197.934367][ T4321] usb 3-1: SerialNumber: syz [ 197.942211][ T4321] usb 3-1: config 0 descriptor?? [ 198.197926][ T4321] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 198.206582][ T4321] usb 3-1: No valid video chain found. [ 198.214470][ T4321] usb 3-1: USB disconnect, device number 2 [ 198.991350][ T4385] samsung 0003:0419:0600.0003: item fetching failed at offset 0/7 [ 199.001786][ T4385] samsung 0003:0419:0600.0003: parse failed [ 199.008981][ T4385] samsung: probe of 0003:0419:0600.0003 failed with error -22 [ 199.178538][ T4385] usb 1-1: USB disconnect, device number 6 [ 200.455497][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'. [ 201.094800][ T5693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.358'. [ 202.609264][ T5696] tipc: Enabled bearer , priority 0 [ 202.662452][ T5701] device syzkaller0 entered promiscuous mode [ 202.836836][ T5701] tipc: Resetting bearer [ 202.859025][ T5695] tipc: Resetting bearer [ 202.915923][ T5695] tipc: Disabling bearer [ 203.003200][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.195116][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.241343][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.261146][ T7] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 203.278106][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.355440][ T7] usb 5-1: config 0 descriptor?? [ 203.867807][ T7] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 203.897471][ T7] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 203.905280][ T7] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 203.925565][ T7] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 204.011394][ T7] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 204.089380][ T7] usb 5-1: USB disconnect, device number 2 [ 204.140214][ T4314] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 204.198256][ T4273] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 204.565256][ T4385] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.673116][ T5656] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 205.095298][ T4314] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 205.153974][ T5656] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 205.182134][ T5656] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 205.259496][ T4385] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 205.301527][ T4385] usb 2-1: config 0 has no interface number 0 [ 205.423830][ T4385] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 205.433315][ T4385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.450335][ T4385] usb 2-1: Product: syz [ 205.454995][ T4385] usb 2-1: Manufacturer: syz [ 205.459716][ T4385] usb 2-1: SerialNumber: syz [ 205.489697][ T4385] usb 2-1: config 0 descriptor?? [ 205.642207][ T5656] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 205.826151][ T4273] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 205.842042][ T4324] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 205.861165][ T5734] fido_id[5734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 205.876591][ T4314] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 205.951946][ T4385] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 205.959226][ T4385] usb 2-1: No valid video chain found. [ 205.966223][ T4385] usb 2-1: USB disconnect, device number 6 [ 206.013333][ T4314] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 207.363981][ T5750] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 207.373193][ T4314] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 207.498719][ T4273] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 207.515148][ T4314] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 207.693963][ T4314] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 208.129994][ T4314] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 208.166466][ T4273] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 208.186022][ T4273] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 209.126532][ T5776] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.377'. [ 211.573242][ T4273] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.797140][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 211.973634][ T4273] usb 2-1: Using ep0 maxpacket: 32 [ 211.981520][ T4273] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 211.990373][ T4273] usb 2-1: config 0 has no interface number 0 [ 211.996973][ T4273] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.008332][ T4273] usb 2-1: config 0 interface 89 has no altsetting 0 [ 212.022161][ T4273] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 212.041596][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.065638][ T4273] usb 2-1: Product: syz [ 212.073222][ T4273] usb 2-1: Manufacturer: syz [ 212.084821][ T4273] usb 2-1: SerialNumber: syz [ 212.116696][ T4273] usb 2-1: config 0 descriptor?? [ 212.146853][ T4273] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 212.171937][ T4273] em28xx 2-1:0.89: Video interface 89 found: [ 212.404379][ T4273] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 212.502007][ T4273] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 212.604497][ T4273] em28xx 2-1:0.89: board has no eeprom [ 213.083071][ T4273] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 213.098173][ T4273] em28xx 2-1:0.89: analog set to bulk mode. [ 213.140682][ T4273] usb 2-1: USB disconnect, device number 7 [ 213.160704][ T4273] em28xx 2-1:0.89: Disconnecting em28xx [ 213.168416][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 213.198390][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 213.210779][ T4314] em28xx 2-1:0.89: Registering V4L2 extension [ 213.342470][ T5810] ceph: No mds server is up or the cluster is laggy [ 213.380416][ T4314] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 213.398263][ T4314] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 213.451810][ T4314] em28xx 2-1:0.89: No AC97 audio processor [ 213.489088][ T4314] usb 2-1: Decoder not found [ 213.501049][ T4314] em28xx 2-1:0.89: failed to create media graph [ 213.522092][ T4314] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 213.663464][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.669928][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 214.424672][ T4314] em28xx 2-1:0.89: Registering snapshot button... [ 214.486144][ T4314] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input10 [ 215.192616][ T4314] em28xx 2-1:0.89: Remote control support is not available for this card. [ 215.623335][ T4273] em28xx 2-1:0.89: Closing input extension [ 215.630641][ T4273] em28xx 2-1:0.89: Deregistering snapshot button [ 216.558508][ T4273] em28xx 2-1:0.89: Freeing device [ 217.961473][ T5856] tipc: Started in network mode [ 218.037458][ T5856] tipc: Node identity dadeeb406d86, cluster identity 4711 [ 218.072390][ T5856] tipc: Enabled bearer , priority 0 [ 218.099682][ T5862] device syzkaller0 entered promiscuous mode [ 218.785860][ T5855] tipc: Resetting bearer [ 219.428904][ T5656] tipc: Node number set to 3076057920 [ 219.892570][ T5855] tipc: Disabling bearer [ 224.667580][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 224.901429][ T5912] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 228.274241][ T4349] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 228.302842][ T4349] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.984926][ T5960] fido_id[5960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.692948][ T5834] Bluetooth: hci5: Frame reassembly failed (-84) [ 236.703376][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 236.709727][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.983827][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 239.956859][ T5656] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.154615][ T5656] usb 5-1: Using ep0 maxpacket: 8 [ 240.167031][ T5656] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.202326][ T5656] usb 5-1: config 4 interface 0 has no altsetting 0 [ 240.229989][ T5656] usb 5-1: string descriptor 0 read error: -22 [ 240.251046][ T5656] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 240.267112][ T5656] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 240.342716][ T5656] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 240.377924][ T4419] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.457585][ T5656] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.624910][ T6052] usb 5-1: dvb_usb_au6610: wlen=40, aborting [ 240.757064][ T5656] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 240.774635][ T5656] usb 5-1: media controller created [ 240.798617][ T5656] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.993318][ T5656] zl10353_read_register: readreg error (reg=127, ret==0) [ 242.383248][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 242.390762][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 243.980480][ T4385] usb 5-1: USB disconnect, device number 3 [ 245.121317][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 246.571243][ T6128] sched: RT throttling activated [ 247.318232][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.495522][ T6033] Set syz1 is full, maxelem 65536 reached [ 247.554299][ T6143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 247.569152][ T6143] ubi: mtd0 is already attached to ubi31 [ 248.833247][ T22] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 249.076508][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.111857][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 249.201122][ T22] usb 1-1: config 37 has an invalid interface number: 110 but max is 1 [ 249.267927][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 249.292745][ T22] usb 1-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 249.342921][ T22] usb 1-1: config 37 has 1 interface, different from the descriptor's value: 2 [ 249.343956][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 249.530219][ T22] usb 1-1: config 37 has no interface number 0 [ 249.561254][ T22] usb 1-1: config 37 interface 110 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.598180][ T22] usb 1-1: config 37 interface 110 has no altsetting 0 [ 250.615934][ T22] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 250.640334][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.650470][ T22] usb 1-1: Product: syz [ 250.662076][ T22] usb 1-1: Manufacturer: syz [ 250.689677][ T22] usb 1-1: SerialNumber: syz [ 251.730961][ T22] usb 1-1: can't set config #37, error -71 [ 251.769118][ T22] usb 1-1: USB disconnect, device number 7 [ 255.515559][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.522399][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.403058][ T4314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 260.643092][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 261.331142][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.341414][ T4314] usb 3-1: config 0 has no interfaces? [ 261.348495][ T4314] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.358239][ T4314] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 261.366661][ T4314] usb 3-1: Product: syz [ 261.371475][ T4314] usb 3-1: Manufacturer: syz [ 261.377383][ T4314] usb 3-1: config 0 descriptor?? [ 261.959918][ T6298] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 262.033845][ T4324] usb 3-1: USB disconnect, device number 3 [ 263.467837][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 263.476820][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 264.871931][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 264.923544][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 264.998219][ T6319] ceph: No mds server is up or the cluster is laggy [ 265.173178][ T4324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.483093][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 265.490717][ T4324] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 265.507795][ T4324] usb 5-1: config 0 has no interface number 0 [ 266.276556][ T4324] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=91.9e [ 266.287015][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.644650][ T4324] usb 5-1: config 0 descriptor?? [ 266.855876][ T4324] usb 5-1: USB disconnect, device number 4 [ 267.154788][ T6186] Set syz1 is full, maxelem 65536 reached [ 268.086810][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.103317][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.116297][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.151766][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.213259][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 268.223492][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.385753][ T6362] wg1 speed is unknown, defaulting to 1000 [ 268.458290][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.678691][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 268.688530][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.838367][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 268.871464][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 269.050996][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.681722][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.700704][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 269.716934][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 270.117583][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 270.636141][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 270.674122][ T6386] ceph: No mds server is up or the cluster is laggy [ 270.723238][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 270.770272][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 270.850565][ T46] tipc: Left network mode [ 271.649078][ T4385] libceph: connect (1)[c::]:6789 error -101 [ 271.722009][ T4385] libceph: mon0 (1)[c::]:6789 connect error [ 272.047416][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.079746][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.144780][ T5656] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 272.159284][ T6362] device bridge_slave_0 entered promiscuous mode [ 272.195227][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.218122][ T5656] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.249819][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.573138][ T6362] device bridge_slave_1 entered promiscuous mode [ 272.703255][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 272.916788][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.162783][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.359950][ T6362] team0: Port device team_slave_0 added [ 273.375616][ T6362] team0: Port device team_slave_1 added [ 273.482017][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.519550][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.725248][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.702338][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.731201][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.783298][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 274.922584][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.950339][ T6362] device hsr_slave_0 entered promiscuous mode [ 275.979757][ T6362] device hsr_slave_1 entered promiscuous mode [ 276.053202][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.060845][ T6362] Cannot create hsr debugfs directory [ 276.863161][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 278.342123][ T6362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.398844][ T6362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.457756][ T6362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.529926][ T6362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.886325][ T46] device hsr_slave_0 left promiscuous mode [ 278.948813][ T46] device hsr_slave_1 left promiscuous mode [ 279.010389][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.030090][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.082710][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.113250][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.149218][ T46] device bridge_slave_1 left promiscuous mode [ 279.180868][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.231708][ T46] device bridge_slave_0 left promiscuous mode [ 279.259370][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.461092][ T46] device veth1_macvtap left promiscuous mode [ 279.477969][ T46] device veth0_macvtap left promiscuous mode [ 279.503728][ T46] device veth1_vlan left promiscuous mode [ 279.543607][ T46] device veth0_vlan left promiscuous mode [ 280.164428][ T4382] libceph: connect (1)[c::]:6789 error -101 [ 280.170479][ T4382] libceph: mon0 (1)[c::]:6789 connect error [ 280.473358][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 280.480083][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 280.525371][ T6514] ceph: No mds server is up or the cluster is laggy [ 280.544462][ T4324] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 280.612326][ T4324] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.035629][ T6531] ubi: mtd0 is already attached to ubi31 [ 283.626788][ T46] team0 (unregistering): Port device team_slave_1 removed [ 283.714074][ T46] team0 (unregistering): Port device team_slave_0 removed [ 283.750633][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.798987][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.148501][ T46] bond0 (unregistering): Released all slaves [ 284.581774][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.713789][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.722071][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.842666][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.976431][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.092152][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.147410][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.154671][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.233685][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.294159][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.359108][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.366307][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.505624][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.584776][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.696470][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.808691][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.281835][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.344580][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.345223][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 287.368820][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 287.435867][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.588170][ T6362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.653329][ T26] libceph: connect (1)[c::]:6789 error -101 [ 287.656991][ T6362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.669543][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 287.683935][ T6578] ceph: No mds server is up or the cluster is laggy [ 287.858514][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.873840][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.897762][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.940070][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.969075][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.001770][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.692328][ T4382] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.815672][ T4382] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.084912][ T7] libceph: connect (1)[c::]:6789 error -101 [ 290.096135][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 290.262145][ T6625] ceph: No mds server is up or the cluster is laggy [ 291.522852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.530970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.581458][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.112914][ T5788] Bluetooth: hci1: Frame reassembly failed (-84) [ 294.123342][ T5788] Bluetooth: hci1: Frame reassembly failed (-84) [ 295.943282][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 296.163058][ T22] usb 3-1: device descriptor read/64, error -71 [ 296.194412][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 296.202642][ T4268] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 296.268350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.283777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.372730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.402659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.433060][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 296.594465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.691175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.794153][ T6362] device veth0_vlan entered promiscuous mode [ 296.997295][ T6362] device veth1_vlan entered promiscuous mode [ 297.266004][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.284527][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.333079][ T22] usb 3-1: device descriptor read/64, error -71 [ 297.350928][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.383704][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.399596][ T6362] device veth0_macvtap entered promiscuous mode [ 297.445343][ T6362] device veth1_macvtap entered promiscuous mode [ 297.453445][ T22] usb usb3-port1: attempt power cycle [ 297.478527][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.515544][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.536655][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.563045][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.572868][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.597526][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.643022][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.669580][ T4273] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 297.673297][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.704428][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.725338][ T4273] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.783187][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.797231][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.858024][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.873705][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 297.980608][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.094163][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.235496][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.382022][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.574451][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.654171][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.664375][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.675063][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.686633][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.718989][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.753799][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.770571][ T6362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.786239][ T6362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.796138][ T6362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.804928][ T6362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.871686][ T22] usb 3-1: device descriptor read/8, error -71 [ 299.035576][ T5506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.066765][ T5506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.098740][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.157136][ T5506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.200276][ T5506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.280935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.593143][ T4382] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.763189][ T4382] usb 1-1: device descriptor read/64, error -71 [ 304.233877][ T4382] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 304.254851][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 304.272303][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 304.323574][ T6779] ceph: No mds server is up or the cluster is laggy [ 304.418403][ T4382] usb 1-1: device descriptor read/64, error -71 [ 304.543228][ T4382] usb usb1-port1: attempt power cycle [ 305.640888][ T4273] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 305.653267][ T4382] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 305.670677][ T4273] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.698814][ T4382] usb 1-1: device descriptor read/8, error -71 [ 308.073674][ T4382] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 308.560884][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 308.568198][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 308.591896][ T4382] usb 1-1: device descriptor read/8, error -71 [ 308.703688][ T6806] ceph: No mds server is up or the cluster is laggy [ 308.713331][ T4382] usb usb1-port1: unable to enumerate USB device [ 308.833200][ T6805] fido_id[6805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.779560][ T6818] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.617'. [ 312.178656][ T6841] ceph: No mds server is up or the cluster is laggy [ 312.186137][ T6839] libceph: connect (1)[c::]:6789 error -101 [ 312.207875][ T6839] libceph: mon0 (1)[c::]:6789 connect error [ 312.510260][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 312.523714][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 312.673431][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 313.257037][ T7] usb 5-1: device descriptor read/64, error -71 [ 313.474702][ T4314] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 313.927199][ T4314] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.943030][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 314.083487][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 314.091565][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 314.113161][ T7] usb 5-1: device descriptor read/64, error -71 [ 314.222616][ T6868] ceph: No mds server is up or the cluster is laggy [ 314.233172][ T7] usb usb5-port1: attempt power cycle [ 314.559835][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.628'. [ 314.643147][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 314.687943][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.628'. [ 314.697538][ T7] usb 5-1: device descriptor read/8, error -71 [ 314.737608][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.628'. [ 314.973279][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.968422][ T7] usb 5-1: device descriptor read/8, error -71 [ 316.098525][ T7] usb usb5-port1: unable to enumerate USB device [ 316.948252][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.954640][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.391844][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 319.392635][ T4268] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 319.582259][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 319.598001][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 319.708818][ T6934] ceph: No mds server is up or the cluster is laggy [ 320.573149][ T4349] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 320.768160][ T4349] usb 6-1: Using ep0 maxpacket: 8 [ 320.820529][ T4268] Bluetooth: hci5: link tx timeout [ 320.827022][ T4268] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.836602][ T4268] Bluetooth: hci5: link tx timeout [ 320.841935][ T4268] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.852667][ T4268] Bluetooth: hci5: link tx timeout [ 320.857967][ T4268] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.866106][ T4268] Bluetooth: hci5: link tx timeout [ 320.871685][ T4268] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.600267][ T4349] usb 6-1: no configurations [ 321.604994][ T4349] usb 6-1: can't read configurations, error -22 [ 321.753165][ T4349] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 322.079024][ T4349] usb 6-1: Using ep0 maxpacket: 8 [ 322.155453][ T4349] usb 6-1: no configurations [ 322.172238][ T4349] usb 6-1: can't read configurations, error -22 [ 322.178915][ T4349] usb usb6-port1: attempt power cycle [ 322.593090][ T4349] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 322.633866][ T4349] usb 6-1: Using ep0 maxpacket: 8 [ 322.639669][ T4349] usb 6-1: no configurations [ 322.650123][ T4349] usb 6-1: can't read configurations, error -22 [ 323.104243][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 323.183091][ T4349] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 323.261486][ T4349] usb 6-1: Using ep0 maxpacket: 8 [ 323.272889][ T4349] usb 6-1: no configurations [ 323.281569][ T4349] usb 6-1: can't read configurations, error -22 [ 323.292012][ T4349] usb usb6-port1: unable to enumerate USB device [ 323.913025][ T6839] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 324.233067][ T6839] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 324.241960][ T6839] usb 5-1: config 0 has no interface number 0 [ 324.295422][ T6839] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 324.298698][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 324.335188][ T6839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.379048][ T6839] usb 5-1: Product: syz [ 324.390805][ T6839] usb 5-1: Manufacturer: syz [ 324.399673][ T6839] usb 5-1: SerialNumber: syz [ 324.428143][ T6839] usb 5-1: config 0 descriptor?? [ 324.487621][ T7001] ceph: No mds server is up or the cluster is laggy [ 324.519856][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 324.602155][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 324.621036][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 324.621407][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 324.669042][ T6839] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 324.691776][ T6839] usb 5-1: No valid video chain found. [ 324.719305][ T6839] usb 5-1: USB disconnect, device number 9 [ 325.205347][ T4281] Bluetooth: hci5: link tx timeout [ 325.210578][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.219003][ T4281] Bluetooth: hci5: link tx timeout [ 325.224535][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.232616][ T4281] Bluetooth: hci5: link tx timeout [ 325.238385][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.246867][ T4281] Bluetooth: hci5: link tx timeout [ 325.256903][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.266247][ T4281] Bluetooth: hci5: link tx timeout [ 325.271547][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.827527][ T4281] Bluetooth: hci5: command 0x0405 tx timeout [ 329.583103][ T4268] Bluetooth: hci1: command 0x1003 tx timeout [ 329.590716][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 331.306552][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 331.312790][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 331.583587][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 331.595621][ T7071] ceph: No mds server is up or the cluster is laggy [ 331.615605][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 332.041623][ T7078] netlink: 'syz.5.667': attribute type 1 has an invalid length. [ 332.946995][ T4281] Bluetooth: hci5: link tx timeout [ 332.952219][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 332.960221][ T4281] Bluetooth: hci5: link tx timeout [ 332.965488][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 332.984545][ T4281] Bluetooth: hci5: link tx timeout [ 332.989749][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.909059][ T4535] Bluetooth: hci1: Frame reassembly failed (-84) [ 334.933230][ T4349] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 335.163458][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 335.174668][ T4349] usb 1-1: no configurations [ 335.198051][ T4349] usb 1-1: can't read configurations, error -22 [ 335.375613][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.679'. [ 335.395174][ T4349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 335.529791][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'. [ 335.539644][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'. [ 335.693361][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 335.820479][ T4349] usb 1-1: no configurations [ 335.833148][ T4349] usb 1-1: can't read configurations, error -22 [ 335.847796][ T4349] usb usb1-port1: attempt power cycle [ 336.393185][ T4349] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 336.725082][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 336.734331][ T4349] usb 1-1: no configurations [ 336.738961][ T4349] usb 1-1: can't read configurations, error -22 [ 336.863081][ T4268] Bluetooth: hci1: command 0x1003 tx timeout [ 336.863183][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 337.163181][ T4349] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 337.212183][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 337.220861][ T4349] usb 1-1: no configurations [ 337.247396][ T4349] usb 1-1: can't read configurations, error -22 [ 337.284122][ T4349] usb usb1-port1: unable to enumerate USB device [ 337.684172][ T7159] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 337.855560][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 344.011473][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 345.194047][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 345.255196][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 351.418748][ T2120] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 351.623061][ T2120] usb 1-1: Using ep0 maxpacket: 8 [ 351.635194][ T2120] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.680374][ T2120] usb 1-1: config 0 has no interfaces? [ 352.069880][ T2120] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 352.096476][ T2120] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 352.128394][ T2120] usb 1-1: Product: syz [ 352.132592][ T2120] usb 1-1: Manufacturer: syz [ 352.163238][ T2120] usb 1-1: SerialNumber: syz [ 352.235766][ T2120] usb 1-1: config 0 descriptor?? [ 352.448116][ T4314] usb 1-1: USB disconnect, device number 16 [ 354.331629][ T7360] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 355.002516][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 355.264308][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'. [ 355.328044][ T7360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.436258][ T7361] bond1: (slave veth3): Enslaving as an active interface with a down link [ 355.552311][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 355.569713][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 355.605785][ T5656] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 355.683317][ T5656] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.198559][ T7384] fido_id[7384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.735901][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 360.759398][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.743'. [ 360.766679][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 360.802015][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 360.811285][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 360.835701][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 360.867975][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 361.018995][ T7441] ceph: No mds server is up or the cluster is laggy [ 361.831670][ T4314] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 362.062547][ T4314] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.760887][ T7506] ceph: No mds server is up or the cluster is laggy [ 366.767966][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 366.795703][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 368.355533][ T7530] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 368.365916][ T7530] ubi: mtd0 is already attached to ubi31 [ 369.219063][ T4324] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.266241][ T4324] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.770147][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.768'. [ 372.410568][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 372.429816][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 372.470196][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 372.481189][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 372.649219][ T7588] ceph: No mds server is up or the cluster is laggy [ 373.404195][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 373.410262][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 373.642808][ T7607] netlink: 'syz.1.774': attribute type 72 has an invalid length. [ 377.572675][ T7650] netlink: 56 bytes leftover after parsing attributes in process `syz.0.782'. [ 378.385392][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.391888][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.490420][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 378.515110][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 378.813335][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 378.822729][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 379.198379][ T7661] ceph: No mds server is up or the cluster is laggy [ 379.541842][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'. [ 379.576170][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 379.591040][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 379.768192][ T7682] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.788'. [ 381.185434][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 381.939199][ T4281] Bluetooth: hci5: link tx timeout [ 381.944383][ T4281] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 381.952852][ T4281] Bluetooth: hci5: link tx timeout [ 381.958632][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.966574][ T4281] Bluetooth: hci5: link tx timeout [ 381.971700][ T4281] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 381.979410][ T4281] Bluetooth: hci5: link tx timeout [ 381.985060][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 382.004421][ T4281] Bluetooth: hci5: link tx timeout [ 382.009607][ T4281] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 382.017571][ T4281] Bluetooth: hci5: link tx timeout [ 382.022705][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.983531][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 384.051541][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 384.067748][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 384.355156][ T7742] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.800'. [ 384.369202][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 384.380023][ T7743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.799'. [ 384.396387][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 384.983283][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 385.386563][ T7735] ceph: No mds server is up or the cluster is laggy [ 385.399283][ T4349] libceph: connect (1)[c::]:6789 error -101 [ 385.406736][ T4349] libceph: mon0 (1)[c::]:6789 connect error [ 386.082831][ T7753] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 386.245033][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 386.708832][ T26] libceph: connect (1)[c::]:6789 error -101 [ 386.724824][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 386.802360][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'. [ 386.819885][ T7753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.187518][ T7758] bond1: (slave veth3): Enslaving as an active interface with a down link [ 388.299419][ T7775] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 388.308969][ T7775] ubi: mtd0 is already attached to ubi31 [ 388.622568][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 389.118389][ T7785] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.811'. [ 391.443130][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.818'. [ 391.452556][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.818'. [ 391.906344][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.820'. [ 392.074512][ T7817] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 392.117757][ T7817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.147879][ T7817] bond2: (slave veth5): Enslaving as an active interface with a down link [ 392.160369][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 395.082993][ T4314] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 395.114378][ T4314] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.680931][ T7848] fido_id[7848]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.068479][ T4484] Bluetooth: hci1: Frame reassembly failed (-84) [ 396.085420][ T4484] Bluetooth: hci1: Frame reassembly failed (-84) [ 396.503645][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 396.793899][ T7865] device ipip0 entered promiscuous mode [ 398.007808][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 399.036124][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.834'. [ 399.418427][ T93] block nbd4: Attempted send on invalid socket [ 399.425176][ T93] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 399.461164][ T52] block nbd4: Attempted send on invalid socket [ 399.467400][ T52] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 399.477012][ T7882] Mount JFS Failure: -5 [ 399.742530][ T26] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 399.764514][ T26] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.956283][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.842'. [ 399.971788][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 399.986002][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.841'. [ 402.487591][ T4940] Bluetooth: hci1: Frame reassembly failed (-84) [ 404.313380][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 404.355590][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 404.916666][ T4324] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 405.139911][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.163103][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.184487][ T4324] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 405.200235][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.219502][ T4324] usb 1-1: config 0 descriptor?? [ 405.637004][ T4324] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 405.671839][ T4324] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 405.833186][ T4324] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 406.181191][ T7961] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 406.626403][ T4324] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 406.659329][ T4324] usb 1-1: USB disconnect, device number 17 [ 406.979664][ T7962] fido_id[7962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 407.083163][ T7966] binder: Bad value for 'max' [ 408.594193][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.861'. [ 409.493266][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 409.849619][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 409.888810][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 410.795599][ T4273] libceph: connect (1)[c::]:6789 error -101 [ 410.807580][ T4273] libceph: mon0 (1)[c::]:6789 connect error [ 410.863969][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 410.864440][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 411.094111][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 411.133144][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 411.756458][ T8002] ceph: No mds server is up or the cluster is laggy [ 411.769720][ T7] libceph: connect (1)[c::]:6789 error -101 [ 411.793473][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 413.085347][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 413.795520][ T8022] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 413.958630][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 417.552946][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 418.284196][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 419.281154][ T7] libceph: connect (1)[c::]:6789 error -101 [ 419.318364][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 419.362748][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 419.373140][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 419.581942][ T8080] ceph: No mds server is up or the cluster is laggy [ 419.653401][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 419.659423][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 420.238555][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.892'. [ 420.259021][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.892'. [ 420.831628][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 421.114425][ T7] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 421.127468][ T7] usb 1-1: config 0 has no interface number 0 [ 421.136060][ T7] usb 1-1: config 0 interface 98 has no altsetting 0 [ 421.241481][ T7] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 421.278383][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.344778][ T7] usb 1-1: Product: syz [ 421.363016][ T7] usb 1-1: Manufacturer: syz [ 421.367662][ T7] usb 1-1: SerialNumber: syz [ 421.379474][ T7] usb 1-1: config 0 descriptor?? [ 421.592855][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 422.167150][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 422.854288][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 422.863127][ T7] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 422.873826][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 423.143242][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 423.157687][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 423.215747][ T8118] ceph: No mds server is up or the cluster is laggy [ 423.315854][ T7] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 423.349672][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 423.380477][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 423.543268][ T7] usb 1-1: USB disconnect, device number 18 [ 423.639060][ T5656] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 423.652614][ T5656] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 423.662660][ T5656] kobject_add_internal failed for firmware (error: -2 parent: 1-1) [ 423.671370][ T5656] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 423.692840][ T5656] usb 1-1: [UEAGLE-ATM] firmware is not available [ 423.828105][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.903'. [ 426.130975][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 428.351885][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 428.414344][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 429.005034][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 429.013619][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 429.368622][ T8172] ceph: No mds server is up or the cluster is laggy [ 429.985757][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 430.009791][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 432.488717][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 432.764557][ T26] libceph: connect (1)[c::]:6789 error -101 [ 432.770609][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 433.101202][ T8201] ceph: No mds server is up or the cluster is laggy [ 433.108170][ T26] libceph: connect (1)[c::]:6789 error -101 [ 433.114614][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 433.905866][ T6839] libceph: connect (1)[c::]:6789 error -101 [ 433.911891][ T6839] libceph: mon0 (1)[c::]:6789 connect error [ 435.819318][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 436.527061][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 436.708496][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 436.723993][ T8227] ceph: No mds server is up or the cluster is laggy [ 436.753049][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 437.015628][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 437.021650][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 438.004046][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 438.030374][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 439.826262][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.832594][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.435405][ T8257] syz.5.933 (8257): drop_caches: 2 [ 442.334657][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 444.114925][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 444.128607][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 444.604284][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 444.610335][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 444.893297][ T8303] ceph: No mds server is up or the cluster is laggy [ 445.226859][ T2120] libceph: connect (1)[c::]:6789 error -101 [ 445.235550][ T8308] ceph: No mds server is up or the cluster is laggy [ 445.266399][ T2120] libceph: mon0 (1)[c::]:6789 connect error [ 449.126997][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 449.134378][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 449.403311][ T5656] libceph: connect (1)[c::]:6789 error -101 [ 449.423269][ T5656] libceph: mon0 (1)[c::]:6789 connect error [ 449.874333][ T8367] ceph: No mds server is up or the cluster is laggy [ 450.184381][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 450.190832][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 454.064211][ T8411] capability: warning: `syz.5.970' uses 32-bit capabilities (legacy support in use) [ 456.959168][ T8435] process 'syz.4.981' launched './file1' with NULL argv: empty string added [ 457.313366][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 457.433054][ T8443] wg1 speed is unknown, defaulting to 1000 [ 459.797074][ T8460] kernel read not supported for file /memory.swap.current (pid: 8460 comm: syz.5.988) [ 459.853568][ T27] audit: type=1800 audit(1755651831.638:2): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.988" name="memory.swap.current" dev="mqueue" ino=47543 res=0 errno=0 [ 460.087068][ T8466] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 460.097043][ T8466] ubi: mtd0 is already attached to ubi31 [ 460.473292][ T8468] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 461.985330][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'. [ 462.173078][ T4477] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 462.372972][ T4477] usb 6-1: Using ep0 maxpacket: 16 [ 462.391616][ T4477] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 462.439840][ T4477] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.481665][ T4477] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.514331][ T4477] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.547640][ T4477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.576220][ T4477] usb 6-1: Product: syz [ 462.596434][ T4477] usb 6-1: Manufacturer: syz [ 462.613232][ T4477] usb 6-1: SerialNumber: syz [ 463.041683][ T4477] usb 6-1: 0:2 : does not exist [ 464.528459][ T4477] usb 6-1: USB disconnect, device number 6 [ 464.794681][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.003356][ T4477] libceph: connect (1)[c::]:6789 error -101 [ 465.010101][ T4477] libceph: mon0 (1)[c::]:6789 connect error [ 465.794570][ T4477] libceph: connect (1)[c::]:6789 error -101 [ 465.800585][ T4477] libceph: mon0 (1)[c::]:6789 connect error [ 465.898231][ T8510] ceph: No mds server is up or the cluster is laggy [ 466.119150][ T8523] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 466.884466][ T4324] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 467.074520][ T4324] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 467.094528][ T4324] usb 6-1: config 0 has no interface number 0 [ 467.111301][ T4324] usb 6-1: config 0 interface 98 has no altsetting 0 [ 467.158027][ T4324] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 467.214035][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.263171][ T4324] usb 6-1: Product: syz [ 467.274292][ T4324] usb 6-1: Manufacturer: syz [ 467.291940][ T4324] usb 6-1: SerialNumber: syz [ 467.322072][ T4324] usb 6-1: config 0 descriptor?? [ 468.239695][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.334794][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.369568][ T4324] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 468.663257][ T8544] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 468.865408][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 468.909971][ T8544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.993127][ T8548] bond1: (slave veth3): Enslaving as an active interface with a down link [ 469.240122][ T4324] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 469.343752][ T4324] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 469.457019][ T4324] usb 6-1: USB disconnect, device number 7 [ 469.543926][ T4273] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 469.560346][ T4273] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 470.634384][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 471.270701][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1012'. [ 472.304976][ T27] audit: type=1800 audit(1755651844.098:3): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1016" name="/" dev="fuse" ino=1 res=0 errno=0 [ 473.765340][ T8577] syz.4.1017 (8577): drop_caches: 2 [ 474.242977][ T4477] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 475.144550][ T4477] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 475.162962][ T4477] usb 6-1: config 0 has no interface number 0 [ 475.182179][ T4477] usb 6-1: config 0 interface 98 has no altsetting 0 [ 475.279774][ T4477] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 475.343158][ T4477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.351220][ T4477] usb 6-1: Product: syz [ 475.386932][ T4477] usb 6-1: Manufacturer: syz [ 475.391638][ T4477] usb 6-1: SerialNumber: syz [ 476.284589][ T4477] usb 6-1: config 0 descriptor?? [ 476.500675][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.587330][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.639147][ T4477] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 477.513479][ T4477] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 477.623280][ T4477] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 477.636600][ T4477] usb 6-1: USB disconnect, device number 8 [ 477.697775][ T8624] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 477.707521][ T8624] ubi: mtd0 is already attached to ubi31 [ 478.958730][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 478.981038][ T8641] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1037'. [ 480.306921][ T8655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1042'. [ 480.513354][ T5656] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 480.723108][ T5656] usb 2-1: Using ep0 maxpacket: 16 [ 481.473853][ T5656] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 481.503083][ T5656] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 481.513584][ T5656] usb 2-1: config 5 has no interface number 0 [ 481.521072][ T5656] usb 2-1: config 5 interface 168 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 481.533305][ T5656] usb 2-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.546686][ T5656] usb 2-1: config 5 interface 168 has no altsetting 0 [ 481.573311][ T5656] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 481.593240][ T5656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.613039][ T5656] usb 2-1: Product: syz [ 481.617790][ T5656] usb 2-1: Manufacturer: syz [ 481.625977][ T5656] usb 2-1: SerialNumber: syz [ 481.857139][ T5656] pn533_usb 2-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 481.921686][ T5656] usb 2-1: USB disconnect, device number 8 [ 482.153461][ T4332] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 482.353020][ T4332] usb 6-1: device descriptor read/64, error -71 [ 483.263263][ T4332] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 483.402997][ T4349] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 483.433019][ T4332] usb 6-1: device descriptor read/64, error -71 [ 483.593385][ T4332] usb usb6-port1: attempt power cycle [ 484.017220][ T4349] usb 3-1: config 0 has an invalid interface number: 142 but max is 1 [ 484.044377][ T4349] usb 3-1: config 0 has no interface number 0 [ 484.065847][ T4349] usb 3-1: config 0 interface 1 has no altsetting 0 [ 484.100293][ T4349] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 484.128762][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.162731][ T4349] usb 3-1: Product: syz [ 484.167911][ T4349] usb 3-1: Manufacturer: syz [ 484.172533][ T4349] usb 3-1: SerialNumber: syz [ 484.212490][ T4349] usb 3-1: config 0 descriptor?? [ 484.335174][ T4332] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 484.373584][ T4332] usb 6-1: device descriptor read/8, error -71 [ 484.491234][ T8698] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 484.636517][ T8699] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 484.644538][ T4332] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 484.764993][ T4349] msi2500 3-1:0.1: Registered as swradio24 [ 484.773270][ T4349] msi2500 3-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 484.903028][ T4332] usb 6-1: device not accepting address 12, error -71 [ 484.927173][ T4332] usb usb6-port1: unable to enumerate USB device [ 485.086998][ T4349] videodev: could not get a free minor [ 485.121531][ T4349] msi2500 3-1:0.142: Failed to register as video device (-23) [ 485.241389][ T4349] msi2500: probe of 3-1:0.142 failed with error -23 [ 485.297134][ T4349] usb 3-1: USB disconnect, device number 8 [ 485.660199][ T8728] device ipip0 entered promiscuous mode [ 487.955626][ T27] audit: type=1800 audit(1755651859.748:4): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1065" name="/" dev="fuse" ino=1 res=0 errno=0 [ 488.290656][ T8758] fuse: Bad value for 'fd' [ 488.332978][ T6839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 489.213072][ T6839] usb 5-1: device descriptor read/64, error -71 [ 489.253802][ T8760] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 489.483160][ T6839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 489.663274][ T6839] usb 5-1: device descriptor read/64, error -71 [ 490.548979][ T6839] usb usb5-port1: attempt power cycle [ 491.083071][ T6839] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 491.783592][ T6839] usb 5-1: device not accepting address 12, error -71 [ 492.243853][ T8796] fuse: Bad value for 'fd' [ 492.412964][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 493.203036][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 493.209774][ T22] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 493.235078][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.251293][ T22] usb 2-1: config 0 descriptor?? [ 493.287907][ T8793] device batadv0 entered promiscuous mode [ 493.302800][ T8793] device macvtap1 entered promiscuous mode [ 493.325635][ T8793] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 493.439386][ T8793] device batadv0 left promiscuous mode [ 493.696148][ T8807] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 493.698669][ T22] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 493.781887][ T22] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 493.789403][ T22] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 493.799451][ T22] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 495.073244][ T22] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 495.088749][ T22] koneplus 0003:1E7D:2E22.0012: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 495.107202][ T22] usb 2-1: USB disconnect, device number 9 [ 495.436315][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 495.763072][ T7] usb 5-1: device descriptor read/64, error -71 [ 495.863147][ T8812] fido_id[8812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 496.101473][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 496.999992][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 497.113013][ T7] usb 5-1: device descriptor read/64, error -71 [ 497.142500][ T8823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1089'. [ 497.233591][ T7] usb usb5-port1: attempt power cycle [ 501.278590][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.285008][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.853026][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 503.203211][ T8870] netlink: 'syz.5.1105': attribute type 1 has an invalid length. [ 503.219482][ T22] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 503.238961][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.248561][ T22] usb 2-1: config 0 has no interface number 0 [ 503.258651][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 503.275504][ T22] usb 2-1: config 0 interface 98 has no altsetting 0 [ 503.294040][ T22] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 503.310301][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.321872][ T22] usb 2-1: Product: syz [ 503.326769][ T22] usb 2-1: Manufacturer: syz [ 503.331845][ T22] usb 2-1: SerialNumber: syz [ 503.349838][ T22] usb 2-1: config 0 descriptor?? [ 503.783959][ T22] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 504.273010][ T22] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 504.973861][ T22] usb 2-1: device descriptor read/all, error -71 [ 506.120238][ T8896] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 506.679425][ T22] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 507.559884][ T22] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 507.743101][ T22] usb 2-1: USB disconnect, device number 10 [ 511.345106][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 511.538602][ T8914] wg1 speed is unknown, defaulting to 1000 [ 518.104854][ T26] libceph: connect (1)[c::]:6789 error -101 [ 518.110921][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 518.322236][ T8989] ceph: No mds server is up or the cluster is laggy [ 518.903080][ T4350] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 519.595198][ T4281] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 519.604720][ T4281] Bluetooth: hci3: Injecting HCI hardware error event [ 519.618240][ T4278] Bluetooth: hci3: hardware error 0x00 [ 520.454135][ T4350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 520.537405][ T4350] usb 2-1: not running at top speed; connect to a high speed hub [ 520.996596][ T4350] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 521.039616][ T4350] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 521.065066][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.082286][ T4350] usb 2-1: Product: syz [ 521.090348][ T4350] usb 2-1: Manufacturer: syz [ 521.491566][ T4350] usb 2-1: SerialNumber: syz [ 521.591012][ T4350] usb 2-1: config 0 descriptor?? [ 521.673384][ T4350] usb 2-1: can't set config #0, error -71 [ 521.702159][ T4350] usb 2-1: USB disconnect, device number 11 [ 522.463017][ T4278] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 525.499262][ T9072] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1164'. [ 525.586869][ T9071] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1164'. [ 526.112979][ T4332] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 526.314611][ T4332] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 526.345092][ T4332] usb 5-1: config 0 has no interface number 1 [ 526.359436][ T4332] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 526.399443][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.462762][ T4332] usb 5-1: config 0 descriptor?? [ 526.719970][ T4332] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 527.327326][ T4332] usb 5-1: USB disconnect, device number 17 [ 527.541040][ T4332] qcserial 5-1:0.2: device disconnected [ 527.675230][ T26] libceph: connect (1)[c::]:6789 error -101 [ 527.682565][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 527.694443][ T9084] ceph: No mds server is up or the cluster is laggy [ 528.916101][ T4358] Bluetooth: hci1: Frame reassembly failed (-84) [ 529.301239][ T9106] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1174'. [ 530.873227][ T4281] Bluetooth: hci1: command 0x1003 tx timeout [ 530.879618][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 531.102624][ T27] audit: type=1326 audit(1755651902.888:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 531.210748][ T27] audit: type=1326 audit(1755651902.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 531.490983][ T27] audit: type=1326 audit(1755651902.938:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.385818][ T4273] ------------[ cut here ]------------ [ 532.386892][ T6839] usb 2-1: [UEAGLE-ATM] firmware is not available [ 532.391309][ T4273] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 532.405879][ T4324] usb 6-1: [UEAGLE-ATM] firmware is not available [ 532.465048][ T27] audit: type=1326 audit(1755651902.938:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.488735][ T27] audit: type=1326 audit(1755651902.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.511669][ T27] audit: type=1326 audit(1755651902.938:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.534440][ T27] audit: type=1326 audit(1755651902.938:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.577169][ T27] audit: type=1326 audit(1755651902.938:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d698ebe9 code=0x7ffc0000 [ 532.599296][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.618037][ T4273] WARNING: CPU: 0 PID: 4273 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x290 [ 532.628114][ T4273] Modules linked in: [ 532.632390][ T4273] CPU: 0 PID: 4273 Comm: kworker/0:3 Not tainted 6.1.148-syzkaller #0 [ 532.640652][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.650938][ T4273] Workqueue: events request_firmware_work_func [ 532.657156][ T4273] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 532.663026][ T4273] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1e 02 cc ff 49 8b 17 48 c7 c7 a0 6a 9c 8a 48 89 de e8 ec 11 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 e5 7b ff [ 532.682796][ T4273] RSP: 0018:ffffc90003f67880 EFLAGS: 00010246 [ 532.688945][ T4273] RAX: e902efaf44caaa00 RBX: ffffffff8b02fd00 RCX: ffff888024bf1dc0 [ 532.697001][ T4273] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 532.705001][ T4273] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff520007ecea1 [ 532.713017][ T4273] R10: fffff520007ecea1 R11: 1ffff920007ecea0 R12: 1ffffffff1605fa4 [ 532.721384][ T4273] R13: dffffc0000000000 R14: ffff8880731949f8 R15: ffff88807975b008 [ 532.729526][ T4273] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 532.738475][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.745107][ T4273] CR2: 00002000000ef030 CR3: 0000000073131000 CR4: 00000000003506f0 [ 532.753093][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.761062][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.769059][ T4273] Call Trace: [ 532.772332][ T4273] [ 532.775277][ T4273] ? sysfs_unmerge_group+0x109/0x130 [ 532.780587][ T4273] device_del+0x2ae/0xa70 [ 532.784945][ T4273] ? kill_device+0x160/0x160 [ 532.789544][ T4273] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 532.795465][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 532.800316][ T4273] ? complete_all+0xc5/0x1d0 [ 532.804938][ T4273] firmware_fallback_sysfs+0x67e/0x930 [ 532.810426][ T4273] _request_firmware+0xcad/0x1290 [ 532.815504][ T4273] ? request_firmware+0x50/0x50 [ 532.820368][ T4273] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 532.826368][ T4273] ? read_lock_is_recursive+0x10/0x10 [ 532.831755][ T4273] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 532.837690][ T4273] request_firmware_work_func+0xac/0x1b0 [ 532.843345][ T4273] ? process_one_work+0x7a1/0x1160 [ 532.848465][ T4273] process_one_work+0x898/0x1160 [ 532.853429][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 532.859063][ T4273] ? _raw_spin_lock_irq+0xab/0xe0 [ 532.864124][ T4273] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 532.869503][ T4273] ? kthread_data+0x4b/0xc0 [ 532.874043][ T4273] worker_thread+0xaa2/0x1250 [ 532.878753][ T4273] ? __kthread_parkme+0x162/0x1c0 [ 532.883820][ T4273] kthread+0x29d/0x330 [ 532.887928][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 532.892983][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 532.897590][ T4273] ret_from_fork+0x1f/0x30 [ 532.902017][ T4273] [ 532.905101][ T4273] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 532.912393][ T4273] CPU: 0 PID: 4273 Comm: kworker/0:3 Not tainted 6.1.148-syzkaller #0 [ 532.920541][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.930618][ T4273] Workqueue: events request_firmware_work_func [ 532.936797][ T4273] Call Trace: [ 532.940067][ T4273] [ 532.942994][ T4273] dump_stack_lvl+0x168/0x22e [ 532.947671][ T4273] ? memcpy+0x3c/0x60 [ 532.951661][ T4273] ? show_regs_print_info+0x12/0x12 [ 532.956855][ T4273] ? load_image+0x3b0/0x3b0 [ 532.961368][ T4273] panic+0x2c9/0x710 [ 532.965265][ T4273] ? bpf_jit_dump+0xd0/0xd0 [ 532.969767][ T4273] ? ret_from_fork+0x1f/0x30 [ 532.974367][ T4273] __warn+0x2f8/0x4f0 [ 532.978350][ T4273] ? sysfs_remove_group+0x174/0x290 [ 532.983569][ T4273] ? sysfs_remove_group+0x174/0x290 [ 532.988782][ T4273] report_bug+0x2ba/0x4f0 [ 532.993111][ T4273] ? sysfs_remove_group+0x174/0x290 [ 532.998306][ T4273] handle_bug+0x3a/0x70 [ 533.002458][ T4273] exc_invalid_op+0x16/0x40 [ 533.006959][ T4273] asm_exc_invalid_op+0x16/0x20 [ 533.011815][ T4273] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 533.017622][ T4273] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1e 02 cc ff 49 8b 17 48 c7 c7 a0 6a 9c 8a 48 89 de e8 ec 11 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 e5 7b ff [ 533.037222][ T4273] RSP: 0018:ffffc90003f67880 EFLAGS: 00010246 [ 533.043281][ T4273] RAX: e902efaf44caaa00 RBX: ffffffff8b02fd00 RCX: ffff888024bf1dc0 [ 533.051256][ T4273] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 533.059225][ T4273] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff520007ecea1 [ 533.067199][ T4273] R10: fffff520007ecea1 R11: 1ffff920007ecea0 R12: 1ffffffff1605fa4 [ 533.075188][ T4273] R13: dffffc0000000000 R14: ffff8880731949f8 R15: ffff88807975b008 [ 533.083171][ T4273] ? sysfs_unmerge_group+0x109/0x130 [ 533.088460][ T4273] device_del+0x2ae/0xa70 [ 533.092790][ T4273] ? kill_device+0x160/0x160 [ 533.097374][ T4273] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 533.103264][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 533.108109][ T4273] ? complete_all+0xc5/0x1d0 [ 533.112835][ T4273] firmware_fallback_sysfs+0x67e/0x930 [ 533.118351][ T4273] _request_firmware+0xcad/0x1290 [ 533.123394][ T4273] ? request_firmware+0x50/0x50 [ 533.128281][ T4273] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 533.134269][ T4273] ? read_lock_is_recursive+0x10/0x10 [ 533.139643][ T4273] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 533.145539][ T4273] request_firmware_work_func+0xac/0x1b0 [ 533.151172][ T4273] ? process_one_work+0x7a1/0x1160 [ 533.156278][ T4273] process_one_work+0x898/0x1160 [ 533.161215][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 533.166850][ T4273] ? _raw_spin_lock_irq+0xab/0xe0 [ 533.171873][ T4273] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 533.177253][ T4273] ? kthread_data+0x4b/0xc0 [ 533.181758][ T4273] worker_thread+0xaa2/0x1250 [ 533.186439][ T4273] ? __kthread_parkme+0x162/0x1c0 [ 533.191466][ T4273] kthread+0x29d/0x330 [ 533.195537][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 533.200567][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 533.205154][ T4273] ret_from_fork+0x1f/0x30 [ 533.209577][ T4273] [ 533.212986][ T4273] Kernel Offset: disabled [ 533.217405][ T4273] Rebooting in 86400 seconds..