last executing test programs: 21.350415321s ago: executing program 1 (id=1386): creat(0x0, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000002680)}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$nfs(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x1000000, &(0x7f0000000400)=ANY=[]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x163c1, 0x21) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 19.313360748s ago: executing program 1 (id=1391): socket(0x1d, 0x2, 0x10000000000002) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) unshare(0x28000600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24048000) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0xc62, 0x80080) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000001c0)={0x21, 0x9, 0x10, 0x17, 0xa, 0x8001, 0x5, 0xdc, 0xffffffffffffffff}) 17.982373194s ago: executing program 1 (id=1393): socket$packet(0x11, 0x2, 0x300) socket$rxrpc(0x21, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x401) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57308e2042414ebc7010203010902380002960080000904cc07000259610505241c000105240006000d240f"], 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_acct\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) 14.24564404s ago: executing program 0 (id=1401): creat(&(0x7f00000001c0)='./bus\x00', 0x77) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./bus\x00', &(0x7f0000000180), &(0x7f0000000380)=@v1={0x2, '\''}, 0x2, 0x2) 13.253379216s ago: executing program 0 (id=1403): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005140)={0x2020}, 0x2020) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/35, 0x23) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002ada47b203b08d17146fdb34dbc5e2e936bb164c22"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 12.887115351s ago: executing program 1 (id=1405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0xfad6, 0x4000, 0xfffffffd, 0x4f}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14e}) prlimit64(0x0, 0xe, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r6}) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) 11.912802483s ago: executing program 0 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x800, 0x100, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, 0x1, 0x80000000000000, 0x0, 0x0, 0x3, 0x0, 0x6, 0x8, 0x0, 0x539, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x80000000000002, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200000000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffffffffffffd]}) fchdir(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="852000000100000060ae40c3adbc7bcff1d4708eee8289e091bdc506192b31dd339b149e6d7987a1edf38838009f88f273da696d6523"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f62a, r4, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x6, @broadcast}, 0x56, {0x2, 0x4e21, @multicast2}, 'macvlan0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.827609744s ago: executing program 0 (id=1408): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x0, 0x6, 0x3, 0x8}}, 0x101000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20008044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) 9.364210851s ago: executing program 0 (id=1411): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 8.823475231s ago: executing program 3 (id=1412): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/1, 0x1}, {0x0}], 0x2, 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x1d, &(0x7f00000000c0)=""/29, 0x1f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x4, 0x1, 0x4, 0xb}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) 8.431271605s ago: executing program 4 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000b00)) r4 = getpid() ioprio_get$pid(0x3, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000001000010000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r5, @ANYBLOB="14000600000000050000000015140007002001005d27016456c401c8000000000000000000000004"], 0x68}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.589557123s ago: executing program 3 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001da200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='rxrpc_receive\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000640)={{0x0, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000a40)={{0x0, 0xffffffff7fffffff, 0x40, 0x9, 0x7fffffff, 0x1, 0x8, 0x7, 0x6, 0x200, 0x7fff, 0x2, 0x1, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r0, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x21, 0x0, &(0x7f0000000080)) r10 = accept(r6, 0x0, &(0x7f0000000280)) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r12, {0x3}, {0x4}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) sendmsg$nl_route(r10, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001e80)=ANY=[@ANYBLOB="cc01000013002ca32abd7000fddbdf25070000001ed5935fd29f1681672fc2e163ccd7c984eb282421bf1701010000000000007e16a3785bf1a3ed010090", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08002800a4bf0000"], 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$inet6(r8, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) 6.309755939s ago: executing program 4 (id=1417): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x8006e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000), 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0xfffffffffffffff9, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0xffffffff, @mcast2, 0x9}, 0x1c) 4.98235089s ago: executing program 2 (id=1419): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x123241, 0x0) r2 = syz_open_pts(r1, 0x60c40) dup3(r2, r0, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.795540589s ago: executing program 4 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000b00)) r4 = getpid() ioprio_get$pid(0x3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r6, @ANYBLOB], 0x68}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.015638311s ago: executing program 2 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x4, 0x0, 0x32092}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 3.899487852s ago: executing program 2 (id=1422): syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xc, 0x1d, &(0x7f00000000c0)=""/29, 0x1f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x4, 0x1, 0x4, 0xb}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x3, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 3.793740201s ago: executing program 1 (id=1423): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000003780), 0x0, &(0x7f0000003cc0), 0x0, 0x8800}}], 0x1, 0x24000010) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.24187485s ago: executing program 4 (id=1424): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/1, 0x1}, {0x0}], 0x2, 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x1d, &(0x7f00000000c0)=""/29, 0x1f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x4, 0x1, 0x4, 0xb}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101e3ffffffffffffff000200000004001700240001801400018008000100e000000108000200e00000010c000280"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) 3.106445213s ago: executing program 3 (id=1425): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) 2.29424528s ago: executing program 2 (id=1426): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000003, 0x12, 0xffffffffffffffff, 0x59be7000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000]}}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2000000000002, 0x6, 0x2, 0x676, 0x100000000000018, 0x0, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x5d, 0x2, 0x5, 0xbce3, 0x1, 0x7}, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000580)={&(0x7f0000000140)={{@local}, {@host, 0x6}, 0x400, "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"}, 0x418, 0x10}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000680)={0x6, 0x118, 0xfa00, {{0x9, 0x0, "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", 0x3a, 0x6, 0x11, 0xe3, 0x9, 0x6b, 0x2}}}, 0x120) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) 2.239784471s ago: executing program 3 (id=1427): openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x88040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/2, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48000) 1.391364037s ago: executing program 4 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000b00)) r4 = getpid() ioprio_get$pid(0x3, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000001000010000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r5, @ANYBLOB="14000600000000050000000015140007002001005d27016456c401c8000000000000000000000004"], 0x68}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.210401139s ago: executing program 2 (id=1429): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.14383526s ago: executing program 3 (id=1430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094fd", 0xe4}, {&(0x7f0000002880)="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", 0x11a}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47d", 0xe}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e43732", 0x7a}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c", 0x3b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd", 0x76}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c71", 0x2d}, {&(0x7f00000003c0)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e", 0x21}], 0x3}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 763.73173ms ago: executing program 2 (id=1431): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a00020000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 382.9523ms ago: executing program 0 (id=1432): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x123241, 0x0) r2 = syz_open_pts(r1, 0x60c40) dup3(r2, r0, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 309.308773ms ago: executing program 3 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0xfad6, 0x4000, 0xfffffffd, 0x4f}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r6}) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) 137.621128ms ago: executing program 4 (id=1434): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x0, 0x6, 0x3, 0x8}}, 0x101000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20008044) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20008841}, 0x20004004) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f0000000000)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001da200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='rxrpc_receive\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000640)={{0x0, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000a40)={{0x0, 0xffffffff7fffffff, 0x40, 0x9, 0x7fffffff, 0x1, 0x8, 0x7, 0x6, 0x200, 0x7fff, 0x2, 0x1, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r0, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x21, 0x0, &(0x7f0000000080)) r10 = accept(r6, 0x0, &(0x7f0000000280)) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r12, {0x3}, {0x4}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) sendmsg$nl_route(r10, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001e80)=ANY=[@ANYBLOB="cc01000013002ca32abd7000fddbdf25070000001ed5935fd29f1681672fc2e163ccd7c984eb282421bf1701010000000000007e16a3785bf1a3ed010090", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08002800a4bf0000"], 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$inet6(r8, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.844979][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.864079][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.874955][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.891733][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.968974][ T5832] veth1_vlan: entered promiscuous mode [ 96.024971][ T5832] veth0_macvtap: entered promiscuous mode [ 96.040087][ T5832] veth1_macvtap: entered promiscuous mode [ 96.084755][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.096558][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.106874][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.117919][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.146208][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.256489][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.322421][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.631233][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.650995][ T5831] Bluetooth: hci4: command tx timeout [ 96.651012][ T5131] Bluetooth: hci1: command tx timeout [ 96.651051][ T5131] Bluetooth: hci2: command tx timeout [ 96.656466][ T5831] Bluetooth: hci3: command tx timeout [ 96.656511][ T5831] Bluetooth: hci0: command tx timeout [ 96.677756][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.688388][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708473][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.735108][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.750199][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.760591][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.780980][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.794427][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.813881][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.825365][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.859286][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.876996][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.955315][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.989711][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.009076][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036654][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.090614][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.101761][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.245925][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.411646][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.579930][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.661597][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.671554][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.682012][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.695403][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.851713][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.862641][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.872577][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.883161][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.897661][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.909717][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.920104][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.931642][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.947369][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.028509][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.038677][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.049685][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.064310][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.183540][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.201741][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.315077][ T4043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.333354][ T4043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.373665][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.392756][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.551114][ T5933] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.560440][ T5933] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.784901][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.828861][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.094248][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.144524][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.388075][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.399296][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.486116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.655888][ T5949] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.927315][ T5967] usb usb8: usbfs: process 5967 (syz.2.16) did not claim interface 0 before use [ 101.753004][ T10] libceph: connect (1)[c::]:6789 error -101 [ 101.787809][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 102.154768][ T10] libceph: connect (1)[c::]:6789 error -101 [ 102.252948][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 102.300192][ T5964] ceph: No mds server is up or the cluster is laggy [ 103.548428][ T5990] overlayfs: missing 'lowerdir' [ 103.729193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.738496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.831580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.213684][ T5992] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22'. [ 104.453575][ T6000] netlink: 84 bytes leftover after parsing attributes in process `syz.2.24'. [ 104.874424][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.710301][ T6024] usb usb8: usbfs: process 6024 (syz.2.31) did not claim interface 0 before use [ 106.020794][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 106.380331][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.430659][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 106.456682][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.513461][ T24] usb 1-1: config 0 descriptor?? [ 106.577556][ T6032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.37'. [ 106.763046][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.829197][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.009312][ T6047] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.435892][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.444597][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.475688][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 107.551893][ T6023] vlan2: entered promiscuous mode [ 107.604379][ T6023] team0: entered promiscuous mode [ 107.622236][ T6023] team_slave_0: entered promiscuous mode [ 107.632407][ T6023] team_slave_1: entered promiscuous mode [ 107.701104][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 107.995933][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 108.440923][ T24] usb 1-1: USB disconnect, device number 2 [ 108.955867][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.798031][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 110.984332][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.013240][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.034583][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.049344][ T6084] netlink: 52 bytes leftover after parsing attributes in process `syz.2.51'. [ 111.057514][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.069222][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.103793][ T24] usb 2-1: config 0 descriptor?? [ 112.115698][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 112.124106][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.143836][ T24] usb 2-1: USB disconnect, device number 2 [ 114.871706][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.3.64'. [ 114.963611][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 116.049942][ T978] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.118691][ T6137] veth3: entered promiscuous mode [ 117.111804][ T6127] tmpfs: Unknown parameter 'mñol' [ 117.226762][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.115827][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.307215][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.320267][ T978] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 119.329480][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.397904][ T978] usb 4-1: config 0 descriptor?? [ 119.665760][ T978] usbhid 4-1:0.0: can't add hid device: -71 [ 119.671827][ T978] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.759538][ T978] usb 4-1: USB disconnect, device number 2 [ 122.203633][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 122.302462][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.002096][ T6198] veth3: entered promiscuous mode [ 127.350193][ T6232] Zero length message leads to an empty skb [ 130.121103][ T978] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.416043][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 130.460734][ T978] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.585741][ T978] usb 4-1: config 0 has no interface number 0 [ 130.751812][ T978] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.881964][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.001317][ T978] usb 4-1: Product: syz [ 131.059439][ T978] usb 4-1: Manufacturer: syz [ 131.115735][ T978] usb 4-1: SerialNumber: syz [ 131.288463][ T978] usb 4-1: config 0 descriptor?? [ 131.313847][ T978] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.665452][ T978] usb 4-1: qt2_attach - failed to power on unit: -71 [ 131.828191][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 131.907759][ T6287] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.916700][ T6287] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.925413][ T6287] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.934188][ T6287] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.944695][ T6287] vxlan0: entered promiscuous mode [ 132.235075][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.244851][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.253752][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.262624][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.271508][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.280385][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.289426][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.301307][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.310558][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 132.531206][ T6289] vivid-000: kernel_thread() failed [ 132.618530][ T978] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 132.862054][ T978] usb 4-1: USB disconnect, device number 3 [ 132.864141][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890502][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.565929][ T978] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.677515][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.841342][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.865160][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 133.874249][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 133.895550][ T978] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 133.900851][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.920012][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.954984][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.010244][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.034065][ T6316] input: syz0 as /devices/virtual/input/input5 [ 134.082909][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.192950][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.408243][ T24] usb 4-1: config 0 descriptor?? [ 135.469752][ T24] hid (null): global environment stack underflow [ 135.606525][ T24] hid (null): invalid report_size 7124 [ 135.625865][ T978] usb 3-1: config 0 descriptor?? [ 135.636042][ T6307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.796141][ T24] usb 4-1: USB disconnect, device number 4 [ 136.169118][ T978] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 136.790691][ T6330] elan 0003:04F3:0755.0002: pid 6330 passed too short report [ 137.189381][ T6340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.635807][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.754864][ T6349] __nla_validate_parse: 47 callbacks suppressed [ 137.754905][ T6349] netlink: 84 bytes leftover after parsing attributes in process `syz.1.124'. [ 137.805836][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 137.835766][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.847796][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.860438][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.874970][ T5915] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.884478][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.926225][ T5915] usb 1-1: config 0 descriptor?? [ 138.319220][ T24] usb 3-1: USB disconnect, device number 2 [ 138.588075][ T6354] process 'syz.2.125' launched './file0' with NULL argv: empty string added [ 138.773477][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 138.847931][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.010091][ T5915] usb 1-1: USB disconnect, device number 3 [ 139.597726][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'. [ 140.619290][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 141.138121][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'. [ 141.154559][ T6384] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.163351][ T6384] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.172093][ T6384] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.180940][ T6384] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.189934][ T6384] vxlan0: entered promiscuous mode [ 142.580080][ T6392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.136'. [ 142.625974][ T53] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 143.108678][ T6391] netlink: 84 bytes leftover after parsing attributes in process `syz.1.137'. [ 143.126239][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.177999][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 143.266039][ T53] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 143.285702][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.326817][ T53] usb 5-1: config 0 descriptor?? [ 143.361147][ T6388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.913164][ T53] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 144.570250][ T6414] elan 0003:04F3:0755.0003: pid 6414 passed too short report [ 144.597768][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 144.982785][ T6425] capability: warning: `syz.0.148' uses deprecated v2 capabilities in a way that may be insecure [ 146.150673][ T5830] usb 5-1: USB disconnect, device number 2 [ 146.367146][ T6447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.936050][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.955129][ T6448] bond0: (slave rose0): Enslaving as an active interface with an up link [ 151.449905][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 153.506112][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.686059][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 153.707152][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.735784][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.770715][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.773072][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.801716][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.818572][ T24] usb 3-1: config 0 descriptor?? [ 155.465742][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 155.472693][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.707074][ T24] usb 3-1: USB disconnect, device number 3 [ 155.830153][ T6550] netlink: 52 bytes leftover after parsing attributes in process `syz.4.180'. [ 155.867697][ T6550] netlink: 52 bytes leftover after parsing attributes in process `syz.4.180'. [ 156.640823][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 156.774180][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 157.097202][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 157.116448][ T6575] ceph: No mds server is up or the cluster is laggy [ 159.962007][ T6624] netlink: 52 bytes leftover after parsing attributes in process `syz.0.196'. [ 160.036015][ T6629] netlink: 52 bytes leftover after parsing attributes in process `syz.0.196'. [ 161.211739][ T6650] netlink: 52 bytes leftover after parsing attributes in process `syz.4.203'. [ 163.251238][ T6672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.300769][ T6672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.211'. [ 165.245858][ T5939] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.437541][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 165.607559][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.727054][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.037475][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.074931][ T5939] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.089873][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.111410][ T5939] usb 3-1: config 0 descriptor?? [ 166.568280][ T6721] 9pnet_fd: Insufficient options for proto=fd [ 166.728913][ T6725] netlink: 'syz.4.226': attribute type 9 has an invalid length. [ 166.782932][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 166.795274][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.841912][ T5939] usb 3-1: USB disconnect, device number 4 [ 166.848250][ T6725] netlink: 256 bytes leftover after parsing attributes in process `syz.4.226'. [ 167.310221][ T6740] overlayfs: missing 'lowerdir' [ 169.007649][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.019955][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.028801][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.037622][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.046561][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.069427][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.078777][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.087939][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.096837][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.105737][ T6748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.234'. [ 172.240886][ T6760] 9pnet_fd: Insufficient options for proto=fd [ 173.735765][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.945892][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 174.033444][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.171253][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.323374][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.534109][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.673029][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.804169][ T24] usb 2-1: config 0 descriptor?? [ 175.835816][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 175.841894][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.863722][ T24] usb 2-1: USB disconnect, device number 3 [ 180.671251][ T6833] __nla_validate_parse: 2 callbacks suppressed [ 180.671267][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 180.779087][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 181.436320][ T6852] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 181.448166][ T6852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.263'. [ 181.796093][ T6857] ceph: No mds server is up or the cluster is laggy [ 181.798439][ T978] libceph: connect (1)[c::]:6789 error -101 [ 181.944676][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 183.167730][ T6898] netlink: 96 bytes leftover after parsing attributes in process `syz.2.275'. [ 184.584622][ T6912] lo speed is unknown, defaulting to 1000 [ 184.591069][ T6912] lo speed is unknown, defaulting to 1000 [ 184.606047][ T6912] lo speed is unknown, defaulting to 1000 [ 184.641220][ T6912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.719703][ T6912] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.906736][ T6912] lo speed is unknown, defaulting to 1000 [ 184.929565][ T6912] lo speed is unknown, defaulting to 1000 [ 184.951017][ T6912] lo speed is unknown, defaulting to 1000 [ 184.972385][ T6912] lo speed is unknown, defaulting to 1000 [ 184.994153][ T6912] lo speed is unknown, defaulting to 1000 [ 185.679052][ T6914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.279'. [ 186.328386][ T6917] ceph: No mds server is up or the cluster is laggy [ 186.335533][ T978] libceph: connect (1)[c::]:6789 error -101 [ 186.348139][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 186.720162][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.951246][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 187.425967][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.455815][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 17003, setting to 1024 [ 187.580999][ T978] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 187.607830][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.644631][ T978] usb 2-1: Product: syz [ 187.677390][ T978] usb 2-1: Manufacturer: syz [ 187.695271][ T978] usb 2-1: SerialNumber: syz [ 187.740633][ T978] usb 2-1: config 0 descriptor?? [ 188.048907][ T978] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 188.308265][ T978] usb 2-1: USB disconnect, device number 4 [ 188.977925][ T6959] netlink: 72 bytes leftover after parsing attributes in process `syz.4.294'. [ 189.376927][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 189.726369][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 191.068698][ T6984] netlink: 96 bytes leftover after parsing attributes in process `syz.4.298'. [ 193.014836][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 194.269931][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.435936][ T7015] netlink: 72 bytes leftover after parsing attributes in process `syz.1.308'. [ 195.185059][ T7024] input: syz0 as /devices/virtual/input/input6 [ 197.056098][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.316'. [ 198.597005][ T7057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.322'. [ 200.076470][ T7069] input: syz0 as /devices/virtual/input/input7 [ 201.645099][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 201.716483][ T7087] netlink: 96 bytes leftover after parsing attributes in process `syz.3.327'. [ 201.879098][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 204.334261][ T7107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.337'. [ 206.133271][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 206.197221][ T7127] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.206038][ T7127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.214755][ T7127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.223520][ T7127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.234302][ T7127] vxlan0: entered promiscuous mode [ 208.598277][ T978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 209.135658][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 209.152437][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 209.170746][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.210435][ T978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.400348][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.526554][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 209.765846][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 210.055772][ T978] usb 5-1: Product: syz [ 210.060274][ T978] usb 5-1: Manufacturer: syz [ 210.097184][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.176114][ T978] usb 5-1: SerialNumber: syz [ 210.196682][ T978] usb 5-1: config 0 descriptor?? [ 210.202308][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.258885][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.291293][ T5915] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 210.328967][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.368114][ T5915] usb 3-1: config 0 descriptor?? [ 210.883881][ T5915] hid (null): global environment stack underflow [ 210.895715][ T5915] hid (null): invalid report_size 7124 [ 211.095207][ T978] usb 3-1: USB disconnect, device number 5 [ 211.670514][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.677546][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 211.738970][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 211.745106][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 211.752262][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 212.028021][ T5879] usb 5-1: USB disconnect, device number 3 [ 212.789727][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 212.801448][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 213.650355][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.771779][ T7193] netlink: 96 bytes leftover after parsing attributes in process `syz.4.361'. [ 213.920636][ T5879] usb 2-1: config 0 has no interfaces? [ 213.949714][ T5879] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.964245][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.999490][ T5879] usb 2-1: Product: syz [ 214.015282][ T5879] usb 2-1: Manufacturer: syz [ 214.134615][ T5879] usb 2-1: SerialNumber: syz [ 214.181263][ T5879] usb 2-1: config 0 descriptor?? [ 214.585034][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 215.255833][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.464913][ T5939] usb 3-1: device descriptor read/64, error -71 [ 216.365693][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.606571][ T5830] usb 2-1: USB disconnect, device number 5 [ 216.665709][ T5939] usb 3-1: device descriptor read/64, error -71 [ 216.931050][ T5939] usb usb3-port1: attempt power cycle [ 217.902490][ T978] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.916744][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 219.723956][ T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.743355][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 220.082360][ T978] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.399804][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.107706][ T978] usb 4-1: Product: syz [ 221.137942][ T978] usb 4-1: Manufacturer: syz [ 221.142603][ T978] usb 4-1: SerialNumber: syz [ 221.305075][ T978] usb 4-1: config 0 descriptor?? [ 221.336271][ T978] usb 4-1: can't set config #0, error -71 [ 222.673987][ T978] usb 4-1: USB disconnect, device number 5 [ 222.954729][ T7254] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 223.176096][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.402466][ T24] usb 2-1: config 0 has no interfaces? [ 223.576099][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.615724][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.653578][ T7259] netlink: 96 bytes leftover after parsing attributes in process `syz.4.379'. [ 223.682798][ T24] usb 2-1: Product: syz [ 223.695251][ T24] usb 2-1: Manufacturer: syz [ 223.700679][ T24] usb 2-1: SerialNumber: syz [ 223.718499][ T24] usb 2-1: config 0 descriptor?? [ 223.997881][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 224.013803][ T978] usb 2-1: USB disconnect, device number 6 [ 224.174450][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.945107][ T5915] usb 3-1: device descriptor read/64, error -71 [ 225.289073][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.465724][ T5915] usb 3-1: device descriptor read/64, error -71 [ 225.726438][ T5915] usb usb3-port1: attempt power cycle [ 226.875756][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 226.951311][ T5915] usb 3-1: device descriptor read/8, error -71 [ 227.195981][ T5915] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.228190][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 227.237887][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 227.319419][ T5915] usb 3-1: device descriptor read/8, error -71 [ 227.519662][ T5915] usb usb3-port1: unable to enumerate USB device [ 229.021635][ T7304] input: syz0 as /devices/virtual/input/input8 [ 230.135697][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 230.543870][ T5915] usb 5-1: config 0 has no interfaces? [ 230.731436][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 230.793675][ T7331] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.802511][ T7331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.812195][ T7331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.821628][ T7331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.830882][ T7331] vxlan0: entered promiscuous mode [ 231.210992][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.341187][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.460987][ T5915] usb 5-1: Product: syz [ 231.465222][ T5915] usb 5-1: Manufacturer: syz [ 231.491691][ T5915] usb 5-1: SerialNumber: syz [ 231.512953][ T5915] usb 5-1: config 0 descriptor?? [ 231.585761][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.093298][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.395'. [ 232.145775][ T5871] usb 2-1: device descriptor read/64, error -71 [ 232.527799][ T7345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.165050][ T5871] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.305660][ T5871] usb 2-1: device descriptor read/64, error -71 [ 233.574155][ T5871] usb usb2-port1: attempt power cycle [ 234.365772][ T5871] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.386612][ T5871] usb 2-1: device descriptor read/8, error -71 [ 234.482786][ T5939] usb 5-1: USB disconnect, device number 4 [ 235.326719][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 236.719541][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.413'. [ 236.935910][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 237.075755][ T5874] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 237.097777][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.108877][ T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 237.128577][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.161102][ T24] usb 4-1: config 0 descriptor?? [ 237.229651][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.250870][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.295643][ T5874] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 237.304868][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.317952][ T5874] usb 5-1: config 0 descriptor?? [ 237.664515][ T7384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.889277][ T5874] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 237.899201][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.934320][ T5874] usb 5-1: USB disconnect, device number 5 [ 237.937703][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.995012][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.040642][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.075042][ T7377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.414'. [ 239.333497][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 239.361311][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.366563][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 239.412584][ T24] usb 4-1: USB disconnect, device number 6 [ 239.512429][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 240.127765][ T7398] input: syz0 as /devices/virtual/input/input9 [ 240.437682][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.055668][ T24] usb 3-1: device descriptor read/64, error -71 [ 241.954591][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.242247][ T24] usb 3-1: device descriptor read/64, error -71 [ 242.258201][ T7413] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.425'. [ 242.406478][ T24] usb usb3-port1: attempt power cycle [ 244.280569][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.432'. [ 244.645897][ T24] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 245.125907][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.173559][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.253908][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 245.283524][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.330407][ T24] usb 5-1: config 0 descriptor?? [ 245.378829][ T24] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 245.598095][ T24] usb 5-1: USB disconnect, device number 6 [ 245.805999][ T7455] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 246.698264][ T7462] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 246.725039][ T7462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.439'. [ 246.768794][ T24] IPVS: starting estimator thread 0... [ 246.876037][ T7465] IPVS: using max 25 ests per chain, 60000 per kthread [ 249.063477][ T7484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.445'. [ 250.545752][ T5939] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 250.927606][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.945451][ T5939] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 250.957025][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.976306][ T5939] usb 5-1: config 0 descriptor?? [ 251.228639][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.259388][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.442859][ T7511] erspan1: entered promiscuous mode [ 251.448271][ T7511] erspan1: entered allmulticast mode [ 252.026526][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.125934][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.226733][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.448'. [ 252.357762][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 252.380237][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.408765][ T7519] netlink: 96 bytes leftover after parsing attributes in process `syz.2.452'. [ 252.439774][ T5939] usb 5-1: USB disconnect, device number 7 [ 253.041470][ T7533] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 253.191829][ T7535] netlink: 'syz.4.456': attribute type 9 has an invalid length. [ 253.208738][ T7533] lo speed is unknown, defaulting to 1000 [ 253.236523][ T7535] netlink: 256 bytes leftover after parsing attributes in process `syz.4.456'. [ 254.272043][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 255.481684][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 255.491645][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 255.661383][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.695446][ T7567] erspan1: entered promiscuous mode [ 257.700821][ T7567] erspan1: entered allmulticast mode [ 259.210629][ T5871] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 259.562918][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 259.709230][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 259.818673][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.904946][ T5871] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 260.164460][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.264280][ T5871] usb 2-1: config 0 descriptor?? [ 260.537511][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.587270][ T7591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.684983][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.008550][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.036108][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.094915][ T7574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.466'. [ 261.756892][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 261.762958][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.813493][ T5871] usb 2-1: USB disconnect, device number 11 [ 263.482316][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.504827][ T7612] netlink: 5 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.550937][ T7612] netlink: 5 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.582548][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.650242][ T7612] netlink: 5 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.724897][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.759803][ T7618] netlink: 5 bytes leftover after parsing attributes in process `syz.0.480'. [ 263.957834][ T7626] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 265.335813][ T5939] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 265.678078][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 266.320427][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.334780][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.346130][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.352798][ T5939] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 266.363893][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.696586][ T5939] usb 5-1: config 0 descriptor?? [ 267.846414][ T7666] __nla_validate_parse: 3 callbacks suppressed [ 267.846433][ T7666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.495'. [ 268.323383][ T5874] usb 5-1: USB disconnect, device number 8 [ 273.903239][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 274.143040][ T7730] netlink: 96 bytes leftover after parsing attributes in process `syz.4.514'. [ 275.596179][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 276.075834][ T5939] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 277.067003][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.320887][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.354442][ T5939] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 277.412477][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.477147][ T5939] usb 4-1: config 0 descriptor?? [ 277.500726][ T5939] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 277.692753][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 277.703193][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 278.820346][ T7776] netlink: 96 bytes leftover after parsing attributes in process `syz.1.529'. [ 278.913518][ T5879] usb 4-1: USB disconnect, device number 7 [ 279.024594][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 279.055749][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 281.083773][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.545689][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 281.561880][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.573291][ T24] usb 3-1: config 0 has no interfaces? [ 281.603557][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 281.614193][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.624507][ T24] usb 3-1: Product: syz [ 281.630838][ T24] usb 3-1: Manufacturer: syz [ 281.636366][ T24] usb 3-1: SerialNumber: syz [ 281.670586][ T24] usb 3-1: config 0 descriptor?? [ 283.485446][ T5939] IPVS: starting estimator thread 0... [ 283.585716][ T7823] IPVS: using max 26 ests per chain, 62400 per kthread [ 283.659964][ T5874] usb 3-1: USB disconnect, device number 16 [ 283.809204][ T7829] netlink: 128 bytes leftover after parsing attributes in process `syz.4.545'. [ 284.776519][ T5879] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 285.067095][ T7837] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[7837] [ 285.114278][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'. [ 285.269584][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 285.279837][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.299809][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.325594][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.364890][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.416675][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.461968][ T5879] usb 4-1: config 0 descriptor?? [ 286.115986][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 286.122366][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.233230][ T5879] usb 4-1: USB disconnect, device number 8 [ 286.759229][ T7861] netlink: 96 bytes leftover after parsing attributes in process `syz.1.555'. [ 287.017968][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 287.176030][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 287.203038][ T5874] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.214266][ T5874] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.239432][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.318756][ T5874] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 287.503301][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.803599][ T5874] usb 3-1: config 0 descriptor?? [ 288.453015][ T5874] usb 3-1: USB disconnect, device number 17 [ 288.733059][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 288.806573][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 288.977828][ T24] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 288.999142][ T24] usb 1-1: config 0 has no interface number 0 [ 289.005305][ T24] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.045921][ T24] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.080939][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.119364][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.145749][ T24] usb 1-1: config 0 descriptor?? [ 289.885053][ T5879] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 290.173044][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.197489][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.485985][ T5879] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 291.348340][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.348868][ T24] usbhid 1-1:0.32: can't add hid device: -71 [ 291.363062][ T24] usbhid 1-1:0.32: probe with driver usbhid failed with error -71 [ 292.342208][ T5879] usb 2-1: config 0 descriptor?? [ 292.345712][ T24] usb 1-1: USB disconnect, device number 4 [ 292.423499][ T5879] usb 2-1: can't set config #0, error -71 [ 292.459717][ T5879] usb 2-1: USB disconnect, device number 12 [ 292.982587][ T7922] netlink: 96 bytes leftover after parsing attributes in process `syz.2.574'. [ 294.358072][ T7929] vivid-000: kernel_thread() failed [ 295.971858][ T7950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 296.406486][ T7957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.586'. [ 296.443851][ T7957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.586'. [ 296.525753][ T5879] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 297.811959][ T24] libceph: connect (1)[c::]:6789 error -101 [ 297.859897][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.909852][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 298.161537][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.177989][ T5879] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 298.180607][ T7967] ceph: No mds server is up or the cluster is laggy [ 298.225281][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.345883][ T5879] usb 4-1: config 0 descriptor?? [ 298.606596][ T7972] tmpfs: Unknown parameter 'mñol' [ 298.636875][ T5879] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 298.697072][ T5879] usb 4-1: USB disconnect, device number 9 [ 299.007907][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 299.625763][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 299.653827][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 299.681355][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.704529][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 299.713372][ T24] pvrusb2: ********** [ 299.717809][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 299.770969][ T24] pvrusb2: Important functionality might not be entirely working. [ 299.785699][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 299.812994][ T24] pvrusb2: ********** [ 299.924172][ T2340] pvrusb2: Invalid write control endpoint [ 300.206225][ T5915] usb 5-1: USB disconnect, device number 9 [ 300.769502][ T2340] pvrusb2: Invalid write control endpoint [ 300.775389][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 300.842857][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.0.598'. [ 300.848118][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 300.867504][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.0.598'. [ 301.079003][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 301.364563][ T2340] pvrusb2: Device being rendered inoperable [ 301.460004][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 301.518839][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 301.539987][ T2340] pvrusb2: Attached sub-driver cx25840 [ 301.564988][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 301.773335][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 302.979370][ T8014] tmpfs: Unknown parameter 'mñol' [ 306.290742][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 306.348391][ T8038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.610'. [ 306.358246][ T8038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.610'. [ 306.616234][ T5939] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.766946][ T5871] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 306.785865][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 306.797261][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 306.806902][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.815845][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 306.838020][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400 [ 306.845082][ T5939] pvrusb2: ********** [ 306.853650][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 306.866673][ T5939] pvrusb2: Important functionality might not be entirely working. [ 306.874506][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 306.886418][ T5939] pvrusb2: ********** [ 306.929482][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.942814][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.959068][ T5871] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 306.970330][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.984618][ T5871] usb 4-1: config 0 descriptor?? [ 306.995856][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 307.002001][ T5871] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 307.013300][ T5879] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 307.023945][ T5879] usb 1-1: config 0 has no interface number 0 [ 307.053621][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 307.070793][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.087160][ T2340] pvrusb2: Invalid write control endpoint [ 307.110964][ T5879] usb 1-1: Product: syz [ 307.124968][ T5879] usb 1-1: Manufacturer: syz [ 307.133297][ T5879] usb 1-1: SerialNumber: syz [ 307.167145][ T5879] usb 1-1: config 0 descriptor?? [ 307.266754][ T5873] usb 4-1: USB disconnect, device number 10 [ 307.281037][ T2340] pvrusb2: Invalid write control endpoint [ 307.285205][ T5939] usb 3-1: USB disconnect, device number 18 [ 307.314377][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 307.354464][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 307.363828][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 307.377683][ T2340] pvrusb2: Device being rendered inoperable [ 307.377756][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 307.377819][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 307.382236][ T2340] pvrusb2: Attached sub-driver cx25840 [ 307.405962][ T5879] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 307.406061][ T5879] usb 1-1: No valid video chain found. [ 307.414048][ T5879] usb 1-1: USB disconnect, device number 5 [ 307.431156][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 307.448036][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 308.400205][ T8055] tmpfs: Unknown parameter 'mñol' [ 308.507882][ T8058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.540819][ T8058] netlink: 56 bytes leftover after parsing attributes in process `syz.3.614'. [ 309.191189][ T8049] kernel profiling enabled (shift: 7) [ 312.863850][ T8090] erspan1: entered promiscuous mode [ 312.869407][ T8090] erspan1: entered allmulticast mode [ 313.567944][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 313.900401][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 314.015728][ T5915] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 314.105999][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 314.128308][ T5879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 314.142674][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.201717][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.211538][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 314.255759][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.259374][ T5879] pvrusb2: ********** [ 314.310035][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 314.310695][ T5915] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 314.334740][ T5879] pvrusb2: Important functionality might not be entirely working. [ 314.339833][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.350976][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 314.383576][ T5879] pvrusb2: ********** [ 314.415263][ T2340] pvrusb2: Invalid write control endpoint [ 314.572680][ T8099] tmpfs: Unknown parameter 'mñol' [ 314.577745][ T2340] pvrusb2: Invalid write control endpoint [ 314.577775][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 314.577787][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 314.577796][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 314.577807][ T2340] pvrusb2: Device being rendered inoperable [ 314.582959][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 314.659599][ T5939] usb 1-1: USB disconnect, device number 6 [ 314.667314][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 314.671779][ T5915] usb 4-1: config 0 descriptor?? [ 314.697423][ T2340] pvrusb2: Attached sub-driver cx25840 [ 314.703196][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 314.714232][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 314.981116][ T8105] ceph: No mds server is up or the cluster is laggy [ 314.992807][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 315.029443][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 315.033649][ T5915] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 315.280071][ T5915] usb 4-1: USB disconnect, device number 11 [ 315.507572][ T8112] ======================================================= [ 315.507572][ T8112] WARNING: The mand mount option has been deprecated and [ 315.507572][ T8112] and is ignored by this kernel. Remove the mand [ 315.507572][ T8112] option from the mount to silence this warning. [ 315.507572][ T8112] ======================================================= [ 315.591918][ T8112] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 315.753320][ T8112] syz.0.629: attempt to access beyond end of device [ 315.753320][ T8112] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 316.303998][ T8114] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 317.621682][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.071607][ T8139] tmpfs: Unknown parameter 'mñol' [ 319.435090][ T8141] block device autoloading is deprecated and will be removed. [ 322.252515][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 322.275894][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 322.282881][ T8160] ceph: No mds server is up or the cluster is laggy [ 327.186708][ T8198] block nbd2: shutting down sockets [ 327.209103][ T8199] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 328.867475][ T8213] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 329.284570][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.654'. [ 330.509277][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 330.962048][ T8232] veth3: entered promiscuous mode [ 331.469718][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 333.242289][ T8251] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.251098][ T8251] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.260172][ T8251] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.268941][ T8251] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.277873][ T8251] vxlan0: entered promiscuous mode [ 334.356862][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 334.765752][ T5830] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 335.337792][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.383032][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.410383][ T5830] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 335.451691][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.089053][ T5830] usb 5-1: config 0 descriptor?? [ 336.175062][ T5830] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 336.950207][ T5939] usb 5-1: USB disconnect, device number 10 [ 338.036152][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 338.782059][ T8320] veth3: entered promiscuous mode [ 339.161934][ T8331] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8331] [ 339.176580][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 342.226934][ T8351] block nbd1: shutting down sockets [ 342.526606][ T5939] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 343.086233][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 343.110528][ T5939] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 343.129437][ T5939] usb 4-1: config 2 has no interface number 0 [ 343.146011][ T5939] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.223848][ T5939] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 343.285581][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.293645][ T5939] usb 4-1: Product: syz [ 343.340358][ T5939] usb 4-1: Manufacturer: syz [ 343.356857][ T5939] usb 4-1: SerialNumber: syz [ 343.379784][ T5939] kobil_sct 4-1:2.45: required endpoints missing [ 345.731773][ T5874] usb 4-1: USB disconnect, device number 12 [ 346.834616][ T8399] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 347.677153][ T8409] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 348.185142][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 348.502240][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 348.710801][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 348.927077][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 348.958437][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.153550][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.848096][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.865580][ T5879] usb 3-1: Product: syz [ 349.869796][ T5879] usb 3-1: Manufacturer: syz [ 349.874418][ T5879] usb 3-1: SerialNumber: syz [ 350.002889][ T5879] usb 3-1: config 0 descriptor?? [ 350.022075][ T5879] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 350.074481][ T5879] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 350.273083][ T8425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.341256][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 350.371082][ T5879] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 350.391724][ T5879] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 350.416173][ T5879] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 350.441722][ T5879] em28xx 3-1:0.0: No AC97 audio processor [ 350.472737][ T5879] usb 3-1: USB disconnect, device number 19 [ 350.511383][ T5879] em28xx 3-1:0.0: Disconnecting em28xx [ 350.562086][ T5879] em28xx 3-1:0.0: Freeing device [ 351.418262][ T8437] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[8437] [ 351.909875][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 352.679483][ T8447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 352.707914][ T8447] netlink: 48 bytes leftover after parsing attributes in process `syz.3.718'. [ 358.864028][ T8491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.877736][ T8491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.730'. [ 359.245742][ T8493] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 359.495489][ T8493] netlink: 224 bytes leftover after parsing attributes in process `syz.2.729'. [ 365.458240][ T8538] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 365.972789][ T8540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.003630][ T8540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.744'. [ 368.655755][ T5915] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 370.357948][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 370.812128][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.835217][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.845831][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.860419][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.899840][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.981299][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.752302][ T5915] usb 1-1: usb_control_msg returned -71 [ 371.777991][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 371.838319][ T5915] usb 1-1: USB disconnect, device number 7 [ 373.869633][ T5915] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 374.022038][ T8611] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 374.145747][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 374.519101][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 374.576231][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.632509][ T5915] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.658046][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.692340][ T5915] usb 3-1: Product: syz [ 374.708498][ T5915] usb 3-1: Manufacturer: syz [ 374.877923][ T5915] usb 3-1: SerialNumber: syz [ 374.889619][ T5915] usb 3-1: config 0 descriptor?? [ 374.898770][ T5915] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 374.908144][ T5915] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 376.360261][ T5915] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 376.371696][ T5915] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 376.382056][ T5915] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 376.389992][ T5915] em28xx 3-1:0.0: No AC97 audio processor [ 378.015183][ T5915] usb 3-1: USB disconnect, device number 20 [ 378.062422][ T5915] em28xx 3-1:0.0: Disconnecting em28xx [ 378.313106][ T5915] em28xx 3-1:0.0: Freeing device [ 379.089835][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.051644][ T8646] ceph: No mds server is up or the cluster is laggy [ 380.063551][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 380.069895][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 380.280169][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.475644][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 380.488511][ T5873] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 380.511583][ T5873] usb 5-1: config 2 has no interface number 0 [ 380.520228][ T5873] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.533448][ T5873] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 380.552050][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.600242][ T5873] usb 5-1: Product: syz [ 380.627421][ T5873] usb 5-1: Manufacturer: syz [ 380.634280][ T5873] usb 5-1: SerialNumber: syz [ 381.139595][ T5873] kobil_sct 5-1:2.45: required endpoints missing [ 384.793975][ T5873] usb 5-1: USB disconnect, device number 11 [ 385.221244][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.231691][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.241943][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.251317][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.260513][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.269685][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.278906][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.288113][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.297305][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.306511][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 387.548119][ T8710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 391.965789][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 392.175664][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 392.196118][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 392.231342][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.418953][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 392.435566][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.443958][ T5915] usb 5-1: Product: syz [ 392.536618][ T8762] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.566946][ T8762] __nla_validate_parse: 47 callbacks suppressed [ 392.566986][ T8762] netlink: 92 bytes leftover after parsing attributes in process `syz.3.805'. [ 393.182131][ T5915] usb 5-1: Manufacturer: syz [ 393.191700][ T5915] usb 5-1: SerialNumber: syz [ 393.254090][ T5915] usb 5-1: config 0 descriptor?? [ 393.338423][ T5915] usb 5-1: can't set config #0, error -71 [ 393.392238][ T5915] usb 5-1: USB disconnect, device number 12 [ 394.468116][ T8775] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 404.500713][ T8811] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.138607][ T8810] netlink: 92 bytes leftover after parsing attributes in process `syz.4.818'. [ 406.133586][ T8821] tmpfs: Unknown parameter 'mñol' [ 412.855159][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 413.033119][ T30] audit: type=1326 audit(1745720441.589:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.2.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f239958e969 code=0x0 [ 413.236594][ T8872] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.252138][ T8872] netlink: 92 bytes leftover after parsing attributes in process `syz.4.833'. [ 414.061716][ T5939] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 414.510495][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.544260][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.871267][ T5939] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 415.110366][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.231227][ T5939] usb 1-1: config 0 descriptor?? [ 416.353019][ T5939] usb 1-1: can't set config #0, error -71 [ 416.513442][ T5939] usb 1-1: USB disconnect, device number 8 [ 423.132858][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 423.755678][ T5939] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 424.853688][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.869534][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.524261][ T5939] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 425.534865][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.736074][ T5939] usb 5-1: config 0 descriptor?? [ 425.778714][ T5939] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 425.819127][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 425.990454][ T8795] usb 5-1: USB disconnect, device number 13 [ 428.683845][ T5939] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 429.119275][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 429.141225][ T5939] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 429.166775][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.239096][ T5939] usb 1-1: config 0 descriptor?? [ 429.288463][ T5939] gspca_main: sq930x-2.14.0 probing 041e:403c [ 430.812602][ T5939] gspca_sq930x: reg_r 001f failed -71 [ 430.826356][ T5939] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 430.886004][ T5939] usb 1-1: USB disconnect, device number 9 [ 431.020139][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 431.506057][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 432.672111][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 433.738277][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 436.031635][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 436.041686][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 436.926574][ T9039] block nbd3: shutting down sockets [ 437.277346][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 437.317212][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 437.875757][ T9041] block nbd3: NBD_DISCONNECT [ 437.925748][ T9041] block nbd3: Send disconnect failed -22 [ 438.403635][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 439.146069][ T9058] block nbd3: shutting down sockets [ 440.296425][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.027822][ T9080] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 444.516654][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 444.685646][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 444.711649][ T9095] lo speed is unknown, defaulting to 1000 [ 444.713721][ T9099] netlink: 'syz.1.896': attribute type 9 has an invalid length. [ 444.770977][ T5879] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 444.803453][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.820887][ T9100] netlink: 256 bytes leftover after parsing attributes in process `syz.1.896'. [ 444.969096][ T5879] usb 5-1: config 0 descriptor?? [ 445.737941][ T5879] gspca_main: sq930x-2.14.0 probing 041e:403c [ 446.285210][ T5879] gspca_sq930x: reg_r 001f failed -110 [ 446.305844][ T5879] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 447.081352][ T9111] tipc: Started in network mode [ 447.086536][ T9111] tipc: Node identity eef9704ce4c9, cluster identity 4711 [ 447.093850][ T9111] tipc: Enabled bearer , priority 10 [ 447.569760][ T5879] usb 5-1: USB disconnect, device number 14 [ 448.259674][ T8795] tipc: Node number set to 170946636 [ 448.321693][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 449.312951][ T5879] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 449.811096][ T9135] xt_l2tp: missing protocol rule (udp|l2tpip) [ 449.884296][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.912974][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.003477][ T5879] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 450.030345][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.053245][ T5879] usb 3-1: config 0 descriptor?? [ 450.109271][ T5879] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 450.205819][ T5915] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 450.316803][ T5879] usb 3-1: USB disconnect, device number 21 [ 450.365694][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 450.393863][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 450.496825][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 450.506344][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 450.893426][ T5915] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 450.922879][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.955618][ T5915] usb 1-1: Product: syz [ 451.024140][ T5915] usb 1-1: Manufacturer: syz [ 451.065822][ T5915] usb 1-1: SerialNumber: syz [ 451.096750][ T5915] usb 1-1: config 0 descriptor?? [ 451.106380][ T9137] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.131481][ T5915] hub 1-1:0.0: bad descriptor, ignoring hub [ 451.149021][ T5915] hub 1-1:0.0: probe with driver hub failed with error -5 [ 451.627212][ T5915] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 451.858221][ T5879] usb 1-1: USB disconnect, device number 10 [ 451.858396][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 452.741540][ T9159] loop6: detected capacity change from 0 to 524287999 [ 452.752688][ T9159] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.762189][ T9159] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.771763][ T9159] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 452.781395][ T9159] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 456.298977][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 456.502077][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 456.571590][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'. [ 457.435573][ T978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 457.727009][ T8795] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 457.868258][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 457.878508][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 458.498669][ T8795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.510821][ T8795] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.516328][ T978] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 458.523826][ T8795] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 458.542990][ T9206] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 458.708971][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.709766][ T8795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.775851][ T978] usb 2-1: Product: syz [ 458.916524][ T8795] usb 3-1: config 0 descriptor?? [ 458.945384][ T8795] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 459.055348][ T978] usb 2-1: Manufacturer: syz [ 459.079473][ T978] usb 2-1: SerialNumber: syz [ 459.124552][ T978] usb 2-1: config 0 descriptor?? [ 459.141150][ T9217] xt_l2tp: missing protocol rule (udp|l2tpip) [ 459.150234][ T9184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.177032][ T978] hub 2-1:0.0: bad descriptor, ignoring hub [ 459.213232][ T8795] usb 3-1: USB disconnect, device number 22 [ 459.300264][ T978] hub 2-1:0.0: probe with driver hub failed with error -5 [ 459.402832][ T978] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 459.559122][ T8795] usb 2-1: USB disconnect, device number 13 [ 459.559272][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 460.088043][ T9223] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 462.773265][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 463.379143][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 465.190156][ T9251] ceph: No mds server is up or the cluster is laggy [ 465.264377][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 465.347024][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 465.456146][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'. [ 466.247382][ T9267] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 468.426174][ T5873] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 468.697916][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.715853][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.747343][ T5873] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 468.774752][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.840262][ T5873] usb 2-1: config 0 descriptor?? [ 468.875411][ T5873] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 470.145200][ T5873] usb 2-1: USB disconnect, device number 14 [ 470.281833][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 470.348422][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 470.877642][ T9291] xt_l2tp: missing protocol rule (udp|l2tpip) [ 471.685312][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 471.694710][ T9298] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 471.929952][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 471.984690][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.001367][ T9300] netlink: 'syz.4.952': attribute type 9 has an invalid length. [ 472.060802][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.079032][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.086762][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.582947][ T9298] lo speed is unknown, defaulting to 1000 [ 474.512953][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 474.526463][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 477.379549][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 477.495628][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 479.216040][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 480.248506][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 480.261610][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 480.968140][ T9377] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 481.795931][ T9389] netlink: 256 bytes leftover after parsing attributes in process `syz.3.972'. [ 481.866309][ T9378] lo speed is unknown, defaulting to 1000 [ 484.693351][ T9407] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 489.256984][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 489.345412][ T9431] xt_l2tp: missing protocol rule (udp|l2tpip) [ 489.577422][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 489.961355][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 489.982867][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 489.992121][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.010586][ T9] usb 1-1: Product: syz [ 490.015806][ T9] usb 1-1: Manufacturer: syz [ 490.020510][ T9] usb 1-1: SerialNumber: syz [ 490.036300][ T9] usb 1-1: config 0 descriptor?? [ 490.054848][ T9425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.093188][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 490.107710][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 490.241445][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 490.712994][ T5830] usb 1-1: USB disconnect, device number 11 [ 490.713070][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 492.462972][ T9454] lo speed is unknown, defaulting to 1000 [ 493.837400][ T9458] lo speed is unknown, defaulting to 1000 [ 495.110554][ T9465] netlink: set zone limit has 8 unknown bytes [ 496.069999][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 496.541912][ T9489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.573539][ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1002'. [ 497.068663][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 497.085796][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.112311][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.195266][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 497.235550][ T5879] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 497.244641][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.805642][ T5879] usb 4-1: config 0 descriptor?? [ 498.997435][ T5879] hid (null): global environment stack underflow [ 499.003819][ T5879] hid (null): invalid report_size 7124 [ 499.104515][ T5879] usb 4-1: USB disconnect, device number 13 [ 499.744196][ T9508] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 502.369044][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.270730][ T9522] ceph: No mds server is up or the cluster is laggy [ 503.278080][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 503.284685][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 503.995505][ T9534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.024806][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1013'. [ 505.226014][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 505.235006][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 505.549413][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'. [ 507.084018][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 509.404356][ T9568] ceph: No mds server is up or the cluster is laggy [ 509.414597][ T978] libceph: connect (1)[c::]:6789 error -101 [ 509.745973][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 511.923693][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 514.321738][ T9612] loop6: detected capacity change from 0 to 524287999 [ 514.332578][ T9612] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 514.341995][ T9612] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 514.351778][ T9612] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 514.363346][ T9612] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 516.175608][ T5879] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 516.526268][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 516.621228][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 516.646588][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.861438][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.482592][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.692255][ T5879] usb 2-1: Product: syz [ 517.714098][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 517.716047][ T5879] usb 2-1: Manufacturer: syz [ 517.769583][ T5879] usb 2-1: SerialNumber: syz [ 517.798539][ T5879] usb 2-1: config 0 descriptor?? [ 517.848869][ T5879] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.889774][ T5879] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 518.235576][ T53] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 518.956441][ T5879] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 519.007703][ T5879] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 519.171917][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.185530][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.216546][ T53] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 519.247691][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.289042][ T53] usb 1-1: config 0 descriptor?? [ 519.310328][ T53] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 519.863188][ T53] usb 1-1: USB disconnect, device number 12 [ 520.453404][ T5879] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 520.495622][ T5879] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 520.512491][ T5879] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 520.545811][ T5879] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 520.674690][ T5879] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 520.695318][ T5879] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 520.712065][ T5879] usb 2-1: USB disconnect, device number 15 [ 523.050089][ T9673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1045'. [ 523.561495][ T9673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1045'. [ 525.810779][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 526.653164][ T9704] veth3: entered promiscuous mode [ 526.675931][ T9704] bridge1: port 1(veth3) entered blocking state [ 526.689478][ T9704] bridge1: port 1(veth3) entered disabled state [ 526.696542][ T9704] veth3: entered allmulticast mode [ 526.905991][ T5939] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 527.227292][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 527.469162][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 527.873617][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 527.908348][ T5939] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.917485][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.925591][ T5939] usb 3-1: Product: syz [ 528.092208][ T5939] usb 3-1: Manufacturer: syz [ 528.432080][ T5939] usb 3-1: SerialNumber: syz [ 528.477177][ T5939] usb 3-1: config 0 descriptor?? [ 528.518840][ T5939] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 528.541844][ T5939] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 529.427586][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 529.585942][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 529.806518][ T5874] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 529.834469][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.923943][ T5874] usb 2-1: config 0 descriptor?? [ 530.346789][ T5939] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 530.643887][ T5874] usb 2-1: can't set config #0, error -71 [ 530.690204][ T5939] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 530.707901][ T5874] usb 2-1: USB disconnect, device number 16 [ 532.105801][ T5939] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 532.184426][ T5939] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 532.213135][ T5939] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 532.275486][ T5939] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 532.286648][ T5939] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 532.597182][ T5939] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 532.639006][ T5939] usb 3-1: USB disconnect, device number 23 [ 532.765162][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 533.042005][ T9765] block nbd1: NBD_DISCONNECT [ 533.540371][ T9759] veth3: entered promiscuous mode [ 533.616176][ T9759] bridge1: port 1(veth3) entered blocking state [ 533.997485][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 534.007976][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1076'. [ 534.025906][ T9759] bridge1: port 1(veth3) entered disabled state [ 534.080011][ T9759] veth3: entered allmulticast mode [ 535.165755][ T9777] loop6: detected capacity change from 0 to 524287999 [ 535.174909][ T9777] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.184596][ T9777] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.193976][ T9777] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 535.203505][ T9777] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 536.980468][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 538.990591][ T9801] block nbd1: shutting down sockets [ 539.733913][ T9809] netlink: 'syz.2.1087': attribute type 10 has an invalid length. [ 539.742000][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'. [ 539.870889][ T9811] CUSE: unknown device info "ÿ" [ 539.876122][ T9811] CUSE: zero length info key specified [ 540.918923][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 541.549213][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 541.560152][ T9822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1091'. [ 541.655130][ T9809] team0: Port device geneve0 added [ 541.937737][ T9817] tipc: Started in network mode [ 542.027307][ T9817] tipc: Node identity ba5b3122e71e, cluster identity 4711 [ 542.034572][ T9817] tipc: Enabled bearer , priority 10 [ 542.051409][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 542.088047][ T9821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1091'. [ 542.203002][ T9823] veth3: entered promiscuous mode [ 542.212711][ T9823] bridge1: port 1(veth3) entered blocking state [ 542.269544][ T9823] bridge1: port 1(veth3) entered disabled state [ 542.300559][ T9823] veth3: entered allmulticast mode [ 543.638311][ T5939] tipc: Node number set to 1564815650 [ 545.606068][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1098'. [ 545.837075][ T9863] loop6: detected capacity change from 0 to 524287999 [ 545.845798][ T9863] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.855052][ T9863] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.864643][ T9863] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 545.874130][ T9863] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 548.013590][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 548.025276][ T9876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1105'. [ 550.716155][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 552.056611][ T9895] veth5: entered promiscuous mode [ 552.069998][ T9895] bridge2: port 1(veth5) entered blocking state [ 552.095980][ T9895] bridge2: port 1(veth5) entered disabled state [ 552.165093][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'. [ 552.389812][ T9895] veth5: entered allmulticast mode [ 553.490191][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 553.520290][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 553.806210][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 553.839114][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 555.401011][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1121'. [ 555.410972][ T9936] 8021q: VLANs not supported on ip6gre0 [ 556.479317][ T9941] ceph: No mds server is up or the cluster is laggy [ 556.651373][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 556.657984][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 561.125197][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 561.295681][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 561.481466][ T9993] block nbd4: shutting down sockets [ 561.635847][ T9991] block nbd4: NBD_DISCONNECT [ 561.652777][ T9991] block nbd4: Send disconnect failed -22 [ 562.859858][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.918135][T10014] loop6: detected capacity change from 0 to 524287999 [ 563.927150][T10014] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 563.937347][T10014] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 563.947255][T10014] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 563.956761][T10014] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 565.184862][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 565.238078][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 565.387806][T10022] ceph: No mds server is up or the cluster is laggy [ 565.593865][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 566.341457][T10040] trusted_key: encrypted_key: insufficient parameters specified [ 566.385646][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 567.056330][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 567.078052][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 567.854881][ T5939] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 568.485612][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 568.673798][T10059] erspan1: entered promiscuous mode [ 568.679173][T10059] erspan1: entered allmulticast mode [ 569.780959][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 569.788776][ T5939] usb 4-1: can't read configurations, error -71 [ 570.338904][T10072] netlink: 'syz.2.1152': attribute type 10 has an invalid length. [ 570.346950][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1152'. [ 570.473301][T10074] CUSE: unknown device info "ÿ" [ 570.478643][T10074] CUSE: zero length info key specified [ 572.134553][T10090] trusted_key: encrypted_key: insufficient parameters specified [ 574.714374][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 577.345635][T10118] overlayfs: overlapping lowerdir path [ 577.972298][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 579.031156][T10134] trusted_key: encrypted_key: insufficient parameters specified [ 579.986488][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 587.478907][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1182'. [ 589.810537][ T978] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 590.165570][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 590.213915][ T978] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 590.942374][ T978] usb 1-1: config 2 has no interface number 0 [ 590.978626][ T978] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 590.991260][ T978] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 591.005616][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.017003][ T978] usb 1-1: Product: syz [ 591.306835][ T978] usb 1-1: Manufacturer: syz [ 591.343481][ T978] usb 1-1: SerialNumber: syz [ 592.015187][ T978] kobil_sct 1-1:2.45: required endpoints missing [ 594.773684][ T53] usb 1-1: USB disconnect, device number 13 [ 594.779359][T10243] ubi31: attaching mtd0 [ 594.971646][T10243] ubi31: scanning is finished [ 595.459971][T10243] ubi31: empty MTD device detected [ 596.090613][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 597.045139][T10243] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 597.101594][T10243] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 597.125576][T10243] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 597.164869][T10243] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 597.253937][T10243] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 597.304256][T10243] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 597.318227][T10243] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3326121363 [ 597.492673][T10243] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 597.693784][T10258] ubi31: background thread "ubi_bgt31d" started, PID 10258 [ 600.927096][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 600.936931][T10290] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1209'. [ 600.946054][T10290] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1209'. [ 602.057777][T10297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 602.105778][T10297] 8021q: VLANs not supported on ip6gre0 [ 606.206879][ T5830] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 606.215657][ T53] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 606.412422][T10333] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 606.451064][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 606.525664][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 606.587862][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 607.104956][ T53] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 607.114740][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.124077][ T5830] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 607.134319][ T53] usb 2-1: Product: syz [ 607.139389][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.149153][ T53] usb 2-1: Manufacturer: syz [ 607.153885][ T53] usb 2-1: SerialNumber: syz [ 607.490843][ T5830] usb 1-1: Product: syz [ 607.530302][ T5830] usb 1-1: Manufacturer: syz [ 607.540318][ T53] usb 2-1: config 0 descriptor?? [ 607.559164][ T5830] usb 1-1: SerialNumber: syz [ 607.585932][ T5830] usb 1-1: config 0 descriptor?? [ 607.627587][T10322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 607.636932][ T5830] hub 1-1:0.0: bad descriptor, ignoring hub [ 607.644694][ T5830] hub 1-1:0.0: probe with driver hub failed with error -5 [ 607.667537][ T5830] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 607.828666][ T53] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 607.866439][T10339] ubi: mtd0 is already attached to ubi31 [ 607.996425][ T5830] usb 1-1: USB disconnect, device number 14 [ 608.002376][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 609.015568][T10360] netlink: 'syz.4.1231': attribute type 10 has an invalid length. [ 609.024392][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1231'. [ 609.284441][T10362] CUSE: unknown device info "ÿ" [ 609.289734][T10362] CUSE: zero length info key specified [ 609.572800][T10360] team0: Port device geneve0 added [ 609.720649][ T53] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 609.768702][ T53] usb 2-1: USB disconnect, device number 17 [ 609.859607][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 609.870575][T10366] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1232'. [ 609.879929][T10366] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1232'. [ 611.410506][T10382] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 615.293761][T10410] netlink: 'syz.4.1245': attribute type 10 has an invalid length. [ 615.301792][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1245'. [ 615.471337][T10414] CUSE: unknown device info "ÿ" [ 615.476524][T10414] CUSE: zero length info key specified [ 616.139402][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 616.203715][T10415] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1247'. [ 616.213020][T10415] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1247'. [ 617.347244][T10420] lo speed is unknown, defaulting to 1000 [ 617.614076][T10427] netlink: zone id is out of range [ 617.665600][T10427] netlink: zone id is out of range [ 619.983998][T10427] netlink: zone id is out of range [ 620.310916][T10434] netlink: set zone limit has 8 unknown bytes [ 620.333162][T10427] netlink: zone id is out of range [ 620.500348][T10427] netlink: zone id is out of range [ 620.633373][T10421] lo speed is unknown, defaulting to 1000 [ 620.649189][T10427] netlink: set zone limit has 8 unknown bytes [ 623.817407][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 623.835121][T10466] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1261'. [ 623.844129][T10466] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1261'. [ 624.300489][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.556810][T10476] netlink: 'syz.1.1263': attribute type 10 has an invalid length. [ 625.566544][T10476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1263'. [ 625.687190][T10481] CUSE: unknown device info "ÿ" [ 625.692309][T10481] CUSE: zero length info key specified [ 625.863233][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 625.934970][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 625.954111][T10476] team0: Port device geneve0 added [ 626.152481][T10487] veth5: entered promiscuous mode [ 626.158497][T10487] bridge2: port 1(veth5) entered blocking state [ 626.172356][T10487] bridge2: port 1(veth5) entered disabled state [ 626.181148][T10487] veth5: entered allmulticast mode [ 628.611986][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 628.632231][T10510] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1273'. [ 628.645337][T10510] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1273'. [ 628.936766][T10509] block nbd0: shutting down sockets [ 629.025488][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 629.027789][T10505] block nbd0: NBD_DISCONNECT [ 629.039172][T10505] block nbd0: Send disconnect failed -22 [ 629.045977][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 630.055792][ T978] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 630.226702][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 630.247721][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 630.305987][ T978] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 630.314865][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.334106][ T978] usb 2-1: config 0 has no interface number 0 [ 630.344403][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 630.366348][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.389042][ T978] usb 2-1: Product: syz [ 630.412291][ T978] usb 2-1: Manufacturer: syz [ 630.423437][ T978] usb 2-1: SerialNumber: syz [ 630.449371][ T978] usb 2-1: config 0 descriptor?? [ 630.740580][ T978] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 630.764074][ T978] usb 2-1: No valid video chain found. [ 632.444902][ T5830] usb 2-1: USB disconnect, device number 18 [ 632.616490][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 632.632557][T10551] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1288'. [ 632.643837][T10551] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1288'. [ 634.167693][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 634.277325][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 634.287092][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 634.724091][T10568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1293'. [ 635.576965][T10582] netlink: 'syz.1.1297': attribute type 10 has an invalid length. [ 635.584892][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1297'. [ 635.709106][T10584] CUSE: unknown device info "ÿ" [ 635.714178][T10584] CUSE: zero length info key specified [ 638.491792][T10601] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 638.500013][T10601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 638.816914][T10601] geneve0: entered promiscuous mode [ 638.826518][T10601] team0: Port device geneve0 added [ 638.840912][T10606] CUSE: unknown device info "ÿ" [ 638.845986][T10606] CUSE: zero length info key specified [ 639.704341][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 639.719885][T10605] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1304'. [ 639.728976][T10605] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1304'. [ 639.910711][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 639.930335][T10609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1304'. [ 639.961206][T10609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1304'. [ 641.347048][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 641.408789][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 641.507820][T10620] veth5: entered promiscuous mode [ 641.513319][T10620] bridge2: port 1(veth5) entered blocking state [ 641.519868][T10620] bridge2: port 1(veth5) entered disabled state [ 641.526458][T10620] veth5: entered allmulticast mode [ 641.529693][T10630] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1309'. [ 641.841503][ T978] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 642.175502][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 642.198186][ T978] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 642.212118][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.245516][ T978] usb 2-1: Product: syz [ 642.249735][ T978] usb 2-1: Manufacturer: syz [ 642.263220][ T978] usb 2-1: SerialNumber: syz [ 642.269692][T10632] block nbd4: shutting down sockets [ 642.309274][ T978] usb 2-1: config 0 descriptor?? [ 642.370852][ T978] usb 2-1: selecting invalid altsetting 3 [ 642.404137][ T978] comedi comedi0: could not set alternate setting 3 in high speed [ 642.415789][ T53] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 642.443120][ T978] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 642.477478][ T978] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 642.560536][ T9] usb 2-1: USB disconnect, device number 19 [ 642.595680][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 642.612705][ T53] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.636487][ T53] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.652831][ T53] usb 3-1: config 0 interface 0 has no altsetting 0 [ 642.722018][ T53] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 642.791634][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.264683][ T53] usb 3-1: config 0 descriptor?? [ 643.726548][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 644.538318][ T53] usb 3-1: USB disconnect, device number 24 [ 646.447007][T10660] wg1: entered promiscuous mode [ 646.453505][T10660] wg1: entered allmulticast mode [ 646.504310][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 646.533270][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 646.570761][T10672] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1323'. [ 646.652775][T10673] veth7: entered promiscuous mode [ 646.665861][T10673] bridge4: port 1(veth7) entered blocking state [ 646.674277][T10673] bridge4: port 1(veth7) entered disabled state [ 646.703266][T10673] veth7: entered allmulticast mode [ 647.006072][ T5879] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 647.196069][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 647.213115][ T5879] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 647.232389][ T5879] usb 3-1: config 2 has no interface number 0 [ 647.248171][ T5879] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.748647][ T5879] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 647.765333][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.773575][ T5879] usb 3-1: Product: syz [ 647.805485][ T5879] usb 3-1: Manufacturer: syz [ 647.810162][ T5879] usb 3-1: SerialNumber: syz [ 647.896850][ T5879] kobil_sct 3-1:2.45: required endpoints missing [ 649.295583][T10702] block nbd3: shutting down sockets [ 649.945257][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 650.205328][ T53] usb 3-1: USB disconnect, device number 25 [ 650.253127][T10710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1334'. [ 652.676106][T10733] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 652.684120][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'. [ 652.808798][T10735] CUSE: unknown device info "ÿ" [ 652.813877][T10735] CUSE: zero length info key specified [ 655.010871][T10750] block nbd0: shutting down sockets [ 655.794790][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 656.339211][T10761] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1348'. [ 659.404957][T10793] block nbd3: NBD_DISCONNECT [ 660.685621][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1360'. [ 660.786976][T10802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1360'. [ 665.948417][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 666.022880][T10846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1373'. [ 667.373704][T10857] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 667.381837][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1377'. [ 667.452516][T10858] CUSE: unknown device info "ÿ" [ 667.457639][T10858] CUSE: zero length info key specified [ 669.437495][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 669.446583][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 670.749748][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 671.963915][T10893] erspan1: entered promiscuous mode [ 671.969326][T10893] erspan1: entered allmulticast mode [ 675.345623][ T8795] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 675.799389][ T8795] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 675.835588][ T8795] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 676.106165][ T8795] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 676.126199][ T8795] usb 2-1: config 150 has no interface number 0 [ 676.142525][ T8795] usb 2-1: config 150 interface 204 has no altsetting 0 [ 676.268088][ T8795] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 676.285583][ T8795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.293710][ T8795] usb 2-1: Product: syz [ 676.305474][ T8795] usb 2-1: Manufacturer: syz [ 676.310186][ T8795] usb 2-1: SerialNumber: syz [ 677.829340][T10932] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 678.763116][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 678.789751][T10939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1400'. [ 678.955853][ T8795] usb 2-1: USB disconnect, device number 20 [ 680.678906][T10950] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1402'. [ 681.012615][T10939] veth3: entered promiscuous mode [ 681.061391][T10939] bridge2: port 1(veth3) entered blocking state [ 681.075164][T10939] bridge2: port 1(veth3) entered disabled state [ 681.091991][T10939] veth3: entered allmulticast mode [ 682.077021][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 685.742134][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.846456][T11005] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1417'. [ 688.014908][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 688.043896][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 688.056557][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 688.143919][T11007] veth7: entered promiscuous mode [ 688.179463][T11007] bridge4: port 1(veth7) entered blocking state [ 688.227116][T11007] bridge4: port 1(veth7) entered disabled state [ 688.234823][T11007] veth7: entered allmulticast mode [ 688.407689][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1420'. [ 689.226747][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 689.236146][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 689.965678][ T8795] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 690.578021][ T8795] usb 2-1: Using ep0 maxpacket: 16 [ 690.666073][ T8795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.683320][ T8795] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.694893][ T8795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.976040][ T8795] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 690.986036][ T8795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.444758][ T8795] usb 2-1: config 0 descriptor?? [ 692.447365][T11047] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1431'. [ 692.514695][ T8795] usb 2-1: USB disconnect, device number 21 [ 692.677745][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'. [ 692.739457][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 692.957406][T11056] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 692.965506][T11056] __nla_validate_parse: 1 callbacks suppressed [ 692.965558][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1434'. [ 693.088256][T11058] CUSE: unknown device info "ÿ" [ 693.093282][T11058] CUSE: zero length info key specified [ 693.957442][ T9812] non-paged memory [ 693.961612][ T9812] list_del corruption, ffff88805fd6a400->next is LIST_POISON1 (dead000000000100) [ 693.972384][ T9812] ------------[ cut here ]------------ [ 693.978833][ T9812] kernel BUG at lib/list_debug.c:58! [ 693.985000][ T9812] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 693.991304][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: kworker/u9:0 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 694.003567][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 694.013639][ T9812] Workqueue: hci4 hci_conn_timeout [ 694.018779][ T9812] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 694.025818][ T9812] Code: e0 fd c0 8b 48 89 de e8 40 5f 70 fc 90 0f 0b 4c 89 e7 e8 65 d3 48 fd 48 c7 c7 40 fe c0 8b 48 89 de 4c 89 e2 e8 23 5f 70 fc 90 <0f> 0b 4c 89 e7 e8 48 d3 48 fd 48 c7 c7 a0 fe c0 8b 48 89 de 4c 89 [ 694.045429][ T9812] RSP: 0018:ffffc9001b37fa20 EFLAGS: 00010246 [ 694.051505][ T9812] RAX: 000000000000004e RBX: ffff88805fd6a400 RCX: 924ca01cd0b28500 [ 694.059587][ T9812] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 694.067565][ T9812] RBP: ffffffff8a5ecf90 R08: ffffc9001b37f707 R09: 1ffff9200366fee0 [ 694.075544][ T9812] R10: dffffc0000000000 R11: fffff5200366fee1 R12: dead000000000100 [ 694.083515][ T9812] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 694.091502][ T9812] FS: 0000000000000000(0000) GS:ffff888126203000(0000) knlGS:0000000000000000 [ 694.100435][ T9812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.107029][ T9812] CR2: 000020000001d000 CR3: 000000005b052000 CR4: 00000000003526f0 [ 694.115012][ T9812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 694.123333][ T9812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 694.131301][ T9812] Call Trace: [ 694.134578][ T9812] [ 694.137515][ T9812] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 694.143246][ T9812] hci_cancel_connect_sync+0xc8/0x120 [ 694.148717][ T9812] hci_abort_conn+0x191/0x330 [ 694.153411][ T9812] ? process_scheduled_works+0x9ec/0x17a0 [ 694.159138][ T9812] process_scheduled_works+0xadb/0x17a0 [ 694.164702][ T9812] ? __pfx_process_scheduled_works+0x10/0x10 [ 694.170699][ T9812] worker_thread+0x8a0/0xda0 [ 694.175338][ T9812] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 694.181683][ T9812] ? __kthread_parkme+0x7b/0x200 [ 694.186637][ T9812] kthread+0x70e/0x8a0 [ 694.190709][ T9812] ? __pfx_worker_thread+0x10/0x10 [ 694.195852][ T9812] ? __pfx_kthread+0x10/0x10 [ 694.200465][ T9812] ? __pfx_kthread+0x10/0x10 [ 694.205061][ T9812] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.210281][ T9812] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.215492][ T9812] ? __pfx_kthread+0x10/0x10 [ 694.220082][ T9812] ret_from_fork+0x4b/0x80 [ 694.224495][ T9812] ? __pfx_kthread+0x10/0x10 [ 694.229085][ T9812] ret_from_fork_asm+0x1a/0x30 [ 694.233867][ T9812] [ 694.236902][ T9812] Modules linked in: [ 694.241642][ T9812] ---[ end trace 0000000000000000 ]--- [ 694.248537][ T9812] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 694.255676][ T9812] Code: e0 fd c0 8b 48 89 de e8 40 5f 70 fc 90 0f 0b 4c 89 e7 e8 65 d3 48 fd 48 c7 c7 40 fe c0 8b 48 89 de 4c 89 e2 e8 23 5f 70 fc 90 <0f> 0b 4c 89 e7 e8 48 d3 48 fd 48 c7 c7 a0 fe c0 8b 48 89 de 4c 89 [ 694.276051][ T9812] RSP: 0018:ffffc9001b37fa20 EFLAGS: 00010246 [ 694.282166][ T9812] RAX: 000000000000004e RBX: ffff88805fd6a400 RCX: 924ca01cd0b28500 [ 694.290803][ T9812] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 694.298931][ T9812] RBP: ffffffff8a5ecf90 R08: ffffc9001b37f707 R09: 1ffff9200366fee0 [ 694.307064][ T9812] R10: dffffc0000000000 R11: fffff5200366fee1 R12: dead000000000100 [ 694.315075][ T9812] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 694.323153][ T9812] FS: 0000000000000000(0000) GS:ffff888126203000(0000) knlGS:0000000000000000 [ 694.332140][ T9812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.338804][ T9812] CR2: 000020000001d000 CR3: 000000005b052000 CR4: 00000000003526f0 [ 694.346902][ T9812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 694.354875][ T9812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 694.362930][ T9812] Kernel panic - not syncing: Fatal exception [ 694.369335][ T9812] Kernel Offset: disabled [ 694.373661][ T9812] Rebooting in 86400 seconds..