last executing test programs: 26.796196537s ago: executing program 2 (id=3330): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a340000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[@ANYBLOB], 0x0) connect$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 25.658886289s ago: executing program 2 (id=3332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23.949987548s ago: executing program 1 (id=3335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x10001}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2, 0xc1a}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) 21.189966753s ago: executing program 4 (id=3339): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x5}}]}}]}, 0x48}}, 0x400c904) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_open_dev$video(&(0x7f0000000480), 0x5, 0x208101) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010000000fdfffffffcdbdf25030005000000000002002000ffffffff0000000000000000080012000000010000000000000000000600000000000000f303000000800000ff01000000000000"], 0x80}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180), &(0x7f00000001c0)) 20.925054776s ago: executing program 3 (id=3340): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 20.38349578s ago: executing program 2 (id=3342): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x11, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) getresgid(&(0x7f0000000280), 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040), &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 20.181941723s ago: executing program 4 (id=3343): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.033857424s ago: executing program 0 (id=3344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="050000000000fcdbdf252e00000008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x33, 0x1, 0xe1bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 19.65908813s ago: executing program 0 (id=3345): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x200001, 0x10100, 0x0, 0x172}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2}) io_uring_enter(r1, 0x3f80, 0x3297, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x80000) 19.445301123s ago: executing program 1 (id=3346): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x4, 0xfffffffe, 0x3}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r3 = shmget$private(0x0, 0x9000, 0x2000, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f00009b8000/0x3000)=nil, 0x9000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'wlan0\x00', 0x1}, 0x18) 19.300533699s ago: executing program 0 (id=3347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[]) 19.249045339s ago: executing program 4 (id=3348): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x101202, 0x80) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 19.101006889s ago: executing program 0 (id=3349): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 19.075150213s ago: executing program 2 (id=3350): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 18.930798258s ago: executing program 4 (id=3351): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/4092, 0xffc) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 18.196270864s ago: executing program 0 (id=3352): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) 17.944532919s ago: executing program 3 (id=3353): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000280), 0x0, &(0x7f0000000400)) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 17.029702372s ago: executing program 3 (id=3354): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x0, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8056}]}}]}, 0x60}}, 0x44080) 16.336192989s ago: executing program 1 (id=3355): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)={'#! ', '', [], 0xa, "2976369687352c0da8f10652cec42e485a65fab86f85de6c348670c29527e642ab2c10b69e35b0843ee16789d37abd93222a5cd2e73700487b84657c66bba8a08a2a8664198184e1824cea74a9c360a9df87e9456167190c5b4ff38cb5355aed5788ae9e9b023aac55ffc30336660812af57a949be3482caa38f5f337c6670a41e5ec93187bae1fa765b1ee4e31d640ead466b5701345d40a366815d1dc4ff8b86d137d826a58dc2b2980ab382d3b6207a3c51ea"}, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r2}) 16.22717046s ago: executing program 0 (id=3356): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.212943601s ago: executing program 1 (id=3357): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munlockall() fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000240)=',-\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0xfffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xfffffffffffffcaf, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.048953733s ago: executing program 3 (id=3358): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 16.026087649s ago: executing program 2 (id=3359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[]) 15.425649644s ago: executing program 2 (id=3360): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munlockall() fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xfffffffffffffcaf, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 15.242917016s ago: executing program 4 (id=3361): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 15.230303598s ago: executing program 3 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401070c9, &(0x7f0000000000)) 14.367481308s ago: executing program 1 (id=3363): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}}, 0x0) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0xc0045103, &(0x7f0000000040)) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 14.220156447s ago: executing program 4 (id=3364): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a340000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000000)={0x10200, 0x0, 0x40, &(0x7f00000005c0)=[0x4, 0x5, 0x101, 0x90000000, 0xb3, 0x7, 0x4, 0x80, 0x6, 0x9, 0x80, 0xfff, 0xe0000000000, 0xfffffffffffffff7, 0xfff, 0x2, 0x1, 0x0, 0xa, 0x3, 0x9a, 0x15, 0x0, 0x400, 0x81, 0x400000000, 0x6, 0x6, 0x6, 0x4, 0x8, 0x8, 0x8, 0x53, 0x5, 0x8000, 0x4, 0xec61, 0x8, 0x1fe, 0x69e, 0x9, 0x6, 0x7, 0x4, 0xb, 0x8, 0x9, 0x3, 0x10000, 0x6, 0xfff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x100, 0x8, 0x0, 0x7, 0x4f, 0x3, 0x0, 0x6, 0x7, 0x5, 0x9db, 0x8, 0x80000001, 0x5, 0x2c000000, 0x2, 0x1, 0x5, 0x7f, 0x0, 0x100, 0xffffffffffffffff, 0x6, 0x6, 0x5, 0xa293, 0x1, 0x40, 0xa, 0x8001, 0x8, 0x8, 0xffffffff, 0x7, 0x5, 0x956, 0xfffffffffffffffd, 0xfff, 0x400000000032, 0x2, 0x4, 0x7, 0x5, 0x3, 0x5, 0x8000020000000000, 0x4, 0x80000001, 0x79, 0x25f, 0x9, 0x800, 0x83b, 0xbb, 0x9, 0x2796, 0x5, 0x7, 0x6, 0x8, 0x7, 0x6, 0x3, 0x3, 0x9, 0x7, 0x2, 0x48, 0x4, 0x8, 0x9]}) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 7.668785187s ago: executing program 1 (id=3365): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) getresgid(&(0x7f0000000280), 0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) 7.414446724s ago: executing program 3 (id=3366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 0s ago: executing program 32 (id=3356): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2419" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1004.567217][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1004.581824][T15369] ceph: No mds server is up or the cluster is laggy [ 1004.596686][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1006.348957][T15400] program syz.4.2431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.419489][T15404] ceph: No mds server is up or the cluster is laggy [ 1007.616941][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1007.687190][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1008.254722][T15416] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1008.663902][T15418] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1009.904329][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1009.921387][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1010.040511][T15443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.146591][ T5894] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1010.198652][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1010.205217][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1010.352616][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.493070][T15436] ceph: No mds server is up or the cluster is laggy [ 1010.523747][ T5894] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1010.543927][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.572392][ T5894] usb 4-1: config 0 descriptor?? [ 1011.376478][T13038] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1011.745730][T15456] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1014.920183][ T5937] IPVS: starting estimator thread 0... [ 1014.931331][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 1014.941173][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1014.980995][ T5894] usb 4-1: USB disconnect, device number 119 [ 1015.026564][T15463] IPVS: using max 47 ests per chain, 112800 per kthread [ 1016.452294][ T30] audit: type=1400 audit(2000000015.320:326): avc: denied { read } for pid=15471 comm="syz.1.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1018.879359][T15447] Set syz1 is full, maxelem 65536 reached [ 1020.345157][T15515] ceph: No mds server is up or the cluster is laggy [ 1020.345471][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1020.345569][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1021.235296][ T5880] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1021.600976][T15528] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1021.908029][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1022.005800][ T5880] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1022.024730][ T5880] usb 4-1: config 0 has no interface number 0 [ 1022.069244][ T5880] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1022.078399][ T5880] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1022.090379][ T5880] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1022.212082][ T5880] usb 4-1: Product: syz [ 1022.221521][ T5880] usb 4-1: Manufacturer: syz [ 1022.226130][ T5880] usb 4-1: SerialNumber: syz [ 1022.243385][ T5893] IPVS: starting estimator thread 0... [ 1023.141948][ T30] audit: type=1800 audit(2000000022.090:327): pid=15545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2463" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1023.198219][ T5880] usb 4-1: config 0 descriptor?? [ 1023.221169][ T5880] smsc75xx v1.0.0 [ 1023.533978][T15541] IPVS: using max 47 ests per chain, 112800 per kthread [ 1023.768207][T15550] vxfs: WRONG superblock magic 00000000 at 1 [ 1023.775029][T15550] vxfs: WRONG superblock magic 00000000 at 8 [ 1023.781110][T15550] vxfs: can't find superblock. [ 1024.121861][T15549] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1024.733604][ T5880] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1024.759788][ T5880] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1025.470347][ T5880] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1025.534181][ T5880] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1025.696812][ T5880] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1025.730878][ T5880] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 1025.914666][ T5880] usb 4-1: USB disconnect, device number 120 [ 1026.944103][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1026.967455][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1026.973668][T15581] ceph: No mds server is up or the cluster is laggy [ 1026.983566][T15583] vxfs: WRONG superblock magic 00000000 at 1 [ 1026.989903][T15583] vxfs: WRONG superblock magic 00000000 at 8 [ 1026.995892][T15583] vxfs: can't find superblock. [ 1029.033607][T15602] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2476'. [ 1029.188467][T15607] netlink: 'syz.4.2475': attribute type 4 has an invalid length. [ 1030.046834][T15620] netlink: 'syz.4.2475': attribute type 4 has an invalid length. [ 1030.146464][ T5893] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1030.154167][ T5880] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1030.396546][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 1030.524848][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.549603][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1030.577871][ T5893] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1030.604686][ T5880] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1030.623919][ T5893] usb 3-1: config 0 has no interface number 0 [ 1030.648178][T15629] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 1030.765229][T15630] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 1030.769604][ T5893] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1030.786090][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.794235][ T5880] usb 4-1: Product: syz [ 1030.800212][ T5880] usb 4-1: Manufacturer: syz [ 1030.805177][ T5880] usb 4-1: SerialNumber: syz [ 1030.814601][ T5893] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1030.825426][ T5893] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1030.833729][ T5893] usb 3-1: Product: syz [ 1030.839766][ T5880] usb 4-1: config 0 descriptor?? [ 1030.844702][ T5893] usb 3-1: Manufacturer: syz [ 1030.858905][ T5893] usb 3-1: SerialNumber: syz [ 1030.867424][ T5893] usb 3-1: config 0 descriptor?? [ 1030.873687][ T5893] smsc75xx v1.0.0 [ 1030.937618][ T5880] hub 4-1:0.0: bad descriptor, ignoring hub [ 1030.943688][ T5880] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1031.487992][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1031.500671][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1032.538654][T15637] ceph: No mds server is up or the cluster is laggy [ 1032.547039][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1032.562866][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1032.886669][ T5880] usb 4-1: USB disconnect, device number 121 [ 1032.979684][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1033.007759][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1033.065705][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1033.076254][ T5893] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 1033.273070][T15652] input: syz0 as /devices/virtual/input/input39 [ 1033.380167][T15652] netlink: 'syz.4.2488': attribute type 4 has an invalid length. [ 1033.732697][T15657] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1033.886446][ T5893] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1034.823499][ T5894] usb 3-1: USB disconnect, device number 126 [ 1034.832977][ T5893] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1034.846484][ T5893] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1035.058763][ T5893] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1035.074255][ T5893] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1035.087074][ T5893] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1035.109178][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1035.129367][ T5893] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1035.161664][ T5893] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1035.186456][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1035.199382][ T5893] usb 1-1: Product: syz [ 1035.203622][ T5893] usb 1-1: Manufacturer: syz [ 1035.208620][ T5893] usb 1-1: SerialNumber: syz [ 1035.214809][ T5893] usb 1-1: config 0 descriptor?? [ 1035.224028][T15650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1035.237824][ T5893] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1035.404075][ T5893] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1035.440069][ T5880] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1035.449612][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.457847][ T5880] usb 2-1: Product: syz [ 1035.463702][ T5880] usb 2-1: Manufacturer: syz [ 1035.481313][ T5880] usb 2-1: SerialNumber: syz [ 1035.494898][ T5880] usb 2-1: config 0 descriptor?? [ 1035.518058][ T5880] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1037.334793][ T5894] usb 1-1: USB disconnect, device number 5 [ 1037.343252][ T5894] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1037.654743][ T5880] IPVS: starting estimator thread 0... [ 1037.916999][T15684] IPVS: using max 37 ests per chain, 88800 per kthread [ 1038.004768][T15688] ceph: No mds server is up or the cluster is laggy [ 1038.125289][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1038.297964][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1038.335098][ T5880] usb 2-1: USB disconnect, device number 5 [ 1039.496764][T15710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.534670][T12722] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1040.089950][T12722] usb 4-1: config 0 has no interfaces? [ 1040.144069][T12722] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1040.174784][T12722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.205173][T12722] usb 4-1: Product: syz [ 1040.210493][T12722] usb 4-1: Manufacturer: syz [ 1040.237793][T12722] usb 4-1: SerialNumber: syz [ 1040.262855][T12722] usb 4-1: config 0 descriptor?? [ 1041.919685][ T5880] usb 4-1: USB disconnect, device number 122 [ 1042.798875][T15742] vxfs: WRONG superblock magic 00000000 at 1 [ 1042.805229][T15742] vxfs: WRONG superblock magic 00000000 at 8 [ 1042.811298][T15742] vxfs: can't find superblock. [ 1043.748867][T15750] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1043.758547][ T30] audit: type=1800 audit(2000000042.690:328): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2510" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1044.096636][ T5880] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1044.117103][T15752] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2512'. [ 1044.835069][ T5880] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1044.907631][ T5880] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1044.946694][ T5880] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1045.087022][ T5880] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1045.116548][ T5880] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1045.135482][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.165954][ T5880] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1045.175300][ T5880] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1045.341655][ T5880] usb 2-1: Product: syz [ 1045.831521][ T5880] usb 2-1: Manufacturer: syz [ 1045.836178][ T5880] usb 2-1: SerialNumber: syz [ 1045.843132][ T5880] usb 2-1: config 0 descriptor?? [ 1045.970274][ T5880] usb 2-1: can't set config #0, error -71 [ 1045.998692][ T5880] usb 2-1: USB disconnect, device number 6 [ 1046.736556][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1047.072799][T15794] ceph: No mds server is up or the cluster is laggy [ 1047.083111][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1047.381678][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1047.456606][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1047.637290][T15801] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1048.755023][T15802] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 1048.776949][ T30] audit: type=1400 audit(2000000047.740:329): avc: denied { call } for pid=15803 comm="syz.0.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1049.054608][ T30] audit: type=1400 audit(2000000048.020:330): avc: denied { ioctl } for pid=15808 comm="syz.0.2528" path="socket:[51569]" dev="sockfs" ino=51569 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1049.079771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.481629][T15815] netlink: 'syz.4.2527': attribute type 11 has an invalid length. [ 1049.489622][T15815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2527'. [ 1050.769198][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1050.861491][ T5880] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1050.982761][ T5880] usb 2-1: can't read configurations, error -71 [ 1054.147451][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.153911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.393136][T15883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1055.258363][T15895] vxfs: WRONG superblock magic 00000000 at 1 [ 1055.264579][T15895] vxfs: WRONG superblock magic 00000000 at 8 [ 1055.270633][T15895] vxfs: can't find superblock. [ 1057.923423][ T30] audit: type=1800 audit(2000000056.870:331): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2549" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1058.066832][T15920] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1058.501124][T15923] vxfs: WRONG superblock magic 00000000 at 1 [ 1058.507438][T15923] vxfs: WRONG superblock magic 00000000 at 8 [ 1058.513545][T15923] vxfs: can't find superblock. [ 1058.709110][T15925] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2553'. [ 1059.852806][T15941] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1060.024446][T15947] vxfs: WRONG superblock magic 00000000 at 1 [ 1060.030691][T15947] vxfs: WRONG superblock magic 00000000 at 8 [ 1060.036739][T15947] vxfs: can't find superblock. [ 1063.140557][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1063.339811][ T5893] usb 5-1: config 0 has no interfaces? [ 1063.348283][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1063.366435][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.415549][ T5893] usb 5-1: Product: syz [ 1063.507616][ T5893] usb 5-1: Manufacturer: syz [ 1063.512257][ T5893] usb 5-1: SerialNumber: syz [ 1063.630962][ T5893] usb 5-1: config 0 descriptor?? [ 1063.646741][T15974] vxfs: WRONG superblock magic 00000000 at 1 [ 1063.653180][T15974] vxfs: WRONG superblock magic 00000000 at 8 [ 1063.659232][T15974] vxfs: can't find superblock. [ 1065.639028][T12722] usb 5-1: USB disconnect, device number 6 [ 1065.827899][T15997] vxfs: WRONG superblock magic 00000000 at 1 [ 1065.834206][T15997] vxfs: WRONG superblock magic 00000000 at 8 [ 1065.840325][T15997] vxfs: can't find superblock. [ 1066.596181][T16009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2575'. [ 1066.699003][ T13] Bluetooth: Error in BCSP hdr checksum [ 1066.939110][T16015] delete_channel: no stack [ 1067.010036][ T12] Bluetooth: Error in BCSP hdr checksum [ 1067.107488][T16016] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2577'. [ 1068.076759][T16027] fuse: Unknown parameter 'user_id00000000000000000000' [ 1068.743198][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1068.749568][T13038] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1068.854125][T16031] ceph: No mds server is up or the cluster is laggy [ 1068.861672][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1068.876611][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1069.231375][T16043] vxfs: WRONG superblock magic 00000000 at 1 [ 1069.238750][T16043] vxfs: WRONG superblock magic 00000000 at 8 [ 1069.244788][T16043] vxfs: can't find superblock. [ 1069.481027][T16041] ceph: No mds server is up or the cluster is laggy [ 1069.489011][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1069.510982][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1072.017659][T16070] netlink: 'syz.3.2588': attribute type 4 has an invalid length. [ 1072.050672][T16063] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2590'. [ 1072.259156][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1072.273622][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1072.798855][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1072.837401][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1072.839550][T16087] netlink: 'syz.3.2588': attribute type 4 has an invalid length. [ 1072.884245][T16075] ceph: No mds server is up or the cluster is laggy [ 1073.456435][ T5880] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1074.085651][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.096268][ T5880] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1074.105484][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.107009][T16092] ceph: No mds server is up or the cluster is laggy [ 1074.121037][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1074.125396][ T5880] usb 3-1: config 0 descriptor?? [ 1074.135895][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 1074.203744][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1074.347271][ T5880] pwc: send_video_command error -71 [ 1074.352493][ T5880] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1074.383165][ T5880] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1074.468993][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1074.469964][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1074.817733][ T5880] usb 3-1: USB disconnect, device number 127 [ 1075.156460][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1076.124479][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1076.160511][T16111] ceph: No mds server is up or the cluster is laggy [ 1076.235396][T16114] vxfs: WRONG superblock magic 00000000 at 1 [ 1076.242777][T16114] vxfs: WRONG superblock magic 00000000 at 8 [ 1076.249001][T16114] vxfs: can't find superblock. [ 1076.436444][ T5880] usb 3-1: device not accepting address 2, error -71 [ 1076.464500][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1076.624309][T12722] IPVS: starting estimator thread 0... [ 1076.776667][T16119] IPVS: using max 75 ests per chain, 180000 per kthread [ 1076.787702][T16125] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1077.116502][ T30] audit: type=1800 audit(2000000076.070:332): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2604" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1078.035926][T16129] netlink: 'syz.3.2606': attribute type 4 has an invalid length. [ 1078.189793][T16129] netlink: 'syz.3.2606': attribute type 4 has an invalid length. [ 1079.066556][T12722] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1079.244931][T12722] usb 4-1: Using ep0 maxpacket: 8 [ 1079.259518][T12722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.288223][T12722] usb 4-1: config 0 has no interfaces? [ 1079.340111][T12722] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1079.374948][T12722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.589815][T12722] usb 4-1: Product: syz [ 1079.679817][T12722] usb 4-1: Manufacturer: syz [ 1080.141287][T12722] usb 4-1: SerialNumber: syz [ 1080.239988][T12722] usb 4-1: config 0 descriptor?? [ 1080.267213][T16160] ceph: No mds server is up or the cluster is laggy [ 1080.267498][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1080.267597][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1080.418385][T16166] vxfs: WRONG superblock magic 00000000 at 1 [ 1080.418560][T16166] vxfs: WRONG superblock magic 00000000 at 8 [ 1080.418573][T16166] vxfs: can't find superblock. [ 1081.057243][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 1081.482637][ T5880] usb 4-1: USB disconnect, device number 123 [ 1081.912464][T16184] netlink: 'syz.0.2616': attribute type 4 has an invalid length. [ 1081.950911][T16184] netlink: 'syz.0.2616': attribute type 4 has an invalid length. [ 1082.593714][T16193] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2621'. [ 1084.249212][T16224] netlink: 'syz.2.2628': attribute type 11 has an invalid length. [ 1084.257248][T16224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2628'. [ 1085.782207][ T30] audit: type=1800 audit(2000000084.380:333): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2631" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1089.078629][T16278] netlink: 'syz.1.2636': attribute type 4 has an invalid length. [ 1089.158345][T16280] netlink: 'syz.1.2636': attribute type 4 has an invalid length. [ 1090.085674][T16291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.735427][T16296] vxfs: WRONG superblock magic 00000000 at 1 [ 1090.742732][T16296] vxfs: WRONG superblock magic 00000000 at 8 [ 1090.748814][T16296] vxfs: can't find superblock. [ 1090.828627][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1090.903312][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1091.164611][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1091.171032][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1091.208358][T16295] ceph: No mds server is up or the cluster is laggy [ 1091.218661][T16302] ceph: No mds server is up or the cluster is laggy [ 1091.256824][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1091.257009][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1091.640916][ T30] audit: type=1800 audit(2000000090.600:334): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2643" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1092.063163][T16314] program syz.0.2645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.570773][T16349] vxfs: WRONG superblock magic 00000000 at 1 [ 1095.577782][T16349] vxfs: WRONG superblock magic 00000000 at 8 [ 1095.583806][T16349] vxfs: can't find superblock. [ 1096.956484][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1097.499434][ T5893] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1097.519742][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.544870][ T5893] usb 1-1: Product: syz [ 1097.559818][ T5893] usb 1-1: Manufacturer: syz [ 1097.569993][ T5893] usb 1-1: SerialNumber: syz [ 1098.211191][ T5893] usb 1-1: config 0 descriptor?? [ 1098.288334][ T5893] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1098.705324][T16383] vxfs: WRONG superblock magic 00000000 at 1 [ 1098.712508][T16383] vxfs: WRONG superblock magic 00000000 at 8 [ 1098.718656][T16383] vxfs: can't find superblock. [ 1099.034725][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1099.059391][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1099.105619][T16388] vxfs: WRONG superblock magic 00000000 at 1 [ 1099.486515][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1099.543374][T16388] vxfs: WRONG superblock magic 00000000 at 8 [ 1099.551741][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1099.574352][T16388] vxfs: can't find superblock. [ 1099.692218][T16384] ceph: No mds server is up or the cluster is laggy [ 1100.105625][ T5893] usb 1-1: USB disconnect, device number 6 [ 1100.402496][T16398] vxfs: WRONG superblock magic 00000000 at 1 [ 1100.409456][T16398] vxfs: WRONG superblock magic 00000000 at 8 [ 1100.415499][T16398] vxfs: can't find superblock. [ 1101.185106][T16403] program syz.1.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.706448][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1104.730526][ T5937] usb 1-1: config 0 has no interfaces? [ 1104.746434][ T5937] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1104.758007][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.777597][ T5937] usb 1-1: Product: syz [ 1104.781791][ T5937] usb 1-1: Manufacturer: syz [ 1104.786449][ T5937] usb 1-1: SerialNumber: syz [ 1104.797045][ T5937] usb 1-1: config 0 descriptor?? [ 1105.802290][T16434] netlink: 'syz.3.2674': attribute type 4 has an invalid length. [ 1106.130230][T16441] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2676'. [ 1107.863571][ T5893] usb 1-1: USB disconnect, device number 7 [ 1111.971918][T16465] overlayfs: failed to resolve './file0': -2 [ 1113.460858][T16501] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2691'. [ 1114.418709][T16498] overlayfs: failed to resolve './file0': -2 [ 1114.926215][T16515] /dev/nullb0: Can't open blockdev [ 1114.986574][T13038] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1115.588641][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.595082][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.913459][T12722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1117.122555][T12722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.499906][T16533] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1117.523932][T12722] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1117.557671][T12722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.594379][T12722] usb 3-1: config 0 descriptor?? [ 1117.606891][T12722] pwc: Askey VC010 type 2 USB webcam detected. [ 1117.887111][T12722] pwc: send_video_command error -71 [ 1117.909425][T12722] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1117.926685][T12722] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1117.973050][T12722] usb 3-1: USB disconnect, device number 4 [ 1118.192349][ T5937] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1118.426628][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 1118.461663][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.508445][T16546] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2704'. [ 1118.566427][T12722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1119.343591][ T5937] usb 1-1: config 0 has no interfaces? [ 1119.547190][ T5937] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1119.556278][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.643072][T12722] usb 3-1: device descriptor read/all, error -71 [ 1119.673494][T16553] program syz.4.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.807467][ T5937] usb 1-1: Product: syz [ 1119.816835][ T5937] usb 1-1: Manufacturer: syz [ 1120.396286][ T5937] usb 1-1: SerialNumber: syz [ 1120.463002][ T5937] usb 1-1: config 0 descriptor?? [ 1120.715833][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 1120.841348][ T5880] usb 1-1: USB disconnect, device number 8 [ 1122.106416][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1122.613099][T16576] netlink: 'syz.2.2713': attribute type 11 has an invalid length. [ 1122.621273][T16576] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1122.666616][ T5894] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1122.849140][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.064403][ T5894] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1123.088611][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.114203][ T5894] usb 4-1: config 0 descriptor?? [ 1123.141904][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 1123.378123][ T5894] pwc: send_video_command error -71 [ 1123.383486][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1123.392998][ T5894] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1123.410984][ T5894] usb 4-1: USB disconnect, device number 124 [ 1124.402019][T16606] vxfs: WRONG superblock magic 00000000 at 1 [ 1124.408310][T16606] vxfs: WRONG superblock magic 00000000 at 8 [ 1124.414320][T16606] vxfs: can't find superblock. [ 1124.633015][T16611] (syz.4.2717,16611,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1124.647645][T16611] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2717'. [ 1124.726539][ T5894] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1125.943219][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1126.135798][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 1126.151728][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.156388][ T5894] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1126.172088][ T5880] usb 1-1: config 0 has no interfaces? [ 1126.194475][ T5880] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1126.216390][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.234817][ T5894] usb 4-1: can't read configurations, error -71 [ 1126.255072][ T5880] usb 1-1: Product: syz [ 1126.263896][T16629] program syz.3.2725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.284449][ T5880] usb 1-1: Manufacturer: syz [ 1126.380729][ T5880] usb 1-1: SerialNumber: syz [ 1126.637326][T16634] vxfs: WRONG superblock magic 00000000 at 1 [ 1126.644294][T16634] vxfs: WRONG superblock magic 00000000 at 8 [ 1126.650492][T16634] vxfs: can't find superblock. [ 1126.904288][ T5880] usb 1-1: config 0 descriptor?? [ 1126.938581][T16633] ceph: No mds server is up or the cluster is laggy [ 1126.945541][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1126.968621][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1127.335460][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1127.796082][T16648] ceph: No mds server is up or the cluster is laggy [ 1127.804719][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1127.905493][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1127.980997][ T5894] usb 1-1: USB disconnect, device number 9 [ 1128.505067][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1129.238600][T16660] ceph: No mds server is up or the cluster is laggy [ 1129.391102][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1130.730788][T16681] vxfs: WRONG superblock magic 00000000 at 1 [ 1130.740133][T16681] vxfs: WRONG superblock magic 00000000 at 8 [ 1130.746532][T16681] vxfs: can't find superblock. [ 1130.761581][T16678] (syz.0.2732,16678,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1130.778044][T16678] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2732'. [ 1132.072882][ T5894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1132.750109][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1133.293390][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.309611][ T5894] usb 5-1: config 0 has no interfaces? [ 1133.321657][ T5894] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1133.341516][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.356658][ T5894] usb 5-1: Product: syz [ 1133.360875][ T5894] usb 5-1: Manufacturer: syz [ 1133.365516][ T5894] usb 5-1: SerialNumber: syz [ 1133.389637][ T5894] usb 5-1: config 0 descriptor?? [ 1133.494704][T16714] mmap: syz.3.2745 (16714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1133.723254][T16716] vxfs: WRONG superblock magic 00000000 at 1 [ 1133.730570][T16716] vxfs: WRONG superblock magic 00000000 at 8 [ 1133.737346][T16716] vxfs: can't find superblock. [ 1134.207086][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 1134.304599][T16719] (syz.0.2747,16719,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1134.326178][T16719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1134.335699][T16719] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1134.355045][T16719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.364196][T16719] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1134.709893][ T5893] usb 5-1: USB disconnect, device number 7 [ 1135.834524][T16730] program syz.3.2750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1135.955910][ T30] audit: type=1400 audit(2000000004.250:335): avc: denied { read } for pid=16731 comm="syz.2.2754" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1136.083426][ T30] audit: type=1400 audit(2000000004.250:336): avc: denied { open } for pid=16731 comm="syz.2.2754" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1136.128168][ T30] audit: type=1400 audit(2000000004.250:337): avc: denied { ioctl } for pid=16731 comm="syz.2.2754" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1136.152786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1136.631782][T16742] ceph: No mds server is up or the cluster is laggy [ 1136.632226][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1136.632393][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1137.689584][T16753] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2758'. [ 1138.051051][T16761] netlink: 'syz.2.2757': attribute type 11 has an invalid length. [ 1138.059003][T16761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1139.919673][T16779] (syz.4.2762,16779,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1139.935158][T16779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1139.944701][T16779] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1139.960141][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.038898][T16779] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1140.340434][T12722] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1140.385271][T16784] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2764'. [ 1140.550393][T12722] usb 2-1: Using ep0 maxpacket: 8 [ 1141.774433][T12722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.839428][T12722] usb 2-1: config 0 has no interfaces? [ 1141.868844][T12722] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1141.899122][T12722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.916883][T12722] usb 2-1: Product: syz [ 1141.922699][T12722] usb 2-1: Manufacturer: syz [ 1141.929206][T12722] usb 2-1: SerialNumber: syz [ 1141.939263][T12722] usb 2-1: config 0 descriptor?? [ 1142.880369][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1143.413670][ T5880] usb 2-1: USB disconnect, device number 9 [ 1143.551082][T16821] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2773'. [ 1144.603291][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1144.628132][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1144.639939][T16823] ceph: No mds server is up or the cluster is laggy [ 1146.519985][T16840] vxfs: WRONG superblock magic 00000000 at 1 [ 1146.527232][T16840] vxfs: WRONG superblock magic 00000000 at 8 [ 1146.533283][T16840] vxfs: can't find superblock. [ 1147.847933][T16853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.324813][T16864] vxfs: WRONG superblock magic 00000000 at 1 [ 1148.331040][T16864] vxfs: WRONG superblock magic 00000000 at 8 [ 1148.337057][T16864] vxfs: can't find superblock. [ 1148.432958][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1148.543294][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1148.630149][T16852] ceph: No mds server is up or the cluster is laggy [ 1148.685337][T12722] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1149.056450][T12722] usb 2-1: Using ep0 maxpacket: 8 [ 1149.094910][T12722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.339284][T12722] usb 2-1: config 0 has no interfaces? [ 1149.529088][T12722] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1149.616283][T12722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.649531][T12722] usb 2-1: Product: syz [ 1149.653877][T12722] usb 2-1: Manufacturer: syz [ 1149.666421][T12722] usb 2-1: SerialNumber: syz [ 1149.687850][T12722] usb 2-1: config 0 descriptor?? [ 1150.115853][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'. [ 1150.807549][ T5893] usb 2-1: USB disconnect, device number 10 [ 1151.353908][T16891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.429418][T16896] vxfs: WRONG superblock magic 00000000 at 1 [ 1151.436800][T16896] vxfs: WRONG superblock magic 00000000 at 8 [ 1151.442943][T16896] vxfs: can't find superblock. [ 1158.669581][T13038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1158.686525][T13038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1158.726496][T13038] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1158.742086][T13038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1158.771470][T13038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1158.964006][ T30] audit: type=1400 audit(2000000005.930:338): avc: denied { mounton } for pid=16961 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1159.180116][T16961] chnl_net:caif_netlink_parms(): no params data found [ 1160.986631][T13038] Bluetooth: hci1: command tx timeout [ 1161.018950][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.046054][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.119236][T16961] bridge_slave_0: entered allmulticast mode [ 1161.126958][T16961] bridge_slave_0: entered promiscuous mode [ 1161.137192][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.145436][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.152744][T16961] bridge_slave_1: entered allmulticast mode [ 1161.161873][T16961] bridge_slave_1: entered promiscuous mode [ 1161.579482][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.642789][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.824190][T16961] team0: Port device team_slave_0 added [ 1161.849043][T16961] team0: Port device team_slave_1 added [ 1161.993163][ T5880] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1162.171604][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.321455][ T5880] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1162.340446][T16993] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1162.350635][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.369756][ T5880] usb 4-1: config 0 descriptor?? [ 1162.392979][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 1162.404209][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.429157][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.474672][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.489128][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.499305][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.526062][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.610078][ T5880] pwc: send_video_command error -71 [ 1162.621491][ T5880] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1162.632372][ T5880] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1162.652968][ T5880] usb 4-1: USB disconnect, device number 127 [ 1162.843283][T16961] hsr_slave_0: entered promiscuous mode [ 1162.855208][T16961] hsr_slave_1: entered promiscuous mode [ 1162.967329][T16961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.977034][T16961] Cannot create hsr debugfs directory [ 1163.016394][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1163.043634][ T30] audit: type=1400 audit(2000000010.070:339): avc: denied { create } for pid=17004 comm="syz.4.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1163.070060][T13038] Bluetooth: hci1: command tx timeout [ 1163.132088][T17009] netlink: 'syz.2.2819': attribute type 4 has an invalid length. [ 1163.167198][ T30] audit: type=1400 audit(2000000010.120:340): avc: denied { connect } for pid=17004 comm="syz.4.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1163.296655][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1163.316445][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1163.559899][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.597633][ T5880] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.641747][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.680581][ T5880] usb 4-1: config 0 descriptor?? [ 1163.705110][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 1163.724520][T16961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.943279][T16961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.028674][ T30] audit: type=1400 audit(2000000011.050:341): avc: denied { create } for pid=17011 comm="syz.4.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1165.218696][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1165.238073][T13038] Bluetooth: hci1: command tx timeout [ 1165.256722][ T5880] pwc: recv_control_msg error -71 req 02 val 2700 [ 1165.280581][ T5880] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1165.289566][ T5880] pwc: recv_control_msg error -71 req 04 val 1000 [ 1165.310436][ T5880] pwc: recv_control_msg error -71 req 04 val 1300 [ 1165.317537][ T5880] pwc: recv_control_msg error -71 req 04 val 1400 [ 1165.336915][ T5880] pwc: recv_control_msg error -71 req 02 val 2000 [ 1165.343985][ T5880] pwc: recv_control_msg error -71 req 02 val 2100 [ 1165.347409][T16961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.511167][ T5880] pwc: recv_control_msg error -71 req 04 val 1500 [ 1165.528790][ T5880] pwc: recv_control_msg error -71 req 02 val 2500 [ 1165.596191][T17019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.020911][ T5880] pwc: recv_control_msg error -71 req 02 val 2400 [ 1166.030605][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 1166.315971][T17023] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1166.745828][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 1166.754149][T16961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.764939][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 1166.776642][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 1166.794328][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 1166.813976][ T5880] pwc: Registered as video103. [ 1166.834936][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1166.855100][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1166.872823][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 1166.899596][ T5893] usb 1-1: can't read configurations, error -71 [ 1167.306446][T13038] Bluetooth: hci1: command tx timeout [ 1167.916142][ T5880] usb 4-1: USB disconnect, device number 2 [ 1168.639924][T16961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1168.712664][T16961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1168.734378][T16961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1168.761929][T16961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1169.142234][T17052] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1170.122851][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.270887][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.312163][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.319284][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.335458][T17058] xt_socket: unknown flags 0x58 [ 1170.467627][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.474742][ T9210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.498856][T16961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1170.509769][T16961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1171.018782][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1171.256582][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1171.285439][ T5880] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1171.751748][ T5880] usb 5-1: config 0 has no interface number 0 [ 1171.791099][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1171.821593][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.855740][ T5880] usb 5-1: Product: syz [ 1171.881223][ T5880] usb 5-1: Manufacturer: syz [ 1171.910012][ T5880] usb 5-1: SerialNumber: syz [ 1171.950937][T17081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.960999][ T5880] usb 5-1: config 0 descriptor?? [ 1172.430593][ T5880] smsc95xx v2.0.0 [ 1172.458677][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.612701][T16961] veth0_vlan: entered promiscuous mode [ 1172.732095][T16961] veth1_vlan: entered promiscuous mode [ 1173.530249][T16961] veth0_macvtap: entered promiscuous mode [ 1173.564367][T16961] veth1_macvtap: entered promiscuous mode [ 1173.670042][ T5880] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1173.690697][ T5880] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1173.699784][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.708629][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.805713][T16961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.814622][T16961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.823667][ T5880] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1173.828727][T16961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.843169][T16961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.935538][ T5880] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1173.949867][ T5880] usb 5-1: USB disconnect, device number 8 [ 1175.045172][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.496451][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.218565][ T13] bridge_slave_1: left allmulticast mode [ 1176.224510][ T13] bridge_slave_1: left promiscuous mode [ 1176.238598][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.503999][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1176.537031][T17115] ceph: No mds server is up or the cluster is laggy [ 1176.553386][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1176.808823][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1176.827350][ T13] bridge_slave_0: left allmulticast mode [ 1176.834867][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1176.840971][ T13] bridge_slave_0: left promiscuous mode [ 1176.904986][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.143899][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.157955][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.281737][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1177.311166][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1177.988139][T17124] ceph: No mds server is up or the cluster is laggy [ 1178.407962][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1178.436695][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1178.751914][T17139] delete_channel: no stack [ 1179.516595][T12722] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1179.720876][T12722] usb 4-1: Using ep0 maxpacket: 16 [ 1179.786114][T17152] xt_socket: unknown flags 0x58 [ 1180.057116][ T3076] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1180.165422][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.226633][ T3076] usb 1-1: Using ep0 maxpacket: 32 [ 1180.253560][ T3076] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1180.264149][ T3076] usb 1-1: config 0 has no interface number 0 [ 1180.309869][ T3076] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1180.450118][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.458965][ T3076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.467605][ T3076] usb 1-1: Product: syz [ 1180.468396][ T13] bond0 (unregistering): Released all slaves [ 1180.520126][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.550446][T17146] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1180.570101][ T3076] usb 1-1: Manufacturer: syz [ 1180.606405][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.612354][ T3076] usb 1-1: SerialNumber: syz [ 1180.631232][ T3076] usb 1-1: config 0 descriptor?? [ 1180.643618][ T30] audit: type=1400 audit(2000000027.670:342): avc: denied { mounton } for pid=16961 comm="syz-executor" path="/root/syzkaller.hgC6KO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1180.649660][ T3076] smsc95xx v2.0.0 [ 1180.670358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.722687][ T13] IPVS: stopping backup sync thread 15920 ... [ 1181.126484][ T13] hsr_slave_0: left promiscuous mode [ 1181.548402][ T13] hsr_slave_1: left promiscuous mode [ 1181.686706][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.719644][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.970820][ T3076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1181.981732][ T3076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1182.007979][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.416169][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.147992][ T13] veth1_macvtap: left promiscuous mode [ 1183.164597][ T13] veth0_macvtap: left promiscuous mode [ 1183.185058][T12722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1183.195647][ T13] veth1_vlan: left promiscuous mode [ 1183.196738][T12722] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1183.233598][ T3076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1183.252010][ T13] veth0_vlan: left promiscuous mode [ 1183.304591][T12722] usb 4-1: can't read configurations, error -71 [ 1183.326598][ T3076] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1183.346413][ T5894] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1183.396711][ T3076] usb 1-1: USB disconnect, device number 12 [ 1183.824884][T17186] delete_channel: no stack [ 1183.863729][ T5894] usb 3-1: unable to read config index 0 descriptor/all [ 1183.939277][ T5894] usb 3-1: can't read configurations, error -71 [ 1184.166631][ T3076] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1184.354636][ T3076] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1184.425813][ T3076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.472979][ T3076] usb 1-1: Product: syz [ 1184.496490][ T3076] usb 1-1: Manufacturer: syz [ 1184.507978][ T3076] usb 1-1: SerialNumber: syz [ 1184.547891][ T3076] usb 1-1: config 0 descriptor?? [ 1184.574188][ T3076] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1185.386544][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1185.546612][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 1185.577572][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.596614][ T5893] usb 5-1: config 0 has no interfaces? [ 1185.610584][ T5893] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1185.623367][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.640311][ T5893] usb 5-1: Product: syz [ 1185.652855][ T5893] usb 5-1: Manufacturer: syz [ 1185.662227][ T5893] usb 5-1: SerialNumber: syz [ 1185.679944][ T5893] usb 5-1: config 0 descriptor?? [ 1185.894668][T17211] ceph: No mds server is up or the cluster is laggy [ 1185.910707][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1185.911699][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1186.132290][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1186.260682][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1186.270956][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'. [ 1186.515439][ T5937] usb 1-1: USB disconnect, device number 13 [ 1186.956395][ T5880] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1187.116617][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1187.401320][ T5893] usb 5-1: USB disconnect, device number 9 [ 1187.639227][T17231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.893875][T17237] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2872'. [ 1188.915799][ T13] IPVS: stop unused estimator thread 0... [ 1189.807931][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1189.976388][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 1190.000108][ T5921] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1190.010259][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.034036][ T5921] usb 4-1: Product: syz [ 1190.046374][ T5921] usb 4-1: Manufacturer: syz [ 1190.062465][ T5921] usb 4-1: SerialNumber: syz [ 1191.175329][ T5921] usb 4-1: config 0 descriptor?? [ 1191.274026][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1191.286861][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1191.330009][ T5880] usb 3-1: can't read configurations, error -71 [ 1191.442327][ T5921] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1192.786692][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1193.042248][ T5893] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1193.082048][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.192705][ T5893] usb 1-1: Product: syz [ 1193.214095][ T5921] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1193.706159][ T5921] usb 4-1: USB disconnect, device number 5 [ 1193.712097][ T5893] usb 1-1: Manufacturer: syz [ 1193.717014][ T5893] usb 1-1: SerialNumber: syz [ 1193.730317][ T5893] usb 1-1: config 0 descriptor?? [ 1193.761937][ T5893] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1194.316518][T17155] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1194.527592][T17155] usb 2-1: Using ep0 maxpacket: 8 [ 1194.539620][T17155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.558178][T17155] usb 2-1: config 0 has no interfaces? [ 1194.562605][T17277] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1194.574488][T17155] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1194.595649][T17155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.627914][T17155] usb 2-1: Product: syz [ 1194.632509][T17155] usb 2-1: Manufacturer: syz [ 1194.651472][T17155] usb 2-1: SerialNumber: syz [ 1195.005783][T17155] usb 2-1: config 0 descriptor?? [ 1195.613568][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 1195.614785][ T5921] usb 1-1: USB disconnect, device number 14 [ 1195.949507][T17155] usb 2-1: USB disconnect, device number 11 [ 1196.936371][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1197.675703][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 1199.454173][T17324] program syz.2.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.661398][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1200.129760][ T5921] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1200.219443][ T5921] usb 5-1: can't read configurations, error -71 [ 1201.886358][ T5921] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1201.893965][T17028] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1202.048132][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 1202.303182][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1202.338090][T17353] ceph: No mds server is up or the cluster is laggy [ 1202.349884][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1202.679693][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1202.698589][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.727225][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.728487][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1202.744789][ T5921] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1202.753994][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.774862][T17028] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1202.796945][T17028] usb 4-1: can't read configurations, error -71 [ 1202.816477][ T5921] usb 5-1: config 0 descriptor?? [ 1203.940132][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.953236][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.063911][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 1205.074298][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1205.092325][ T5921] usb 5-1: USB disconnect, device number 11 [ 1206.057089][T17383] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1206.193245][T17380] ======================================================= [ 1206.193245][T17380] WARNING: The mand mount option has been deprecated and [ 1206.193245][T17380] and is ignored by this kernel. Remove the mand [ 1206.193245][T17380] option from the mount to silence this warning. [ 1206.193245][T17380] ======================================================= [ 1206.347068][T17380] tmpfs: Bad value for 'nr_blocks' [ 1207.720920][T17402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.921600][T17425] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2917'. [ 1213.319443][T17460] vxfs: WRONG superblock magic 00000000 at 1 [ 1213.326546][T17460] vxfs: WRONG superblock magic 00000000 at 8 [ 1213.332690][T17460] vxfs: can't find superblock. [ 1213.575450][T17458] ceph: No mds server is up or the cluster is laggy [ 1213.582485][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1213.627279][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1213.834421][T17445] overlayfs: failed to resolve './file0': -2 [ 1215.241484][ T5894] IPVS: starting estimator thread 0... [ 1215.386909][T17478] IPVS: using max 37 ests per chain, 88800 per kthread [ 1219.673342][T17521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2943'. [ 1220.082160][T17524] ceph: No mds server is up or the cluster is laggy [ 1220.276225][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1221.406530][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1222.556393][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1223.026450][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 1224.986628][T17560] 9pnet_fd: Insufficient options for proto=fd [ 1226.301246][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1226.340693][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1226.353992][ T5894] usb 5-1: can't read configurations, error -71 [ 1226.584305][T17575] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 1228.447251][T17597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.787358][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1228.806966][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1228.815813][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.000564][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.011955][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1229.857433][T17599] chnl_net:caif_netlink_parms(): no params data found [ 1229.888826][ T9210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.259924][ T9210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.455323][ T9210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.502283][T17615] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1230.554780][ T9210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.705397][T17599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.796782][T17599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.805077][T17599] bridge_slave_0: entered allmulticast mode [ 1230.814025][T17599] bridge_slave_0: entered promiscuous mode [ 1230.877019][T17599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.890474][T17599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.904255][T17599] bridge_slave_1: entered allmulticast mode [ 1230.921916][T17599] bridge_slave_1: entered promiscuous mode [ 1231.068157][T17636] (syz.3.2972,17636,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1231.089508][T17636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2972'. [ 1231.156413][ T51] Bluetooth: hci5: command tx timeout [ 1231.186653][T17028] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1231.373619][T17599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.407965][T17028] usb 2-1: Using ep0 maxpacket: 16 [ 1231.592704][T17599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.570923][T17599] team0: Port device team_slave_0 added [ 1232.642356][ T9210] bridge_slave_1: left allmulticast mode [ 1232.656641][ T9210] bridge_slave_1: left promiscuous mode [ 1232.682616][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.706810][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1232.855945][ T9210] bridge_slave_0: left allmulticast mode [ 1232.878967][ T9210] bridge_slave_0: left promiscuous mode [ 1233.428958][ T51] Bluetooth: hci5: command tx timeout [ 1233.442055][T17653] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1233.462981][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.476468][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1233.597559][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.807917][ T5893] usb 1-1: config 0 has no interfaces? [ 1233.861164][ T5893] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1233.873145][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.908118][ T5893] usb 1-1: Product: syz [ 1233.922580][ T5893] usb 1-1: Manufacturer: syz [ 1233.941421][ T5893] usb 1-1: SerialNumber: syz [ 1233.951902][T17028] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1233.981603][ T5893] usb 1-1: config 0 descriptor?? [ 1234.000489][T17028] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1234.020382][T17028] usb 2-1: can't read configurations, error -71 [ 1234.342262][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1234.377281][T17668] ceph: No mds server is up or the cluster is laggy [ 1234.402619][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1234.441608][T17672] vxfs: WRONG superblock magic 00000000 at 1 [ 1234.448875][T17672] vxfs: WRONG superblock magic 00000000 at 8 [ 1234.454890][T17672] vxfs: can't find superblock. [ 1234.746497][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1234.753424][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1234.774674][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 1235.456689][ T51] Bluetooth: hci5: command tx timeout [ 1236.486962][ T9210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.501351][ T9210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.517097][ T9210] bond0 (unregistering): Released all slaves [ 1236.547000][T17599] team0: Port device team_slave_1 added [ 1236.815012][T17697] (syz.1.2983,17697,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1236.832080][T17697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2983'. [ 1236.903624][ T9210] tipc: Left network mode [ 1237.012996][T17599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.014022][ T9210] IPVS: stopping backup sync thread 16125 ... [ 1237.030620][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.065146][ T5880] usb 1-1: USB disconnect, device number 15 [ 1237.123435][T17599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.193356][T17599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.202184][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.317076][T17599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.565709][ T51] Bluetooth: hci5: command tx timeout [ 1237.630048][T17599] hsr_slave_0: entered promiscuous mode [ 1237.636159][T17599] hsr_slave_1: entered promiscuous mode [ 1238.423695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.430251][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.039704][ T9210] hsr_slave_0: left promiscuous mode [ 1239.098482][ T9210] hsr_slave_1: left promiscuous mode [ 1239.115198][ T9210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.338738][ T9210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.398624][ T9210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.406119][ T9210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.451249][ T9210] veth1_macvtap: left promiscuous mode [ 1239.505726][ T9210] veth0_macvtap: left promiscuous mode [ 1239.756528][ T9210] veth1_vlan: left promiscuous mode [ 1239.761905][ T9210] veth0_vlan: left promiscuous mode [ 1239.770727][T17732] netlink: 'syz.2.2988': attribute type 4 has an invalid length. [ 1240.266432][T17030] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1240.426329][T17030] usb 4-1: Using ep0 maxpacket: 16 [ 1240.432850][T17030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.458896][T17030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.476443][T17030] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1240.491621][T17030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.510583][T17030] usb 4-1: config 0 descriptor?? [ 1241.011060][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.023740][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.374556][ T9210] team0 (unregistering): Port device team_slave_1 removed [ 1241.417963][ T9210] team0 (unregistering): Port device team_slave_0 removed [ 1242.376390][T17028] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1242.527766][T17028] usb 1-1: Using ep0 maxpacket: 8 [ 1242.534904][T17028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.545520][T17028] usb 1-1: config 0 has no interfaces? [ 1242.567573][T17028] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1242.586427][T17028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.599195][T17028] usb 1-1: Product: syz [ 1242.603464][T17028] usb 1-1: Manufacturer: syz [ 1243.223838][T17028] usb 1-1: SerialNumber: syz [ 1243.237958][T17028] usb 1-1: config 0 descriptor?? [ 1243.336823][T17030] usbhid 4-1:0.0: can't add hid device: -71 [ 1243.453860][T17030] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1243.486094][T17030] usb 4-1: USB disconnect, device number 8 [ 1243.683172][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'. [ 1244.186694][T17780] ceph: No mds server is up or the cluster is laggy [ 1244.815038][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1244.912217][ T9210] IPVS: stop unused estimator thread 0... [ 1244.976494][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1245.134382][T17028] usb 1-1: USB disconnect, device number 16 [ 1245.455527][T17599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1245.466463][T17155] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1245.499953][T17599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1245.510736][T17599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1245.522698][T17599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1245.640565][T17599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.650029][T17155] usb 3-1: Using ep0 maxpacket: 8 [ 1245.657673][T17155] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1245.678468][T17155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.710631][T17599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.718204][T17155] usb 3-1: config 0 descriptor?? [ 1245.804888][T17599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.843134][T17599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.882492][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.889758][T17215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.913297][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.920486][T17215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.336010][T17155] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1246.352752][T17155] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1246.421226][T17599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.093992][T17836] ceph: No mds server is up or the cluster is laggy [ 1247.287320][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1247.293553][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1247.885376][T17599] veth0_vlan: entered promiscuous mode [ 1247.914590][T17599] veth1_vlan: entered promiscuous mode [ 1247.977532][T17599] veth0_macvtap: entered promiscuous mode [ 1248.007158][T17599] veth1_macvtap: entered promiscuous mode [ 1248.044122][T17599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.097400][T17599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.157892][T17599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.171004][T17855] netlink: 'syz.0.3003': attribute type 4 has an invalid length. [ 1248.180592][T17599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.192162][T17599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.211402][T17599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.602122][T17155] usb 3-1: USB disconnect, device number 11 [ 1248.884748][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.909667][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.005483][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.054626][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.286747][T17155] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1249.505604][T17155] usb 3-1: Using ep0 maxpacket: 16 [ 1249.528136][T17155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.548543][T17155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.597937][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1249.642031][T17155] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1249.820800][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.833920][ T5937] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1249.850609][T17155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.879640][ T5894] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1249.906247][T17155] usb 3-1: config 0 descriptor?? [ 1249.912066][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.946687][ T5894] usb 5-1: config 0 descriptor?? [ 1250.056518][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 1250.645022][T17889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.653906][T17889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.460203][ T6260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.681905][ T6260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.963207][T17155] usbhid 3-1:0.0: can't add hid device: -71 [ 1251.971352][T17155] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1252.040498][T17155] usb 3-1: USB disconnect, device number 12 [ 1252.103432][ T6260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.372431][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 1252.386521][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1252.402004][T13038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1252.418217][T13038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1252.429437][T13038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1252.440110][ T5894] usb 5-1: USB disconnect, device number 14 [ 1252.452666][T13038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1252.460624][T13038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1252.605018][T17928] 9pnet_fd: Insufficient options for proto=fd [ 1252.639836][ T6260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.959974][T17930] ceph: No mds server is up or the cluster is laggy [ 1252.960459][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1252.960623][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1253.430470][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1253.483707][ T5937] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1253.506149][ T5937] usb 4-1: can't read configurations, error -71 [ 1254.004874][T17950] netlink: 'syz.2.3016': attribute type 11 has an invalid length. [ 1254.012838][T17950] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3016'. [ 1254.437906][ T6260] bridge_slave_1: left allmulticast mode [ 1254.455586][ T6260] bridge_slave_1: left promiscuous mode [ 1254.496497][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.504994][ T51] Bluetooth: hci0: command tx timeout [ 1254.633331][ T6260] bridge_slave_0: left allmulticast mode [ 1254.639113][ T6260] bridge_slave_0: left promiscuous mode [ 1254.644756][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.293604][T17964] program syz.4.3020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.606362][ T51] Bluetooth: hci0: command tx timeout [ 1257.139434][ T6260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.244810][ T6260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.325741][ T6260] bond0 (unregistering): Released all slaves [ 1257.355207][T17920] chnl_net:caif_netlink_parms(): no params data found [ 1257.481502][ T6260] IPVS: stopping backup sync thread 16533 ... [ 1257.574664][T17973] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1257.646381][T17028] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1258.140727][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1258.171748][T17984] ceph: No mds server is up or the cluster is laggy [ 1258.507279][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1258.543359][T17920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.643470][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.651164][T17920] bridge_slave_0: entered allmulticast mode [ 1258.659554][T17920] bridge_slave_0: entered promiscuous mode [ 1258.666399][ T51] Bluetooth: hci0: command tx timeout [ 1258.728070][T17028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.759258][T17028] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1258.795392][T17028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.828390][T17028] usb 2-1: config 0 descriptor?? [ 1258.830434][T17920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.845663][T17920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.013789][T17920] bridge_slave_1: entered allmulticast mode [ 1259.022155][T17920] bridge_slave_1: entered promiscuous mode [ 1259.159244][T18005] vxfs: WRONG superblock magic 00000000 at 1 [ 1259.166025][T18005] vxfs: WRONG superblock magic 00000000 at 8 [ 1259.172134][T18005] vxfs: can't find superblock. [ 1259.559865][ T6260] hsr_slave_0: left promiscuous mode [ 1259.571928][ T6260] hsr_slave_1: left promiscuous mode [ 1259.592890][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.602567][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.613116][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.622504][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.666637][T17030] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1259.836707][T17030] usb 4-1: Using ep0 maxpacket: 16 [ 1260.450996][ T6260] veth1_macvtap: left promiscuous mode [ 1260.526444][ T6260] veth0_macvtap: left promiscuous mode [ 1260.545338][ T6260] veth1_vlan: left promiscuous mode [ 1260.552891][ T6260] veth0_vlan: left promiscuous mode [ 1260.736481][ T51] Bluetooth: hci0: command tx timeout [ 1260.780883][T17028] usbhid 2-1:0.0: can't add hid device: -71 [ 1260.789547][T17028] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1260.922024][T17028] usb 2-1: USB disconnect, device number 14 [ 1261.858273][T18024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.463708][T18036] ceph: No mds server is up or the cluster is laggy [ 1264.499406][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1264.588636][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1264.969046][T18044] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1265.876521][T17030] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1266.222107][T17030] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1266.242046][T17030] usb 4-1: chopping to 0 config(s) [ 1266.255363][T17030] usb 4-1: can't read configurations, error -32 [ 1267.085716][T18051] 9pnet_fd: Insufficient options for proto=fd [ 1267.349211][ T6260] team0 (unregistering): Port device team_slave_1 removed [ 1267.414763][ T6260] team0 (unregistering): Port device team_slave_0 removed [ 1267.556446][ T5894] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1267.731816][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.788084][ T5894] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1267.831064][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.925296][ T5894] usb 5-1: config 0 descriptor?? [ 1268.563752][T18060] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1269.198377][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.211130][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.476736][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 1270.482763][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1270.560154][ T5894] usb 5-1: USB disconnect, device number 15 [ 1270.597112][T17920] team0: Port device team_slave_0 added [ 1270.623593][T17920] team0: Port device team_slave_1 added [ 1271.563896][T18080] ceph: No mds server is up or the cluster is laggy [ 1271.571100][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1271.581773][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1271.847303][T17155] libceph: connect (1)[c::]:6789 error -101 [ 1271.913062][T17155] libceph: mon0 (1)[c::]:6789 connect error [ 1272.031339][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.120456][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.630010][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.643708][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.651093][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.678432][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.693321][ T6260] IPVS: stop unused estimator thread 0... [ 1272.915812][T18113] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3051'. [ 1275.055022][T17920] hsr_slave_0: entered promiscuous mode [ 1275.114174][T17920] hsr_slave_1: entered promiscuous mode [ 1275.458022][T17920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.465892][T17920] Cannot create hsr debugfs directory [ 1276.187374][T18132] loop8: detected capacity change from 0 to 79 [ 1277.084071][T18139] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1279.742531][T18173] ceph: No mds server is up or the cluster is laggy [ 1279.752201][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1279.950472][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1281.468978][T13038] Bluetooth: hci1: command 0x0406 tx timeout [ 1282.227916][T18199] netlink: 'syz.4.3067': attribute type 11 has an invalid length. [ 1282.235805][T18199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1282.912414][T18203] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1283.298113][T18219] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1286.056444][ T30] audit: type=1400 audit(2000000017.490:343): avc: denied { write } for pid=18225 comm="syz.2.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1291.535692][T17920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.831548][T17920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1292.133308][T17920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1292.228485][T17920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1293.568602][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.870596][T17920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.904986][T17920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1293.926000][T17920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.117886][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.125071][T17215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.149047][T18275] netlink: 'syz.2.3081': attribute type 11 has an invalid length. [ 1294.157019][T18275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3081'. [ 1294.178854][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.186008][T17215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.051778][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.522733][T17920] veth0_vlan: entered promiscuous mode [ 1295.649365][T17920] veth1_vlan: entered promiscuous mode [ 1295.784855][T17920] veth0_macvtap: entered promiscuous mode [ 1296.492901][T17920] veth1_macvtap: entered promiscuous mode [ 1296.773130][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.814781][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.016217][T17920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.025098][T17920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.838220][T17920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.847108][T17920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.232790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.446408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.862510][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.868966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.920335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.010273][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.714779][T18332] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1302.466883][T18351] vxfs: WRONG superblock magic 00000000 at 1 [ 1302.474839][T18351] vxfs: WRONG superblock magic 00000000 at 8 [ 1302.481109][T18351] vxfs: can't find superblock. [ 1302.631182][T17155] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1302.765531][T18348] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1302.866587][T17155] usb 1-1: Using ep0 maxpacket: 8 [ 1302.951772][T17155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.451116][T17155] usb 1-1: config 0 has no interfaces? [ 1303.464534][T17155] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1303.476523][T17155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.484536][T17155] usb 1-1: Product: syz [ 1303.520744][T17155] usb 1-1: Manufacturer: syz [ 1303.531551][T17155] usb 1-1: SerialNumber: syz [ 1303.554337][T17155] usb 1-1: config 0 descriptor?? [ 1303.567564][T18359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.649480][T13038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.658852][T13038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.671471][T13038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1303.680913][T13038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1303.691753][T13038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.335159][ T5880] usb 1-1: USB disconnect, device number 17 [ 1304.558912][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.900862][T13038] Bluetooth: hci2: command tx timeout [ 1305.925625][ T30] audit: type=1800 audit(2000000038.540:344): pid=18389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3101" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1307.114759][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.464384][T18409] vxfs: WRONG superblock magic 00000000 at 1 [ 1307.471619][T18409] vxfs: WRONG superblock magic 00000000 at 8 [ 1307.477832][T18409] vxfs: can't find superblock. [ 1307.815171][T18408] ceph: No mds server is up or the cluster is laggy [ 1307.823972][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1307.835184][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1308.097913][T13038] Bluetooth: hci2: command tx timeout [ 1308.245767][T18419] vxfs: WRONG superblock magic 00000000 at 1 [ 1308.253029][T18419] vxfs: WRONG superblock magic 00000000 at 8 [ 1308.259154][T18419] vxfs: can't find superblock. [ 1308.632646][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.466514][ T5880] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1309.494239][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.558266][T18366] chnl_net:caif_netlink_parms(): no params data found [ 1309.656638][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 1309.718775][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.738029][ T5880] usb 4-1: config 0 has no interfaces? [ 1309.768534][ T5880] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1309.790370][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.806416][ T5880] usb 4-1: Product: syz [ 1309.810670][ T5880] usb 4-1: Manufacturer: syz [ 1309.816027][ T5880] usb 4-1: SerialNumber: syz [ 1309.835403][ T5880] usb 4-1: config 0 descriptor?? [ 1310.209364][T13038] Bluetooth: hci2: command tx timeout [ 1310.567424][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1310.600915][T18366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.617308][T18366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.625260][T18366] bridge_slave_0: entered allmulticast mode [ 1310.637399][T18366] bridge_slave_0: entered promiscuous mode [ 1310.748445][T18366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.761675][ T3076] IPVS: starting estimator thread 0... [ 1310.771411][T18366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.798165][T18366] bridge_slave_1: entered allmulticast mode [ 1310.806045][T18366] bridge_slave_1: entered promiscuous mode [ 1311.021622][T18460] IPVS: using max 41 ests per chain, 98400 per kthread [ 1311.221361][ T30] audit: type=1800 audit(2000000043.730:345): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3113" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1311.299368][ T5880] usb 4-1: USB disconnect, device number 13 [ 1311.485664][T18475] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1311.489236][T18366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.965660][T18366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.115239][ T64] bridge_slave_1: left allmulticast mode [ 1312.139624][ T64] bridge_slave_1: left promiscuous mode [ 1312.149903][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.276436][T13038] Bluetooth: hci2: command tx timeout [ 1312.341873][ T64] bridge_slave_0: left allmulticast mode [ 1312.791597][ T64] bridge_slave_0: left promiscuous mode [ 1312.797665][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.773507][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1315.773672][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1315.943548][T18512] ceph: No mds server is up or the cluster is laggy [ 1316.487471][ T5937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1316.576471][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1316.789777][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.823709][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.845020][ T64] bond0 (unregistering): Released all slaves [ 1316.872315][T18366] team0: Port device team_slave_0 added [ 1316.878211][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 1316.884848][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.913925][ T5937] usb 2-1: config 0 has no interfaces? [ 1316.932351][ T5937] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1316.943526][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.989115][T18366] team0: Port device team_slave_1 added [ 1316.998302][ T5937] usb 2-1: Product: syz [ 1317.002965][ T5937] usb 2-1: Manufacturer: syz [ 1317.023976][ T5937] usb 2-1: SerialNumber: syz [ 1317.033142][ T5937] usb 2-1: config 0 descriptor?? [ 1317.413260][T18366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.430992][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.904170][T18366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.915123][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1318.185418][T18366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.256532][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.285655][T18366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.900088][ T64] hsr_slave_0: left promiscuous mode [ 1318.925646][ T64] hsr_slave_1: left promiscuous mode [ 1318.972564][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.982850][ T5880] usb 2-1: USB disconnect, device number 15 [ 1319.005651][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.021111][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.037294][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.070535][ T64] veth1_macvtap: left promiscuous mode [ 1319.089728][ T64] veth0_macvtap: left promiscuous mode [ 1319.095375][ T64] veth1_vlan: left promiscuous mode [ 1319.126974][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1319.141846][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1319.153545][ T64] veth0_vlan: left promiscuous mode [ 1319.303854][T18562] ceph: No mds server is up or the cluster is laggy [ 1320.551774][T18592] vxfs: WRONG superblock magic 00000000 at 1 [ 1320.558962][T18592] vxfs: WRONG superblock magic 00000000 at 8 [ 1320.565002][T18592] vxfs: can't find superblock. [ 1320.834450][T18590] ceph: No mds server is up or the cluster is laggy [ 1320.842617][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1320.849269][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1324.364248][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1324.599677][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1325.015037][ T30] audit: type=1800 audit(2000000057.440:346): pid=18623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3141" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1325.920650][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1325.920823][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1325.999789][T18366] hsr_slave_0: entered promiscuous mode [ 1326.007902][T18366] hsr_slave_1: entered promiscuous mode [ 1326.015040][T18366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.025940][T18366] Cannot create hsr debugfs directory [ 1326.151405][T18631] ceph: No mds server is up or the cluster is laggy [ 1326.528505][T18640] netlink: 'syz.0.3145': attribute type 11 has an invalid length. [ 1326.536593][T18640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1327.322333][ T64] IPVS: stop unused estimator thread 0... [ 1328.222941][T18667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.072323][T18366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1329.681471][T18366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.799176][T18366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1330.455042][T18366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1330.623302][T18366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.710993][T18366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.802865][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.810052][T17215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.821414][T17028] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1330.850952][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.858089][T17215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.036459][T17028] usb 5-1: Using ep0 maxpacket: 16 [ 1331.096875][T17028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.143414][T17028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.173803][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1331.176836][T17028] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1331.191700][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1331.220633][T17028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.236139][T18708] ceph: No mds server is up or the cluster is laggy [ 1331.245127][T17028] usb 5-1: config 0 descriptor?? [ 1331.797072][T18725] vxfs: WRONG superblock magic 00000000 at 1 [ 1331.805960][T18725] vxfs: WRONG superblock magic 00000000 at 8 [ 1331.812444][T18725] vxfs: can't find superblock. [ 1331.914531][T18726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.926684][T18726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.045054][T18722] ceph: No mds server is up or the cluster is laggy [ 1332.052280][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1332.069870][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1332.142685][T18366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.823310][T18366] veth0_vlan: entered promiscuous mode [ 1332.865828][T18366] veth1_vlan: entered promiscuous mode [ 1332.974857][T18366] veth0_macvtap: entered promiscuous mode [ 1333.023383][T18366] veth1_macvtap: entered promiscuous mode [ 1333.068681][T18366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.124394][T18366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.164159][T18366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.206134][T18366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.215887][T18366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.225955][T18366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.509631][T17215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.571634][T17028] usbhid 5-1:0.0: can't add hid device: -71 [ 1333.650875][T17028] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1333.654672][T17215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.681425][T17028] usb 5-1: USB disconnect, device number 16 [ 1333.741917][ T9210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.768118][ T9210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.291811][T18773] netlink: 'syz.0.3163': attribute type 11 has an invalid length. [ 1334.299741][T18773] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1335.196473][T18752] netlink: 'syz.3.3160': attribute type 4 has an invalid length. [ 1337.018365][T18798] netlink: 'syz.0.3167': attribute type 11 has an invalid length. [ 1337.026288][T18798] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3167'. [ 1339.195307][ T30] audit: type=1800 audit(2000000071.770:347): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3171" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1339.524236][T18815] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1341.021004][ T30] audit: type=1800 audit(2000000073.640:348): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3174" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1341.702711][T18844] netlink: 'syz.4.3175': attribute type 11 has an invalid length. [ 1341.710669][T18844] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3175'. [ 1342.719612][T18852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.767676][T18861] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3180'. [ 1343.948057][T18869] netlink: 'syz.4.3181': attribute type 11 has an invalid length. [ 1343.955926][T18869] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3181'. [ 1345.132957][T13038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1345.142390][T13038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1345.151570][T13038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1345.160215][T13038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1345.167882][T13038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1345.979183][T18879] chnl_net:caif_netlink_parms(): no params data found [ 1347.217314][ T51] Bluetooth: hci4: command tx timeout [ 1347.366444][T18915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.487513][T18921] program syz.0.3191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1348.669283][T18927] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1349.205940][T18879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.227097][T18879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.237147][T18879] bridge_slave_0: entered allmulticast mode [ 1349.248726][T18879] bridge_slave_0: entered promiscuous mode [ 1349.264910][T18879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.277359][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.285379][T18879] bridge_slave_1: entered allmulticast mode [ 1349.299662][T13038] Bluetooth: hci4: command tx timeout [ 1349.327278][T18879] bridge_slave_1: entered promiscuous mode [ 1349.493507][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.786211][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.813507][T18879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.934183][T18879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.312040][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.458916][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1350.467225][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1350.646902][T18879] team0: Port device team_slave_0 added [ 1350.656471][T18945] ceph: No mds server is up or the cluster is laggy [ 1350.665925][T18879] team0: Port device team_slave_1 added [ 1351.456899][ T51] Bluetooth: hci4: command tx timeout [ 1351.587233][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.683901][T18879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.691093][T18879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.716945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.758846][T18879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.928435][T18879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.956479][T18879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.982378][ C1] vkms_vblank_simulate: vblank timer overrun [ 1352.445084][T18879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.779331][T18879] hsr_slave_0: entered promiscuous mode [ 1352.797207][T18879] hsr_slave_1: entered promiscuous mode [ 1352.803790][T18879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.813030][T18879] Cannot create hsr debugfs directory [ 1353.155009][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.349149][T18979] vxfs: WRONG superblock magic 00000000 at 1 [ 1353.357093][T18979] vxfs: WRONG superblock magic 00000000 at 8 [ 1353.363269][T18979] vxfs: can't find superblock. [ 1353.546313][T13038] Bluetooth: hci4: command tx timeout [ 1353.639884][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1353.690317][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1353.714525][T18983] netlink: 'syz.0.3201': attribute type 4 has an invalid length. [ 1353.807930][ T64] bridge_slave_1: left allmulticast mode [ 1353.814152][ T64] bridge_slave_1: left promiscuous mode [ 1353.821765][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.851705][T18978] ceph: No mds server is up or the cluster is laggy [ 1353.993857][ T64] bridge_slave_0: left allmulticast mode [ 1354.070714][ T64] bridge_slave_0: left promiscuous mode [ 1354.096929][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.415954][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1354.442457][T18990] ceph: No mds server is up or the cluster is laggy [ 1354.542783][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1354.866728][T19000] loop8: detected capacity change from 79 to 78 [ 1355.420780][T17028] IPVS: starting estimator thread 0... [ 1355.551247][T19010] IPVS: using max 40 ests per chain, 96000 per kthread [ 1355.609058][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.717017][ T30] audit: type=1800 audit(2000000088.340:349): pid=19012 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3207" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1356.097177][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.140809][ T64] bond0 (unregistering): Released all slaves [ 1358.225261][ T64] IPVS: stopping backup sync thread 15750 ... [ 1359.932566][T19051] vxfs: WRONG superblock magic 00000000 at 1 [ 1359.939595][T19051] vxfs: WRONG superblock magic 00000000 at 8 [ 1359.945608][T19051] vxfs: can't find superblock. [ 1360.398565][T19050] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1361.307396][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.328092][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.462684][ T64] hsr_slave_0: left promiscuous mode [ 1361.499779][ T64] hsr_slave_1: left promiscuous mode [ 1361.514338][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.529120][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.538406][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.546145][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.582465][ T64] veth1_macvtap: left promiscuous mode [ 1361.588211][ T64] veth0_macvtap: left promiscuous mode [ 1361.595954][ T64] veth1_vlan: left promiscuous mode [ 1361.602777][ T64] veth0_vlan: left promiscuous mode [ 1363.636680][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1363.642901][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1363.652846][T19083] ceph: No mds server is up or the cluster is laggy [ 1363.734313][T19088] netlink: 'syz.4.3221': attribute type 4 has an invalid length. [ 1363.807432][T19087] vxfs: WRONG superblock magic 00000000 at 1 [ 1363.833818][T19087] vxfs: WRONG superblock magic 00000000 at 8 [ 1363.841893][T19087] vxfs: can't find superblock. [ 1364.028532][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1364.115764][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1365.061633][T19096] input: syz1 as /devices/virtual/input/input41 [ 1365.085029][T17028] libceph: connect (1)[c::]:6789 error -101 [ 1365.094631][T17028] libceph: mon0 (1)[c::]:6789 connect error [ 1365.104189][T19094] ceph: No mds server is up or the cluster is laggy [ 1366.345396][T19111] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3227'. [ 1369.104683][T18879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1369.250597][ T64] IPVS: stop unused estimator thread 0... [ 1369.346002][T19132] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3231'. [ 1369.388146][T18879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1369.957206][T18879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1370.056740][T18879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1370.414372][T18879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.815322][T18879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.869768][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.876916][ T9210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.128769][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.135888][ T9210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.531739][T18879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.982663][T18879] veth0_vlan: entered promiscuous mode [ 1373.125536][T18879] veth1_vlan: entered promiscuous mode [ 1373.182278][T19189] netlink: 'syz.2.3236': attribute type 4 has an invalid length. [ 1373.348006][T18879] veth0_macvtap: entered promiscuous mode [ 1373.370619][T18879] veth1_macvtap: entered promiscuous mode [ 1373.405786][T18879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.897712][T19200] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 1374.152820][T18879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.167387][T18879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.207789][T18879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.235293][T18879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.263389][T18879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.744295][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.773607][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.824162][T17077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.875747][T17077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.709455][T19227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.271342][T19234] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3245'. [ 1378.828498][T13038] Bluetooth: hci0: command 0x0406 tx timeout [ 1380.199946][T19288] netlink: 'syz.3.3254': attribute type 11 has an invalid length. [ 1380.207851][T19288] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3254'. [ 1381.283317][T19298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.909115][T19342] program syz.0.3264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1388.116671][T19365] netlink: 'syz.2.3268': attribute type 4 has an invalid length. [ 1391.222345][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1391.258279][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1391.266501][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1391.396292][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1391.423946][ T5880] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1391.450392][ T5937] IPVS: starting estimator thread 0... [ 1391.454521][ T5880] usb 5-1: config 0 has no interface number 0 [ 1391.554854][T19409] ceph: No mds server is up or the cluster is laggy [ 1391.576258][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1391.582260][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1391.614349][ T5880] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1391.709826][T19420] IPVS: using max 36 ests per chain, 86400 per kthread [ 1391.786760][T19424] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1392.059661][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1392.066353][ T30] audit: type=1800 audit(2000000124.340:350): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3279" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1392.123850][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.240670][ T5880] usb 5-1: Product: syz [ 1392.578819][T19433] vxfs: WRONG superblock magic 00000000 at 1 [ 1392.586692][T19433] vxfs: WRONG superblock magic 00000000 at 8 [ 1392.592734][T19433] vxfs: can't find superblock. [ 1392.644977][T19431] ceph: No mds server is up or the cluster is laggy [ 1392.803898][ T5880] usb 5-1: Manufacturer: syz [ 1392.808589][ T5880] usb 5-1: SerialNumber: syz [ 1392.811808][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1392.815040][ T5880] usb 5-1: config 0 descriptor?? [ 1392.825494][ T5880] smsc75xx v1.0.0 [ 1392.831049][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1393.598279][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1393.637422][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1393.677027][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1393.704227][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1393.776318][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1394.216305][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1394.233823][ T5880] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1394.599863][T19457] ceph: No mds server is up or the cluster is laggy [ 1394.614596][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1394.784801][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1394.820624][T17030] usb 5-1: USB disconnect, device number 17 [ 1395.361850][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1395.396387][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1395.406993][T19474] ceph: No mds server is up or the cluster is laggy [ 1395.407452][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1395.407616][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1395.511016][T19477] /dev/nullb0: Can't open blockdev [ 1397.067041][T19502] ceph: No mds server is up or the cluster is laggy [ 1397.073974][T17030] libceph: connect (1)[c::]:6789 error -101 [ 1397.191167][T17030] libceph: mon0 (1)[c::]:6789 connect error [ 1399.515691][T12722] libceph: connect (1)[c::]:6789 error -101 [ 1399.522380][T12722] libceph: mon0 (1)[c::]:6789 connect error [ 1399.554815][T19528] ceph: No mds server is up or the cluster is laggy [ 1399.606326][ T5937] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1399.774702][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 1399.784544][ T5937] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1399.813813][ T5937] usb 4-1: config 0 has no interface number 0 [ 1399.846041][ T5937] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1399.959293][ T5937] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1400.076188][ T5937] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1400.085444][ T5937] usb 4-1: Product: syz [ 1400.089991][ T5937] usb 4-1: Manufacturer: syz [ 1400.098856][ T5937] usb 4-1: SerialNumber: syz [ 1400.154739][ T5937] usb 4-1: config 0 descriptor?? [ 1400.175238][ T5937] smsc75xx v1.0.0 [ 1401.422007][T19558] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1401.462513][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1401.486740][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1402.274011][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1403.506333][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1403.516055][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1403.526667][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1403.536929][ T5937] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1403.860313][T19579] netlink: 'syz.4.3304': attribute type 11 has an invalid length. [ 1403.868260][T19579] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1404.295823][ T3076] usb 4-1: USB disconnect, device number 14 [ 1406.482579][T19610] /dev/nullb0: Can't open blockdev [ 1406.628536][T19612] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1406.706852][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1407.136342][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1407.142813][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.154516][ T5894] usb 5-1: config 0 has no interfaces? [ 1407.164537][ T5894] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1407.174080][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.193893][ T5894] usb 5-1: Product: syz [ 1407.199933][ T5894] usb 5-1: Manufacturer: syz [ 1407.205166][ T5894] usb 5-1: SerialNumber: syz [ 1407.233193][ T5894] usb 5-1: config 0 descriptor?? [ 1407.758237][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1407.764350][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1407.785911][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1407.794965][T19629] ceph: No mds server is up or the cluster is laggy [ 1407.853868][T19636] /dev/nullb0: Can't open blockdev [ 1407.946897][ T5893] usb 5-1: USB disconnect, device number 18 [ 1409.542328][ T30] audit: type=1400 audit(2000000142.190:351): avc: denied { ioctl } for pid=19646 comm="syz.3.3316" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1409.566870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.844788][T19669] input: syz1 as /devices/virtual/input/input42 [ 1411.304325][T19686] vxfs: WRONG superblock magic 00000000 at 1 [ 1411.311721][T19686] vxfs: WRONG superblock magic 00000000 at 8 [ 1411.318282][T19686] vxfs: can't find superblock. [ 1411.621533][T19684] ceph: No mds server is up or the cluster is laggy [ 1411.629675][ T3076] libceph: connect (1)[c::]:6789 error -101 [ 1411.635930][ T3076] libceph: mon0 (1)[c::]:6789 connect error [ 1413.711774][T19714] vxfs: WRONG superblock magic 00000000 at 1 [ 1413.718946][T19714] vxfs: WRONG superblock magic 00000000 at 8 [ 1413.724960][T19714] vxfs: can't find superblock. [ 1414.539403][ T30] audit: type=1800 audit(2000000147.190:352): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3329" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1414.619323][T19724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.898029][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1420.904133][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1420.972960][T19793] ceph: No mds server is up or the cluster is laggy [ 1421.021431][T19798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.114165][T19803] vxfs: WRONG superblock magic 00000000 at 1 [ 1421.115809][T19803] vxfs: WRONG superblock magic 00000000 at 8 [ 1421.115823][T19803] vxfs: can't find superblock. [ 1421.656740][ T30] audit: type=1800 audit(2000000154.300:353): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3346" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1422.114664][T19828] ceph: No mds server is up or the cluster is laggy [ 1422.122504][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1422.157218][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1422.806561][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.812990][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.999882][T12722] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1424.261278][T19862] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 1424.659990][T12722] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1424.804937][T12722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1424.816134][T12722] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1424.839003][T12722] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1424.865352][ T30] audit: type=1400 audit(2000000157.510:354): avc: denied { bind } for pid=19874 comm="syz.3.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1424.924041][T12722] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1425.022955][T12722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1425.213394][T12722] usb 5-1: string descriptor 0 read error: -71 [ 1425.227464][T12722] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1425.320742][T12722] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1425.339037][T12722] usb 5-1: config 0 descriptor?? [ 1425.366159][T12722] usb 5-1: can't set config #0, error -71 [ 1425.450072][T12722] usb 5-1: USB disconnect, device number 19 [ 1425.978798][T19893] netlink: 'syz.4.3361': attribute type 11 has an invalid length. [ 1425.986717][T19893] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3361'. [ 1433.096077][T19906] sched: DL replenish lagged too much [ 1435.376898][T19912] Bluetooth: hci2: command tx timeout [ 1470.904032][T13038] Bluetooth: hci4: command 0x0406 tx timeout [ 1484.179929][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.186274][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1538.486173][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1538.493133][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1330/1:b..l [ 1538.501382][ C0] rcu: (detected by 0, t=10502 jiffies, g=103825, q=735 ncpus=2) [ 1538.509159][ C0] task:kworker/u8:6 state:R running task stack:22584 pid:1330 tgid:1330 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1538.523142][ C0] Workqueue: bat_events batadv_nc_worker [ 1538.528762][ C0] Call Trace: [ 1538.532023][ C0] [ 1538.534934][ C0] __schedule+0x116a/0x5de0 [ 1538.539417][ C0] ? kmem_cache_free_bulk.part.0+0x383/0x7f0 [ 1538.545373][ C0] ? kvfree_rcu_bulk+0x1b7/0x1e0 [ 1538.550284][ C0] ? kfree_rcu_work+0x124/0x1a0 [ 1538.555108][ C0] ? process_one_work+0x9cc/0x1b70 [ 1538.560197][ C0] ? __pfx___schedule+0x10/0x10 [ 1538.565042][ C0] ? mark_held_locks+0x49/0x80 [ 1538.569796][ C0] preempt_schedule_irq+0x51/0x90 [ 1538.574808][ C0] irqentry_exit+0x36/0x90 [ 1538.579199][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1538.585152][ C0] RIP: 0010:batadv_nc_worker+0x86c/0x1030 [ 1538.590849][ C0] Code: b6 c8 01 00 00 4d 85 f6 74 12 e8 2f 58 6e f6 49 81 ee c8 01 00 00 0f 85 70 f9 ff ff 8b 6c 24 3c e8 19 58 6e f6 e8 34 b9 32 00 <31> ff 89 c3 89 c6 e8 49 53 6e f6 85 db 0f 85 04 03 00 00 e8 fc 57 [ 1538.610435][ C0] RSP: 0018:ffffc900044ffb28 EFLAGS: 00000246 [ 1538.616475][ C0] RAX: 0000000000000001 RBX: ffff88807dc10db8 RCX: ffffffff8b4dcc09 [ 1538.624420][ C0] RDX: ffff888028ef8000 RSI: ffffffff8b4dc857 RDI: 0000000000000001 [ 1538.632362][ C0] RBP: 00000000000001b7 R08: 0000000000000001 R09: 0000000000000000 [ 1538.640307][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1538.648249][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1538.656200][ C0] ? batadv_nc_worker+0xc19/0x1030 [ 1538.661290][ C0] ? batadv_nc_worker+0x867/0x1030 [ 1538.666376][ C0] ? batadv_nc_worker+0x86c/0x1030 [ 1538.671461][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1538.677242][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1538.682602][ C0] ? rcu_is_watching+0x12/0xc0 [ 1538.687345][ C0] process_one_work+0x9cc/0x1b70 [ 1538.692265][ C0] ? __pfx_kfree_rcu_work+0x10/0x10 [ 1538.697454][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1538.702802][ C0] ? assign_work+0x1a0/0x250 [ 1538.707373][ C0] worker_thread+0x6c8/0xf10 [ 1538.711943][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1538.717025][ C0] kthread+0x3c2/0x780 [ 1538.721067][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.725626][ C0] ? rcu_is_watching+0x12/0xc0 [ 1538.730364][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.734925][ C0] ret_from_fork+0x5d4/0x6f0 [ 1538.739491][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.744050][ C0] ret_from_fork_asm+0x1a/0x30 [ 1538.748797][ C0] [ 1538.751790][ C0] rcu: rcu_preempt kthread starved for 4669 jiffies! g103825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1538.762952][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1538.772896][ C0] rcu: RCU grace-period kthread stack dump: [ 1538.778755][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1538.792203][ C0] Call Trace: [ 1538.795458][ C0] [ 1538.798368][ C0] __schedule+0x116a/0x5de0 [ 1538.802868][ C0] ? __pfx___schedule+0x10/0x10 [ 1538.807706][ C0] ? find_held_lock+0x2b/0x80 [ 1538.812373][ C0] ? schedule+0x2d7/0x3a0 [ 1538.816678][ C0] schedule+0xe7/0x3a0 [ 1538.820722][ C0] schedule_timeout+0x123/0x290 [ 1538.825555][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1538.830899][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1538.836171][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1538.841964][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1538.847402][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1538.852146][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1538.857423][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1538.862595][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1538.867508][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1538.872337][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1538.878126][ C0] rcu_gp_kthread+0x270/0x380 [ 1538.882793][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1538.887969][ C0] ? rcu_is_watching+0x12/0xc0 [ 1538.892709][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1538.897884][ C0] ? __kthread_parkme+0x19e/0x250 [ 1538.902898][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1538.908103][ C0] kthread+0x3c2/0x780 [ 1538.912147][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.916719][ C0] ? rcu_is_watching+0x12/0xc0 [ 1538.921461][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.926023][ C0] ret_from_fork+0x5d4/0x6f0 [ 1538.930591][ C0] ? __pfx_kthread+0x10/0x10 [ 1538.935154][ C0] ret_from_fork_asm+0x1a/0x30 [ 1538.939896][ C0] [ 1538.942893][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1538.949185][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1538.954371][ C1] NMI backtrace for cpu 1 [ 1538.954382][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1538.954400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1538.954408][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1538.954429][ C1] Code: fb 71 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 80 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1538.954443][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1538.954455][ C1] RAX: 0000000007ba834d RBX: 0000000000000001 RCX: ffffffff8b808c59 [ 1538.954465][ C1] RDX: 0000000000000000 RSI: ffffffff8de19fc6 RDI: ffffffff8c157ba0 [ 1538.954473][ C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: ffffed10170a6645 [ 1538.954482][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 1538.954491][ C1] R13: ffff88801e6b2440 R14: ffffffff90a81250 R15: 0000000000000000 [ 1538.954500][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 1538.954515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1538.954524][ C1] CR2: 0000555591bf25c8 CR3: 000000003417d000 CR4: 00000000003526f0 [ 1538.954534][ C1] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1538.954542][ C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1538.954551][ C1] Call Trace: [ 1538.954556][ C1] [ 1538.954561][ C1] default_idle+0x13/0x20 [ 1538.954573][ C1] default_idle_call+0x6d/0xb0 [ 1538.954585][ C1] do_idle+0x391/0x510 [ 1538.954603][ C1] ? __pfx_do_idle+0x10/0x10 [ 1538.954619][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 1538.954638][ C1] cpu_startup_entry+0x4f/0x60 [ 1538.954654][ C1] start_secondary+0x21d/0x2b0 [ 1538.954671][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1538.954690][ C1] common_startup_64+0x13e/0x148 [ 1538.954708][ C1] SYZFAIL: failed to send rpc fd=3 want=104096 sent=0 n=-1 (errno 32: Broken pipe) [ 1542.046492][ T9209] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.144157][ T9209] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.223306][ T9209] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.294809][ T9209] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.467429][ T9209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.564303][ T9209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.643900][ T9209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.702726][ T9209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.858742][ T9209] bridge_slave_1: left allmulticast mode [ 1542.864426][ T9209] bridge_slave_1: left promiscuous mode [ 1542.870315][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.880460][ T9209] bridge_slave_0: left allmulticast mode [ 1542.886093][ T9209] bridge_slave_0: left promiscuous mode [ 1542.893463][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.903444][ T9209] bridge_slave_1: left allmulticast mode [ 1542.909535][ T9209] bridge_slave_1: left promiscuous mode [ 1542.915180][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.925142][ T9209] bridge_slave_0: left allmulticast mode [ 1542.931045][ T9209] bridge_slave_0: left promiscuous mode [ 1542.936794][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.176629][ T9209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.188300][ T9209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.198233][ T9209] bond0 (unregistering): Released all slaves [ 1543.395623][ T9209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.405825][ T9209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.417262][ T9209] bond0 (unregistering): Released all slaves [ 1543.510080][ T9209] IPVS: stopping backup sync thread 19424 ... [ 1543.805600][ T9209] hsr_slave_0: left promiscuous mode [ 1543.813625][ T9209] hsr_slave_1: left promiscuous mode [ 1543.820743][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.829130][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.837059][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.844463][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.861758][ T9209] hsr_slave_0: left promiscuous mode [ 1543.867951][ T9209] hsr_slave_1: left promiscuous mode [ 1543.873791][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.881322][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.889631][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.897233][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.921585][ T9209] veth1_macvtap: left promiscuous mode [ 1543.927169][ T9209] veth0_macvtap: left promiscuous mode [ 1543.933763][ T9209] veth1_vlan: left promiscuous mode [ 1543.939227][ T9209] veth0_vlan: left promiscuous mode [ 1543.946008][ T9209] veth1_macvtap: left promiscuous mode [ 1543.951643][ T9209] veth0_macvtap: left promiscuous mode [ 1543.957409][ T9209] veth1_vlan: left promiscuous mode [ 1543.962627][ T9209] veth0_vlan: left promiscuous mode [ 1544.278787][ T9209] team0 (unregistering): Port device team_slave_1 removed [ 1544.309978][ T9209] team0 (unregistering): Port device team_slave_0 removed [ 1544.772253][ T9209] team0 (unregistering): Port device team_slave_1 removed [ 1544.803539][ T9209] team0 (unregistering): Port device team_slave_0 removed [ 1545.531263][ T9209] IPVS: stop unused estimator thread 0... [ 1545.603372][ T9209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.626801][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.633124][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.701307][ T9209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.752317][ T9209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.829588][ T9209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.977944][ T9209] bridge_slave_1: left allmulticast mode [ 1545.983640][ T9209] bridge_slave_1: left promiscuous mode [ 1545.993053][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.004283][ T9209] bridge_slave_0: left allmulticast mode [ 1546.011621][ T9209] bridge_slave_0: left promiscuous mode [ 1546.017799][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.342303][ T9209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.352171][ T9209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.362259][ T9209] bond0 (unregistering): Released all slaves [ 1546.616999][ T9209] hsr_slave_0: left promiscuous mode [ 1546.622933][ T9209] hsr_slave_1: left promiscuous mode [ 1546.630335][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.641178][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.650659][ T9209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.658196][ T9209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.679856][ T9209] veth1_macvtap: left promiscuous mode [ 1546.688062][ T9209] veth0_macvtap: left promiscuous mode [ 1546.694166][ T9209] veth1_vlan: left promiscuous mode [ 1546.699847][ T9209] veth0_vlan: left promiscuous mode [ 1547.000445][ T9209] team0 (unregistering): Port device team_slave_1 removed [ 1547.031487][ T9209] team0 (unregistering): Port device team_slave_0 removed [ 1547.559550][ T9209] IPVS: stop unused estimator thread 0...