last executing test programs: 7m2.990598112s ago: executing program 4 (id=16): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 7m0.09572985s ago: executing program 4 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/90, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000380)=0x400004, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="8b4aa6581bd7995f1c9f14b3abcb3b11ddb59d2db9dda659c45e5fbeb5fdccfeccf4e45080c5719bb20bd4dc40f71361b510dc6ded8a414309a38eeb9528155e9dccdd3e295c0c9f4a5217693f17eb3fe52699549b6e15e46b46c1086f757d9c31c98e2b02e30e15fc570f918bc2d758d579077f83e76bd247a27decc3420816b2b251930fc458cad565c413072daca4097bd236a2012f17d4617283ca6995cc667daadee89572ee43626de2d6000466a4faf9316cb3e3e11bceb7b09f8899c90168e3252b1ab6bb33", 0xc9}, {&(0x7f0000000400)="de68caf7d9712422adae33e5728f8202bc488cd52dce88ece7ea2fe5924fee6aa8aaa0151a3febc6c7003c9ee71de43e03ad379e1323610ff76182b9ead04b1f8fe846ec9152943ce6cb6b8640e934f65fca26254cba6ffd8c127bbfc57c5c60038b7ddf5b03a54e33dea2d18f38e64f1746f2", 0x73}, {&(0x7f0000000480)="9c7885e266ef20921c4e98", 0xb}, {&(0x7f0000000640)="dc91439f172f342614683e326376532a47c0cf1a4b52d1f58606cbd7ab805d4bf77737ebd2c253a1236d8e03f6c76f7f2789e820ff9eeeff4be55cfa0882455b582b2a", 0x43}, {&(0x7f0000000900)="fd94550284f377ab6ab460c62f692138180ad23ba40a85025338d9576a7fb52f9262506946a666675fa241b60a5c080f1fe4aea698c8a5bc2a5493eebc9321179878ebea2eb9d5b424ac3976310eaa2c665f04e3c39cd44b5f736d2467084ca7a8045d1a51c6dd3470dd7c23a8e13fcc25037e006423042de99bb7c5dcac66d201ebd092a0a358fa626b1bef90b00f214a926950148ada7518ef72bd5871802337688693e961174bf0e970eced2113a7cd13c28233b1634739aea3c0dd583f597edd8fed5313227cdae28e83e95e76b08e51c5281beafe9f8831dfe4ee88f7f1ac9653e6c580d5777e2a40dcc7b7b0435d06", 0xf2}], 0x5, &(0x7f0000000a00)=[@ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffff}, {@local, 0xfff}, {@private=0xa010101, 0x266}]}, @timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x7, [{@private=0xa010100, 0x3841f65d}, {@multicast1, 0x800}, {@empty, 0x2}, {@empty, 0x4}, {@empty, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x8}, {@multicast1}, {@empty, 0x5}]}, @generic={0x86, 0x7, "fd5b97b9ff"}, @timestamp_addr={0x44, 0x24, 0xf8, 0x1, 0x6, [{@empty, 0x7}, {@broadcast, 0x8}, {@loopback, 0x80000001}, {@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x4, [{@multicast1, 0x831}, {@remote, 0x10}, {@remote, 0x6}, {@rand_addr=0x64010101, 0x7ed7}, {@multicast1, 0x6a17}, {@private=0xa010102, 0x3}, {@local, 0x9}, {@local, 0x2}, {@broadcast, 0x4}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x1, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x14, 0x3, 0x5, [{@private=0xa010101, 0xe4d}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7}]}, @end, @generic={0x88, 0x6, ',2s-'}]}}}], 0x120}}], 0x2, 0xf00) 6m58.769294902s ago: executing program 4 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 6m58.43872104s ago: executing program 4 (id=26): socket$nl_rdma(0x10, 0x3, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) 6m54.482341004s ago: executing program 4 (id=34): openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x3415, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 6m53.352992701s ago: executing program 4 (id=39): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) migrate_pages(r1, 0xa38, &(0x7f0000000000)=0x8, &(0x7f00000001c0)=0xfffffffffffffff7) 6m47.76625064s ago: executing program 3 (id=50): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd29, 0x5, 0x0, {0x0, 0x2, 0x2}}, 0x30) r1 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 6m46.7456388s ago: executing program 3 (id=53): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fanotify_init(0x20, 0x0) fanotify_mark(r1, 0x445, 0x1003, r0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}, 0x38) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0xb516, 0xc2de, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000140)) 6m46.513129943s ago: executing program 3 (id=54): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x100000000000000, 0x7, 0x1, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 6m43.909307687s ago: executing program 3 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="530000002412ffa0273b7809ffffff0f945e44670c8e5300000000200000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9", 0x38}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82b00fe8000000000000000000000000000aaff0200"], 0xffe) 6m42.339192106s ago: executing program 3 (id=63): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0x0) waitid(0x1, r0, 0x0, 0x4, 0x0) 6m40.978539777s ago: executing program 3 (id=65): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x104}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000000201020000000000000000020000090800044000000008080008400000000208000440000000021c000a800800014000000001692701400000000108000140000000000800084000000002"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000880) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x620c0540, 0x0, 0x0, 0x0, 0x0, 0x0) 6m40.849953883s ago: executing program 1 (id=66): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e00000020000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 6m38.464425471s ago: executing program 1 (id=69): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)={0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048884) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000002e40)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, 0x0, 0x0) socket(0x2, 0x80805, 0x0) munlockall() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 6m37.33411111s ago: executing program 32 (id=39): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) migrate_pages(r1, 0xa38, &(0x7f0000000000)=0x8, &(0x7f00000001c0)=0xfffffffffffffff7) 6m37.318247352s ago: executing program 1 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8c0802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r5, 0x12, 0xb, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf25820000000800", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0x34, 0x32, 0x9408f9ce2610ee65, 0xfffffffd, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r2], 0x50) syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) 6m36.527016404s ago: executing program 1 (id=75): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 6m36.380562723s ago: executing program 1 (id=77): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="fc13cecbc416a9d737973448bc1d5aaaec965bac037865ac33c3b38ef18756cc5c6ec74f2583ddafbb44650be05363edb932ea0daa8b6b96213c284c379b73df654400789f77ed1f10cc7fc9ca9dc93b6529a2009d937c8d93d89ace3b8c16afc520baf51d2fe965792b6aa41cd5c2dd9f202a36ade2a904574898dc5ea9a985f0010e6fcbcb336079cde89b7e6510c4d98780229e4a615944664ea6d272c1b6fa4b1ed40d8ab4d2fed91bf1e94de189e51c0e43804671b77263b32c2bd03d11d263d2d4ecc3b10f74e16ea652ab1f92ef2925a7d5a1c40fc83cca7e", @ANYBLOB="c26ac92a1b73dd43c29d155d3e501324619369bf22f16ab2ff8f9e806d1aaf526a8604653a31e22988dd9d189c62c4598b55ad01ba07aff38b6e4700fca39e73258a01eef97890ba1f059b05244648d1cfc6b637865a1ce5c1703b3cf944d79fc5a52d975911b64264553fc0c27cbbde68a0d48ad516bd4a538df90a96d517"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x410ff, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0x13, @val=@tracing={0x0, 0x8000000000000000}}, 0x1c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 6m32.126527186s ago: executing program 1 (id=84): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) futex(&(0x7f00000000c0)=0x2, 0x5, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x28, 0x2004, @fd_index=0x4, 0x7, &(0x7f0000001300)="4154ca5dd44dadabe1d6bbd0e3dbdf6f3fa47994be01fd76", 0x18, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000000c80)=""/227, 0xe3}, {&(0x7f0000000d80)=""/77, 0x4d}], 0x3, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/29, 0x1d}, {&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f0000000ec0)=""/238, 0xee}, {&(0x7f0000000fc0)=""/236, 0xec}, {&(0x7f00000010c0)=""/193, 0xc1}, {&(0x7f00000011c0)=""/229, 0xe5}], 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x5e2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e23, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010101, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r7, 0x0, 0x3, 0x1}}, 0x20) sendmmsg(r2, &(0x7f0000000b40)=[{{&(0x7f0000000300)=@llc={0x1a, 0x10e, 0x7f, 0xf8, 0x3, 0xd5, @random="2f0b83d1adeb"}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="f5fffbfb90565ac4520a46947be7fb4b22e74a15c7e710ae28d19f58fbd4c4c7afaf9c33382139593f480472e7a9b60640cd8dc5e1ae4124c583a63daa2b", 0x3e}, {&(0x7f0000000480)="59e9da5cda36ce55f6a64b68143448a607245cd2e90c8171c8c61356eba7", 0x1e}, {&(0x7f0000000640)="9b9823721888631f98c524ef5fdcb365d68404a06d5e8b1069d9fabcc99d3d06e0cd0e0261f0f41f65f0bc52d52b3ac751652701b1dc1d1e026ca05d0ee516a94cebd7f629", 0x45}, {&(0x7f0000000540)}], 0x4}}, {{&(0x7f0000000700)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb3}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)="d1679a2d215d61b073e386319c4a9b1d762e7d1ef77f835d9606c4ca88bacfbb97d1005496167671bf72897e5d8c64833c698458bf374a46eeadcc99581bfa9784f2b9123bc1c3e1f78a647b6b31233fb51132d79032b4c07b13b700f783b550d1945ba56229d7290252d1515d9f731ded9cf24f2c1cbdf9eeeb2d9d219339e6817c83a5e1a6005dc3505e", 0x8b}, {&(0x7f0000000840)="9c0e488cb6a2fa066b50186b506f746b5f3493cfff21a4670498eadc35dd3fab7339e03391811361be135e222183d8963d560ee08d6bf3975ed7f39d9fe7fb44f073fdfb97abdba61e97a8752a6af5ebecd0580ce0af43123f407e88defe845f2d4a5a643ce610a2cd001e28c749c52274992d18cdd35815efb89d43920a1451a9054ada9ab019f4bab522a11b8bc419733ae094dd9515517bb24762c4a9765fe3f80e2091d51134b10f119c70cd5d69de6e489b6952e629a452d899ce5780f864d68d40f4a3058736779a226fcd355877db4a08011d0bafd193660dc50d180c046d0d7514a7b8221db16826360c8e86b3b2f1bd13d16aa963", 0xf9}, {&(0x7f0000000940)="147b9ddd484c158dff5452cd9322e4ce8e54991bf52d65a25008ac419ae63813b77256bf81271ca37e28f343bf006daea4e48ddbdeac5a1a8cd0c917d3a6bc14286251655c1f044f0552ef9ad508033534bd41e51e4d4d34c9eda181f187abddbed1711a47beba658d52770a26952c26fbe0431ff751bc72ed9f05a968f1f07e047baf9ca7793a9b7659e4c1efe97466e1cf11f51fb708accb8ed07fe47708f7cc5653157f9b3c9170fab418be1b0f5548da53c24bbaee3724a93d7642c6920a9fd44818e4c4504beef9b0f5333968da9bfd5ea084363e276d15006738aa5a", 0xdf}], 0x3, &(0x7f0000000a80)=[{0x9c, 0xff, 0x2, "0d67992bd74ec7e8c89b3e0ec9abbd2f93dc23f1a49498f309f01b7615d208b4ef51ec6e786d969774cd3fcf9f3b1616af8bad494af986bd5aaa3e9879e03a610116f9ef13aff60c0f52bb7748e051ca6cc2523eff018301f9cc484c69b8ed8711c291e9b14af68b4cdd9c87f4e6f9f0f7985862cf53b7ddf366d903d6c4f30cd20af2fb4c323cd14edb8eb98632"}], 0x9c}}], 0x2, 0x8014) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 6m24.509699334s ago: executing program 33 (id=65): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x104}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000000201020000000000000000020000090800044000000008080008400000000208000440000000021c000a800800014000000001692701400000000108000140000000000800084000000002"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000880) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x620c0540, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.13184606s ago: executing program 34 (id=84): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) futex(&(0x7f00000000c0)=0x2, 0x5, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x28, 0x2004, @fd_index=0x4, 0x7, &(0x7f0000001300)="4154ca5dd44dadabe1d6bbd0e3dbdf6f3fa47994be01fd76", 0x18, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000000c80)=""/227, 0xe3}, {&(0x7f0000000d80)=""/77, 0x4d}], 0x3, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/29, 0x1d}, {&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f0000000ec0)=""/238, 0xee}, {&(0x7f0000000fc0)=""/236, 0xec}, {&(0x7f00000010c0)=""/193, 0xc1}, {&(0x7f00000011c0)=""/229, 0xe5}], 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x5e2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e23, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010101, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r7, 0x0, 0x3, 0x1}}, 0x20) sendmmsg(r2, &(0x7f0000000b40)=[{{&(0x7f0000000300)=@llc={0x1a, 0x10e, 0x7f, 0xf8, 0x3, 0xd5, @random="2f0b83d1adeb"}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="f5fffbfb90565ac4520a46947be7fb4b22e74a15c7e710ae28d19f58fbd4c4c7afaf9c33382139593f480472e7a9b60640cd8dc5e1ae4124c583a63daa2b", 0x3e}, {&(0x7f0000000480)="59e9da5cda36ce55f6a64b68143448a607245cd2e90c8171c8c61356eba7", 0x1e}, {&(0x7f0000000640)="9b9823721888631f98c524ef5fdcb365d68404a06d5e8b1069d9fabcc99d3d06e0cd0e0261f0f41f65f0bc52d52b3ac751652701b1dc1d1e026ca05d0ee516a94cebd7f629", 0x45}, {&(0x7f0000000540)}], 0x4}}, {{&(0x7f0000000700)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb3}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)="d1679a2d215d61b073e386319c4a9b1d762e7d1ef77f835d9606c4ca88bacfbb97d1005496167671bf72897e5d8c64833c698458bf374a46eeadcc99581bfa9784f2b9123bc1c3e1f78a647b6b31233fb51132d79032b4c07b13b700f783b550d1945ba56229d7290252d1515d9f731ded9cf24f2c1cbdf9eeeb2d9d219339e6817c83a5e1a6005dc3505e", 0x8b}, {&(0x7f0000000840)="9c0e488cb6a2fa066b50186b506f746b5f3493cfff21a4670498eadc35dd3fab7339e03391811361be135e222183d8963d560ee08d6bf3975ed7f39d9fe7fb44f073fdfb97abdba61e97a8752a6af5ebecd0580ce0af43123f407e88defe845f2d4a5a643ce610a2cd001e28c749c52274992d18cdd35815efb89d43920a1451a9054ada9ab019f4bab522a11b8bc419733ae094dd9515517bb24762c4a9765fe3f80e2091d51134b10f119c70cd5d69de6e489b6952e629a452d899ce5780f864d68d40f4a3058736779a226fcd355877db4a08011d0bafd193660dc50d180c046d0d7514a7b8221db16826360c8e86b3b2f1bd13d16aa963", 0xf9}, {&(0x7f0000000940)="147b9ddd484c158dff5452cd9322e4ce8e54991bf52d65a25008ac419ae63813b77256bf81271ca37e28f343bf006daea4e48ddbdeac5a1a8cd0c917d3a6bc14286251655c1f044f0552ef9ad508033534bd41e51e4d4d34c9eda181f187abddbed1711a47beba658d52770a26952c26fbe0431ff751bc72ed9f05a968f1f07e047baf9ca7793a9b7659e4c1efe97466e1cf11f51fb708accb8ed07fe47708f7cc5653157f9b3c9170fab418be1b0f5548da53c24bbaee3724a93d7642c6920a9fd44818e4c4504beef9b0f5333968da9bfd5ea084363e276d15006738aa5a", 0xdf}], 0x3, &(0x7f0000000a80)=[{0x9c, 0xff, 0x2, "0d67992bd74ec7e8c89b3e0ec9abbd2f93dc23f1a49498f309f01b7615d208b4ef51ec6e786d969774cd3fcf9f3b1616af8bad494af986bd5aaa3e9879e03a610116f9ef13aff60c0f52bb7748e051ca6cc2523eff018301f9cc484c69b8ed8711c291e9b14af68b4cdd9c87f4e6f9f0f7985862cf53b7ddf366d903d6c4f30cd20af2fb4c323cd14edb8eb98632"}], 0x9c}}], 0x2, 0x8014) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 14.772400424s ago: executing program 6 (id=981): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') readv(r0, &(0x7f0000001440)=[{0x0}], 0x1) 13.56649854s ago: executing program 6 (id=985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/90, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000380)=0x400004, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="8b4aa6581bd7995f1c9f14b3abcb3b11ddb59d2db9dda659c45e5fbeb5fdccfeccf4e45080c5719bb20bd4dc40f71361b510dc6ded8a414309a38eeb9528155e9dccdd3e295c0c9f4a5217693f17eb3fe52699549b6e15e46b46c1086f757d9c31c98e2b02e30e15fc570f918bc2d758d579077f83e76bd247a27decc3420816b2b251930fc458cad565c413072daca4097bd236a2012f17d4617283ca6995cc667daadee89572ee43626de2d6000466a4faf9316cb3e3e11bceb7b09f8899c90168e3252b1ab6bb33", 0xc9}, {&(0x7f0000000400)="de68caf7d9712422adae33e5728f8202bc488cd52dce88ece7ea2fe5924fee6aa8aaa0151a3febc6c7003c9ee71de43e03ad379e1323610ff76182b9ead04b1f8fe846ec9152943ce6cb6b8640e934f65fca26254cba6ffd8c127bbfc57c5c60038b7ddf5b03a54e33dea2d18f38e64f1746f2", 0x73}, {&(0x7f0000000480)="9c7885e266ef20921c4e98", 0xb}, {&(0x7f0000000640)="dc91439f172f342614683e326376532a47c0cf1a4b52d1f58606cbd7ab805d4bf77737ebd2c253a1236d8e03f6c76f7f2789e820ff9eeeff4be55cfa0882455b582b2a", 0x43}, {&(0x7f0000000900)="fd94550284f377ab6ab460c62f692138180ad23ba40a85025338d9576a7fb52f9262506946a666675fa241b60a5c080f1fe4aea698c8a5bc2a5493eebc9321179878ebea2eb9d5b424ac3976310eaa2c665f04e3c39cd44b5f736d2467084ca7a8045d1a51c6dd3470dd7c23a8e13fcc25037e006423042de99bb7c5dcac66d201ebd092a0a358fa626b1bef90b00f214a926950148ada7518ef72bd5871802337688693e961174bf0e970eced2113a7cd13c28233b1634739aea3c0dd583f597edd8fed5313227cdae28e83e95e76b08e51c5281beafe9f8831dfe4ee88f7f1ac9653e6c580d5777e2a40dcc7b7b0435d06", 0xf2}], 0x5, &(0x7f0000000a00)=[@ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffff}, {@local, 0xfff}, {@private=0xa010101, 0x266}]}, @timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x7, [{@private=0xa010100, 0x3841f65d}, {@multicast1, 0x800}, {@empty, 0x2}, {@empty, 0x4}, {@empty, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x8}, {@multicast1}, {@empty, 0x5}]}, @generic={0x86, 0x7, "fd5b97b9ff"}, @timestamp_addr={0x44, 0x24, 0xf8, 0x1, 0x6, [{@empty, 0x7}, {@broadcast, 0x8}, {@loopback, 0x80000001}, {@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x4, [{@multicast1, 0x831}, {@remote, 0x10}, {@remote, 0x6}, {@rand_addr=0x64010101, 0x7ed7}, {@multicast1, 0x6a17}, {@private=0xa010102, 0x3}, {@local, 0x9}, {@local, 0x2}, {@broadcast, 0x4}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x1, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x14, 0x3, 0x5, [{@private=0xa010101, 0xe4d}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7}]}, @end, @generic={0x88, 0x6, ',2s-'}]}}}], 0x120}}], 0x2, 0xf00) 10.523949943s ago: executing program 7 (id=993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) 9.760259059s ago: executing program 7 (id=994): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008841}, 0x10) tkill(0x0, 0xb) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3663ff3ac7333d1d", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}]) socket$alg(0x26, 0x5, 0x0) 9.496974645s ago: executing program 6 (id=997): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8c0802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r3, 0x12, 0xb, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf258200000008", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0x34, 0x32, 0x9408f9ce2610ee65, 0xfffffffd, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) 7.971551163s ago: executing program 6 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16=r0], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) 7.468151916s ago: executing program 0 (id=1002): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) syz_emit_ethernet(0x317, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000200)={0x0, 0x3, [0xfda, 0x4e8, 0xd9d, 0x137]}) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}, {&(0x7f0000000200)="5bd1b15cbc", 0x5}], 0x2) r9 = syz_io_uring_setup(0x7392, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r12, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x0) 6.193984542s ago: executing program 6 (id=1006): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4f9}}, './file0\x00'}) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 5.935920451s ago: executing program 2 (id=1007): r0 = socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x10000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1c, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}, {&(0x7f0000001600)="9e62b7fe11ddfd1f43968d0cceddec211cebcf999fe07f2cd9d7803751af552e71690d2c35b38253711330da28a2d2e6720ef3a4440ca6f050c5aed13a2802103945b7c98d8556c5f64bc7c8436dba8554da46f56c35c56aef46dcdd853111f31a649958b5387eccf5b931d5e076ae7d23572fcc605a3ea735084bd6154b68c946fb9f17d999f41bb2576416e61205d0c92c7d6cd7132c77592a2d6f2d0f0e623e41fddfb94c0753d5de99570d3da687597438e48598e2fda4272910f02263ae3a197bf3d75a270dca36032e07cc1d3469cedba211988113f0dc102359d55ba5e375b037b323ba4020d5be7dc53deb6ddcf5d958ce06a7468fc4a245518030eaf653a24d96602d74bb301411f2f43b9007ffc9ce3a6559cc91a38f310e0ad53d4c66c3c8dc1e3d685f942bc9672abfa98f2c0e66e7e27ed8848689862f62e6768987cd2b377a499c2f9535c1d57b853c4ce84aec23ea02b47c8ab4e9d3b657cd6f6d9820e31b5d7cfb6f7f59ac8d351c27021c28d12e4dc5452523dfe8fcaf4e6cdb7eb60d6123d1be8e043973c36cf7ee2abb48c304f32d66cdeb3eb76680f44d166ac2dfeeac70a6ce6f541a62a37bad423737a2d81926e20ec8dc51114a8fd69b5cd194a247163b6d161d51ba2ea09ff91e9bc9e2a43ee7acdcb08fad2b5109f174e46b898477cfae79e42bbd895644d55cce4e33894a6c519a95ace312d9ae769814aac3eb70b03438fda0f0696c39a344547a407bf2b64be8bf930164effdef82e4b4235c65125deb017b369a609246d30fadfbf766b4b3485ff6299e453711e20e40fd8de05ae54bc3fd97fb3b0835471c43325a9f68e5081977d335249f04e65bc9200a464a099782c6bfd773b83f073701634837547ca7d00901bca686352f52db5482bfd875ff4b82bbe3225c607fc2c2b45174966c5f3e6176d3a53ca6f348ce1ac9ea782d962eac71ecd5cf930bd6f8a5599bb783abf4852b55bedf479bec7021a50ee014e4a852ff8e6ee60567bc2cd24a7d1e87432b68b983749b3f10f834bdfe57954bc3c2c3957df57d875e4bf89801dea2fd1da6f4391fc79741b4151a55865f2906a9a8d2536b6b4de65b1ead8cc08f97d944281f039ea386b5971bafa24d4529b97aef8cb035cdbed892947c35374d42228044d7d7dc7ed5437e8733673c173b72310e9de1967a3a106ab115e8441ca5fd2a9d442d82f28faa83dd7c71a715cf7df7fa0db2643c2369d221c023ed9be9d93ba58c9cfd23d97c07e3553ecba8cb7f450efbc8ab4bd3959b17345a2c064562fc2eae68326caa2a8bb63d0c508109cc2d35bae7b3208e86921733d1ce45742c1669e4033f5b4367b3eff15522540b36dc5781bb487dc0fc6f6c1bbde6ea3403f3cda5024dfb4965bc751d4fa3090b23c0b7eed4b0729f5787d4fd28ea6425808a7a294489ca0be8493d3aa409a8ad1251370998b4cd09ce7957ed347c696ef1e2fab91ce24107aab8efc0f4a3fcfdaef795e24ea43e9da45060fe54e034f2056a099db7023fbf32bdfe1e01ac06fbbc07ab02612d20543111ccbabcb1a869d608def1afba44f0d32514740058f450ddfacb8dad99bb96d4fffd1df7635e61b83c8bfb72a2612ca64d86451c89fff9d4dbb7dc27fc8f69ac8cb5df4ca4805b14de3c37990de25cb6a3db14c23b86ec9125f9c6aaa43aa2f146cfe997abb86711e6a508ef0b522475e25c373d17184f0baedd29bb76f79a4a9eb452398c76d0b207e5593e62ceb2f04e4bc09e7dbe60334f75888824aa5bc9287f296fc33a756b62222ec279ed18929f56eec6126392bbae36ec1519585e17be42e29340c02b5806d7635f569414a4bbea7893435c7d529935fa488ac8476f66e4c10b71c18340da5f4f66c2407dad9c851dfcab757fb5c82e9e1aad7fc61d7eb6961fe04f041863fce52228c56208462c22411cdaaf127fda315c1b082a4bf1d2a13590f0ce950519cf2c511f712defae9f6a3d8d17dba8c93c3140603abf3bcabc7d69cc227a19b38eb8a5d1d3e733bf1d1b64e0f38d227c1ecd1348f3c768b8c458dfe084172f6a26489c33e525cec34091ad7b35", 0x5c9}], 0x2}}], 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ffffff00000000000000000000e40000000000000000000000d30b8989fb022eb1fdab0de2fac7dfb8b893d821b9facff1f55201d9fe8881879507297f5a39b16a5bf957f58ed82567c325cb95d37063903bd9e6145c4f983dea9ed6012cb4fa1059f664e83d599825f33274f7709ea502ef4bb15c00f44144f868cf2f7e07aff5db7075d8cfa443cd38fe531f5c373b3e9544073ea4d14f58bf30b3e7f3ea4870cf6aee8b13e8ca0dced91647208a83e4eb9c8d0cc03988a27c6a5b67a1"], 0x50) chdir(&(0x7f00000000c0)='./file0\x00') r3 = accept4$unix(r0, &(0x7f0000000240), &(0x7f0000000000)=0x6e, 0x80800) sendto$unix(r3, &(0x7f00000030c0)="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", 0x1000, 0x10, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000fc31856fc19e503684b1154f0afd00000000000000000000000000000000000800cf5044f2c99dd83420c4ad6d08f59fb7a99382f08238b2572920f003ba751fa5eae0401eadb72224453678aa585c10f7ff0758225f332063689825ccced7406d8e205e2ffd10953c7f6df17bccb6e982d1a67e837046762ffa3774479ecaed6a719936296a6fae7cb8963e1e6937724d3f12c4e727cc8e3ee8a51702ce4eb93b1412618d93f82f64cfd3f971b5572860d9118da6e53ee8e674ac3030f371cf762110"], 0x50) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f", 0x66, 0xce49}]) 5.853082313s ago: executing program 5 (id=1008): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.760046691s ago: executing program 5 (id=1009): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGSW(r5, 0x8040451b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r6]}}], 0x10}, 0x0) recvmmsg$unix(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, &(0x7f0000000480)}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x78}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x9}}], 0x4, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 4.54479196s ago: executing program 0 (id=1010): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04e36d0cb07d"], 0x7) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000001700000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x4000011) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x12000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 4.413833516s ago: executing program 6 (id=1011): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$snddsp(0xffffffffffffffff, &(0x7f0000001040)=""/141, 0x8d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffff26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) fchown(r1, 0x0, 0x0) fsopen(0x0, 0x0) read$char_usb(r0, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 4.411215424s ago: executing program 5 (id=1012): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) 4.151996789s ago: executing program 2 (id=1013): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000000180), &(0x7f0000000300)=0x4) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x4532, 0x8, 0x8, 0x24c}, &(0x7f0000000340), &(0x7f0000000400)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x80000000}, 0x0, 0x0, 0x20000000d, 0x8, 0x3, 0x9, 0x47, 0x6}}], 0x58}, 0x0) 3.484628247s ago: executing program 0 (id=1014): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.482151297s ago: executing program 2 (id=1015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) 2.467298317s ago: executing program 7 (id=1016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000080)=0x8) 2.429403197s ago: executing program 5 (id=1017): socket$inet6_tcp(0xa, 0x1, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/12) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.89945435s ago: executing program 2 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1.786855837s ago: executing program 7 (id=1019): syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.78566259s ago: executing program 2 (id=1020): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) syz_emit_ethernet(0x317, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000200)={0x0, 0x3, [0xfda, 0x4e8, 0xd9d, 0x137]}) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}, {&(0x7f0000000200)="5bd1b15cbc", 0x5}], 0x2) r9 = syz_io_uring_setup(0x7392, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r12, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x0) 1.767643168s ago: executing program 5 (id=1021): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4f9}}, './file0\x00'}) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 1.686716901s ago: executing program 0 (id=1022): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x3a095bf0, 0x4) 1.662803184s ago: executing program 7 (id=1023): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bff7f000000009fa4ccdb76c6a1da0fec3f6582", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="37ecf7ec3344961708f35a3472a354d4dafbe947bc292ebb477598cd4fb80561a7e7692e8836f3627edbd82ebb041b193e35dab2efb5472f405c336d53dbecb7d5672241cd3300cfb720f26789ffcdba9c43e95d18c932ad3e1f9b26863c01a21ccf00532c1e105b4d7d4f7c36711f69", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="d2ff0300600100", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.484117239s ago: executing program 0 (id=1024): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8c0802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r3, 0x12, 0xb, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000426bd7000ffdbdf25820000000800", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0x34, 0x32, 0x9408f9ce2610ee65, 0xfffffffd, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) 485.220556ms ago: executing program 7 (id=1025): dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x3000) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 92.17292ms ago: executing program 0 (id=1026): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000000180), &(0x7f0000000300)=0x4) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x4532, 0x8, 0x8, 0x24c}, &(0x7f0000000340), &(0x7f0000000400)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x80000000}, 0x0, 0x0, 0x20000000d, 0x8, 0x3, 0x9, 0x47, 0x6}}], 0x58}, 0x0) 54.755542ms ago: executing program 5 (id=1027): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) 0s ago: executing program 2 (id=1028): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r1, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): 5846] bridge_slave_1: entered allmulticast mode [ 98.609513][ T5846] bridge_slave_1: entered promiscuous mode [ 98.654458][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.664530][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.671664][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.680901][ T5847] bridge_slave_0: entered allmulticast mode [ 98.688237][ T5847] bridge_slave_0: entered promiscuous mode [ 98.696505][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.704023][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.711425][ T5860] bridge_slave_0: entered allmulticast mode [ 98.718797][ T5860] bridge_slave_0: entered promiscuous mode [ 98.748870][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.777877][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.786051][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.793417][ T5847] bridge_slave_1: entered allmulticast mode [ 98.801362][ T5847] bridge_slave_1: entered promiscuous mode [ 98.809229][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.816927][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.825305][ T5860] bridge_slave_1: entered allmulticast mode [ 98.832574][ T5860] bridge_slave_1: entered promiscuous mode [ 98.844119][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.857046][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.891715][ T5856] team0: Port device team_slave_0 added [ 98.966426][ T5856] team0: Port device team_slave_1 added [ 98.992077][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.022446][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.035666][ T5846] team0: Port device team_slave_0 added [ 99.077964][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.090395][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.101436][ T5846] team0: Port device team_slave_1 added [ 99.121984][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.129668][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.137027][ T5854] bridge_slave_0: entered allmulticast mode [ 99.143622][ T5849] Bluetooth: hci1: command tx timeout [ 99.150836][ T5854] bridge_slave_0: entered promiscuous mode [ 99.216103][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.223955][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.250359][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.262501][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.270219][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.277753][ T5854] bridge_slave_1: entered allmulticast mode [ 99.286358][ T5854] bridge_slave_1: entered promiscuous mode [ 99.303639][ T5862] Bluetooth: hci0: command tx timeout [ 99.309449][ T5849] Bluetooth: hci2: command tx timeout [ 99.317654][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.324844][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.350833][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.382827][ T5862] Bluetooth: hci3: command tx timeout [ 99.388532][ T5849] Bluetooth: hci4: command tx timeout [ 99.396906][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.404304][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.430788][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.456099][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.464121][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.490234][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.510834][ T5847] team0: Port device team_slave_0 added [ 99.519720][ T5860] team0: Port device team_slave_0 added [ 99.534446][ T5860] team0: Port device team_slave_1 added [ 99.543522][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.556283][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.569483][ T5847] team0: Port device team_slave_1 added [ 99.651668][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.659072][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.685152][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.727363][ T5854] team0: Port device team_slave_0 added [ 99.748470][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.755501][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.781575][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.800720][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.807915][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.833875][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.861139][ T5854] team0: Port device team_slave_1 added [ 99.904166][ T5846] hsr_slave_0: entered promiscuous mode [ 99.911244][ T5846] hsr_slave_1: entered promiscuous mode [ 99.919965][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.927215][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.953590][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.979161][ T5856] hsr_slave_0: entered promiscuous mode [ 99.985869][ T5856] hsr_slave_1: entered promiscuous mode [ 99.992095][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 99.998024][ T5856] Cannot create hsr debugfs directory [ 100.085380][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.092356][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.119247][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.151333][ T5847] hsr_slave_0: entered promiscuous mode [ 100.160636][ T5847] hsr_slave_1: entered promiscuous mode [ 100.167029][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 100.173011][ T5847] Cannot create hsr debugfs directory [ 100.196610][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.203651][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.230026][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.339702][ T5860] hsr_slave_0: entered promiscuous mode [ 100.347143][ T5860] hsr_slave_1: entered promiscuous mode [ 100.353973][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 100.359732][ T5860] Cannot create hsr debugfs directory [ 100.508973][ T5854] hsr_slave_0: entered promiscuous mode [ 100.518721][ T5854] hsr_slave_1: entered promiscuous mode [ 100.528498][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 100.534333][ T5854] Cannot create hsr debugfs directory [ 100.924052][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.970606][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.981301][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.010009][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.086656][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.100102][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.126693][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.149979][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.216757][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.223743][ T5849] Bluetooth: hci1: command tx timeout [ 101.235679][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.248217][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.281926][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.384080][ T5849] Bluetooth: hci2: command tx timeout [ 101.389530][ T5862] Bluetooth: hci0: command tx timeout [ 101.412474][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.436645][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.448875][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.463022][ T5849] Bluetooth: hci3: command tx timeout [ 101.468523][ T5862] Bluetooth: hci4: command tx timeout [ 101.491875][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.556850][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.586564][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.600292][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.611410][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.629802][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.695685][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.707308][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.766574][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.773991][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.791900][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.799097][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.840947][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.926172][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.933444][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.944449][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.951579][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.979887][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.021030][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.057733][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.080312][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.100621][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.125635][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.132838][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.151002][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.187436][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.194666][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.215691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.222915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.271931][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.279162][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.296297][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.303508][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.317252][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.324529][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.698835][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.928442][ T5856] veth0_vlan: entered promiscuous mode [ 102.985511][ T5856] veth1_vlan: entered promiscuous mode [ 103.017839][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.144089][ T5856] veth0_macvtap: entered promiscuous mode [ 103.189217][ T5856] veth1_macvtap: entered promiscuous mode [ 103.227962][ T5846] veth0_vlan: entered promiscuous mode [ 103.257440][ T5846] veth1_vlan: entered promiscuous mode [ 103.274325][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.295790][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.304785][ T5862] Bluetooth: hci1: command tx timeout [ 103.330546][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.340647][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.380441][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.392269][ T3582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.413707][ T3582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.422470][ T3582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461291][ T3582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.463294][ T5862] Bluetooth: hci0: command tx timeout [ 103.475740][ T5849] Bluetooth: hci2: command tx timeout [ 103.519011][ T5846] veth0_macvtap: entered promiscuous mode [ 103.543635][ T5862] Bluetooth: hci4: command tx timeout [ 103.549101][ T5862] Bluetooth: hci3: command tx timeout [ 103.625427][ T5846] veth1_macvtap: entered promiscuous mode [ 103.640223][ T5847] veth0_vlan: entered promiscuous mode [ 103.724544][ T5847] veth1_vlan: entered promiscuous mode [ 103.736391][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.751872][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.829735][ T5860] veth0_vlan: entered promiscuous mode [ 103.845816][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.879245][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.895942][ T5860] veth1_vlan: entered promiscuous mode [ 103.915023][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.917602][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.936209][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.978749][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.012225][ T5847] veth0_macvtap: entered promiscuous mode [ 104.052090][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.068942][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.074501][ T5847] veth1_macvtap: entered promiscuous mode [ 104.105925][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.139862][ T5854] veth0_vlan: entered promiscuous mode [ 104.203834][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.219335][ T5860] veth0_macvtap: entered promiscuous mode [ 104.251296][ T5854] veth1_vlan: entered promiscuous mode [ 104.300675][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.311797][ T5860] veth1_macvtap: entered promiscuous mode [ 104.339984][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.365415][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.417149][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.434928][ T3582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.447305][ T3582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.477637][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.489615][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.490216][ T3582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.508843][ T3582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.509671][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.528693][ T5854] veth0_macvtap: entered promiscuous mode [ 104.597944][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.623482][ T5854] veth1_macvtap: entered promiscuous mode [ 104.641102][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.659400][ T3537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.702866][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.893163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.901834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.910599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.919316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.927976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.018011][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.462713][ T5862] Bluetooth: hci1: command tx timeout [ 105.542742][ T5862] Bluetooth: hci0: command tx timeout [ 105.549174][ T5862] Bluetooth: hci2: command tx timeout [ 105.622854][ T5849] Bluetooth: hci3: command tx timeout [ 105.629065][ T5862] Bluetooth: hci4: command tx timeout [ 105.812724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.941261][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.987432][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.987602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.034989][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.077822][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213221][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.253854][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.292020][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.372771][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.437666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.450598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.496130][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.504961][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.515932][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.535167][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.725304][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.762534][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.014938][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.072138][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.419009][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.388691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.873141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.313713][ T5981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 109.320345][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.472490][ T5981] vhci_hcd vhci_hcd.0: Device attached [ 109.659754][ T5944] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.671189][ T5981] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 109.712768][ T5981] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 109.804010][ T5943] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 109.951277][ T6002] vhci_hcd: connection reset by peer [ 109.964144][ T3537] vhci_hcd: stop threads [ 109.968734][ T3537] vhci_hcd: release socket [ 110.244331][ T3537] vhci_hcd: disconnect device [ 110.249583][ T5944] usb 3-1: config 0 has no interfaces? [ 110.311306][ T5944] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.354708][ T6009] geneve2: entered promiscuous mode [ 110.418654][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.421774][ T6009] geneve2: entered allmulticast mode [ 110.929796][ T5944] usb 3-1: Product: syz [ 110.957858][ T5944] usb 3-1: Manufacturer: syz [ 110.987468][ T5944] usb 3-1: SerialNumber: syz [ 111.137813][ T6014] kernel profiling enabled (shift: 17) [ 111.158075][ T6014] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 111.304797][ T5944] usb 3-1: config 0 descriptor?? [ 111.955521][ T6021] loop9: detected capacity change from 0 to 7 [ 112.832908][ T6021] Dev loop9: unable to read RDB block 7 [ 112.838608][ T6021] loop9: unable to read partition table [ 113.133317][ T6021] loop9: partition table beyond EOD, truncated [ 113.151905][ T6021] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 113.879268][ T6029] binder: 6028:6029 ioctl c0046209 0 returned -22 [ 115.046405][ T5943] vhci_hcd: vhci_device speed not set [ 117.494652][ T5944] usb 3-1: can't set config #0, error -110 [ 117.629414][ T5944] usb 3-1: USB disconnect, device number 2 [ 119.265069][ T6058] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 123.103771][ T6084] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.686561][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.717353][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.754693][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 125.397324][ T6109] lo speed is unknown, defaulting to 1000 [ 125.403797][ T6109] lo speed is unknown, defaulting to 1000 [ 125.415841][ T6109] lo speed is unknown, defaulting to 1000 [ 125.453702][ T6109] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.561522][ T6109] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 125.842844][ T6109] lo speed is unknown, defaulting to 1000 [ 125.861245][ T6109] lo speed is unknown, defaulting to 1000 [ 125.881364][ T6109] lo speed is unknown, defaulting to 1000 [ 125.900480][ T6109] lo speed is unknown, defaulting to 1000 [ 125.920391][ T6109] lo speed is unknown, defaulting to 1000 [ 126.729123][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 126.739093][ T6101] infiniband syz2: set active [ 126.752539][ T6101] infiniband syz2: added ip6_vti0 [ 128.856150][ T6101] RDS/IB: syz2: added [ 128.904371][ T6101] smc: adding ib device syz2 with port count 1 [ 128.936598][ T6101] smc: ib device syz2 port 1 has pnetid [ 128.953941][ T6119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.992866][ T6134] fuse: Bad value for 'fd' [ 128.997551][ T6119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.040351][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.092484][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.127380][ T6119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.181767][ T6119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.202108][ T6119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.246886][ T6119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.284105][ T6119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.315191][ T6119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.375496][ T6119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.654384][ T6119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.782790][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.827268][ T6119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.916067][ T6119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.951290][ T6119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.997033][ T6119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.020880][ T6119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.083618][ T43] libceph: connect (1)[c::]:6789 error -101 [ 130.092969][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 130.389957][ T43] libceph: connect (1)[c::]:6789 error -101 [ 130.474108][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 131.103883][ T43] libceph: connect (1)[c::]:6789 error -101 [ 131.109987][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 131.146478][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.222773][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.230904][ T6143] ceph: No mds server is up or the cluster is laggy [ 131.307125][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.419177][ T6163] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.51'. [ 131.702675][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.863098][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.022952][ T5862] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.270667][ T43] libceph: connect (1)[c::]:6789 error -101 [ 132.303112][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 133.572695][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.572742][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.594468][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.600609][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.848995][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.907620][ T10] libceph: connect (1)[c::]:6789 error -101 [ 133.926974][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 133.962736][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.232020][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.239888][ T6185] syz.3.57 uses obsolete (PF_INET,SOCK_PACKET) [ 135.424111][ T6187] fuse: Unknown parameter 'group_id00000000000000000000' [ 135.542324][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.626243][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.632332][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.867318][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.032987][ T6201] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 136.633891][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.997650][ T6198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.005728][ T6198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.014906][ T6198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.028161][ T6198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.049291][ T6198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.329071][ T6209] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 139.063178][ T5862] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.070306][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.072765][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.076570][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.083309][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.133138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.147630][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.187135][ T6211] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.66'. [ 139.273338][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.605960][ T6217] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 139.817142][ T6217] gretap1: entered promiscuous mode [ 140.507042][ T6220] orangefs_mount: mount request failed with -4 [ 141.297324][ T6208] ip6_vti0 speed is unknown, defaulting to 1000 [ 141.323753][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.358383][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.366334][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.382979][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.400759][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.467696][ T6234] fuse: Bad value for 'user_id' [ 141.472848][ T6234] fuse: Bad value for 'user_id' [ 141.571282][ T6238] binder: 6237:6238 ioctl c0046209 0 returned -22 [ 141.853803][ T6244] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.79'. [ 142.064451][ T6101] ip6_vti0 speed is unknown, defaulting to 1000 [ 142.244269][ T6208] lo speed is unknown, defaulting to 1000 [ 142.943411][ T6250] orangefs_mount: mount request failed with -4 [ 143.462812][ T51] Bluetooth: hci5: command tx timeout [ 144.530196][ T6256] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 144.956303][ T6256] gretap1: entered promiscuous mode [ 145.542669][ T51] Bluetooth: hci5: command tx timeout [ 145.829771][ T6259] capability: warning: `syz.2.83' uses deprecated v2 capabilities in a way that may be insecure [ 145.893240][ T5939] IPVS: starting estimator thread 0... [ 146.173598][ T6262] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.632687][ T51] Bluetooth: hci5: command tx timeout [ 148.412950][ T6231] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.419667][ T6269] fuse: Bad value for 'user_id' [ 148.424762][ T6269] fuse: Bad value for 'user_id' [ 148.742432][ T6278] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.90'. [ 148.855919][ T6231] lo speed is unknown, defaulting to 1000 [ 149.719465][ T6282] orangefs_mount: mount request failed with -4 [ 149.732847][ T5851] Bluetooth: hci5: command tx timeout [ 150.662708][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 150.662910][ T5851] Bluetooth: hci6: command 0x1003 tx timeout [ 153.269469][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.591547][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 153.838730][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.523128][ T6304] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 154.905531][ T6310] fuse: Bad value for 'user_id' [ 154.934552][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.958281][ T6310] fuse: Bad value for 'user_id' [ 155.023304][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.032144][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.040226][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.049465][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.062898][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.154845][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.171514][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.179068][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.186421][ T6231] bridge_slave_0: entered allmulticast mode [ 157.195714][ T6231] bridge_slave_0: entered promiscuous mode [ 157.211682][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.219017][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.226158][ T51] Bluetooth: hci4: command tx timeout [ 157.231978][ T6231] bridge_slave_1: entered allmulticast mode [ 157.240351][ T6231] bridge_slave_1: entered promiscuous mode [ 157.349477][ T6324] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.100'. [ 158.284115][ T6330] orangefs_mount: mount request failed with -4 [ 158.483802][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.549292][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.617992][ T6314] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.708039][ T6231] team0: Port device team_slave_0 added [ 158.788807][ T6231] team0: Port device team_slave_1 added [ 159.297389][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.304131][ T51] Bluetooth: hci4: command tx timeout [ 159.318989][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.391600][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.474961][ T6353] fuse: Bad value for 'fd' [ 159.511875][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.535031][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.600880][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.620526][ T13] bridge_slave_1: left allmulticast mode [ 159.631439][ T13] bridge_slave_1: left promiscuous mode [ 159.646263][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.677835][ T13] bridge_slave_0: left allmulticast mode [ 159.687037][ T13] bridge_slave_0: left promiscuous mode [ 160.137896][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.493343][ T51] Bluetooth: hci4: command tx timeout [ 162.521986][ T43] libceph: connect (1)[c::]:6789 error -101 [ 162.649995][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.660238][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.673751][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.692094][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.703940][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.878351][ T6375] ceph: No mds server is up or the cluster is laggy [ 162.886924][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 162.960308][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.971351][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.984826][ T13] bond0 (unregistering): Released all slaves [ 163.015812][ T6314] lo speed is unknown, defaulting to 1000 [ 163.024013][ T12] smc: removing ib device syz2 [ 163.208672][ T5911] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.215089][ T5911] syz2: Port: 1 Link DOWN [ 163.405896][ T6385] binder: 6384:6385 ioctl c0046209 0 returned -22 [ 163.542833][ T5851] Bluetooth: hci4: command tx timeout [ 164.794515][ T5851] Bluetooth: hci2: command tx timeout [ 164.805016][ T6231] hsr_slave_0: entered promiscuous mode [ 164.877246][ T6231] hsr_slave_1: entered promiscuous mode [ 164.935616][ T6231] debugfs: 'hsr0' already exists in 'hsr' [ 164.941397][ T6231] Cannot create hsr debugfs directory [ 164.992719][ T6378] lo speed is unknown, defaulting to 1000 [ 165.207372][ T6403] fuse: Bad value for 'fd' [ 166.410948][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 166.441884][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 166.527994][ T6420] ceph: No mds server is up or the cluster is laggy [ 166.823971][ T5851] Bluetooth: hci2: command tx timeout [ 166.842795][ T6428] binder: 6427:6428 ioctl 4018620d 0 returned -22 [ 167.306217][ T6437] binder: 6436:6437 ioctl c0046209 0 returned -22 [ 168.713487][ T6452] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 168.784071][ T6314] chnl_net:caif_netlink_parms(): no params data found [ 168.902675][ T5851] Bluetooth: hci2: command tx timeout [ 168.941875][ T6457] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.958397][ T6457] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 169.038971][ T6457] syz.0.123 (6457) used greatest stack depth: 20120 bytes left [ 169.349027][ T6378] chnl_net:caif_netlink_parms(): no params data found [ 169.551433][ T6231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.633462][ T13] hsr_slave_0: left promiscuous mode [ 169.647594][ T13] hsr_slave_1: left promiscuous mode [ 169.671015][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.685347][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.703902][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.711355][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.771262][ T13] veth1_macvtap: left promiscuous mode [ 169.783069][ T13] veth0_macvtap: left promiscuous mode [ 169.789502][ T13] veth1_vlan: left promiscuous mode [ 169.802961][ T13] veth0_vlan: left promiscuous mode [ 170.375545][ T6478] binder: 6477:6478 ioctl 4018620d 0 returned -22 [ 170.576253][ T30] audit: type=1804 audit(1751648473.606:2): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.126" name="/newroot/38/bus/bus" dev="overlay" ino=231 res=1 errno=0 [ 170.759564][ T30] audit: type=1804 audit(1751648473.616:3): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.126" name="/newroot/38/bus/bus" dev="overlay" ino=231 res=1 errno=0 [ 171.009646][ T5851] Bluetooth: hci2: command tx timeout [ 171.660164][ T6486] binder: 6485:6486 ioctl c0046209 0 returned -22 [ 172.622063][ T13] team0 (unregistering): Port device team_slave_1 removed [ 172.686960][ T13] team0 (unregistering): Port device team_slave_0 removed [ 173.921504][ T6231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.960194][ T9] lo speed is unknown, defaulting to 1000 [ 173.966288][ T9] infiniband syz0: ib_query_port failed (-19) [ 174.145246][ T6231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.169637][ T6231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.366522][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.432374][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.441278][ T6314] bridge_slave_0: entered allmulticast mode [ 174.448836][ T6314] bridge_slave_0: entered promiscuous mode [ 174.646301][ T6514] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 175.176091][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.191773][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.202983][ T6314] bridge_slave_1: entered allmulticast mode [ 175.210814][ T6314] bridge_slave_1: entered promiscuous mode [ 175.670821][ T6516] smc: net device bond0 applied user defined pnetid SYZ2 [ 175.673792][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.706763][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.747378][ T6378] bridge_slave_0: entered allmulticast mode [ 175.771878][ T6378] bridge_slave_0: entered promiscuous mode [ 175.875266][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.886393][ T6535] binder: BINDER_SET_CONTEXT_MGR already set [ 175.892541][ T6535] binder: 6531:6535 ioctl 4018620d 2000000002c0 returned -16 [ 176.280708][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.290696][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.350384][ T6378] bridge_slave_1: entered allmulticast mode [ 176.377825][ T6378] bridge_slave_1: entered promiscuous mode [ 176.395053][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.416476][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.439136][ T6314] team0: Port device team_slave_0 added [ 177.511414][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.527383][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.541968][ T6314] team0: Port device team_slave_1 added [ 177.718790][ T6378] team0: Port device team_slave_0 added [ 177.764707][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.777282][ T6378] team0: Port device team_slave_1 added [ 177.818921][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.839406][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.846662][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.874626][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.920902][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.928194][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.955165][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.982384][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.999879][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.010331][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.037811][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.050799][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.058147][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.085072][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.150789][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.158010][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.215755][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.314449][ T6314] hsr_slave_0: entered promiscuous mode [ 178.320925][ T6314] hsr_slave_1: entered promiscuous mode [ 178.328600][ T6314] debugfs: 'hsr0' already exists in 'hsr' [ 178.334427][ T6314] Cannot create hsr debugfs directory [ 178.343378][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.350622][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.477973][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.761630][ T6378] hsr_slave_0: entered promiscuous mode [ 178.808819][ T6378] hsr_slave_1: entered promiscuous mode [ 178.830544][ T6378] debugfs: 'hsr0' already exists in 'hsr' [ 178.839678][ T6378] Cannot create hsr debugfs directory [ 178.929954][ T6231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.436256][ T6574] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 180.711852][ T13] bridge_slave_1: left allmulticast mode [ 181.362641][ T13] bridge_slave_1: left promiscuous mode [ 181.417765][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.430001][ T13] bridge_slave_0: left allmulticast mode [ 181.440519][ T13] bridge_slave_0: left promiscuous mode [ 181.451969][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.519023][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 183.387180][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.469180][ T6601] orangefs_mount: mount request failed with -4 [ 183.480943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.496177][ T13] bond0 (unregistering): Released all slaves [ 183.623093][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 183.734808][ T13] IPVS: stopping master sync thread 6209 ... [ 183.905876][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.157732][ T6314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.187010][ T6314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.233378][ T6314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.450550][ T13] hsr_slave_0: left promiscuous mode [ 184.463515][ T13] hsr_slave_1: left promiscuous mode [ 184.480275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.518308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.568303][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.600867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.669653][ T13] veth1_macvtap: left promiscuous mode [ 184.690394][ T13] veth0_macvtap: left promiscuous mode [ 184.701433][ T13] veth1_vlan: left promiscuous mode [ 184.717276][ T13] veth0_vlan: left promiscuous mode [ 185.110256][ T6618] netlink: 'syz.0.149': attribute type 10 has an invalid length. [ 185.660672][ T13] team0 (unregistering): Port device team_slave_1 removed [ 185.697704][ T13] team0 (unregistering): Port device team_slave_0 removed [ 186.012202][ T6314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.129224][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.137774][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.184575][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.191836][ T6618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.200512][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.207774][ T6618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.219134][ T6618] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 186.390808][ T6378] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 186.440959][ T6378] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 186.508447][ T6378] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 186.547341][ T6378] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 186.779983][ T6231] veth0_vlan: entered promiscuous mode [ 186.885347][ T6231] veth1_vlan: entered promiscuous mode [ 186.979532][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.997632][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.086955][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.094201][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.169310][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.176514][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.283343][ T6231] veth0_macvtap: entered promiscuous mode [ 188.346652][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.479568][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.518944][ T6314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.533960][ T6314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.553054][ T5967] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 188.555060][ T6231] veth1_macvtap: entered promiscuous mode [ 188.691341][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.698631][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.771440][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.778575][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.786188][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 188.798536][ T5967] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 188.839460][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.874070][ T5967] usb 1-1: config 0 descriptor?? [ 188.898781][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.996639][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.081192][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.132521][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.206257][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.264230][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.488860][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.521313][ T5967] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 189.546519][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.571299][ T5967] asix 1-1:0.0: probe with driver asix failed with error -32 [ 189.725032][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.734753][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.831288][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.115518][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.193562][ T6690] kvm: pic: single mode not supported [ 190.193822][ T6690] kvm: pic: non byte read [ 190.205511][ T6690] kvm: pic: non byte read [ 190.210175][ T6690] kvm: pic: non byte read [ 190.220894][ T6690] kvm: pic: non byte read [ 191.475386][ T6378] veth0_vlan: entered promiscuous mode [ 191.492152][ T5967] usb 1-1: USB disconnect, device number 2 [ 191.530965][ T6378] veth1_vlan: entered promiscuous mode [ 191.769033][ T6378] veth0_macvtap: entered promiscuous mode [ 192.854899][ T6378] veth1_macvtap: entered promiscuous mode [ 192.939926][ T6314] veth0_vlan: entered promiscuous mode [ 193.158269][ T6314] veth1_vlan: entered promiscuous mode [ 193.264852][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.114545][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.201904][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.137557][ T3497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.152744][ T3497] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.318708][ T6314] veth0_macvtap: entered promiscuous mode [ 195.333679][ T6314] veth1_macvtap: entered promiscuous mode [ 195.357276][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.535498][ T3497] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.129437][ T6267] syz.1.84 (6267) used greatest stack depth: 19752 bytes left [ 196.172291][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.481158][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.664656][ T3497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.772185][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.809714][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.839384][ T3497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.855003][ T5943] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.918873][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.953201][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 196.987166][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.136663][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.212496][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 197.321337][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 197.391960][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.561604][ T10] usb 6-1: config 0 descriptor?? [ 197.580878][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 197.827842][ T5943] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 197.836699][ T5943] usb 3-1: config 0 has no interface number 0 [ 197.859205][ T3497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.878098][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 197.889550][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.897809][ T5943] usb 3-1: Product: syz [ 197.902049][ T5943] usb 3-1: Manufacturer: syz [ 197.906851][ T5943] usb 3-1: SerialNumber: syz [ 197.915934][ T5943] usb 3-1: config 0 descriptor?? [ 197.945624][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.957194][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.69/input/input5 [ 197.986776][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.090882][ T3497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.171490][ T5201] bcm5974 3-1:0.69: could not read from device [ 198.197995][ T5201] bcm5974 3-1:0.69: could not read from device [ 198.228605][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.256840][ T5943] usb 3-1: USB disconnect, device number 3 [ 198.257776][ T5201] bcm5974 3-1:0.69: could not read from device [ 198.274389][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.407989][ T5201] bcm5974 3-1:0.69: could not read from device [ 198.453599][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 198.472965][ T10] asix 6-1:0.0: probe with driver asix failed with error -32 [ 198.576934][ T6783] netlink: 61963 bytes leftover after parsing attributes in process `syz.7.110'. [ 198.709384][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.743660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.476258][ T3497] bridge_slave_1: left allmulticast mode [ 199.482042][ T3497] bridge_slave_1: left promiscuous mode [ 199.532881][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.609676][ T3497] bridge_slave_0: left allmulticast mode [ 199.648428][ T3497] bridge_slave_0: left promiscuous mode [ 199.694037][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.777932][ T9] usb 6-1: USB disconnect, device number 2 [ 199.800286][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.806773][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.009372][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 202.025030][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 202.147743][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.159883][ T6832] ceph: No mds server is up or the cluster is laggy [ 202.413169][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 202.431254][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.432985][ T6841] ceph: No mds server is up or the cluster is laggy [ 202.454405][ T3497] bond0 (unregistering): Released all slaves [ 202.480877][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 202.758484][ T6801] syzkaller0: entered promiscuous mode [ 202.786991][ T6801] syzkaller0: entered allmulticast mode [ 204.862866][ T30] audit: type=1804 audit(1751648507.946:4): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.183" name="/newroot/61/file0" dev="tmpfs" ino=354 res=1 errno=0 [ 205.372897][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.573446][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 205.581621][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 205.605316][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.624055][ T9] usb 3-1: config 0 descriptor?? [ 206.273957][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 206.290298][ T9] asix 3-1:0.0: probe with driver asix failed with error -32 [ 206.591073][ T6851] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.180'. [ 207.055136][ T6879] syzkaller0: entered promiscuous mode [ 207.091057][ T6879] syzkaller0: entered allmulticast mode [ 207.243863][ T30] audit: type=1326 audit(1751648510.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 208.976171][ T30] audit: type=1326 audit(1751648510.336:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.038934][ T30] audit: type=1326 audit(1751648510.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.081556][ T3497] hsr_slave_0: left promiscuous mode [ 209.138147][ T3497] hsr_slave_1: left promiscuous mode [ 209.144508][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.151990][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.161995][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.169876][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.172900][ T43] usb 3-1: USB disconnect, device number 4 [ 209.202971][ T30] audit: type=1326 audit(1751648510.356:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.262632][ T3497] veth1_macvtap: left promiscuous mode [ 209.268595][ T3497] veth0_macvtap: left promiscuous mode [ 209.289314][ T3497] veth1_vlan: left promiscuous mode [ 209.310055][ T30] audit: type=1326 audit(1751648510.356:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.351018][ T3497] veth0_vlan: left promiscuous mode [ 209.397565][ T30] audit: type=1326 audit(1751648510.356:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.421369][ T30] audit: type=1326 audit(1751648510.366:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.446778][ T30] audit: type=1326 audit(1751648510.366:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.556483][ T30] audit: type=1326 audit(1751648510.366:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.7.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9cc638e929 code=0x7ffc0000 [ 209.601694][ T9] libceph: connect (1)[c::]:6789 error -101 [ 209.610803][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 209.873198][ T9] libceph: connect (1)[c::]:6789 error -101 [ 209.891430][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 210.198629][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 210.240740][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 210.416532][ T10] libceph: connect (1)[c::]:6789 error -101 [ 210.426866][ T6910] ceph: No mds server is up or the cluster is laggy [ 210.433741][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 215.751797][ T6937] netlink: 61963 bytes leftover after parsing attributes in process `syz.7.197'. [ 216.425368][ T6954] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 217.177487][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.382993][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 218.134589][ T3497] IPVS: stop unused estimator thread 0... [ 218.152711][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 218.190002][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.240347][ T10] usb 3-1: config 0 descriptor?? [ 219.137782][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 219.699671][ T10] asix 3-1:0.0: probe with driver asix failed with error -61 [ 219.875504][ T6989] netlink: 61963 bytes leftover after parsing attributes in process `syz.6.208'. [ 221.207607][ T7008] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 221.893726][ T5911] usb 3-1: USB disconnect, device number 5 [ 222.289970][ T7023] binder: 7021:7023 ioctl c0046209 0 returned -22 [ 222.512657][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.326531][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 223.384132][ T5911] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 223.412692][ T5911] usb 3-1: config 0 has no interface number 0 [ 223.434961][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 223.449744][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.457920][ T5911] usb 3-1: Product: syz [ 223.462105][ T5911] usb 3-1: Manufacturer: syz [ 223.467874][ T5911] usb 3-1: SerialNumber: syz [ 223.580710][ T5911] usb 3-1: config 0 descriptor?? [ 223.607713][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.69/input/input6 [ 223.813707][ T5201] bcm5974 3-1:0.69: could not read from device [ 223.939483][ T6958] udevd[6958]: failed to send result of seq 13450 to main daemon: Connection refused [ 223.949740][ T5911] usb 3-1: USB disconnect, device number 6 [ 223.960868][ T5201] bcm5974 3-1:0.69: could not read from device [ 224.583459][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.220'. [ 225.482336][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 225.655120][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 225.678020][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 225.703834][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.732364][ T9] usb 1-1: config 0 descriptor?? [ 225.928126][ T7073] binder: 7072:7073 ioctl c0046209 0 returned -22 [ 226.972882][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 227.457664][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 227.575475][ T9] asix 1-1:0.0: probe with driver asix failed with error -61 [ 227.935244][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 228.645082][ T5911] usb 1-1: USB disconnect, device number 3 [ 228.654570][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 228.726117][ T9] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 228.752856][ T9] usb 8-1: config 0 has no interface number 0 [ 228.785256][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 228.804727][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.830215][ T9] usb 8-1: Product: syz [ 228.844248][ T9] usb 8-1: Manufacturer: syz [ 228.852907][ T9] usb 8-1: SerialNumber: syz [ 228.868622][ T9] usb 8-1: config 0 descriptor?? [ 228.898449][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.69/input/input7 [ 228.968456][ T7102] netlink: 'syz.5.241': attribute type 1 has an invalid length. [ 229.097233][ T5201] bcm5974 8-1:0.69: could not read from device [ 229.108673][ T5201] bcm5974 8-1:0.69: could not read from device [ 229.127013][ T5201] bcm5974 8-1:0.69: could not read from device [ 229.139250][ T9] usb 8-1: USB disconnect, device number 2 [ 229.219599][ T7105] gretap1: entered promiscuous mode [ 230.095692][ T9] IPVS: starting estimator thread 0... [ 230.203529][ T7117] IPVS: using max 24 ests per chain, 57600 per kthread [ 231.580536][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 233.032797][ T7135] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 233.542744][ T5911] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 233.741918][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 233.767695][ T5911] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 233.804847][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.863596][ T5911] usb 7-1: config 0 descriptor?? [ 235.200157][ T5911] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 235.210670][ T5911] asix 7-1:0.0: probe with driver asix failed with error -61 [ 235.696574][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.922645][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 236.022874][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 236.121609][ T43] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 236.150861][ T43] usb 1-1: config 0 has no interface number 0 [ 236.169874][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 236.184465][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.229175][ T43] usb 1-1: Product: syz [ 236.239584][ T43] usb 1-1: Manufacturer: syz [ 236.271054][ T43] usb 1-1: SerialNumber: syz [ 236.445211][ T43] usb 1-1: config 0 descriptor?? [ 236.462168][ T43] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.69/input/input8 [ 236.480452][ T9] usb 7-1: USB disconnect, device number 2 [ 237.312287][ T5201] bcm5974 1-1:0.69: could not read from device [ 237.336766][ T5201] bcm5974 1-1:0.69: could not read from device [ 237.359933][ T5201] bcm5974 1-1:0.69: could not read from device [ 237.426203][ T7167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.441793][ T43] usb 1-1: USB disconnect, device number 4 [ 237.463786][ T5201] bcm5974 1-1:0.69: could not read from device [ 237.683362][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 237.689652][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 237.708670][ T7167] ceph: No mds server is up or the cluster is laggy [ 238.747922][ T7185] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 239.636235][ T7192] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 239.652088][ T7192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.889106][ T7192] vhci_hcd vhci_hcd.0: Device attached [ 240.103601][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 240.192855][ T5911] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 240.336310][ T10] usb 7-1: config 0 has no interfaces? [ 240.390939][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.454074][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.606282][ T10] usb 7-1: config 0 descriptor?? [ 240.983421][ T9] usb 7-1: USB disconnect, device number 3 [ 241.030218][ T7194] vhci_hcd: connection closed [ 241.031945][ T6298] vhci_hcd: stop threads [ 241.065775][ T6298] vhci_hcd: release socket [ 241.077868][ T6298] vhci_hcd: disconnect device [ 241.113058][ T5911] usb 45-1: device descriptor read/64, error -396736633 [ 241.307855][ T5911] vhci_hcd: vhci_device speed not set [ 242.433145][ T5943] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 242.602734][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 243.403176][ T5943] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 243.413552][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 243.480785][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.516661][ T5943] usb 3-1: config 0 descriptor?? [ 243.972107][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 244.386410][ T7225] ceph: No mds server is up or the cluster is laggy [ 244.411378][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 244.626114][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 244.632292][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 244.656458][ T7224] ceph: No mds server is up or the cluster is laggy [ 244.900843][ T5857] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 244.966649][ T7234] netlink: 44 bytes leftover after parsing attributes in process `syz.5.277'. [ 244.976489][ T7234] Zero length message leads to an empty skb [ 245.054757][ T5857] usb 7-1: Using ep0 maxpacket: 16 [ 245.079179][ T5857] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 245.102086][ T5857] usb 7-1: config 0 has no interface number 0 [ 245.355443][ T5857] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 245.372686][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.380741][ T5857] usb 7-1: Product: syz [ 245.403013][ T5857] usb 7-1: Manufacturer: syz [ 245.407706][ T5857] usb 7-1: SerialNumber: syz [ 245.477519][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.280'. [ 245.992810][ T5857] usb 7-1: config 0 descriptor?? [ 246.019515][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.69/input/input9 [ 246.173506][ T7246] comedi: valid board names for 8255 driver are: [ 246.182249][ T7246] 8255 [ 246.185801][ T7246] comedi: valid board names for vmk80xx driver are: [ 246.203022][ T7246] vmk80xx [ 246.206117][ T7246] comedi: valid board names for usbduxsigma driver are: [ 246.217061][ T5857] usb 7-1: USB disconnect, device number 4 [ 246.222988][ T7246] usbduxsigma [ 246.223027][ T7246] comedi: valid board names for usbduxfast driver are: [ 246.223039][ T7246] usbduxfast [ 246.223049][ T7246] comedi: valid board names for usbdux driver are: [ 246.223061][ T7246] usbdux [ 246.223070][ T7246] comedi: valid board names for ni6501 driver are: [ 246.223081][ T7246] ni6501 [ 246.223090][ T7246] comedi: valid board names for dt9812 driver are: [ 246.223101][ T7246] dt9812 [ 246.223110][ T7246] comedi: valid board names for ni_labpc_cs driver are: [ 246.223121][ T7246] ni_labpc_cs [ 246.223130][ T7246] comedi: valid board names for ni_daq_700 driver are: [ 246.223154][ T7246] ni_daq_700 [ 246.223162][ T7246] comedi: valid board names for labpc_pci driver are: [ 246.223173][ T7246] labpc_pci [ 246.223182][ T7246] comedi: valid board names for adl_pci9118 driver are: [ 246.223193][ T7246] pci9118dg [ 246.223201][ T7246] pci9118hg [ 246.223210][ T7246] pci9118hr [ 246.223218][ T7246] comedi: valid board names for 8255_pci driver are: [ 246.223229][ T7246] 8255_pci [ 246.223243][ T7246] comedi: valid board names for s526 driver are: [ 246.223254][ T7246] s526 [ 246.223263][ T7246] comedi: valid board names for multiq3 driver are: [ 246.223273][ T7246] multiq3 [ 246.223282][ T7246] comedi: valid board names for pcmuio driver are: [ 246.223292][ T7246] pcmuio48 [ 246.223301][ T7246] pcmuio96 [ 246.223310][ T7246] comedi: valid board names for pcmmio driver are: [ 246.223320][ T7246] pcmmio [ 246.223329][ T7246] comedi: valid board names for pcmda12 driver are: [ 246.223340][ T7246] pcmda12 [ 246.223349][ T7246] comedi: valid board names for pcmad driver are: [ 246.223359][ T7246] pcmad12 [ 246.223367][ T7246] pcmad16 [ 246.223393][ T7246] comedi: valid board names for ni_labpc driver are: [ 246.232749][ T5201] bcm5974 7-1:0.69: could not read from device [ 246.263006][ T7246] lab-pc-1200 [ 246.324533][ T7246] lab-pc-1200ai [ 246.324549][ T7246] lab-pc+ [ 246.324559][ T7246] comedi: valid board names for atmio16 driver are: [ 246.324571][ T7246] atmio16 [ 246.324579][ T7246] atmio16d [ 246.324588][ T7246] comedi: valid board names for ni_at_ao driver are: [ 246.324600][ T7246] at-ao-6 [ 246.324608][ T7246] at-ao-10 [ 246.324617][ T7246] comedi: valid board names for ni_at_a2150 driver are: [ 246.324628][ T7246] ni_at_a2150 [ 246.324636][ T7246] comedi: valid board names for adq12b driver are: [ 246.324646][ T7246] adq12b [ 246.324654][ T7246] comedi: valid board names for mpc624 driver are: [ 246.324665][ T7246] mpc624 [ 246.324674][ T7246] comedi: valid board names for c6xdigio driver are: [ 246.333177][ T5943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.341769][ T7246] c6xdigio [ 246.352668][ T5943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 246.364062][ T7246] comedi: valid board names for aio_iiro_16 driver are: [ 246.372925][ T5943] asix 3-1:0.0: probe with driver asix failed with error -71 [ 246.377156][ T5943] usb 3-1: USB disconnect, device number 7 [ 246.393001][ T7246] aio_iiro_16 [ 246.545262][ T7246] comedi: valid board names for aio_aio12_8 driver are: [ 246.575863][ T7246] aio_aio12_8 [ 246.579885][ T7246] aio_ai12_8 [ 246.594283][ T7246] aio_ao12_4 [ 246.598825][ T7246] comedi: valid board names for fl512 driver are: [ 246.617578][ T7253] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 246.622102][ T7246] fl512 [ 246.631540][ T7246] comedi: valid board names for dmm32at driver are: [ 246.638629][ T7246] dmm32at [ 246.641771][ T7246] comedi: valid board names for dt282x driver are: [ 246.653319][ T7246] dt2821 [ 246.656361][ T7246] dt2821-f [ 246.659556][ T7246] dt2821-g [ 246.662879][ T7246] dt2823 [ 246.667933][ T7246] dt2824-pgh [ 246.671518][ T7246] dt2824-pgl [ 246.677472][ T7246] dt2825 [ 246.682818][ T7246] dt2827 [ 246.686019][ T7246] dt2828 [ 246.711110][ T7246] dt2829 [ 246.721231][ T7246] dt21-ez [ 246.724425][ T7246] dt23-ez [ 246.727452][ T7246] dt24-ez [ 246.730482][ T7246] dt24-ez-pgl [ 246.742906][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 246.796342][ T7246] comedi: valid board names for dt2817 driver are: [ 246.851986][ T7246] dt2817 [ 246.878440][ T7246] comedi: valid board names for dt2815 driver are: [ 246.896351][ T7246] dt2815 [ 246.900979][ T7246] comedi: valid board names for dt2814 driver are: [ 246.915904][ T7246] dt2814 [ 246.923561][ T7246] comedi: valid board names for dt2811 driver are: [ 246.946655][ T7246] dt2811-pgh [ 246.950910][ T7246] dt2811-pgl [ 246.967980][ T7246] comedi: valid board names for dt2801 driver are: [ 246.990821][ T7246] dt2801 [ 247.006657][ T7246] comedi: valid board names for das6402 driver are: [ 247.027033][ T7246] das6402-12 [ 247.082643][ T7246] das6402-16 [ 247.091373][ T7246] comedi: valid board names for das1800 driver are: [ 247.122630][ T7246] das-1701st [ 247.125978][ T7246] das-1701st-da [ 247.129540][ T7246] das-1702st [ 247.329022][ T7246] das-1702st-da [ 247.332719][ T7246] das-1702hr [ 247.347073][ T7246] das-1702hr-da [ 247.350641][ T7246] das-1701ao [ 248.163500][ T7246] das-1702ao [ 248.166975][ T7246] das-1801st [ 248.207107][ T7246] das-1801st-da [ 248.211046][ T7246] das-1802st [ 248.343021][ T7246] das-1802st-da [ 248.346627][ T7246] das-1802hr [ 248.349929][ T7246] das-1802hr-da [ 248.369927][ T7246] das-1801hc [ 248.373674][ T7246] das-1802hc [ 248.392678][ T7246] das-1801ao [ 248.396051][ T7246] das-1802ao [ 248.399360][ T7246] comedi: valid board names for das800 driver are: [ 248.572839][ T7246] das-800 [ 248.733930][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 248.845945][ T7246] cio-das800 [ 248.951602][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 249.190301][ T7271] ceph: No mds server is up or the cluster is laggy [ 249.460030][ T7246] das-801 [ 249.463475][ T7246] cio-das801 [ 249.466865][ T7246] das-802 [ 249.470029][ T7246] cio-das802 [ 249.473440][ T7246] cio-das802/16 [ 249.477068][ T7246] comedi: valid board names for isa-das08 driver are: [ 249.489678][ T7246] isa-das08 [ 249.492996][ T7246] das08-pgm [ 249.496407][ T7246] das08-pgh [ 249.502867][ T7246] das08-pgl [ 249.506143][ T7246] das08-aoh [ 249.509470][ T7246] das08-aol [ 249.512799][ T7246] das08-aom [ 249.519618][ T7246] das08/jr-ao [ 249.550313][ T7246] das08jr-16-ao [ 249.638127][ T7246] pc104-das08 [ 249.641539][ T7246] das08jr/16 [ 249.706437][ T7246] comedi: valid board names for das16m1 driver are: [ 249.717881][ T7246] das16m1 [ 249.721065][ T7246] comedi: valid board names for dac02 driver are: [ 249.732664][ T7246] dac02 [ 249.735724][ T7246] comedi: valid board names for rti802 driver are: [ 249.742438][ T7246] rti802 [ 249.755641][ T7246] comedi: valid board names for rti800 driver are: [ 249.784001][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 249.790311][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 249.801908][ T7278] ceph: No mds server is up or the cluster is laggy [ 249.816821][ T7246] rti800 [ 249.816831][ T7246] rti815 [ 249.816838][ T7246] comedi: valid board names for pcm3724 driver are: [ 249.816845][ T7246] pcm3724 [ 249.816851][ T7246] comedi: valid board names for pcl818 driver are: [ 249.816858][ T7246] pcl818l [ 249.816863][ T7246] pcl818h [ 249.816869][ T7246] pcl818hd [ 249.816874][ T7246] pcl818hg [ 249.816879][ T7246] pcl818 [ 249.816885][ T7246] pcl718 [ 249.816890][ T7246] pcm3718 [ 249.816895][ T7246] comedi: valid board names for pcl816 driver are: [ 249.816902][ T7246] pcl816 [ 249.816907][ T7246] pcl814b [ 249.816913][ T7246] comedi: valid board names for pcl812 driver are: [ 249.816920][ T7246] pcl812 [ 249.816925][ T7246] pcl812pg [ 249.816930][ T7246] acl8112pg [ 249.816936][ T7246] acl8112dg [ 249.816941][ T7246] acl8112hg [ 249.816946][ T7246] a821pgl [ 249.816951][ T7246] a821pglnda [ 249.816957][ T7246] a821pgh [ 249.816962][ T7246] a822pgl [ 249.816967][ T7246] a822pgh [ 249.816973][ T7246] a823pgl [ 249.816978][ T7246] a823pgh [ 249.816983][ T7246] pcl813 [ 249.816989][ T7246] pcl813b [ 249.816994][ T7246] acl8113 [ 249.816999][ T7246] iso813 [ 249.817004][ T7246] acl8216 [ 249.817010][ T7246] a826pg [ 249.817015][ T7246] comedi: valid board names for pcl730 driver are: [ 249.817022][ T7246] pcl730 [ 249.817027][ T7246] iso730 [ 249.817032][ T7246] acl7130 [ 249.817038][ T7246] pcm3730 [ 249.817043][ T7246] pcl725 [ 249.817048][ T7246] p8r8dio [ 249.817053][ T7246] acl7225b [ 249.817059][ T7246] p16r16dio [ 249.817064][ T7246] pcl733 [ 249.817069][ T7246] pcl734 [ 249.817074][ T7246] opmm-1616-xt [ 249.817080][ T7246] pearl-mm-p [ 249.817085][ T7246] ir104-pbf [ 249.817091][ T7246] comedi: valid board names for pcl726 driver are: [ 249.817097][ T7246] pcl726 [ 249.817103][ T7246] pcl727 [ 249.817108][ T7246] pcl728 [ 249.817113][ T7246] acl6126 [ 249.817118][ T7246] acl6128 [ 249.817124][ T7246] comedi: valid board names for pcl724 driver are: [ 249.817130][ T7246] pcl724 [ 249.817136][ T7246] pcl722 [ 249.817141][ T7246] pcl731 [ 249.817146][ T7246] acl7122 [ 249.817151][ T7246] acl7124 [ 249.817156][ T7246] pet48dio [ 249.817162][ T7246] pcmio48 [ 249.817167][ T7246] onyx-mm-dio [ 249.817173][ T7246] comedi: valid board names for pcl711 driver are: [ 249.817179][ T7246] pcl711 [ 249.817184][ T7246] pcl711b [ 249.817190][ T7246] acl8112hg [ 249.817195][ T7246] acl8112dg [ 249.817201][ T7246] comedi: valid board names for amplc_pc263 driver are: [ 249.817208][ T7246] pc263 [ 249.817213][ T7246] comedi: valid board names for amplc_pc236 driver are: [ 249.817220][ T7246] pc36at [ 249.817225][ T7246] comedi: valid board names for amplc_dio200 driver are: [ 249.817232][ T7246] pc212e [ 249.817237][ T7246] pc214e [ 249.817243][ T7246] pc215e [ 249.817248][ T7246] pc218e [ 249.817253][ T7246] pc272e [ 249.817259][ T7246] comedi: valid board names for comedi_parport driver are: [ 249.817266][ T7246] comedi_parport [ 249.817271][ T7246] comedi: valid board names for comedi_test driver are: [ 249.817278][ T7246] comedi_test [ 249.817284][ T7246] comedi: valid board names for comedi_bond driver are: [ 249.817291][ T7246] comedi_bond [ 250.806529][ T7287] orangefs_mount: mount request failed with -4 [ 251.555286][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.291'. [ 253.513562][ T7307] binder: 7306:7307 ioctl c0046209 0 returned -22 [ 253.704988][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 254.169684][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 254.759839][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 254.837493][ T9] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 254.877979][ T9] usb 8-1: config 0 has no interface number 0 [ 254.950247][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 254.961907][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 255.059440][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.067955][ T9] usb 8-1: Product: syz [ 255.073050][ T9] usb 8-1: Manufacturer: syz [ 255.078560][ T9] usb 8-1: SerialNumber: syz [ 255.091526][ T9] usb 8-1: config 0 descriptor?? [ 255.111380][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.69/input/input10 [ 255.196430][ T7327] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.223295][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 255.237526][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 255.328296][ T5201] bcm5974 8-1:0.69: could not read from device [ 255.393982][ T9] usb 8-1: USB disconnect, device number 3 [ 255.579040][ T7334] fuse: Bad value for 'fd' [ 255.696181][ T10] libceph: connect (1)[c::]:6789 error -101 [ 255.780513][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 255.781583][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 255.901973][ T7335] ceph: No mds server is up or the cluster is laggy [ 256.068212][ T7309] ceph: No mds server is up or the cluster is laggy [ 256.246425][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 256.395145][ T7342] orangefs_mount: mount request failed with -4 [ 256.684391][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.305'. [ 260.941351][ T7379] fuse: Unknown parameter '0x0000000000000004' [ 261.121838][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.318'. [ 261.212700][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 261.221345][ T7387] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 261.237103][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.253213][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.436153][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 261.448690][ T10] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 261.611771][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 261.620399][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 262.074666][ T10] usb 7-1: config 0 has no interface number 0 [ 262.084988][ T7390] ceph: No mds server is up or the cluster is laggy [ 262.108160][ T7395] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 262.114723][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.126350][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 262.132458][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 262.139855][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 262.150434][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.170038][ T10] usb 7-1: Product: syz [ 262.181662][ T7395] vhci_hcd vhci_hcd.0: Device attached [ 262.200999][ T10] usb 7-1: Manufacturer: syz [ 262.228232][ T10] usb 7-1: SerialNumber: syz [ 262.238041][ T10] usb 7-1: config 0 descriptor?? [ 262.253101][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.69/input/input11 [ 262.443234][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 262.461275][ T5201] bcm5974 7-1:0.69: could not read from device [ 262.535350][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 262.734950][ T5201] bcm5974 7-1:0.69: could not read from device [ 263.111216][ T5201] bcm5974 7-1:0.69: could not read from device [ 263.112705][ T5911] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 263.208346][ T10] usb 7-1: USB disconnect, device number 5 [ 263.386620][ T9] usb 8-1: config 0 has no interfaces? [ 263.402974][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.447086][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.479170][ T9] usb 8-1: config 0 descriptor?? [ 263.697127][ T10] usb 8-1: USB disconnect, device number 4 [ 263.709753][ T7396] vhci_hcd: connection closed [ 263.712145][ T36] vhci_hcd: stop threads [ 263.742120][ T36] vhci_hcd: release socket [ 263.748417][ T36] vhci_hcd: disconnect device [ 263.773012][ T5911] vhci_hcd: vhci_device speed not set [ 264.841370][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz.7.330'. [ 266.723764][ T7439] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 267.442866][ T7463] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 267.478757][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 267.629791][ T7467] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.649984][ T7467] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 267.665464][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.675474][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.718974][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.748952][ T7468] gretap1: entered promiscuous mode [ 267.762568][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.932464][ T7468] bond1: (slave gretap1): making interface the new active one [ 268.443380][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 270.250931][ T9] usb 7-1: usb_control_msg returned -32 [ 270.272604][ T9] usbtmc 7-1:16.0: can't read capabilities [ 270.298115][ T7468] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 270.415532][ T5911] usb 7-1: USB disconnect, device number 6 [ 271.735287][ T7493] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 272.633211][ T7512] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 275.620111][ T7525] netlink: 'syz.7.361': attribute type 1 has an invalid length. [ 275.751423][ T7527] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.763832][ T7527] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 275.929183][ T7525] gretap1: entered promiscuous mode [ 275.936032][ T7535] fuse: Bad value for 'fd' [ 276.698996][ T7525] bond1: (slave gretap1): making interface the new active one [ 276.762497][ T7525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 278.662769][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 280.113197][ T7569] fuse: Invalid rootmode [ 283.765104][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.389'. [ 284.670284][ T7619] fuse: Invalid rootmode [ 286.270813][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 287.519639][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 287.849567][ T7655] ceph: No mds server is up or the cluster is laggy [ 287.872860][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 288.912902][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 288.972636][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 289.411215][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 289.444852][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 290.100868][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 290.217787][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.226298][ T10] usb 1-1: Product: syz [ 290.230597][ T10] usb 1-1: Manufacturer: syz [ 290.245573][ T10] usb 1-1: SerialNumber: syz [ 290.262017][ T10] usb 1-1: config 0 descriptor?? [ 290.294026][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 290.305606][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 290.321272][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 290.408732][ T7680] fuse: Invalid rootmode [ 293.657597][ T7714] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 294.448449][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 294.577550][ T7716] ceph: No mds server is up or the cluster is laggy [ 294.735624][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 295.819187][ T7732] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 296.645254][ T5967] usb 1-1: USB disconnect, device number 5 [ 301.244166][ T978] libceph: connect (1)[c::]:6789 error -101 [ 301.250541][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 301.275260][ T7766] ceph: No mds server is up or the cluster is laggy [ 302.790878][ T5849] Bluetooth: hci1: sending frame failed (-49) [ 302.805812][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 302.868677][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 304.635108][ T978] libceph: connect (1)[c::]:6789 error -101 [ 304.642142][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 305.162927][ T7815] ceph: No mds server is up or the cluster is laggy [ 308.303606][ T7837] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 308.766067][ T7844] netlink: 'syz.6.447': attribute type 1 has an invalid length. [ 308.961563][ T7850] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.987728][ T7850] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 309.059227][ T7844] gretap1: entered promiscuous mode [ 309.076337][ T7844] bond1: (slave gretap1): making interface the new active one [ 309.088929][ T7844] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 309.381858][ T7860] lo speed is unknown, defaulting to 1000 [ 309.388026][ T7860] lo speed is unknown, defaulting to 1000 [ 309.398982][ T7860] lo speed is unknown, defaulting to 1000 [ 309.453817][ T7860] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.963972][ T7860] lo speed is unknown, defaulting to 1000 [ 309.981979][ T7860] lo speed is unknown, defaulting to 1000 [ 310.000113][ T7860] lo speed is unknown, defaulting to 1000 [ 310.017812][ T7860] lo speed is unknown, defaulting to 1000 [ 310.038205][ T7860] lo speed is unknown, defaulting to 1000 [ 312.385900][ T7885] ceph: No mds server is up or the cluster is laggy [ 312.396944][ T978] libceph: connect (1)[c::]:6789 error -101 [ 312.415920][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 312.686371][ T978] libceph: connect (1)[c::]:6789 error -101 [ 312.696519][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 313.285827][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 313.425225][ T978] libceph: connect (1)[c::]:6789 error -101 [ 313.446327][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 313.638234][ T7894] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 314.302086][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.464'. [ 316.253497][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.472'. [ 316.422818][ T7938] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 317.887339][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 318.443147][ T7943] ceph: No mds server is up or the cluster is laggy [ 318.462931][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 318.772008][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 318.882080][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 318.894730][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 319.007802][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 319.109958][ T7951] ceph: No mds server is up or the cluster is laggy [ 319.137964][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.475'. [ 320.241980][ T7968] fuse: Unknown parameter 'user_i00000000000000000000' [ 322.671026][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.677475][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.779451][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 323.491676][ T7992] siw: device registration error -23 [ 323.962681][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.486'. [ 324.748990][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 324.856529][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 325.041061][ T8008] ceph: No mds server is up or the cluster is laggy [ 328.040368][ T8036] orangefs_mount: mount request failed with -4 [ 328.864624][ T8043] siw: device registration error -23 [ 329.623995][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.501'. [ 329.929862][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 331.658220][ T8060] ceph: No mds server is up or the cluster is laggy [ 331.708849][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 331.716247][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 332.183065][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 334.339729][ T8083] orangefs_mount: mount request failed with -4 [ 334.638925][ T8090] netlink: 84 bytes leftover after parsing attributes in process `syz.6.509'. [ 338.142914][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 338.177382][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 338.488098][ T8121] ceph: No mds server is up or the cluster is laggy [ 339.116111][ T8132] orangefs_mount: mount request failed with -4 [ 342.394026][ T8175] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 342.400570][ T8175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.433412][ T8175] vhci_hcd vhci_hcd.0: Device attached [ 342.522113][ T8169] netlink: 84 bytes leftover after parsing attributes in process `syz.5.532'. [ 342.672598][ T5939] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 343.411877][ T8187] loop9: detected capacity change from 0 to 7 [ 344.193949][ T8187] Dev loop9: unable to read RDB block 7 [ 344.232690][ T8187] loop9: unable to read partition table [ 344.292788][ T8189] fuse: Unknown parameter 'user_id00000000000000000000' [ 344.348826][ T8187] loop9: partition table beyond EOD, truncated [ 344.380256][ T8187] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 344.437638][ T8192] netlink: 108 bytes leftover after parsing attributes in process `syz.2.539'. [ 345.439679][ T8176] vhci_hcd: connection reset by peer [ 345.452986][ T36] vhci_hcd: stop threads [ 345.457285][ T36] vhci_hcd: release socket [ 345.492790][ T36] vhci_hcd: disconnect device [ 345.854947][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 346.464512][ T8199] ceph: No mds server is up or the cluster is laggy [ 347.195914][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 348.575729][ T8214] lo speed is unknown, defaulting to 1000 [ 348.617139][ T5939] vhci_hcd: vhci_device speed not set [ 350.242086][ T8242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 350.248659][ T8242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.272311][ T8242] vhci_hcd vhci_hcd.0: Device attached [ 350.502640][ T5967] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 350.580648][ T8223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.599120][ T8223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.626421][ T8223] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.642038][ T8223] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.773802][ T8223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.796552][ T8223] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.818704][ T8223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.825768][ T8223] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.983186][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.083209][ T5911] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.316813][ T5911] usb 3-1: config 0 has no interfaces? [ 351.434860][ T5911] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 352.179082][ T8262] ceph: No mds server is up or the cluster is laggy [ 352.238173][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.331090][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 352.734962][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 352.741148][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.834399][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 352.840492][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 352.846896][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 352.863064][ T5911] usb 3-1: config 0 descriptor?? [ 353.329610][ T8243] vhci_hcd: connection reset by peer [ 353.336900][ T5932] usb 3-1: USB disconnect, device number 8 [ 353.872702][ T6299] vhci_hcd: stop threads [ 353.877006][ T6299] vhci_hcd: release socket [ 353.934273][ T6299] vhci_hcd: disconnect device [ 354.713779][ T8284] lo speed is unknown, defaulting to 1000 [ 354.822602][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 354.903092][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 354.903100][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 356.173247][ T5967] vhci_hcd: vhci_device speed not set [ 356.539455][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 358.678019][ T8312] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 358.832672][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 359.411848][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 359.419553][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 359.863995][ T8325] ceph: No mds server is up or the cluster is laggy [ 359.934438][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 359.951037][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 360.102619][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.132635][ T8309] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 360.732447][ T8338] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 360.940758][ T8337] lo speed is unknown, defaulting to 1000 [ 361.377259][ T8343] siw: device registration error -23 [ 361.410133][ T8309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.442957][ T8309] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.530887][ T8309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.075876][ T8309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.194064][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.775743][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 363.781987][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 364.182589][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 364.560706][ T8366] ceph: No mds server is up or the cluster is laggy [ 364.977581][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 365.204293][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 367.564087][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 367.570326][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 367.761568][ T8389] ceph: No mds server is up or the cluster is laggy [ 367.884411][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.587'. [ 371.836358][ T8412] netlink: 108 bytes leftover after parsing attributes in process `syz.5.590'. [ 373.016616][ T8424] ceph: No mds server is up or the cluster is laggy [ 373.023724][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 373.031792][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 373.063726][ T8421] 9pnet_fd: Insufficient options for proto=fd [ 375.121407][ T8415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.222814][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.371887][ T978] libceph: connect (1)[c::]:6789 error -101 [ 377.482016][ T8446] ceph: No mds server is up or the cluster is laggy [ 377.664615][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 377.893242][ T8415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.899430][ T8415] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 377.957215][ T8415] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.963623][ T8415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.952609][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 379.958697][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.022726][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 380.023361][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 384.106830][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 384.107770][ T43] libceph: connect (1)[c::]:6789 error -101 [ 384.117859][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.117942][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.145407][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 384.153049][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 384.188561][ T8499] ceph: No mds server is up or the cluster is laggy [ 384.450312][ T8505] ceph: No mds server is up or the cluster is laggy [ 384.464263][ T978] libceph: connect (1)[c::]:6789 error -101 [ 384.470387][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 385.513197][ T978] libceph: connect (1)[c::]:6789 error -101 [ 385.522732][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 385.746989][ T8522] ceph: No mds server is up or the cluster is laggy [ 385.827811][ T43] libceph: connect (1)[c::]:6789 error -101 [ 385.847696][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 386.879456][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.624'. [ 388.013815][ T8554] netlink: 'syz.5.629': attribute type 1 has an invalid length. [ 388.135644][ T8557] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 388.154039][ T8557] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 389.030226][ T8559] orangefs_mount: mount request failed with -4 [ 389.107357][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 389.591826][ T8580] netlink: 108 bytes leftover after parsing attributes in process `syz.7.638'. [ 389.777295][ T8583] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 390.517509][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 390.523836][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 390.637660][ T8577] ceph: No mds server is up or the cluster is laggy [ 390.927671][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 392.275782][ T43] libceph: connect (1)[c::]:6789 error -101 [ 392.285266][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 392.360478][ T8604] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 392.373030][ T8604] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 392.500697][ T8601] ceph: No mds server is up or the cluster is laggy [ 393.102657][ T8610] orangefs_mount: mount request failed with -4 [ 394.000961][ T8635] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 396.274680][ T978] libceph: connect (1)[c::]:6789 error -101 [ 396.284510][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 396.498266][ T8661] lo speed is unknown, defaulting to 1000 [ 396.673502][ T8654] ceph: No mds server is up or the cluster is laggy [ 396.689252][ T978] libceph: connect (1)[c::]:6789 error -101 [ 396.695476][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 399.247255][ T8709] loop9: detected capacity change from 0 to 7 [ 399.787163][ T8709] Dev loop9: unable to read RDB block 7 [ 399.793163][ T8709] loop9: unable to read partition table [ 399.799632][ T8709] loop9: partition table beyond EOD, truncated [ 399.806021][ T8709] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 400.044111][ T8704] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 400.812920][ T8724] netlink: 108 bytes leftover after parsing attributes in process `syz.2.674'. [ 402.146877][ T8735] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 402.763421][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 403.681470][ T8759] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.741927][ T8759] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 405.760632][ T8773] loop9: detected capacity change from 0 to 7 [ 406.080491][ T8773] Dev loop9: unable to read RDB block 7 [ 406.096961][ T8773] loop9: unable to read partition table [ 406.119315][ T8773] loop9: partition table beyond EOD, truncated [ 406.133552][ T8773] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 406.408105][ T8788] netlink: 108 bytes leftover after parsing attributes in process `syz.2.689'. [ 407.226802][ T8792] ceph: No mds server is up or the cluster is laggy [ 407.274492][ T978] libceph: connect (1)[c::]:6789 error -101 [ 407.294285][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 409.974940][ T8804] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 410.152824][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.700'. [ 410.259270][ T8830] loop9: detected capacity change from 0 to 7 [ 410.297979][ T8830] Dev loop9: unable to read RDB block 7 [ 410.303614][ T8830] loop9: unable to read partition table [ 410.309507][ T8830] loop9: partition table beyond EOD, truncated [ 410.315820][ T8830] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 410.437781][ T8834] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.600880][ T8834] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 415.174329][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 417.191484][ T8881] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 417.771487][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 417.905482][ T8848] libceph: connect (1)[c::]:6789 error -101 [ 417.911934][ T8848] libceph: mon0 (1)[c::]:6789 connect error [ 417.998418][ T8880] ceph: No mds server is up or the cluster is laggy [ 418.272046][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 418.289756][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 418.463390][ T8907] ceph: No mds server is up or the cluster is laggy [ 419.109954][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 419.117950][ T8913] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 419.165302][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 419.498594][ T51] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 420.144659][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 421.015846][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 425.578407][ T8938] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 426.961778][ T9] libceph: connect (1)[c::]:6789 error -101 [ 427.171315][ T8958] ceph: No mds server is up or the cluster is laggy [ 427.193704][ T10] libceph: connect (1)[c::]:6789 error -101 [ 427.199840][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 427.222093][ T978] libceph: connect (1)[c::]:6789 error -101 [ 427.229830][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 427.229902][ T8969] netlink: 108 bytes leftover after parsing attributes in process `syz.2.734'. [ 427.255665][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 427.276275][ T8973] ceph: No mds server is up or the cluster is laggy [ 427.328147][ T8964] ceph: No mds server is up or the cluster is laggy [ 427.534664][ T9] libceph: connect (1)[c::]:6789 error -101 [ 427.652018][ T978] libceph: connect (1)[c::]:6789 error -101 [ 427.668224][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 427.935068][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 428.411291][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.738'. [ 428.481000][ T8986] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 428.510032][ T8986] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 429.091016][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 429.100025][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 429.286973][ T8989] ceph: No mds server is up or the cluster is laggy [ 429.464620][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 429.470822][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 430.227915][ T9009] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 430.544530][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 430.722940][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 430.947174][ T9014] ceph: No mds server is up or the cluster is laggy [ 431.454960][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 431.464351][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 431.623794][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.742'. [ 431.895266][ T9024] ceph: No mds server is up or the cluster is laggy [ 432.168868][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 432.769336][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 433.581739][ T978] libceph: connect (1)[c::]:6789 error -101 [ 433.592037][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 433.615945][ T9042] ceph: No mds server is up or the cluster is laggy [ 433.853221][ T978] libceph: connect (1)[c::]:6789 error -101 [ 433.859385][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 434.182711][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 436.054642][ T9089] loop9: detected capacity change from 0 to 7 [ 436.071696][ T10] libceph: connect (1)[c::]:6789 error -101 [ 436.094696][ T9089] Dev loop9: unable to read RDB block 7 [ 436.100401][ T9089] loop9: unable to read partition table [ 436.106818][ T9089] loop9: partition table beyond EOD, truncated [ 436.113054][ T9089] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 436.135882][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 436.142400][ T10] libceph: connect (1)[c::]:6789 error -101 [ 436.201940][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 436.255911][ T9071] ceph: No mds server is up or the cluster is laggy [ 436.323334][ T9] libceph: connect (1)[c::]:6789 error -101 [ 436.366301][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 436.425776][ T9] libceph: connect (1)[c::]:6789 error -101 [ 436.459663][ T9087] ceph: No mds server is up or the cluster is laggy [ 436.477468][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 436.512701][ T9097] ceph: No mds server is up or the cluster is laggy [ 437.885561][ T9] libceph: connect (1)[c::]:6789 error -101 [ 437.893105][ T9116] ceph: No mds server is up or the cluster is laggy [ 437.901364][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 439.107203][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.6.768'. [ 440.133628][ T9135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.202518][ T9135] batadv_slave_0: entered promiscuous mode [ 440.826929][ T43] libceph: connect (1)[c::]:6789 error -101 [ 440.866038][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 441.250087][ T9151] ceph: No mds server is up or the cluster is laggy [ 444.212629][ T5943] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 444.370467][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 445.142319][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 445.394506][ T5943] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.404450][ T5943] usb 3-1: config 0 has no interface number 0 [ 445.412896][ T5943] usb 3-1: config 0 interface 184 has no altsetting 0 [ 445.424548][ T5943] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.031645][ T9194] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 446.123785][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.152612][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.162951][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.182654][ T5943] usb 3-1: Product: syz [ 446.187179][ T5943] usb 3-1: Manufacturer: syz [ 446.192341][ T5943] usb 3-1: SerialNumber: syz [ 446.229463][ T5943] usb 3-1: config 0 descriptor?? [ 446.241626][ T10] libceph: connect (1)[c::]:6789 error -101 [ 446.261464][ T5943] smsc75xx v1.0.0 [ 446.283036][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 446.316431][ T9192] ceph: No mds server is up or the cluster is laggy [ 447.223478][ T9206] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 447.450938][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 447.528550][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 449.033979][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 449.049597][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 449.060237][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 449.070567][ T5943] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 449.084742][ T5943] usb 3-1: USB disconnect, device number 9 [ 450.061159][ T9230] netlink: 'syz.5.795': attribute type 1 has an invalid length. [ 451.149118][ T9237] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 451.224720][ T9242] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 451.427046][ T9237] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 455.376890][ T10] libceph: connect (1)[c::]:6789 error -101 [ 455.456544][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 455.623526][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 455.976110][ T9296] ceph: No mds server is up or the cluster is laggy [ 456.116856][ T10] libceph: connect (1)[c::]:6789 error -101 [ 456.908152][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 457.587935][ T9315] vivid-007: ================= START STATUS ================= [ 457.637751][ T9315] vivid-007: Enable Output Cropping: true [ 457.649229][ T9315] vivid-007: Enable Output Composing: true [ 457.655149][ T9315] vivid-007: Enable Output Scaler: true [ 457.662575][ T9315] vivid-007: Tx RGB Quantization Range: Automatic [ 457.670347][ T9315] vivid-007: Transmit Mode: HDMI [ 457.676482][ T9315] vivid-007: Hotplug Present: 0x00000000 [ 457.687035][ T9315] vivid-007: RxSense Present: 0x00000000 [ 457.695551][ T9315] vivid-007: EDID Present: 0x00000000 [ 457.709379][ T9315] vivid-007: ================== END STATUS ================== [ 459.863674][ T9340] syzkaller0: entered promiscuous mode [ 459.869430][ T9340] syzkaller0: entered allmulticast mode [ 460.288293][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 461.326861][ T978] libceph: connect (1)[c::]:6789 error -101 [ 461.351891][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 461.425278][ T9347] ceph: No mds server is up or the cluster is laggy [ 461.650929][ T43] libceph: connect (1)[c::]:6789 error -101 [ 461.657402][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 465.450476][ T9394] vivid-007: ================= START STATUS ================= [ 465.459643][ T9394] vivid-007: Enable Output Cropping: true [ 465.465637][ T9394] vivid-007: Enable Output Composing: true [ 465.471719][ T9394] vivid-007: Enable Output Scaler: true [ 465.477681][ T9394] vivid-007: Tx RGB Quantization Range: Automatic [ 465.489986][ T9394] vivid-007: Transmit Mode: HDMI [ 465.495266][ T9394] vivid-007: Hotplug Present: 0x00000000 [ 465.562116][ T9394] vivid-007: RxSense Present: 0x00000000 [ 465.569397][ T9394] vivid-007: EDID Present: 0x00000000 [ 465.575093][ T9394] vivid-007: ================== END STATUS ================== [ 466.885797][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 466.892141][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 467.312657][ T9396] ceph: No mds server is up or the cluster is laggy [ 467.430148][ T43] libceph: connect (1)[c::]:6789 error -101 [ 467.545651][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 468.148715][ T9412] binder: 9410:9412 ioctl c0046209 0 returned -22 [ 469.361793][ T9417] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 474.384671][ T9450] vivid-007: ================= START STATUS ================= [ 474.428663][ T9450] vivid-007: Enable Output Cropping: true [ 474.434952][ T9450] vivid-007: Enable Output Composing: true [ 474.441044][ T9450] vivid-007: Enable Output Scaler: true [ 474.448406][ T9450] vivid-007: Tx RGB Quantization Range: Automatic [ 474.457721][ T9450] vivid-007: Transmit Mode: HDMI [ 474.463033][ T9450] vivid-007: Hotplug Present: 0x00000000 [ 474.468899][ T9450] vivid-007: RxSense Present: 0x00000000 [ 474.622321][ T9450] vivid-007: EDID Present: 0x00000000 [ 474.633364][ T9450] vivid-007: ================== END STATUS ================== [ 477.709151][ T9489] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 479.486521][ T9515] vivid-007: ================= START STATUS ================= [ 479.503802][ T9515] vivid-007: Enable Output Cropping: true [ 479.509723][ T9515] vivid-007: Enable Output Composing: true [ 479.516085][ T9515] vivid-007: Enable Output Scaler: true [ 479.521810][ T9515] vivid-007: Tx RGB Quantization Range: Automatic [ 479.528517][ T9515] vivid-007: Transmit Mode: HDMI [ 479.533700][ T9515] vivid-007: Hotplug Present: 0x00000000 [ 479.554198][ T9515] vivid-007: RxSense Present: 0x00000000 [ 479.560209][ T9515] vivid-007: EDID Present: 0x00000000 [ 479.565896][ T9515] vivid-007: ================== END STATUS ================== [ 480.920851][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.6.870'. [ 481.850265][ T9534] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 482.050348][ T9538] warning: `syz.2.872' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 482.164355][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 484.555620][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.882'. [ 484.615881][ T9565] vivid-007: ================= START STATUS ================= [ 484.623824][ T9565] vivid-007: Enable Output Cropping: true [ 484.629819][ T9565] vivid-007: Enable Output Composing: true [ 484.637860][ T9565] vivid-007: Enable Output Scaler: true [ 484.644150][ T9565] vivid-007: Tx RGB Quantization Range: Automatic [ 484.651334][ T9565] vivid-007: Transmit Mode: HDMI [ 484.657198][ T9565] vivid-007: Hotplug Present: 0x00000000 [ 484.663543][ T9565] vivid-007: RxSense Present: 0x00000000 [ 484.684286][ T9565] vivid-007: EDID Present: 0x00000000 [ 484.690059][ T9565] vivid-007: ================== END STATUS ================== [ 485.494441][ T9577] fuse: Bad value for 'fd' [ 488.239394][ T8848] libceph: connect (1)[c::]:6789 error -101 [ 488.280163][ T9604] ceph: No mds server is up or the cluster is laggy [ 488.301370][ T8848] libceph: mon0 (1)[c::]:6789 connect error [ 489.369267][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 489.435231][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 489.773357][ T9616] ceph: No mds server is up or the cluster is laggy [ 489.965359][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.7.897'. [ 491.826735][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.7.901'. [ 491.911095][ T9643] lo speed is unknown, defaulting to 1000 [ 496.196083][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.7.915'. [ 497.022126][ T9706] netlink: 108 bytes leftover after parsing attributes in process `syz.2.918'. [ 499.352939][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 501.253365][ T9745] vivid-007: ================= START STATUS ================= [ 501.261611][ T9745] vivid-007: Enable Output Cropping: true [ 501.268010][ T9745] vivid-007: Enable Output Composing: true [ 501.274111][ T9745] vivid-007: Enable Output Scaler: true [ 501.280001][ T9745] vivid-007: Tx RGB Quantization Range: Automatic [ 501.286784][ T9745] vivid-007: Transmit Mode: HDMI [ 501.292114][ T9745] vivid-007: Hotplug Present: 0x00000000 [ 501.298069][ T9745] vivid-007: RxSense Present: 0x00000000 [ 501.304003][ T9745] vivid-007: EDID Present: 0x00000000 [ 501.309618][ T9745] vivid-007: ================== END STATUS ================== [ 503.116606][ T9761] netlink: 108 bytes leftover after parsing attributes in process `syz.5.934'. [ 503.699374][ T9764] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 504.343679][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'. [ 504.607065][ T9] kernel write not supported for file /vcsa1 (pid: 9 comm: kworker/0:0) [ 506.389199][ T9802] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 506.461746][ T9802] gretap1: entered promiscuous mode [ 506.523036][ T9792] ceph: No mds server is up or the cluster is laggy [ 506.532036][ T43] libceph: connect (1)[c::]:6789 error -101 [ 506.532208][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 506.987528][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.021789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.370145][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.7.955'. [ 508.437254][ T9832] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 509.535020][ T9840] netlink: 'syz.6.959': attribute type 1 has an invalid length. [ 515.654115][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 516.193306][ T5943] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 517.202587][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 517.226448][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 517.272531][ T5943] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 517.354796][ T5943] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 517.372549][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 517.390964][ T5943] usb 7-1: Product: syz [ 517.401073][ T5943] usb 7-1: Manufacturer: syz [ 517.411433][ T5943] usb 7-1: SerialNumber: syz [ 517.433642][ T5943] usb 7-1: config 0 descriptor?? [ 517.921537][ T9888] tmpfs: Unknown parameter 'gNCH ?HrpquaZota_block_har' [ 519.851020][ T5967] usb 7-1: USB disconnect, device number 7 [ 524.663948][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 524.843422][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 526.812839][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 527.463032][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 527.504104][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 527.515441][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 527.622823][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 527.657330][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 527.670374][ T10] usb 3-1: Product: syz [ 527.696816][ T10] usb 3-1: Manufacturer: syz [ 527.709705][ T10] usb 3-1: SerialNumber: syz [ 527.855386][ T10] usb 3-1: config 0 descriptor?? [ 528.734624][ T5944] usb 3-1: USB disconnect, device number 10 [ 529.818833][ T9987] lo speed is unknown, defaulting to 1000 [ 530.700138][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 530.706427][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 531.464673][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 531.490372][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 531.682841][T10000] ceph: No mds server is up or the cluster is laggy [ 532.015067][ T5967] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 532.220030][ T5967] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 533.826271][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 535.372510][ T5967] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 535.612679][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 535.839233][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 535.849179][ T5967] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 535.883476][ T5967] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 535.902510][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 535.910832][ T5967] usb 7-1: Product: syz [ 535.919756][ T5967] usb 7-1: Manufacturer: syz [ 535.931304][ T5967] usb 7-1: SerialNumber: syz [ 535.994506][ T5967] usb 7-1: config 0 descriptor?? [ 536.064665][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 536.415572][ T5932] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 536.451455][ T5932] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 537.329955][T10076] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 537.471200][ T5932] usb 7-1: USB disconnect, device number 8 [ 537.863669][T10080] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.925101][T10080] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 10080, name: syz.7.1025 [ 537.982302][T10080] preempt_count: 0, expected: 0 [ 537.994736][T10080] RCU nest depth: 1, expected: 0 [ 538.204144][T10080] 2 locks held by syz.7.1025/10080: [ 538.209489][T10080] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 538.219963][T10080] #1: ffff8880797ea448 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 538.229589][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.7.1025 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 538.229640][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.229667][T10080] Call Trace: [ 538.229676][T10080] [ 538.229687][T10080] dump_stack_lvl+0x189/0x250 [ 538.229722][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.229756][T10080] ? print_lock_name+0xde/0x100 [ 538.229794][T10080] __might_resched+0x495/0x610 [ 538.229823][T10080] ? __pfx___might_resched+0x10/0x10 [ 538.229851][T10080] ? vma_start_read+0x218/0x3b0 [ 538.229879][T10080] ? vma_start_read+0x259/0x3b0 [ 538.229911][T10080] ? __filemap_get_folio+0x9a6/0xaf0 [ 538.229947][T10080] down_read+0x22/0x2e0 [ 538.229983][T10080] freader_get_folio+0x38b/0x830 [ 538.230073][T10080] freader_fetch+0xa3/0x5d0 [ 538.230115][T10080] __build_id_parse+0x133/0x7d0 [ 538.230147][T10080] ? __pfx___build_id_parse+0x10/0x10 [ 538.230181][T10080] ? query_matching_vma+0x494/0x4b0 [ 538.230235][T10080] procfs_procmap_ioctl+0x7dd/0xce0 [ 538.230272][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 538.230315][T10080] ? __fget_files+0x2a/0x420 [ 538.230348][T10080] ? __fget_files+0x2a/0x420 [ 538.230375][T10080] ? __fget_files+0x3a0/0x420 [ 538.230404][T10080] ? __fget_files+0x2a/0x420 [ 538.230437][T10080] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.230461][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 538.230491][T10080] __se_sys_ioctl+0xf9/0x170 [ 538.230517][T10080] do_syscall_64+0xfa/0x3b0 [ 538.230546][T10080] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.230573][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.230595][T10080] ? clear_bhb_loop+0x60/0xb0 [ 538.230622][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.230649][T10080] RIP: 0033:0x7f9cc638e929 [ 538.230674][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.230694][T10080] RSP: 002b:00007f9cc7121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.230717][T10080] RAX: ffffffffffffffda RBX: 00007f9cc65b5fa0 RCX: 00007f9cc638e929 [ 538.230733][T10080] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 538.230748][T10080] RBP: 00007f9cc6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 538.230762][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.230776][T10080] R13: 0000000000000000 R14: 00007f9cc65b5fa0 R15: 00007fff7c41fde8 [ 538.230809][T10080] [ 538.230822][T10080] [ 538.475497][T10080] ============================= [ 538.480341][T10080] [ BUG: Invalid wait context ] [ 538.485183][T10080] 6.16.0-rc4-next-20250704-syzkaller #0 Tainted: G W [ 538.493341][T10080] ----------------------------- [ 538.498179][T10080] syz.7.1025/10080 is trying to lock: [ 538.503542][T10080] ffff888022e6d9c0 (mapping.invalidate_lock){++++}-{4:4}, at: freader_get_folio+0x38b/0x830 [ 538.513641][T10080] other info that might help us debug this: [ 538.519525][T10080] context-{5:5} [ 538.522980][T10080] 2 locks held by syz.7.1025/10080: [ 538.528259][T10080] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 538.537674][T10080] #1: ffff8880797ea448 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 538.546476][T10080] stack backtrace: [ 538.550198][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.7.1025 Tainted: G W 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 538.550224][T10080] Tainted: [W]=WARN [ 538.550231][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.550256][T10080] Call Trace: [ 538.550264][T10080] [ 538.550285][T10080] dump_stack_lvl+0x189/0x250 [ 538.550308][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.550328][T10080] ? __pfx__printk+0x10/0x10 [ 538.550357][T10080] __lock_acquire+0xbcb/0xd20 [ 538.550386][T10080] ? freader_get_folio+0x38b/0x830 [ 538.550408][T10080] lock_acquire+0x120/0x360 [ 538.550433][T10080] ? freader_get_folio+0x38b/0x830 [ 538.550455][T10080] ? vma_start_read+0x218/0x3b0 [ 538.550476][T10080] ? vma_start_read+0x259/0x3b0 [ 538.550500][T10080] down_read+0x46/0x2e0 [ 538.550525][T10080] ? freader_get_folio+0x38b/0x830 [ 538.550546][T10080] freader_get_folio+0x38b/0x830 [ 538.550570][T10080] freader_fetch+0xa3/0x5d0 [ 538.550594][T10080] __build_id_parse+0x133/0x7d0 [ 538.550616][T10080] ? __pfx___build_id_parse+0x10/0x10 [ 538.550639][T10080] ? query_matching_vma+0x494/0x4b0 [ 538.550670][T10080] procfs_procmap_ioctl+0x7dd/0xce0 [ 538.550696][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 538.550722][T10080] ? __fget_files+0x2a/0x420 [ 538.550745][T10080] ? __fget_files+0x2a/0x420 [ 538.550767][T10080] ? __fget_files+0x3a0/0x420 [ 538.550788][T10080] ? __fget_files+0x2a/0x420 [ 538.550811][T10080] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.550828][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 538.550851][T10080] __se_sys_ioctl+0xf9/0x170 [ 538.550868][T10080] do_syscall_64+0xfa/0x3b0 [ 538.550891][T10080] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.550913][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.550944][T10080] ? clear_bhb_loop+0x60/0xb0 [ 538.550961][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.550976][T10080] RIP: 0033:0x7f9cc638e929 [ 538.550991][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.551007][T10080] RSP: 002b:00007f9cc7121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.551023][T10080] RAX: ffffffffffffffda RBX: 00007f9cc65b5fa0 RCX: 00007f9cc638e929 [ 538.551035][T10080] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 538.551046][T10080] RBP: 00007f9cc6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 538.551056][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.551066][T10080] R13: 0000000000000000 R14: 00007f9cc65b5fa0 R15: 00007fff7c41fde8 [ 538.551083][T10080] [ 539.305722][T10080] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 539.315455][T10080] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 10080, name: syz.7.1025 [ 539.324969][T10080] preempt_count: 0, expected: 0 [ 539.329853][T10080] RCU nest depth: 1, expected: 0 [ 539.335174][T10080] INFO: lockdep is turned off. [ 539.340000][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.7.1025 Tainted: G W 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 539.340035][T10080] Tainted: [W]=WARN [ 539.340042][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.340057][T10080] Call Trace: [ 539.340065][T10080] [ 539.340074][T10080] dump_stack_lvl+0x189/0x250 [ 539.340107][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.340133][T10080] ? __pfx__printk+0x10/0x10 [ 539.340162][T10080] ? rcu_is_watching+0x15/0xb0 [ 539.340187][T10080] ? rcu_is_watching+0x15/0xb0 [ 539.340211][T10080] __might_resched+0x495/0x610 [ 539.340235][T10080] ? down_read+0x54/0x2e0 [ 539.340268][T10080] ? __pfx___might_resched+0x10/0x10 [ 539.340291][T10080] ? lock_acquire+0x5f/0x360 [ 539.340324][T10080] ? rcu_is_watching+0x15/0xb0 [ 539.340347][T10080] ? fs_reclaim_acquire+0x7d/0x100 [ 539.340382][T10080] prepare_alloc_pages+0x1d9/0x610 [ 539.340418][T10080] __alloc_frozen_pages_noprof+0x123/0x370 [ 539.340453][T10080] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.340492][T10080] ? filemap_get_entry+0xad/0x2f0 [ 539.340525][T10080] alloc_pages_mpol+0x232/0x4a0 [ 539.340557][T10080] alloc_pages_noprof+0xa9/0x190 [ 539.340586][T10080] folio_alloc_noprof+0x1e/0x30 [ 539.340614][T10080] filemap_alloc_folio_noprof+0xdf/0x470 [ 539.340647][T10080] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 539.340680][T10080] ? __filemap_get_folio+0x9a6/0xaf0 [ 539.340713][T10080] ? vma_start_read+0x218/0x3b0 [ 539.340744][T10080] do_read_cache_folio+0x2da/0x590 [ 539.340765][T10080] ? __pfx_blkdev_read_folio+0x10/0x10 [ 539.340792][T10080] freader_get_folio+0x3c4/0x830 [ 539.340824][T10080] freader_fetch+0xa3/0x5d0 [ 539.340857][T10080] __build_id_parse+0x133/0x7d0 [ 539.340885][T10080] ? __pfx___build_id_parse+0x10/0x10 [ 539.340915][T10080] ? query_matching_vma+0x494/0x4b0 [ 539.340953][T10080] procfs_procmap_ioctl+0x7dd/0xce0 [ 539.340998][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 539.341035][T10080] ? __fget_files+0x2a/0x420 [ 539.341066][T10080] ? __fget_files+0x2a/0x420 [ 539.341095][T10080] ? __fget_files+0x3a0/0x420 [ 539.341124][T10080] ? __fget_files+0x2a/0x420 [ 539.341155][T10080] ? bpf_lsm_file_ioctl+0x9/0x20 [ 539.341179][T10080] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 539.341210][T10080] __se_sys_ioctl+0xf9/0x170 [ 539.341235][T10080] do_syscall_64+0xfa/0x3b0 [ 539.341266][T10080] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.341296][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.341318][T10080] ? clear_bhb_loop+0x60/0xb0 [ 539.341343][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.341365][T10080] RIP: 0033:0x7f9cc638e929 [ 539.341385][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.341405][T10080] RSP: 002b:00007f9cc7121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.341429][T10080] RAX: ffffffffffffffda RBX: 00007f9cc65b5fa0 RCX: 00007f9cc638e929 [ 539.341446][T10080] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 539.341460][T10080] RBP: 00007f9cc6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 539.341475][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.341488][T10080] R13: 0000000000000000 R14: 00007f9cc65b5fa0 R15: 00007fff7c41fde8 [ 539.341513][T10080] [ 540.070598][ T3497] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.228545][ T3497] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.288167][ T3497] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.357238][ T3497] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.427179][ T3497] bridge_slave_1: left allmulticast mode [ 540.432909][ T3497] bridge_slave_1: left promiscuous mode [ 540.438730][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.447517][ T3497] bridge_slave_0: left allmulticast mode [ 540.453219][ T3497] bridge_slave_0: left promiscuous mode [ 540.458894][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.531852][ T3497] bond1 (unregistering): (slave gretap1): Releasing active interface [ 540.659227][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.669348][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.679880][ T3497] bond0 (unregistering): Released all slaves [ 540.690413][ T3497] bond1 (unregistering): Released all slaves [ 540.700299][ T3497] bond2 (unregistering): Released all slaves [ 540.710131][ T3497] bond3 (unregistering): Released all slaves [ 540.793412][ T3497] IPVS: stopping master sync thread 8338 ... [ 540.913350][ T3497] hsr_slave_0: left promiscuous mode [ 540.919156][ T3497] hsr_slave_1: left promiscuous mode [ 540.926620][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.935780][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.943521][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.955373][ T3497] veth1_macvtap: left promiscuous mode [ 540.960937][ T3497] veth0_macvtap: left promiscuous mode [ 540.966722][ T3497] veth1_vlan: left promiscuous mode [ 540.972003][ T3497] veth0_vlan: left promiscuous mode [ 541.137807][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 541.154091][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 541.521204][ T3497] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.597039][ T3497] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.657545][ T3497] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.707780][ T3497] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.775574][ T3497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.807931][ T3497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.857302][ T3497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.907380][ T3497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.977237][ T3497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.017206][ T3497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.077471][ T3497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.127401][ T3497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.184518][ T3497] bridge_slave_1: left allmulticast mode [ 542.190172][ T3497] bridge_slave_1: left promiscuous mode [ 542.195985][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.204934][ T3497] bridge_slave_0: left allmulticast mode [ 542.210608][ T3497] bridge_slave_0: left promiscuous mode [ 542.217180][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.226508][ T3497] bridge_slave_1: left allmulticast mode [ 542.232155][ T3497] bridge_slave_1: left promiscuous mode [ 542.238107][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.246552][ T3497] bridge_slave_0: left allmulticast mode [ 542.252209][ T3497] bridge_slave_0: left promiscuous mode [ 542.258029][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.269396][ T3497] bridge_slave_1: left allmulticast mode [ 542.275189][ T3497] bridge_slave_1: left promiscuous mode [ 542.280856][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.289282][ T3497] bridge_slave_0: left allmulticast mode [ 542.294991][ T3497] bridge_slave_0: left promiscuous mode [ 542.300649][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.418684][ T3497] bond1 (unregistering): (slave gretap1): Releasing active interface [ 542.477762][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.487860][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.497393][ T3497] bond0 (unregistering): Released all slaves [ 542.508066][ T3497] bond1 (unregistering): Released all slaves [ 542.542103][ T3497] bond1 (unregistering): (slave gretap1): Releasing active interface [ 542.602007][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.611986][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.623314][ T3497] bond0 (unregistering): Released all slaves [ 542.633499][ T3497] bond1 (unregistering): Released all slaves [ 542.643304][ T3497] bond2 (unregistering): Released all slaves [ 542.654855][ T3497] bond3 (unregistering): Released all slaves [ 542.709037][ T3497] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 542.787886][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.798305][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.810610][ T3497] bond0 (unregistering): Released all slaves [ 542.820246][ T3497] bond1 (unregistering): Released all slaves [ 542.831960][ T3497] bond2 (unregistering): Released all slaves [ 542.845248][ T3497] bond3 (unregistering): Released all slaves [ 542.857030][ T3497] bond4 (unregistering): Released all slaves [ 542.966040][ T3497] IPVS: stopping master sync thread 7253 ... [ 542.972208][ T3497] IPVS: stopping master sync thread 7327 ... [ 542.978658][ T3497] IPVS: stopping master sync thread 7512 ... [ 543.323840][ T3497] hsr_slave_0: left promiscuous mode [ 543.329660][ T3497] hsr_slave_1: left promiscuous mode [ 543.336462][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.343937][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.351592][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.359303][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.369708][ T3497] hsr_slave_0: left promiscuous mode [ 543.376277][ T3497] hsr_slave_1: left promiscuous mode [ 543.381934][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.390981][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.399080][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.406666][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.416812][ T3497] hsr_slave_0: left promiscuous mode [ 543.425576][ T3497] hsr_slave_1: left promiscuous mode [ 543.431238][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.438996][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.447017][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.454519][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.469852][ T3497] veth1_macvtap: left promiscuous mode [ 543.475530][ T3497] veth0_macvtap: left promiscuous mode [ 543.481100][ T3497] veth1_vlan: left promiscuous mode [ 543.486431][ T3497] veth0_vlan: left promiscuous mode [ 543.492550][ T3497] veth1_macvtap: left promiscuous mode [ 543.498072][ T3497] veth0_macvtap: left promiscuous mode [ 543.504104][ T3497] veth1_vlan: left promiscuous mode [ 543.509354][ T3497] veth0_vlan: left promiscuous mode [ 543.515566][ T3497] veth1_macvtap: left promiscuous mode [ 543.521079][ T3497] veth0_macvtap: left promiscuous mode [ 543.526713][ T3497] veth1_vlan: left promiscuous mode [ 543.531987][ T3497] veth0_vlan: left promiscuous mode [ 543.782017][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 543.806558][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 543.985194][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 544.009419][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 544.197665][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 544.222030][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 544.315021][ T9] lo speed is unknown, defaulting to 1000 [ 544.320802][ T9] infiniband syz0: ib_query_port failed (-19) [ 545.036984][ T3497] IPVS: stop unused estimator thread 0...