last executing test programs: 19m25.022144912s ago: executing program 3 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m21.331709179s ago: executing program 3 (id=42): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980916, 0x3ff, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x24, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 19m20.23348548s ago: executing program 3 (id=47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40048d0}, 0x20040811) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1a0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b", 0x2f}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 19m16.801716704s ago: executing program 3 (id=54): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 19m14.256692037s ago: executing program 3 (id=56): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) 19m13.904140475s ago: executing program 3 (id=59): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="d5", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000280)='a', 0x1, 0x5}]) r7 = timerfd_create(0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r8) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000400)={0x60, r9, 0x200, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x24008800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 18m58.128864325s ago: executing program 32 (id=59): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="d5", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000280)='a', 0x1, 0x5}]) r7 = timerfd_create(0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r8) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000400)={0x60, r9, 0x200, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x24008800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 17m32.027300295s ago: executing program 4 (id=254): memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8\x9e\x95\xdfa\xd5\xafA)t\x7fV\xf9\xe1\xe7\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15H\x84\xb8\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xfd\xff\xff\xff\xff\xff\xff\xff\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xe7\xc0\xe6v\xb5\xf5\x9d\x90W\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb-\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z\x00\xf8/\xcf\xc2\xb0\r\xde\xa3\x8aw\xf1C\x94\xb6\xf7\xde\"\xbe\xffk|\xaa\x0ez9f\b\xa9\f\xedW\xafe07\x1fP\xe0\x98\n\x93;\xea\x9b\x8c\x0f\x9d\x1a$\xe0\xa4\xd7\xc2\xe5b\xe29\xa8\xba\xc4)_\x99\xb6\xd8\xd5\xd9\x9c\xb5,]n\xeba\xbf\xc3!\x88X\x9a\xd9\x8b\xdcRF\x86\x87[\xb9\xb1\x04m\xf1Q9\x10)fZV\xd7N\xa5\x91\xa0\x12.H^\tH\xe5\x1f\x9b\x06\xad\xb8\xf2\x004G\r\xa8a\a\xf2\xbd\xa9\xd1\xe2\xd72!O\xe7C\xbb\xaawzn$\x11j\t\xc1c\xf2\xf2~\xa1@\xf60e`\x17)X\xc8(\x1b\xafJ*\xec\x16_\xcc\xbe\x85\xc4\xa4\x88\x00d\xaf!\xdd\x9e\x84W\xba\xd2\x7f;\x12\r\x01\f\x9b\xc7*.\xd84Ce).\xd7[\xdd\x87F\x19\x15\x84\x0eU\xa4P\xbdgf\xca\x8e\xa0\xc1\x04\xaf\xacj\xd9\xffQ', 0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x22) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x10, 0x7, 0x8, 0x1020, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xd}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, 0x0, 0x24004010) get_mempolicy(&(0x7f0000000200), &(0x7f00000002c0), 0x1, &(0x7f00007c1000/0x1000)=nil, 0x4) creat(&(0x7f0000000380)='./file2/file0\x00', 0x143) 17m29.42461609s ago: executing program 4 (id=259): dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(0xffffffffffffffff) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000000, 0xfffffffe, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 17m26.29854155s ago: executing program 4 (id=263): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000940)={0x14, &(0x7f00000008c0)={0x40, 0xd, 0x2, {0x2, 0x30}}, 0x0}, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0xc9175137fb647327, 0xa}, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0xa0, 0x4, 0x7}, 0x0}) 17m20.72028317s ago: executing program 4 (id=275): sched_setscheduler(0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) pipe(&(0x7f00000002c0)) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0) 17m20.362526991s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0xda8d) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x5, 0xb1, 0x8, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) 17m18.215153354s ago: executing program 4 (id=284): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x6, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0xfffffffc, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x1000, 0x3, 0x1, 0x4f, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x10000001, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x1000000, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x6, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x1ff, 0x20005, 0xc5, 0x6, 0x1, 0x21, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x20000007, 0x80000007], [0x0, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0x200000b, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0x40, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x100, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x200b, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x33b5, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x1104, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7fe, 0x80, 0x8005, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup(r3) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8, 0x9, @vifc_lcl_addr=@multicast2, @local}, 0x10) 17m0.89219187s ago: executing program 33 (id=284): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x6, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0xfffffffc, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x1000, 0x3, 0x1, 0x4f, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x10000001, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x1000000, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x6, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x1ff, 0x20005, 0xc5, 0x6, 0x1, 0x21, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x20000007, 0x80000007], [0x0, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0x200000b, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0x40, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x100, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x200b, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x33b5, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x1104, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7fe, 0x80, 0x8005, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup(r3) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8, 0x9, @vifc_lcl_addr=@multicast2, @local}, 0x10) 13m34.772433544s ago: executing program 1 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) setitimer(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) 13m33.161239268s ago: executing program 1 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000780e48d0c95281eb4bfe6ab8d4f86b00"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000800)={0x5, 0x1, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/216, 0xd8}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x4000000000000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 13m32.233945638s ago: executing program 1 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 13m30.786771702s ago: executing program 1 (id=821): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 13m25.310928274s ago: executing program 1 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x2800000, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=0x0], 0xfd, 0x5b45, &(0x7f0000005e00)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 13m24.164311542s ago: executing program 1 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x800000, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) 13m7.988945919s ago: executing program 34 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x800000, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) 11m11.483246807s ago: executing program 7 (id=1079): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r5, 0xbffff000, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x2020100, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m8.310153367s ago: executing program 7 (id=1083): io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0c", 0x4b, 0x2251197285d36a80, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x8201, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577bcb0b18b55a35f3520747275737465643a73797a20303030303030303030303030303030303430393600"], 0x2d, 0xfffffffffffffff9) 11m6.030380479s ago: executing program 7 (id=1088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 10m56.97038372s ago: executing program 7 (id=1101): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) eventfd2(0x3, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(r0) 10m54.329510835s ago: executing program 7 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x2800000, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=0x0], 0xfd, 0x5b45, &(0x7f0000005e00)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 10m50.316882028s ago: executing program 7 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='afs_receive_data\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) 10m34.740134942s ago: executing program 35 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='afs_receive_data\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) 6m29.641660982s ago: executing program 5 (id=1630): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x80405600, &(0x7f00000000c0)={0x3, 0x980900}) 6m29.230585286s ago: executing program 5 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="10098a893c0bddac1fd68e8d75842f7b6ce3a171255b0917b8c63a03ebd03a6b3ccb8a2b11c02062e6b40fe8140a45587f18b9bd1678427ca30b67dd5396712528d0c64da8ef5de1a40467e6d520d5b2507ba2", 0x53}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc0d5}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6m27.954445024s ago: executing program 5 (id=1635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) creat(0x0, 0xd931d3864d39ddd8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x60) ptrace$pokeuser(0x6, r6, 0x2, 0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000001300)={'nr0\x00'}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)}, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r0}) 6m26.520306842s ago: executing program 5 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 6m25.618560573s ago: executing program 5 (id=1640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "f4f03b020000000002000711"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m24.75644287s ago: executing program 5 (id=1642): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000001780)={0x4, 0x8000000000000001, 0x6, 0x1, 0x5, 0x1, 0x3, 0xfbad}, &(0x7f00000017c0)={0xf, 0x7, 0x8001, 0x8000000000000000, 0x1, 0xcc22, 0x4, 0x2}, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x1811) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_open_dev$sndmidi(0x0, 0x1000, 0x400) socket(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, 0x0, &(0x7f00000004c0)) 6m9.481209189s ago: executing program 36 (id=1642): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000001780)={0x4, 0x8000000000000001, 0x6, 0x1, 0x5, 0x1, 0x3, 0xfbad}, &(0x7f00000017c0)={0xf, 0x7, 0x8001, 0x8000000000000000, 0x1, 0xcc22, 0x4, 0x2}, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x1811) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_open_dev$sndmidi(0x0, 0x1000, 0x400) socket(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, 0x0, &(0x7f00000004c0)) 21.536677441s ago: executing program 2 (id=2317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)}}], 0x3, 0x0, 0x0) 20.420610853s ago: executing program 2 (id=2318): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r3, 0x101, 0x70bc2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 19.702819842s ago: executing program 2 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) 18.259950185s ago: executing program 2 (id=2323): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/file0\x00', 0x6cc01, 0x10) 16.378738781s ago: executing program 2 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 14.182676827s ago: executing program 2 (id=2331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x2004c004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain) setpriority(0x1, 0xffffffffffffffff, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x5381b25) 12.93525056s ago: executing program 37 (id=2331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x2004c004) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain) setpriority(0x1, 0xffffffffffffffff, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x5381b25) 9.498991166s ago: executing program 6 (id=2338): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(0x0, 0xd931d3864d39ddd8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$pokeuser(0x6, r5, 0x2, 0x1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f0000001300)={'nr0\x00'}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) 8.313671082s ago: executing program 8 (id=2341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 8.2869991s ago: executing program 6 (id=2342): mount(0x0, 0x0, 0x0, 0x201000c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs$pagemap(0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) getpid() fcntl$notify(r4, 0x402, 0x17) fcntl$notify(r4, 0x402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x26c8, 0xe00, 0x1, 0x0, 0x10) 6.849243201s ago: executing program 8 (id=2346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="10098a893c0bddac1fd68e8d75842f7b6ce3a171255b0917b8c63a03ebd03a6b3ccb8a2b11c02062e6b40fe8140a45587f18b9bd1678427ca30b67dd5396712528d0c64da8ef5de1a40467e6d520d5b2507ba2", 0x53}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc0d5}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.201206814s ago: executing program 0 (id=2348): r0 = openat(0xffffffffffffffff, 0x0, 0x281c2, 0x1b0) fcntl$setlease(r0, 0x400, 0x1) r1 = open(0x0, 0xa2801, 0x30) mkdirat(r1, 0x0, 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x8}}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB]) 4.440625019s ago: executing program 0 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) close(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x40005) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 4.439744344s ago: executing program 8 (id=2350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)}}], 0x3, 0x0, 0x0) 4.437864608s ago: executing program 6 (id=2351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) creat(0x0, 0xd931d3864d39ddd8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x60) ptrace$pokeuser(0x6, r6, 0x2, 0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000001300)={'nr0\x00'}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)}, 0x800) r9 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r9, r0}) 4.259980896s ago: executing program 0 (id=2352): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000001030000000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000000028005000100"/79], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) shmctl$IPC_RMID(r5, 0x0) 3.221055555s ago: executing program 8 (id=2353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) 2.990469675s ago: executing program 6 (id=2354): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, 0x0, 0x48004) bpf$MAP_CREATE(0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./cgroup/../file0\x00') r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x88600, 0x0) 2.901123804s ago: executing program 0 (id=2355): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 2.018494095s ago: executing program 6 (id=2356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x8e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) 1.91860574s ago: executing program 8 (id=2357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 1.195253331s ago: executing program 0 (id=2358): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000980)={0x0, 0x5}, &(0x7f00000009c0)=0x8) 764.461808ms ago: executing program 8 (id=2359): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0x80, &(0x7f00000001c0)}, 0x12001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x3, 0x0, 0x800000, 0x100, 0x2, 0x1, 0x1, 0xfffffffe, 0x4, 0xe1cb, 0x0, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xfff, 0x3c, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) read$FUSE(r0, &(0x7f0000003e40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f00000006c0)={0x28, 0x0, r4, {{0x9, 0x101, 0x2}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 133.451409ms ago: executing program 6 (id=2360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="10098a893c0bddac1fd68e8d75842f7b6ce3a171255b0917b8c63a03ebd03a6b3ccb8a2b11c02062e6b40fe8140a45587f18b9bd1678427ca30b67dd5396712528d0c64da8ef5de1a40467e6d520d5b2507ba2", 0x53}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc0d5}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 0 (id=2361): mount(0x0, 0x0, 0x0, 0x201000c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs$pagemap(0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) getpid() fcntl$notify(r4, 0x402, 0x17) fcntl$notify(r4, 0x402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x26c8, 0xe00, 0x1, 0x0, 0x10) kernel console output (not intermixed with test programs): out [ 857.955234][T12356] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 857.995124][ T5883] Bluetooth: hci1: command tx timeout [ 858.617436][T12356] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 858.631465][T12356] usb 3-1: config 0 has no interface number 0 [ 858.659794][T12356] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 858.675885][T12356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.684464][T12356] usb 3-1: Product: syz [ 858.688964][T12356] usb 3-1: Manufacturer: syz [ 858.694008][T12356] usb 3-1: SerialNumber: syz [ 858.726882][T12356] usb 3-1: config 0 descriptor?? [ 858.777501][ T6463] bridge_slave_1: left allmulticast mode [ 858.783201][ T6463] bridge_slave_1: left promiscuous mode [ 858.798488][T12356] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 858.819529][T12356] usb 3-1: No valid video chain found. [ 858.837242][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.881099][ T6463] bridge_slave_0: left allmulticast mode [ 858.918067][ T6463] bridge_slave_0: left promiscuous mode [ 858.945251][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.996032][T12356] usb 3-1: USB disconnect, device number 15 [ 860.160263][ T6463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.180080][ T6463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.199257][ T6463] bond0 (unregistering): Released all slaves [ 864.210814][T12809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.835325][ T6463] hsr_slave_0: left promiscuous mode [ 864.861343][ T6463] hsr_slave_1: left promiscuous mode [ 864.940373][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.304973][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 865.305002][ T30] audit: type=1326 audit(1757302265.665:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.399829][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.430257][ T30] audit: type=1326 audit(1757302265.665:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.456319][ T30] audit: type=1326 audit(1757302265.665:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.482477][ T30] audit: type=1326 audit(1757302265.665:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.562927][ T30] audit: type=1326 audit(1757302265.665:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.602065][ T30] audit: type=1326 audit(1757302265.665:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.670942][ T30] audit: type=1326 audit(1757302265.665:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.752961][ T30] audit: type=1326 audit(1757302265.665:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.805164][ T30] audit: type=1326 audit(1757302265.665:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 865.904395][ T30] audit: type=1326 audit(1757302265.665:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 866.426424][ T6463] team0 (unregistering): Port device team_slave_1 removed [ 866.527039][ T6463] team0 (unregistering): Port device team_slave_0 removed [ 866.662755][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'. [ 866.993431][T12697] chnl_net:caif_netlink_parms(): no params data found [ 867.990374][T12477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 869.093291][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.930303][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.945218][T12697] bridge_slave_0: entered allmulticast mode [ 869.953144][T12697] bridge_slave_0: entered promiscuous mode [ 869.967483][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.974594][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.094049][T12697] bridge_slave_1: entered allmulticast mode [ 870.159157][T12697] bridge_slave_1: entered promiscuous mode [ 870.236030][T12477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 870.971738][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.989622][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.011171][T12477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 871.175781][T12477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 871.848044][T12697] team0: Port device team_slave_0 added [ 872.337442][T12697] team0: Port device team_slave_1 added [ 872.607457][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.668624][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.871038][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.036505][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.075079][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.157585][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.519606][T12697] hsr_slave_0: entered promiscuous mode [ 873.538610][T12697] hsr_slave_1: entered promiscuous mode [ 873.613017][T12697] debugfs: 'hsr0' already exists in 'hsr' [ 874.111798][T12697] Cannot create hsr debugfs directory [ 878.228831][T10170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.251823][T10170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.261835][T10170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.273760][T10170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.294214][T10170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 879.843573][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.395292][T10170] Bluetooth: hci3: command tx timeout [ 880.414629][T12913] lo speed is unknown, defaulting to 1000 [ 881.464404][T12697] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 881.524140][T12697] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 881.805503][T12697] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 882.211977][T12697] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 882.482856][T10170] Bluetooth: hci3: command tx timeout [ 884.562136][T10170] Bluetooth: hci3: command tx timeout [ 884.695358][ T6313] bridge_slave_1: left allmulticast mode [ 884.701061][ T6313] bridge_slave_1: left promiscuous mode [ 884.759625][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.206983][ T6313] bridge_slave_0: left allmulticast mode [ 885.213294][ T6313] bridge_slave_0: left promiscuous mode [ 885.298820][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.416003][ T6313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.608450][ T6313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.646911][T10170] Bluetooth: hci3: command tx timeout [ 886.735054][ T6313] bond0 (unregistering): Released all slaves [ 887.743729][T13022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.784050][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 888.299904][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.459293][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.573936][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.581147][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.695270][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.702452][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.876676][ T6313] hsr_slave_0: left promiscuous mode [ 888.935501][ T6313] hsr_slave_1: left promiscuous mode [ 888.950672][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.186979][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.951414][ T6313] team0 (unregistering): Port device team_slave_1 removed [ 890.125560][ T6313] team0 (unregistering): Port device team_slave_0 removed [ 893.018279][T12913] chnl_net:caif_netlink_parms(): no params data found [ 896.610500][T13081] hub 9-0:1.0: USB hub found [ 896.617206][T13081] hub 9-0:1.0: 1 port detected [ 896.974209][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.006792][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.014085][T12913] bridge_slave_0: entered allmulticast mode [ 897.085880][T12913] bridge_slave_0: entered promiscuous mode [ 897.104412][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.162730][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.247494][T12913] bridge_slave_1: entered allmulticast mode [ 897.585237][T12913] bridge_slave_1: entered promiscuous mode [ 899.323540][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.461546][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.069088][T12913] team0: Port device team_slave_0 added [ 900.134157][T12913] team0: Port device team_slave_1 added [ 900.553973][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.900808][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.948368][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.124676][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.172236][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.197213][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.314947][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.358850][T13143] fuse: Bad value for 'fd' [ 901.990037][T12913] hsr_slave_0: entered promiscuous mode [ 902.028978][T12913] hsr_slave_1: entered promiscuous mode [ 902.058321][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 902.103080][T12913] Cannot create hsr debugfs directory [ 903.780657][T12697] veth0_vlan: entered promiscuous mode [ 904.084016][T12697] veth1_vlan: entered promiscuous mode [ 904.580461][T12697] veth0_macvtap: entered promiscuous mode [ 904.774692][T12697] veth1_macvtap: entered promiscuous mode [ 904.802499][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.817363][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.088227][ T6463] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.131532][ T6463] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.208685][ T6463] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.246830][ T6463] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.904371][T12913] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 909.005811][T12913] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 909.411147][T12913] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 909.429692][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 909.440654][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 909.453582][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 909.469577][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 909.478057][T12913] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 909.487203][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 911.054011][ T3515] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.755148][ T5883] Bluetooth: hci1: command tx timeout [ 912.398763][ T3515] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.754231][ T3515] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.809019][T13254] fuse: Bad value for 'fd' [ 912.894930][T13209] lo speed is unknown, defaulting to 1000 [ 913.338070][ T3515] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.835616][ T5883] Bluetooth: hci1: command tx timeout [ 914.306678][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.347243][T13265] lo speed is unknown, defaulting to 1000 [ 915.712160][T13280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.915030][ T5883] Bluetooth: hci1: command tx timeout [ 916.832783][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.110913][ T3515] bridge_slave_1: left allmulticast mode [ 917.199033][ T3515] bridge_slave_1: left promiscuous mode [ 917.304181][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.436254][ T3515] bridge_slave_0: left allmulticast mode [ 917.486440][ T3515] bridge_slave_0: left promiscuous mode [ 917.542620][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.075657][ T5883] Bluetooth: hci1: command tx timeout [ 921.033353][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.045304][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.060701][ T3515] bond0 (unregistering): Released all slaves [ 921.388072][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.395273][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.786732][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.793970][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.560158][ T3515] hsr_slave_0: left promiscuous mode [ 923.580563][ T3515] hsr_slave_1: left promiscuous mode [ 923.611010][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.637868][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.687606][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.714568][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.467853][ T3515] veth1_macvtap: left promiscuous mode [ 924.473450][ T3515] veth0_macvtap: left promiscuous mode [ 924.505544][ T3515] veth1_vlan: left promiscuous mode [ 924.511030][ T3515] veth0_vlan: left promiscuous mode [ 926.753753][T13372] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 927.750081][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 927.803953][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 928.568842][T13369] lo speed is unknown, defaulting to 1000 [ 932.537978][T10170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.550884][T10170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.568379][T10170] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.588881][T10170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.608500][T10170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 933.101854][T13209] chnl_net:caif_netlink_parms(): no params data found [ 933.877201][T13417] lo speed is unknown, defaulting to 1000 [ 935.057517][ T5883] Bluetooth: hci5: command tx timeout [ 935.327136][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.349563][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.388866][T13209] bridge_slave_0: entered allmulticast mode [ 935.470019][T13209] bridge_slave_0: entered promiscuous mode [ 935.621198][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.657000][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.865835][T13209] bridge_slave_1: entered allmulticast mode [ 935.875097][T13209] bridge_slave_1: entered promiscuous mode [ 936.363451][T13453] overlayfs: failed to resolve './file1': -2 [ 937.125121][T10170] Bluetooth: hci5: command tx timeout [ 937.328350][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.388282][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.976387][T13209] team0: Port device team_slave_0 added [ 938.551822][ T3515] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.082296][T13209] team0: Port device team_slave_1 added [ 939.212992][T10170] Bluetooth: hci5: command tx timeout [ 939.546987][ T3515] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.665996][T12357] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 939.848767][T12357] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 939.866391][T12357] usb 1-1: config 0 has no interface number 0 [ 939.908644][T12357] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 939.951466][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.973225][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.973570][T12357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.008617][T12357] usb 1-1: Product: syz [ 940.012791][T12357] usb 1-1: Manufacturer: syz [ 940.054237][T12357] usb 1-1: SerialNumber: syz [ 940.073606][T12357] usb 1-1: config 0 descriptor?? [ 940.095851][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.181493][ T3515] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.252352][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.288201][T12357] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 940.313363][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.341454][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 940.351219][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 940.360373][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 940.369614][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 940.377466][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 940.395130][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.433113][T12357] usb 1-1: USB disconnect, device number 20 [ 940.463380][ T3515] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.665653][T13489] loop2: detected capacity change from 0 to 256 [ 940.700411][T13489] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 940.714221][T13489] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 940.783125][T13209] hsr_slave_0: entered promiscuous mode [ 940.829476][T13209] hsr_slave_1: entered promiscuous mode [ 940.865758][T13209] debugfs: 'hsr0' already exists in 'hsr' [ 940.871601][T13209] Cannot create hsr debugfs directory [ 941.184653][T13486] lo speed is unknown, defaulting to 1000 [ 941.276785][T10170] Bluetooth: hci5: command tx timeout [ 941.283306][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.401044][T10170] Bluetooth: hci3: command tx timeout [ 942.533062][T13513] overlayfs: failed to resolve './file1': -2 [ 943.456290][T13417] chnl_net:caif_netlink_parms(): no params data found [ 944.158308][ T3515] bridge_slave_1: left allmulticast mode [ 944.199518][ T3515] bridge_slave_1: left promiscuous mode [ 944.265207][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.315980][ T3515] bridge_slave_0: left allmulticast mode [ 944.331599][ T3515] bridge_slave_0: left promiscuous mode [ 944.352225][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.478280][T10170] Bluetooth: hci3: command tx timeout [ 946.555396][ T5883] Bluetooth: hci3: command tx timeout [ 947.401439][ T3515] bond0 (unregistering): Released all slaves [ 947.852118][ T3515] tipc: Left network mode [ 947.937104][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.947401][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.954757][T13417] bridge_slave_0: entered allmulticast mode [ 947.974200][T13417] bridge_slave_0: entered promiscuous mode [ 948.010403][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.020139][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.028733][T13417] bridge_slave_1: entered allmulticast mode [ 948.086463][T13417] bridge_slave_1: entered promiscuous mode [ 950.502214][ T5883] Bluetooth: hci3: command tx timeout [ 952.330357][T13417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.435005][T12357] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 952.528617][T13417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.608632][T12357] usb 1-1: Using ep0 maxpacket: 16 [ 952.644648][T12357] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 952.674225][T12357] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 952.709954][T12357] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 952.765067][T12357] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 952.803932][T12357] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 952.828856][T12357] usb 1-1: config 0 has no interface number 0 [ 952.867572][T12357] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 952.894945][T12357] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 952.934940][T12357] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.952132][T12357] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 952.970286][T13417] team0: Port device team_slave_0 added [ 953.185134][T12357] usb 1-1: config 0 interface 125 has no altsetting 0 [ 953.191991][T12357] usb 1-1: config 0 interface 125 has no altsetting 2 [ 953.220090][T12357] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 953.235152][T12357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.244419][T13417] team0: Port device team_slave_1 added [ 953.284810][T12357] usb 1-1: Product: syz [ 953.302627][T12357] usb 1-1: Manufacturer: syz [ 953.328288][T12357] usb 1-1: SerialNumber: syz [ 953.404606][T12357] usb 1-1: config 0 descriptor?? [ 953.497851][T12357] usb 1-1: selecting invalid altsetting 2 [ 953.803356][T13417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.835066][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.944988][T13417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.049519][ T3515] hsr_slave_0: left promiscuous mode [ 954.063471][ T3515] hsr_slave_1: left promiscuous mode [ 954.079884][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.095498][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.124186][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.132114][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.200879][ T3515] veth1_macvtap: left promiscuous mode [ 954.215254][ T3515] veth0_macvtap: left promiscuous mode [ 954.235428][ T3515] veth1_vlan: left promiscuous mode [ 954.240856][ T3515] veth0_vlan: left promiscuous mode [ 954.323979][ C1] usb 1-1: async_complete: urb error -32 [ 954.334599][T12357] get_1284_register: usb error -32 [ 954.340232][T12357] uss720 1-1:0.125: probe with driver uss720 failed with error -32 [ 954.380714][T12357] usb 1-1: USB disconnect, device number 21 [ 955.407035][T12357] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 955.565040][T12357] usb 3-1: Using ep0 maxpacket: 16 [ 955.589145][T12357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.628557][T12357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.651273][T12357] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 955.670701][T12357] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 955.680910][T12357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.726097][T12357] usb 3-1: config 0 descriptor?? [ 956.129484][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 956.163347][T12357] usbhid 3-1:0.0: can't add hid device: -71 [ 956.176240][T12357] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 956.225265][T12357] usb 3-1: USB disconnect, device number 16 [ 956.368254][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 958.544490][T13417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.560987][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.600978][T13417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.615337][T13486] chnl_net:caif_netlink_parms(): no params data found [ 960.354071][T13417] hsr_slave_0: entered promiscuous mode [ 960.394682][T13417] hsr_slave_1: entered promiscuous mode [ 962.206620][T13209] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 962.343900][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.401744][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.416297][T13486] bridge_slave_0: entered allmulticast mode [ 962.440487][T13486] bridge_slave_0: entered promiscuous mode [ 962.661422][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.685374][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.705328][T13486] bridge_slave_1: entered allmulticast mode [ 962.713461][T13486] bridge_slave_1: entered promiscuous mode [ 962.796672][T13209] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 963.370483][T13209] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 963.402450][T13209] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 963.770603][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.824555][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.846245][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 966.197093][T13486] team0: Port device team_slave_0 added [ 966.221989][ T24] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 966.233276][T13486] team0: Port device team_slave_1 added [ 966.239102][ T24] usb 7-1: config 0 has no interface number 0 [ 966.257923][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 966.284750][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.314785][ T24] usb 7-1: Product: syz [ 966.319652][ T24] usb 7-1: Manufacturer: syz [ 966.370931][ T24] usb 7-1: SerialNumber: syz [ 966.402810][ T24] usb 7-1: config 0 descriptor?? [ 966.427915][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.435761][ T24] usb 7-1: Found UVC 0.00 device syz (05ac:8501) [ 966.613220][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.842634][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.232284][ T24] usb 7-1: No valid video chain found. [ 967.246005][ T24] usb 7-1: USB disconnect, device number 24 [ 968.220714][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.245202][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.371269][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.580758][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 969.580785][ T30] audit: type=1326 audit(1757302369.895:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 969.706888][ T30] audit: type=1326 audit(1757302369.895:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 969.994988][ T30] audit: type=1326 audit(1757302369.895:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.025023][ T30] audit: type=1326 audit(1757302369.895:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.047921][ T30] audit: type=1326 audit(1757302369.895:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.071386][ T30] audit: type=1326 audit(1757302369.905:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.094456][ T30] audit: type=1326 audit(1757302369.905:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.126025][ T30] audit: type=1326 audit(1757302369.905:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.149656][ T30] audit: type=1326 audit(1757302369.905:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 970.175154][ T30] audit: type=1326 audit(1757302369.905:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 972.599877][T13732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 972.610754][T13732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 972.620425][T13732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 972.629792][T13732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 972.638603][T13732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 974.343438][T13486] hsr_slave_0: entered promiscuous mode [ 974.436217][T13486] hsr_slave_1: entered promiscuous mode [ 974.457713][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 974.483637][T13486] Cannot create hsr debugfs directory [ 974.795703][T13732] Bluetooth: hci1: command tx timeout [ 975.588025][ T5975] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 975.637366][T13730] lo speed is unknown, defaulting to 1000 [ 975.768007][ T5975] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 975.814910][ T5975] usb 3-1: config 0 has no interface number 0 [ 975.834814][ T5975] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 975.900391][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.915920][ T5975] usb 3-1: Product: syz [ 975.934925][ T5975] usb 3-1: Manufacturer: syz [ 975.939574][ T5975] usb 3-1: SerialNumber: syz [ 975.960997][ T5975] usb 3-1: config 0 descriptor?? [ 976.160017][ T5975] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 976.257689][ T5975] usb 3-1: No valid video chain found. [ 976.266702][ T6320] bridge_slave_1: left allmulticast mode [ 976.477114][ T6320] bridge_slave_1: left promiscuous mode [ 976.500979][ T5975] usb 3-1: USB disconnect, device number 17 [ 976.585507][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.647012][ T6320] bridge_slave_0: left allmulticast mode [ 976.652706][ T6320] bridge_slave_0: left promiscuous mode [ 976.686053][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.876801][T13732] Bluetooth: hci1: command tx timeout [ 977.529999][T13794] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 978.970137][T13732] Bluetooth: hci1: command tx timeout [ 980.417311][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.439366][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.460152][ T6320] bond0 (unregistering): Released all slaves [ 981.125383][T13732] Bluetooth: hci1: command tx timeout [ 981.835299][ T6320] hsr_slave_0: left promiscuous mode [ 982.455023][ T6320] hsr_slave_1: left promiscuous mode [ 982.461479][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.471328][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.286171][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 984.588875][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 984.805221][ T6059] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 985.007337][ T6059] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 985.025548][ T6059] usb 1-1: config 0 has no interface number 0 [ 985.041864][ T6059] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 985.116140][ T6059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.233832][ T6059] usb 1-1: Product: syz [ 985.283013][ T6059] usb 1-1: Manufacturer: syz [ 985.298914][ T6059] usb 1-1: SerialNumber: syz [ 985.389149][ T6059] usb 1-1: config 0 descriptor?? [ 985.553593][ T6059] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 985.608828][ T6059] usb 1-1: No valid video chain found. [ 985.754358][ T6059] usb 1-1: USB disconnect, device number 22 [ 989.779370][T13911] hub 9-0:1.0: USB hub found [ 989.789649][T13911] hub 9-0:1.0: 1 port detected [ 991.768608][T13730] chnl_net:caif_netlink_parms(): no params data found [ 992.513852][T13732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 992.708003][T13732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 992.726845][T13732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 992.770279][T13732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 992.779700][T13732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.255668][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.280083][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.492177][T13730] bridge_slave_0: entered allmulticast mode [ 993.500788][T13730] bridge_slave_0: entered promiscuous mode [ 993.517898][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.525417][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.532660][T13730] bridge_slave_1: entered allmulticast mode [ 993.541498][T13730] bridge_slave_1: entered promiscuous mode [ 994.976981][T13732] Bluetooth: hci4: command tx timeout [ 995.646774][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.694442][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.953271][T13730] team0: Port device team_slave_0 added [ 997.041875][T13732] Bluetooth: hci4: command tx timeout [ 997.047942][T13938] lo speed is unknown, defaulting to 1000 [ 997.062510][T13730] team0: Port device team_slave_1 added [ 997.524291][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.539952][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.624909][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.688510][T13486] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 997.849316][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.867515][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.308117][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.376351][T13486] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 998.949845][T13730] hsr_slave_0: entered promiscuous mode [ 998.960040][T13730] hsr_slave_1: entered promiscuous mode [ 998.970597][T13730] debugfs: 'hsr0' already exists in 'hsr' [ 998.979083][T13730] Cannot create hsr debugfs directory [ 999.081609][ T6320] bridge_slave_1: left allmulticast mode [ 999.092026][ T6320] bridge_slave_1: left promiscuous mode [ 999.098189][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.115060][T13732] Bluetooth: hci4: command tx timeout [ 999.122243][ T6320] bridge_slave_0: left allmulticast mode [ 999.128015][ T6320] bridge_slave_0: left promiscuous mode [ 999.133900][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.323481][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.419889][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.546422][ T6320] bond0 (unregistering): Released all slaves [ 1000.120244][T13989] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1001.208777][T13732] Bluetooth: hci4: command tx timeout [ 1002.246894][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1002.770297][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.920499][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1002.935756][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.045931][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.054022][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1003.888083][ T6320] hsr_slave_0: left promiscuous mode [ 1003.950052][T14011] hub 9-0:1.0: USB hub found [ 1003.964667][T14011] hub 9-0:1.0: 1 port detected [ 1004.225587][ T6320] hsr_slave_1: left promiscuous mode [ 1004.232500][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.319801][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.315075][ T5883] Bluetooth: hci3: command tx timeout [ 1006.182215][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 1006.301085][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 1007.361107][ T5883] Bluetooth: hci3: command tx timeout [ 1008.432749][T13998] lo speed is unknown, defaulting to 1000 [ 1009.167852][T12356] IPVS: starting estimator thread 0... [ 1009.255708][T14051] IPVS: using max 22 ests per chain, 52800 per kthread [ 1009.445141][ T5883] Bluetooth: hci3: command tx timeout [ 1009.730103][T13938] chnl_net:caif_netlink_parms(): no params data found [ 1010.771573][T13938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.815478][T13938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.825027][T13938] bridge_slave_0: entered allmulticast mode [ 1010.856696][T13938] bridge_slave_0: entered promiscuous mode [ 1011.019328][T13938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.034063][T13938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.075148][T13938] bridge_slave_1: entered allmulticast mode [ 1011.125498][T13938] bridge_slave_1: entered promiscuous mode [ 1011.485151][T13938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.515510][ T5883] Bluetooth: hci3: command tx timeout [ 1011.650996][T13938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.881292][T12356] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1011.942236][T13938] team0: Port device team_slave_0 added [ 1012.037271][T12356] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 1012.055529][T12356] usb 7-1: config 0 has no interface number 0 [ 1012.069241][T12356] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 1012.087939][T12356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.096119][T12356] usb 7-1: Product: syz [ 1012.100392][T12356] usb 7-1: Manufacturer: syz [ 1012.105040][T12356] usb 7-1: SerialNumber: syz [ 1012.115993][T12356] usb 7-1: config 0 descriptor?? [ 1012.144264][T12356] usb 7-1: Found UVC 0.00 device syz (05ac:8501) [ 1012.161988][T12356] usb 7-1: No valid video chain found. [ 1012.218018][T13938] team0: Port device team_slave_1 added [ 1012.349822][T12356] usb 7-1: USB disconnect, device number 25 [ 1012.530776][T13938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.554660][T13938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.754232][T13938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.821940][T13998] chnl_net:caif_netlink_parms(): no params data found [ 1012.858497][T13938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.870270][T13938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.896881][T13938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.264932][T14079] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1013.938457][T13938] hsr_slave_0: entered promiscuous mode [ 1014.045006][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1014.226308][T13938] hsr_slave_1: entered promiscuous mode [ 1014.232706][T13938] debugfs: 'hsr0' already exists in 'hsr' [ 1014.238815][T13938] Cannot create hsr debugfs directory [ 1014.361094][T13730] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1014.430719][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1014.452844][T13730] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1014.697176][T14092] block nbd0: not configured, cannot reconfigure [ 1015.213074][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1015.222418][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1015.259293][ T5958] libceph: connect (1)[b::]:6789 error -101 [ 1015.270677][ T5958] libceph: mon0 (1)[b::]:6789 connect error [ 1015.364301][T14095] ceph: No mds server is up or the cluster is laggy [ 1015.378316][T14096] ceph: No mds server is up or the cluster is laggy [ 1015.453245][T13730] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1015.510976][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1015.543303][T13730] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1015.670469][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1015.775859][T13087] libceph: connect (1)[b::]:6789 error -101 [ 1015.804342][T13087] libceph: mon0 (1)[b::]:6789 connect error [ 1016.198550][T13998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.215468][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.230856][T13998] bridge_slave_0: entered allmulticast mode [ 1016.249149][T13998] bridge_slave_0: entered promiscuous mode [ 1016.332892][T13998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.365638][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.394744][T13998] bridge_slave_1: entered allmulticast mode [ 1016.411304][T13998] bridge_slave_1: entered promiscuous mode [ 1017.368754][T13998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.447681][T13998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.876979][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1017.908253][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1017.935637][ T24] usb 7-1: can't read configurations, error -71 [ 1018.220137][T13998] team0: Port device team_slave_0 added [ 1018.353589][T13998] team0: Port device team_slave_1 added [ 1018.720298][T13998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.768186][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.891244][T14128] block nbd2: Attempted send on invalid socket [ 1018.898700][T14128] blk_print_req_error: 5 callbacks suppressed [ 1018.899834][T14128] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1018.921466][T14128] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 1018.952048][T13998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.108776][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.118474][T14125] bridge_slave_1: left allmulticast mode [ 1019.124121][T14125] bridge_slave_1: left promiscuous mode [ 1019.131268][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.161113][T14125] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1019.231451][T13998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.247771][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.393238][T13998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.123668][T13998] hsr_slave_0: entered promiscuous mode [ 1020.172477][T13998] hsr_slave_1: entered promiscuous mode [ 1020.199092][T13998] debugfs: 'hsr0' already exists in 'hsr' [ 1020.224945][T13998] Cannot create hsr debugfs directory [ 1020.245277][ T6320] bridge_slave_1: left allmulticast mode [ 1020.251011][ T6320] bridge_slave_1: left promiscuous mode [ 1020.272693][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.369764][ T6320] bridge_slave_0: left allmulticast mode [ 1020.395400][ T6320] bridge_slave_0: left promiscuous mode [ 1020.401426][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.450163][ T6320] bridge_slave_1: left allmulticast mode [ 1020.476720][ T6320] bridge_slave_1: left promiscuous mode [ 1020.500430][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.532802][ T6320] bridge_slave_0: left allmulticast mode [ 1020.548789][ T6320] bridge_slave_0: left promiscuous mode [ 1020.565789][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.940136][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.981697][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.097977][ T6320] bond0 (unregistering): Released all slaves [ 1021.521753][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.580175][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.015370][T12357] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1022.276916][ T6320] bond0 (unregistering): Released all slaves [ 1022.455067][T12357] usb 7-1: Using ep0 maxpacket: 16 [ 1022.834534][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1023.074721][T13730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.510242][T13730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.621247][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.628456][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.992092][T13938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.069274][T13938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.118098][T13938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1025.301326][ T6320] hsr_slave_0: left promiscuous mode [ 1025.339086][ T6320] hsr_slave_1: left promiscuous mode [ 1025.387082][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.406576][T12357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1025.423523][T12357] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1025.432975][T12357] usb 7-1: can't read configurations, error -71 [ 1025.446089][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.558668][ T6320] hsr_slave_0: left promiscuous mode [ 1025.618349][ T6320] hsr_slave_1: left promiscuous mode [ 1025.665125][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.704282][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.376729][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 1026.736175][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 1028.682442][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 1028.731510][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 1029.035251][T13938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1029.062968][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.070186][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.833841][T14231] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1032.715840][T13998] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1032.725362][T13732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1032.746572][T13732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1032.755308][T13732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1032.768037][T13732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1032.776535][T13732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1032.802746][T14238] hub 9-0:1.0: USB hub found [ 1032.807822][T14238] hub 9-0:1.0: 1 port detected [ 1032.831979][T13938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.913100][T13998] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1033.038255][T13998] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1033.360784][T13998] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1033.478671][T13938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.633721][T14239] lo speed is unknown, defaulting to 1000 [ 1033.656648][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.663852][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.697540][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.704723][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.653081][T13998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.739968][T13998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.876622][ T5883] Bluetooth: hci1: command tx timeout [ 1034.886650][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.893904][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.132549][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.139766][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.478243][ T6047] bridge_slave_1: left allmulticast mode [ 1035.483935][ T6047] bridge_slave_1: left promiscuous mode [ 1035.505661][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.530505][ T6047] bridge_slave_0: left allmulticast mode [ 1035.536299][ T6047] bridge_slave_0: left promiscuous mode [ 1035.542074][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.955499][ T5883] Bluetooth: hci1: command tx timeout [ 1037.155724][T13087] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1037.333299][T13087] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1037.409489][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.415670][T13087] usb 7-1: config 0 has no interface number 0 [ 1037.427760][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.469313][T13087] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1037.484093][T13087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.523001][T13087] usb 7-1: Product: syz [ 1037.567355][T13087] usb 7-1: Manufacturer: syz [ 1037.579930][ T6047] bond0 (unregistering): Released all slaves [ 1037.585267][T13087] usb 7-1: SerialNumber: syz [ 1037.935822][T13087] usb 7-1: config 0 descriptor?? [ 1038.156091][T13938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.196700][T13087] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1038.252699][T13087] usb 7-1: USB disconnect, device number 30 [ 1039.035287][ T5883] Bluetooth: hci1: command tx timeout [ 1040.095364][ T6047] hsr_slave_0: left promiscuous mode [ 1040.159223][ T6047] hsr_slave_1: left promiscuous mode [ 1040.189320][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.223829][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.117842][ T5883] Bluetooth: hci1: command tx timeout [ 1041.705947][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1865'. [ 1041.793820][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 1042.094292][ T6047] team0 (unregistering): Port device team_slave_0 removed [ 1043.571019][T14239] chnl_net:caif_netlink_parms(): no params data found [ 1043.641473][T13938] veth0_vlan: entered promiscuous mode [ 1043.655842][ T5958] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1043.816495][T13938] veth1_vlan: entered promiscuous mode [ 1043.837983][ T5958] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1043.858388][ T5958] usb 3-1: config 0 has no interface number 0 [ 1043.888657][ T5958] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1043.915195][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.945284][ T5958] usb 3-1: Product: syz [ 1043.957744][ T5958] usb 3-1: Manufacturer: syz [ 1043.974946][ T5958] usb 3-1: SerialNumber: syz [ 1043.993713][ T5958] usb 3-1: config 0 descriptor?? [ 1044.093745][T13998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.224670][ T5958] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1044.346546][ T5958] usb 3-1: USB disconnect, device number 18 [ 1044.573070][T14239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.595053][T14239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.602477][T14239] bridge_slave_0: entered allmulticast mode [ 1044.649930][T14239] bridge_slave_0: entered promiscuous mode [ 1044.713129][T14239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.730847][T14239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.769778][T14239] bridge_slave_1: entered allmulticast mode [ 1044.790680][T14239] bridge_slave_1: entered promiscuous mode [ 1044.823234][T13938] veth0_macvtap: entered promiscuous mode [ 1045.101782][T13938] veth1_macvtap: entered promiscuous mode [ 1045.760511][T14239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.847815][T14239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.132840][T14239] team0: Port device team_slave_0 added [ 1046.172532][T13938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.231995][T13938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.294608][T14239] team0: Port device team_slave_1 added [ 1046.532106][T14239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.832489][T14239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.063666][T14239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.143743][T14239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.166378][T14239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.266732][T14239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.345416][ T3530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.363700][ T3530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.433311][ T3530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.475934][ T3530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.737574][T14239] hsr_slave_0: entered promiscuous mode [ 1047.744566][T14239] hsr_slave_1: entered promiscuous mode [ 1048.020707][T14400] hub 9-0:1.0: USB hub found [ 1048.067522][T14400] hub 9-0:1.0: 1 port detected [ 1048.517893][T13998] veth0_vlan: entered promiscuous mode [ 1048.632247][T13998] veth1_vlan: entered promiscuous mode [ 1048.886672][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.894622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.045436][T14405] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1049.651852][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.682070][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.840633][T13998] veth0_macvtap: entered promiscuous mode [ 1050.004572][T13998] veth1_macvtap: entered promiscuous mode [ 1051.887385][T13998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.296483][T14458] overlayfs: failed to clone upperpath [ 1052.359137][T13998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.602973][T13732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1052.839877][T13732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1052.848573][T13732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1052.857265][T13732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1052.865531][T13732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1052.876068][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.917427][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.281918][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.275011][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.412759][T14467] lo speed is unknown, defaulting to 1000 [ 1055.289972][T13732] Bluetooth: hci5: command tx timeout [ 1055.370924][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.309843][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.679458][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.913956][ T6324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.961226][ T6324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.220737][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.355455][T13732] Bluetooth: hci5: command tx timeout [ 1057.386924][T14239] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1057.393968][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.419672][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.521519][T14239] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1057.562545][T14239] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1057.666828][T14239] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1059.471915][T13732] Bluetooth: hci5: command tx timeout [ 1059.751680][ T13] bridge_slave_1: left allmulticast mode [ 1059.784940][ T13] bridge_slave_1: left promiscuous mode [ 1059.790788][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.984782][ T13] bridge_slave_0: left allmulticast mode [ 1060.086478][ T13] bridge_slave_0: left promiscuous mode [ 1060.812406][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.651040][T13732] Bluetooth: hci5: command tx timeout [ 1063.355096][ T5953] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1064.390766][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.583514][ T5953] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.666208][ T5953] usb 9-1: config 0 has no interface number 0 [ 1064.692680][ T5953] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1064.743560][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.753748][ T5953] usb 9-1: Product: syz [ 1064.760819][ T5953] usb 9-1: Manufacturer: syz [ 1064.787624][ T5953] usb 9-1: SerialNumber: syz [ 1064.803575][ T5953] usb 9-1: config 0 descriptor?? [ 1065.091786][ T5953] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1065.197810][ T5953] usb 9-1: USB disconnect, device number 2 [ 1065.272041][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1065.285133][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1065.347787][T12357] libceph: connect (1)[b::]:6789 error -101 [ 1065.385338][T12357] libceph: mon0 (1)[b::]:6789 connect error [ 1065.548566][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1065.555492][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1065.628474][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.648917][T12357] libceph: connect (1)[b::]:6789 error -101 [ 1065.680532][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.689666][T12357] libceph: mon0 (1)[b::]:6789 connect error [ 1065.740958][ T13] bond0 (unregistering): Released all slaves [ 1065.869769][T14601] block nbd8: not configured, cannot reconfigure [ 1066.087329][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1066.110884][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1066.386894][T14592] ceph: No mds server is up or the cluster is laggy [ 1066.401861][T14595] ceph: No mds server is up or the cluster is laggy [ 1066.412612][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1066.429081][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1066.963036][T14611] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1068.885300][T14467] chnl_net:caif_netlink_parms(): no params data found [ 1071.455538][ T5953] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1071.661377][T14660] block nbd6: not configured, cannot reconfigure [ 1072.063315][T14239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.076137][ T5953] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.084171][ T5953] usb 9-1: config 0 has no interface number 0 [ 1072.150822][ T5953] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1072.173999][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.182544][ T5953] usb 9-1: Product: syz [ 1072.186921][ T5953] usb 9-1: Manufacturer: syz [ 1072.191676][ T5953] usb 9-1: SerialNumber: syz [ 1072.199435][ T13] hsr_slave_0: left promiscuous mode [ 1072.221168][ T5953] usb 9-1: config 0 descriptor?? [ 1072.230123][ T13] hsr_slave_1: left promiscuous mode [ 1072.251532][ T6059] libceph: connect (1)[c::]:6789 error -101 [ 1072.267734][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.278697][ T6059] libceph: mon0 (1)[c::]:6789 connect error [ 1072.315084][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.339671][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.364987][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.392411][ T6059] libceph: connect (1)[b::]:6789 error -101 [ 1072.400816][T14665] ceph: No mds server is up or the cluster is laggy [ 1072.425317][ T6059] libceph: mon0 (1)[b::]:6789 connect error [ 1072.448358][T14660] ceph: No mds server is up or the cluster is laggy [ 1072.471694][ T5953] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1072.565688][ T5953] usb 9-1: USB disconnect, device number 3 [ 1072.785213][ T13] veth1_macvtap: left promiscuous mode [ 1072.812484][ T13] veth0_macvtap: left promiscuous mode [ 1072.843242][ T13] veth1_vlan: left promiscuous mode [ 1072.933228][ T13] veth0_vlan: left promiscuous mode [ 1073.728185][T14686] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1075.886469][T14708] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1076.722851][T14713] fuse: Unknown parameter 'grou00000000000000000000' [ 1078.941748][ T6059] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1079.172909][ T6059] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1079.183519][ T6059] usb 3-1: config 0 has no interface number 0 [ 1079.204619][ T6059] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1079.224729][ T6059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.253470][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1079.289267][ T6059] usb 3-1: Product: syz [ 1079.293573][ T6059] usb 3-1: Manufacturer: syz [ 1079.306420][ T6059] usb 3-1: SerialNumber: syz [ 1079.341852][ T6059] usb 3-1: config 0 descriptor?? [ 1079.371232][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1079.586871][ T6059] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1079.665361][ T6059] usb 3-1: USB disconnect, device number 19 [ 1083.069106][T14763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.375962][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.383127][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.417220][T14467] bridge_slave_0: entered allmulticast mode [ 1083.469918][T14467] bridge_slave_0: entered promiscuous mode [ 1083.597045][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.604224][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.681608][T14467] bridge_slave_1: entered allmulticast mode [ 1083.757971][T14467] bridge_slave_1: entered promiscuous mode [ 1083.924477][T14239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.999037][T14773] fuse: Unknown parameter 'grou00000000000000000000' [ 1085.321835][T14780] siw: device registration error -23 [ 1085.493340][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.564073][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1085.564131][ T30] audit: type=1800 audit(1757302485.955:735): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1946" name="nullb0" dev="tmpfs" ino=2387 res=0 errno=0 [ 1086.358170][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.804423][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.811714][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.453095][ T974] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1088.479931][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.487162][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.527646][T14467] team0: Port device team_slave_0 added [ 1088.688554][ T974] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.698885][ T974] usb 3-1: config 0 has no interface number 0 [ 1088.707867][ T974] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1088.750778][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.790384][ T974] usb 3-1: Product: syz [ 1088.805283][ T974] usb 3-1: Manufacturer: syz [ 1088.809923][ T974] usb 3-1: SerialNumber: syz [ 1088.832932][ T974] usb 3-1: config 0 descriptor?? [ 1088.857672][T14467] team0: Port device team_slave_1 added [ 1088.893341][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1088.925178][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1089.049352][ T974] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1089.078664][ T974] usb 3-1: USB disconnect, device number 20 [ 1089.216928][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1089.223076][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1089.242657][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.268526][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.300690][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.352676][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.374034][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.475924][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.617582][T14811] ceph: No mds server is up or the cluster is laggy [ 1089.958695][T14467] hsr_slave_0: entered promiscuous mode [ 1089.971056][T14467] hsr_slave_1: entered promiscuous mode [ 1089.985830][T14467] debugfs: 'hsr0' already exists in 'hsr' [ 1089.991570][T14467] Cannot create hsr debugfs directory [ 1090.576256][T14838] fuse: Unknown parameter 'group_i00000000000000000000' [ 1090.618152][T14842] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 1091.462576][T14842] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1092.838614][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1092.878125][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1093.033465][T14870] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1093.145618][T12357] libceph: connect (1)[c::]:6789 error -101 [ 1093.152231][T12357] libceph: mon0 (1)[c::]:6789 connect error [ 1093.609500][T14865] ceph: No mds server is up or the cluster is laggy [ 1093.689937][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1093.735458][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1093.927939][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.941009][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.957525][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.005202][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.037088][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.148711][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1094.224332][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1094.637663][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1094.721555][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1094.773978][T14896] hub 9-0:1.0: USB hub found [ 1094.780142][T14896] hub 9-0:1.0: 1 port detected [ 1094.889909][T14884] ceph: No mds server is up or the cluster is laggy [ 1095.886281][T14911] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1096.156119][T13732] Bluetooth: hci1: command tx timeout [ 1097.069199][ T6309] bridge_slave_1: left allmulticast mode [ 1097.099828][ T6309] bridge_slave_1: left promiscuous mode [ 1097.130935][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.156395][ T6309] bridge_slave_0: left allmulticast mode [ 1098.162194][ T6309] bridge_slave_0: left promiscuous mode [ 1098.192084][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.245107][ T5883] Bluetooth: hci1: command tx timeout [ 1099.797451][T14948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.326590][ T5883] Bluetooth: hci1: command tx timeout [ 1101.404708][ T30] audit: type=1326 audit(1757302501.825:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.404793][ T30] audit: type=1326 audit(1757302501.825:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.404946][ T30] audit: type=1326 audit(1757302501.825:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405020][ T30] audit: type=1326 audit(1757302501.825:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405090][ T30] audit: type=1326 audit(1757302501.825:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405161][ T30] audit: type=1326 audit(1757302501.825:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405232][ T30] audit: type=1326 audit(1757302501.825:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405303][ T30] audit: type=1326 audit(1757302501.825:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405380][ T30] audit: type=1326 audit(1757302501.825:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1101.405450][ T30] audit: type=1326 audit(1757302501.825:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1102.395242][ T5883] Bluetooth: hci1: command tx timeout [ 1103.688216][ T5958] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1103.733080][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.816457][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.841719][ T6309] bond0 (unregistering): Released all slaves [ 1103.854487][ T5958] usb 7-1: Using ep0 maxpacket: 16 [ 1103.870150][ T5958] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1103.894966][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.918258][ T5958] usb 7-1: Product: syz [ 1103.923957][ T5958] usb 7-1: Manufacturer: syz [ 1103.948070][ T5958] usb 7-1: SerialNumber: syz [ 1104.145652][ T5958] usb 7-1: config 0 descriptor?? [ 1104.177252][ T5958] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1104.237891][ T5958] usb 7-1: Detected FT-X [ 1104.357019][ T5958] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1104.904014][T14467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.982594][T14467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1105.252805][ T5958] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1105.719932][T14467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1105.740263][ T5958] usb 7-1: USB disconnect, device number 31 [ 1105.794327][T14467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.975424][ T5958] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1106.185661][ T5958] ftdi_sio 7-1:0.0: device disconnected [ 1107.301996][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 1107.423519][ T6309] hsr_slave_0: left promiscuous mode [ 1107.668329][ T6309] hsr_slave_1: left promiscuous mode [ 1107.674495][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.720485][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.838392][T15031] fuse: Unknown parameter 'group_i00000000000000000000' [ 1110.519504][ T6309] team0 (unregistering): Port device team_slave_1 removed [ 1110.850300][ T6309] team0 (unregistering): Port device team_slave_0 removed [ 1111.019563][T15055] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1111.029355][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1111.029378][ T30] audit: type=1326 audit(1757302511.465:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.127028][ T30] audit: type=1326 audit(1757302511.505:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.255288][ T30] audit: type=1326 audit(1757302511.505:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.255654][T13732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1111.278908][ T30] audit: type=1326 audit(1757302511.505:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.315180][ T30] audit: type=1326 audit(1757302511.505:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.366188][T13732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1111.375411][T13732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1111.392240][T13732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1111.400172][T13732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1111.419661][ T30] audit: type=1326 audit(1757302511.515:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.454238][ T30] audit: type=1326 audit(1757302511.515:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.477737][ T30] audit: type=1326 audit(1757302511.515:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.500300][ T30] audit: type=1326 audit(1757302511.515:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.533155][ T30] audit: type=1326 audit(1757302511.515:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4cbd8ebe9 code=0x7ffc0000 [ 1111.885605][T15062] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1112.611736][T15023] erspan0: entered promiscuous mode [ 1112.626700][T15023] macsec1: entered promiscuous mode [ 1112.632116][T15023] macsec1: entered allmulticast mode [ 1112.644707][T15023] erspan0: entered allmulticast mode [ 1112.654476][T15023] erspan0: left allmulticast mode [ 1112.665686][T15023] erspan0: left promiscuous mode [ 1113.163699][T14880] chnl_net:caif_netlink_parms(): no params data found [ 1113.535004][T13732] Bluetooth: hci4: command tx timeout [ 1115.635571][T13732] Bluetooth: hci4: command tx timeout [ 1117.943514][T13732] Bluetooth: hci4: command tx timeout [ 1118.737207][T14880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.755054][T14880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.815143][T14880] bridge_slave_0: entered allmulticast mode [ 1118.822767][T14880] bridge_slave_0: entered promiscuous mode [ 1120.280110][T13732] Bluetooth: hci4: command tx timeout [ 1120.345092][T14880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.352272][T14880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.374266][T14880] bridge_slave_1: entered allmulticast mode [ 1120.392911][T14880] bridge_slave_1: entered promiscuous mode [ 1122.876563][T14880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.406484][T14880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.375579][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.405294][ T5883] Bluetooth: hci3: command 0x0406 tx timeout [ 1129.020590][T14880] team0: Port device team_slave_0 added [ 1129.333315][T14880] team0: Port device team_slave_1 added [ 1130.150056][T14880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.194398][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.314217][T14880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.436065][T14880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.443068][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.509340][T14880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.604577][T14880] hsr_slave_0: entered promiscuous mode [ 1135.626068][T14880] hsr_slave_1: entered promiscuous mode [ 1135.660571][T15057] chnl_net:caif_netlink_parms(): no params data found [ 1135.691346][T15237] block nbd8: not configured, cannot reconfigure [ 1137.151594][ T6309] bridge_slave_1: left allmulticast mode [ 1137.167261][ T6309] bridge_slave_1: left promiscuous mode [ 1137.173106][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.992675][ T6309] bridge_slave_0: left allmulticast mode [ 1138.000377][ T6309] bridge_slave_0: left promiscuous mode [ 1138.006280][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.233400][T15269] block nbd2: not configured, cannot reconfigure [ 1140.842249][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1140.852906][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.873314][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1140.874669][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.904022][ T6309] bond0 (unregistering): Released all slaves [ 1141.046376][T15275] ceph: No mds server is up or the cluster is laggy [ 1144.920020][T15057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.938204][T15057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.955311][T15057] bridge_slave_0: entered allmulticast mode [ 1145.120515][T15057] bridge_slave_0: entered promiscuous mode [ 1145.520400][ T6309] hsr_slave_0: left promiscuous mode [ 1145.570668][ T6309] hsr_slave_1: left promiscuous mode [ 1145.603142][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.636067][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.402853][ T6309] team0 (unregistering): Port device team_slave_1 removed [ 1146.526125][ T6309] team0 (unregistering): Port device team_slave_0 removed [ 1147.831533][T15057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.849511][T15057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.868686][T15057] bridge_slave_1: entered allmulticast mode [ 1148.033281][T15057] bridge_slave_1: entered promiscuous mode [ 1150.090565][T15057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.144794][T15057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.387130][ T5953] IPVS: starting estimator thread 0... [ 1153.536311][T15373] IPVS: using max 21 ests per chain, 50400 per kthread [ 1153.920000][T15057] team0: Port device team_slave_0 added [ 1154.121241][T15057] team0: Port device team_slave_1 added [ 1155.278160][T15057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.430085][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.550313][T15057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.828380][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1155.841046][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1155.849667][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1155.859188][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1155.867500][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.038268][T15057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.305295][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.476211][T15057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.607472][ T13] bridge_slave_1: left allmulticast mode [ 1156.629586][ T13] bridge_slave_1: left promiscuous mode [ 1156.668847][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.729714][ T13] bridge_slave_0: left allmulticast mode [ 1156.751139][ T13] bridge_slave_0: left promiscuous mode [ 1156.775771][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.481551][T15418] fuse: Unknown parameter 'group_i00000000000000000000' [ 1157.858046][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 1157.893579][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.915355][ T5883] Bluetooth: hci1: command tx timeout [ 1157.933719][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.067682][ T13] bond0 (unregistering): Released all slaves [ 1160.084358][ T5883] Bluetooth: hci1: command tx timeout [ 1161.202974][T15057] hsr_slave_0: entered promiscuous mode [ 1161.714176][T15057] hsr_slave_1: entered promiscuous mode [ 1161.771302][T15057] debugfs: 'hsr0' already exists in 'hsr' [ 1161.801589][T15057] Cannot create hsr debugfs directory [ 1162.155449][ T5883] Bluetooth: hci1: command tx timeout [ 1163.495594][ T13] hsr_slave_0: left promiscuous mode [ 1163.532851][ T13] hsr_slave_1: left promiscuous mode [ 1163.586952][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.604683][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.235170][ T5883] Bluetooth: hci1: command tx timeout [ 1164.392478][T15474] block nbd8: not configured, cannot reconfigure [ 1165.166746][T15477] ceph: No mds server is up or the cluster is laggy [ 1166.614676][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1167.395978][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1167.734807][T15496] hub 9-0:1.0: USB hub found [ 1167.755202][T15496] hub 9-0:1.0: 1 port detected [ 1171.882903][T15531] fuse: Unknown parameter 'group_id00000000000000000000' [ 1172.340181][T15396] chnl_net:caif_netlink_parms(): no params data found [ 1174.187414][T13732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1174.212990][T13732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1174.227214][T13732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1174.242144][T13732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.250892][T13732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1175.782286][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.805098][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.812423][T15396] bridge_slave_0: entered allmulticast mode [ 1175.847998][T15396] bridge_slave_0: entered promiscuous mode [ 1175.911228][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.938992][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.990132][T15396] bridge_slave_1: entered allmulticast mode [ 1176.050152][T15396] bridge_slave_1: entered promiscuous mode [ 1176.317162][ T5883] Bluetooth: hci5: command tx timeout [ 1178.278270][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.337784][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.395155][ T5883] Bluetooth: hci5: command tx timeout [ 1179.434378][T15593] cgroup: Unknown subsys name 'barrier' [ 1180.396133][T15396] team0: Port device team_slave_0 added [ 1180.404492][T15396] team0: Port device team_slave_1 added [ 1180.475040][ T5883] Bluetooth: hci5: command tx timeout [ 1180.646360][T15607] fuse: Bad value for 'fd' [ 1182.976863][ T5883] Bluetooth: hci5: command tx timeout [ 1183.484680][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.514315][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.757056][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.810025][ T36] bridge_slave_1: left allmulticast mode [ 1183.824028][ T36] bridge_slave_1: left promiscuous mode [ 1183.843283][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.888632][ T36] bridge_slave_0: left allmulticast mode [ 1183.916013][ T36] bridge_slave_0: left promiscuous mode [ 1183.940647][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.253432][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.280941][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.302006][ T36] bond0 (unregistering): Released all slaves [ 1184.566406][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.573492][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.784965][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.725165][T15661] fuse: Bad value for 'fd' [ 1186.119473][T15665] Error: Driver 'c6xdigio' is already registered, aborting... [ 1186.154730][T15666] loop2: detected capacity change from 0 to 7 [ 1186.301442][T15666] Dev loop2: unable to read RDB block 7 [ 1186.366361][T15666] loop2: AHDI p1 p2 p3 [ 1186.371567][T15666] loop2: partition table partially beyond EOD, truncated [ 1186.382534][T15666] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1186.389571][T15666] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1187.040154][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.811672][T15557] chnl_net:caif_netlink_parms(): no params data found [ 1189.102855][T15396] hsr_slave_0: entered promiscuous mode [ 1189.125942][T15396] hsr_slave_1: entered promiscuous mode [ 1189.410312][ T36] hsr_slave_0: left promiscuous mode [ 1190.648130][ T36] hsr_slave_1: left promiscuous mode [ 1190.654583][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.909584][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.875237][T15715] fuse: Bad value for 'fd' [ 1193.880222][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1194.006170][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1194.742488][T15696] pim6reg: entered allmulticast mode [ 1196.514731][T15557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.543578][T15557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.855339][T15557] bridge_slave_0: entered allmulticast mode [ 1197.281598][T15557] bridge_slave_0: entered promiscuous mode [ 1197.432966][T15756] netlink: 'syz.8.2167': attribute type 10 has an invalid length. [ 1197.455256][T15557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.462611][T15557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.510662][T15557] bridge_slave_1: entered allmulticast mode [ 1197.533087][T15557] bridge_slave_1: entered promiscuous mode [ 1197.564980][T15762] fuse: Invalid rootmode [ 1197.796571][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.912970][T15756] team0: Port device bond0 added [ 1198.207503][T15557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.295823][T15557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.988472][T15557] team0: Port device team_slave_0 added [ 1199.004224][T15557] team0: Port device team_slave_1 added [ 1201.196110][T15557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.203147][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.313571][T15557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.342030][T15557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.355471][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.468936][T15557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.497861][T15557] hsr_slave_0: entered promiscuous mode [ 1202.939804][T15557] hsr_slave_1: entered promiscuous mode [ 1202.952624][T15557] debugfs: 'hsr0' already exists in 'hsr' [ 1202.959206][T15557] Cannot create hsr debugfs directory [ 1203.277151][T15823] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1203.524416][T15827] 9pnet_fd: Insufficient options for proto=fd [ 1205.051366][T15396] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1205.236079][T15396] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1205.343438][T15396] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1205.563346][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1205.563372][ T30] audit: type=1326 audit(1757302605.975:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1205.778202][ T30] audit: type=1326 audit(1757302605.975:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1205.823561][ T30] audit: type=1326 audit(1757302605.985:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1205.854795][ T30] audit: type=1326 audit(1757302605.985:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1205.868612][T15396] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1205.877540][ T30] audit: type=1326 audit(1757302605.985:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.055073][ T30] audit: type=1326 audit(1757302605.985:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.234830][ T30] audit: type=1326 audit(1757302605.985:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.275118][ T30] audit: type=1326 audit(1757302605.985:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.297752][ T30] audit: type=1326 audit(1757302605.985:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.362155][ T30] audit: type=1326 audit(1757302605.985:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1206.415425][T15858] block nbd6: not configured, cannot reconfigure [ 1206.832048][T15557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1206.924331][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1206.936617][T15557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1206.940843][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1206.961167][ T974] libceph: connect (1)[b::]:6789 error -101 [ 1206.991116][ T974] libceph: mon0 (1)[b::]:6789 connect error [ 1207.072187][T15557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1207.116787][T15557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1207.170769][T15858] ceph: No mds server is up or the cluster is laggy [ 1207.171054][T15861] ceph: No mds server is up or the cluster is laggy [ 1208.198425][T15396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.319943][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.828564][T15557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.957969][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.965203][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.318801][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.326032][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.422180][T15557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.596375][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.603567][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.688741][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.696048][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.739299][T15911] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 1211.873871][T15396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1214.402207][T15557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.508469][T15944] block nbd6: not configured, cannot reconfigure [ 1215.217797][ T974] libceph: connect (1)[c::]:6789 error -101 [ 1215.223919][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 1215.258082][T15948] ceph: No mds server is up or the cluster is laggy [ 1215.839835][T15557] veth0_vlan: entered promiscuous mode [ 1216.748714][T15557] veth1_vlan: entered promiscuous mode [ 1217.365582][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1217.379348][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1217.675843][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1217.923021][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1217.932405][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.283484][T12356] libceph: connect (1)[b::]:6789 error -101 [ 1218.293498][T12356] libceph: mon0 (1)[b::]:6789 connect error [ 1218.560377][T15557] veth0_macvtap: entered promiscuous mode [ 1218.577341][T12356] libceph: connect (1)[b::]:6789 error -101 [ 1218.583499][T12356] libceph: mon0 (1)[b::]:6789 connect error [ 1219.443999][T15980] ceph: No mds server is up or the cluster is laggy [ 1219.488763][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1219.540640][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1219.674297][T15990] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 1219.995350][ T5883] Bluetooth: hci1: command tx timeout [ 1220.070656][T15557] veth1_macvtap: entered promiscuous mode [ 1220.613875][T15557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.627642][T15557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.044978][ T6316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.087494][ T5883] Bluetooth: hci1: command tx timeout [ 1222.167696][ T6316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.365161][ T6316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.577310][ T6316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.627909][T16024] hub 9-0:1.0: USB hub found [ 1222.633234][T16024] hub 9-0:1.0: 1 port detected [ 1223.872838][ T6465] bridge_slave_1: left allmulticast mode [ 1223.917552][ T6465] bridge_slave_1: left promiscuous mode [ 1223.955979][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.058267][ T6465] bridge_slave_0: left allmulticast mode [ 1224.094471][ T6465] bridge_slave_0: left promiscuous mode [ 1224.101132][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.130702][T16042] block nbd8: not configured, cannot reconfigure [ 1224.167561][ T5883] Bluetooth: hci1: command tx timeout [ 1225.533980][T16048] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1227.087490][ T5883] Bluetooth: hci1: command tx timeout [ 1230.529476][T16087] hub 9-0:1.0: USB hub found [ 1230.534472][T16087] hub 9-0:1.0: 1 port detected [ 1233.274705][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.575586][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.401193][ T6465] bond0 (unregistering): Released all slaves [ 1234.560083][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1234.599846][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1234.906771][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1234.914505][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1236.119535][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1236.132438][T16114] ceph: No mds server is up or the cluster is laggy [ 1236.139587][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1236.166059][T13732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1236.384951][T13732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1236.397213][T13732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1236.456096][T13732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1236.464448][T13732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1237.835000][ T24] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1238.503026][ T24] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1238.547291][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.622806][ T24] usb 7-1: config 0 descriptor?? [ 1238.635218][T13732] Bluetooth: hci4: command tx timeout [ 1238.892867][ T24] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1239.256964][T15971] chnl_net:caif_netlink_parms(): no params data found [ 1239.491465][ T6465] hsr_slave_0: left promiscuous mode [ 1239.503842][ T6465] hsr_slave_1: left promiscuous mode [ 1239.526805][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.560824][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.715049][T13732] Bluetooth: hci4: command tx timeout [ 1240.994132][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1240.994160][ T30] audit: type=1326 audit(1757302641.405:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.037633][ T24] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1241.071417][ T30] audit: type=1326 audit(1757302641.405:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.098009][ T24] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1241.110869][ T24] usb 7-1: USB disconnect, device number 32 [ 1241.197154][ T30] audit: type=1326 audit(1757302641.405:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.438109][ T30] audit: type=1326 audit(1757302641.405:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.460760][ T30] audit: type=1326 audit(1757302641.405:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.555001][ T30] audit: type=1326 audit(1757302641.405:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.655161][ T30] audit: type=1326 audit(1757302641.405:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1241.978298][ T30] audit: type=1326 audit(1757302641.405:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1242.001768][ T30] audit: type=1326 audit(1757302641.405:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1242.044707][ T30] audit: type=1326 audit(1757302641.405:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06cb78ebe9 code=0x7ffc0000 [ 1242.218756][T16176] ucma_write: process 1576 (syz.2.2248) changed security contexts after opening file descriptor, this is not allowed. [ 1242.263789][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 1242.795090][T13732] Bluetooth: hci4: command tx timeout [ 1243.066371][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 1244.875130][T13732] Bluetooth: hci4: command tx timeout [ 1245.162461][T16197] block nbd6: not configured, cannot reconfigure [ 1245.633757][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1245.640062][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1245.711928][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1245.726442][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1245.911650][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1245.946245][T16210] block nbd8: not configured, cannot reconfigure [ 1245.952862][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1245.978788][T16197] ceph: No mds server is up or the cluster is laggy [ 1245.979040][T16199] ceph: No mds server is up or the cluster is laggy [ 1245.986342][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1246.008980][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1246.477519][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1246.510730][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1246.816159][T16211] ceph: No mds server is up or the cluster is laggy [ 1248.479170][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.734048][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1250.734072][ T30] audit: type=1326 audit(1757302651.135:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1250.857239][ T30] audit: type=1326 audit(1757302651.135:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1250.913531][ T30] audit: type=1326 audit(1757302651.135:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.019978][ T30] audit: type=1326 audit(1757302651.145:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.106947][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.114208][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.142162][ T30] audit: type=1326 audit(1757302651.145:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.164618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.165311][T15971] bridge_slave_0: entered allmulticast mode [ 1251.167609][T15971] bridge_slave_0: entered promiscuous mode [ 1251.285010][ T30] audit: type=1326 audit(1757302651.145:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.295145][T16257] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1251.385212][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.408443][ T30] audit: type=1326 audit(1757302651.145:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.425630][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.430837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.472515][T15971] bridge_slave_1: entered allmulticast mode [ 1251.565219][ T30] audit: type=1326 audit(1757302651.145:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.588071][ T30] audit: type=1326 audit(1757302651.155:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.647686][ T30] audit: type=1326 audit(1757302651.155:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb78ebe9 code=0x7ffc0000 [ 1251.676130][T15971] bridge_slave_1: entered promiscuous mode [ 1252.141652][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.259364][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.210484][T15971] team0: Port device team_slave_0 added [ 1254.227879][T15971] team0: Port device team_slave_1 added [ 1254.456891][ T6465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.553112][T16271] block nbd8: not configured, cannot reconfigure [ 1255.328049][T16274] ceph: No mds server is up or the cluster is laggy [ 1255.382973][T16272] ceph: No mds server is up or the cluster is laggy [ 1255.418102][ T6465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.677185][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.763292][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.810714][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.826199][T16126] chnl_net:caif_netlink_parms(): no params data found [ 1255.852020][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.869416][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.925946][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.886230][ T6465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.927881][T16290] kthread_run failed with err -4 [ 1257.220272][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 1257.351622][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 1257.933658][ T6465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.258767][T15971] hsr_slave_0: entered promiscuous mode [ 1259.299983][T16319] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1259.337572][T16319] trusted_key: encrypted_key: insufficient parameters specified [ 1259.684292][T15971] hsr_slave_1: entered promiscuous mode [ 1260.147103][T16326] netlink: 'syz.8.2286': attribute type 1 has an invalid length. [ 1260.303777][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.311874][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.323953][T16126] bridge_slave_0: entered allmulticast mode [ 1260.349354][T16126] bridge_slave_0: entered promiscuous mode [ 1260.387727][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.395742][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.420328][T16126] bridge_slave_1: entered allmulticast mode [ 1260.438233][T16126] bridge_slave_1: entered promiscuous mode [ 1260.796108][T16335] fuse: Unknown parameter '00000000000000000000' [ 1261.408162][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.494933][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.697244][T16126] team0: Port device team_slave_0 added [ 1263.723577][T16126] team0: Port device team_slave_1 added [ 1264.555165][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 1265.994496][ T6465] bridge_slave_1: left allmulticast mode [ 1266.003702][ T6465] bridge_slave_1: left promiscuous mode [ 1266.050986][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.099056][ T6465] bridge_slave_0: left allmulticast mode [ 1266.116699][ T6465] bridge_slave_0: left promiscuous mode [ 1266.145232][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.089136][T16375] fuse: Unknown parameter '00000000000000000000' [ 1269.500022][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.520828][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.534742][ T6465] bond0 (unregistering): Released all slaves [ 1269.557848][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.566014][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.593165][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.304902][T16384] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1270.407165][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.476099][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.662646][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.498553][T16396] kthread_run failed with err -4 [ 1273.878547][T16126] hsr_slave_0: entered promiscuous mode [ 1273.895205][T16126] hsr_slave_1: entered promiscuous mode [ 1273.970224][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 1274.005133][T16126] Cannot create hsr debugfs directory [ 1274.179840][ T6465] hsr_slave_0: left promiscuous mode [ 1274.186401][ T6465] hsr_slave_1: left promiscuous mode [ 1274.193018][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.201974][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.210577][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.218278][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.243886][ T6465] veth1_macvtap: left promiscuous mode [ 1274.249609][ T6465] veth0_macvtap: left promiscuous mode [ 1274.255468][ T6465] veth1_vlan: left promiscuous mode [ 1274.260820][ T6465] veth0_vlan: left promiscuous mode [ 1274.665686][T16411] nvme_fabrics: unknown parameter or missing value '»' in ctrl creation request [ 1274.727984][T12357] libceph: connect (1)[b::]:6789 error -101 [ 1274.734150][T12357] libceph: mon0 (1)[b::]:6789 connect error [ 1275.005779][T12357] libceph: connect (1)[b::]:6789 error -101 [ 1275.021545][T12357] libceph: mon0 (1)[b::]:6789 connect error [ 1275.545728][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1275.551906][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1275.656017][T16412] ceph: No mds server is up or the cluster is laggy [ 1276.214602][T16427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1276.232653][T16427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1276.241781][T16427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1276.255125][T16427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1276.272642][T16427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1278.393982][ T5883] Bluetooth: hci5: command tx timeout [ 1279.209406][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 1279.255401][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 1280.062415][T16447] kthread_run failed with err -4 [ 1280.476705][T16427] Bluetooth: hci5: command tx timeout [ 1282.337346][T16471] block nbd8: not configured, cannot reconfigure [ 1282.555090][ T5883] Bluetooth: hci5: command tx timeout [ 1283.280996][T16472] ceph: No mds server is up or the cluster is laggy [ 1284.076788][ T5958] libceph: mon0 (1)[b::]:6789 socket closed (con state V1_BANNER) [ 1284.635014][ T5883] Bluetooth: hci5: command tx timeout [ 1285.675665][ T6465] bridge_slave_1: left allmulticast mode [ 1285.715243][ T6465] bridge_slave_1: left promiscuous mode [ 1285.721134][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.765563][ T6465] bridge_slave_0: left allmulticast mode [ 1285.778617][ T6465] bridge_slave_0: left promiscuous mode [ 1285.804757][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.038076][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.075492][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.089148][ T6465] bond0 (unregistering): Released all slaves [ 1289.424538][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 1290.223313][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 1290.447228][T16427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1290.491817][T16427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1290.505219][T16427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1290.546622][T16427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1290.565978][T16427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1290.613985][T16521] block nbd8: not configured, cannot reconfigure [ 1291.351133][T16527] ceph: No mds server is up or the cluster is laggy [ 1291.773806][T16426] chnl_net:caif_netlink_parms(): no params data found [ 1292.242210][ T6465] hsr_slave_0: left promiscuous mode [ 1292.257306][ T6465] hsr_slave_1: left promiscuous mode [ 1292.273509][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.286491][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.795099][T16427] Bluetooth: hci1: command tx timeout [ 1293.771073][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 1293.822222][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 1295.143943][T16427] Bluetooth: hci1: command tx timeout [ 1295.349427][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 1295.366252][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 1296.852587][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.902286][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.933951][T16426] bridge_slave_0: entered allmulticast mode [ 1296.973459][T16426] bridge_slave_0: entered promiscuous mode [ 1297.195316][T16427] Bluetooth: hci1: command tx timeout [ 1297.535610][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.705059][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.715026][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.724157][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.732043][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.776622][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.817734][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.526533][T16426] bridge_slave_1: entered allmulticast mode [ 1298.547247][T16426] bridge_slave_1: entered promiscuous mode [ 1298.944225][T16603] BUG: unable to handle page fault for address: ffffffff8b4ef1c8 [ 1298.951999][T16603] #PF: supervisor write access in kernel mode [ 1298.958104][T16603] #PF: error_code(0x0003) - permissions violation [ 1298.964551][T16603] PGD e385067 P4D e385067 PUD e386063 PMD b4001a1 [ 1298.971145][T16603] Oops: Oops: 0003 [#1] SMP KASAN NOPTI [ 1298.976728][T16603] CPU: 1 UID: 0 PID: 16603 Comm: syz.8.2359 Not tainted syzkaller #0 PREEMPT(full) [ 1298.986143][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1298.996200][T16603] RIP: 0010:down_write+0xcb/0x200 [ 1299.001243][T16603] Code: 48 89 df 48 c7 44 24 28 00 00 00 00 e8 3e c3 8c f6 be 08 00 00 00 48 8d 7c 24 28 e8 2f c3 8c f6 ba 01 00 00 00 48 8b 44 24 28 48 0f b1 13 0f 94 c0 5a 84 c0 0f 84 ed 00 00 00 48 c7 c0 34 d5 [ 1299.020884][T16603] RSP: 0018:ffffc900042bf938 EFLAGS: 00010246 [ 1299.026990][T16603] RAX: 0000000000000000 RBX: ffffffff8b4ef1c8 RCX: ffffffff8b943d31 [ 1299.034985][T16603] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900042bf960 [ 1299.042977][T16603] RBP: 1ffff92000857f28 R08: 0000000000000001 R09: fffff52000857f2c [ 1299.050956][T16603] R10: ffffc900042bf967 R11: 0000000000000001 R12: dffffc0000000000 [ 1299.058932][T16603] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802a57a120 [ 1299.066915][T16603] FS: 00007fcbfc5796c0(0000) GS:ffff8881247b7000(0000) knlGS:0000000000000000 [ 1299.075873][T16603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.082460][T16603] CR2: ffffffff8b4ef1c8 CR3: 000000003538e000 CR4: 0000000000350ef0 [ 1299.090451][T16603] Call Trace: [ 1299.093733][T16603] [ 1299.096768][T16603] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1299.102503][T16603] ? __pfx_down_write+0x10/0x10 [ 1299.107399][T16603] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1299.113074][T16603] ? net_ctl_permissions+0x118/0x130 [ 1299.118373][T16603] kernfs_remove_by_name_ns+0x3d/0x110 [ 1299.123876][T16603] driver_remove_file+0x4a/0x60 [ 1299.128740][T16603] bus_remove_driver+0x224/0x2c0 [ 1299.133709][T16603] driver_unregister+0x76/0xb0 [ 1299.138488][T16603] comedi_device_detach_locked+0x12f/0xa50 [ 1299.144342][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.149998][T16603] do_devconfig_ioctl+0x555/0x710 [ 1299.155037][T16603] ? __mutex_lock+0x1c5/0x1060 [ 1299.159830][T16603] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1299.165397][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.171049][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.176695][T16603] ? find_held_lock+0x2b/0x80 [ 1299.181391][T16603] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1299.186880][T16603] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1299.192879][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.198538][T16603] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1299.204370][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.210026][T16603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1299.215933][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.221577][T16603] ? do_vfs_ioctl+0x128/0x14f0 [ 1299.226375][T16603] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1299.231446][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.237100][T16603] ? find_held_lock+0x2b/0x80 [ 1299.241788][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.247452][T16603] ? hook_file_ioctl_common+0x145/0x410 [ 1299.253019][T16603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.258660][T16603] ? __fget_files+0x20e/0x3c0 [ 1299.263341][T16603] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1299.269167][T16603] __x64_sys_ioctl+0x18e/0x210 [ 1299.273955][T16603] do_syscall_64+0xcd/0x4c0 [ 1299.278465][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.284807][T16603] RIP: 0033:0x7fcbfb78ebe9 [ 1299.289227][T16603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.308842][T16603] RSP: 002b:00007fcbfc579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.317259][T16603] RAX: ffffffffffffffda RBX: 00007fcbfb9c6270 RCX: 00007fcbfb78ebe9 [ 1299.325231][T16603] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1299.333208][T16603] RBP: 00007fcbfb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1299.341184][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.349162][T16603] R13: 00007fcbfb9c6308 R14: 00007fcbfb9c6270 R15: 00007ffd025b3e08 [ 1299.357152][T16603] [ 1299.360166][T16603] Modules linked in: [ 1299.364056][T16603] CR2: ffffffff8b4ef1c8 [ 1299.368207][T16603] ---[ end trace 0000000000000000 ]--- [ 1299.373654][T16603] RIP: 0010:down_write+0xcb/0x200 [ 1299.378704][T16603] Code: 48 89 df 48 c7 44 24 28 00 00 00 00 e8 3e c3 8c f6 be 08 00 00 00 48 8d 7c 24 28 e8 2f c3 8c f6 ba 01 00 00 00 48 8b 44 24 28 48 0f b1 13 0f 94 c0 5a 84 c0 0f 84 ed 00 00 00 48 c7 c0 34 d5 [ 1299.398332][T16603] RSP: 0018:ffffc900042bf938 EFLAGS: 00010246 [ 1299.404427][T16603] RAX: 0000000000000000 RBX: ffffffff8b4ef1c8 RCX: ffffffff8b943d31 [ 1299.412403][T16603] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900042bf960 [ 1299.420464][T16603] RBP: 1ffff92000857f28 R08: 0000000000000001 R09: fffff52000857f2c [ 1299.428439][T16603] R10: ffffc900042bf967 R11: 0000000000000001 R12: dffffc0000000000 [ 1299.436413][T16603] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802a57a120 [ 1299.444429][T16603] FS: 00007fcbfc5796c0(0000) GS:ffff8881247b7000(0000) knlGS:0000000000000000 [ 1299.453364][T16603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.459956][T16603] CR2: ffffffff8b4ef1c8 CR3: 000000003538e000 CR4: 0000000000350ef0 [ 1299.467933][T16603] Kernel panic - not syncing: Fatal exception [ 1299.474215][T16603] Kernel Offset: disabled [ 1299.478534][T16603] Rebooting in 86400 seconds..