last executing test programs: 19m48.776623718s ago: executing program 32 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 19m11.213191188s ago: executing program 33 (id=319): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48}) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r6, 0x5452, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, 0x0, 0x0) epoll_create1(0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x20000000) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 19m9.037128356s ago: executing program 34 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m7.61301378s ago: executing program 35 (id=333): syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x40488d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 19m1.889700168s ago: executing program 36 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) 18m31.124719776s ago: executing program 37 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r6, 0x20, 0x4000, 0x3000000) 18m5.794312025s ago: executing program 7 (id=459): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x2800818, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x6, 0x2d9, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 18m4.03949643s ago: executing program 7 (id=467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000002640)) 18m3.747266149s ago: executing program 7 (id=471): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) fallocate(r0, 0x9, 0x400, 0x6) 18m3.480304337s ago: executing program 7 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xfff1}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40004) 18m2.181420998s ago: executing program 7 (id=478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x52}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 17m46.713958299s ago: executing program 38 (id=478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x52}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 15m45.150696306s ago: executing program 8 (id=829): socket(0x10, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 15m44.935718133s ago: executing program 8 (id=831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e74c00", 0x3, 0x200080c0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x4000041) recvmsg(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)}, 0x10002) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 15m43.648706693s ago: executing program 8 (id=834): syz_open_dev$usbmon(&(0x7f0000000200), 0x2, 0x501000) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000003f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 15m41.906561797s ago: executing program 8 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) 15m38.615349199s ago: executing program 8 (id=852): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6}, 0x14) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) 15m36.943788722s ago: executing program 8 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e74c00", 0x3, 0x200080c0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) fcntl$setlease(r4, 0x400, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x4000041) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)}, 0x10002) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setown(r4, 0x8, 0x0) 15m36.322114031s ago: executing program 39 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e74c00", 0x3, 0x200080c0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) fcntl$setlease(r4, 0x400, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x4000041) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)}, 0x10002) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setown(r4, 0x8, 0x0) 15m35.966429422s ago: executing program 0 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 15m34.999936482s ago: executing program 0 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 15m28.815451605s ago: executing program 0 (id=871): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00'}) bind$packet(r0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) 15m28.504931464s ago: executing program 0 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) 15m27.98941682s ago: executing program 6 (id=875): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacd6a4e1331a88dc, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x3}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1, 0xb512, 0x101, 0xe7}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x6, 0x200, 0x101, 0x1, 0x8, 0x400, 0x5, r4}, &(0x7f00000003c0)=0x20) writev(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0x9a44}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000"], 0xfc}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) socket(0x1e, 0x4, 0x0) 15m27.924187822s ago: executing program 0 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}], 0x1, 0x0, 0x0, 0x480d1}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0, 0x4, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x1, 0x10000, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) r7 = accept4(r3, 0x0, &(0x7f0000000440), 0x800) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000480)='veth0_virt_wifi\x00') mremap(&(0x7f0000693000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f00002b1000/0x1000)=nil) recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @multicast2}, 0x0) 15m26.836679566s ago: executing program 6 (id=878): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x100102, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x6) 15m26.625308612s ago: executing program 0 (id=879): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 15m23.840488879s ago: executing program 40 (id=879): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 15m23.83454088s ago: executing program 6 (id=882): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) open_by_handle_at(r0, &(0x7f0000000000)=@OVL_FILEID_V0={0x42, 0xfb, {0x0, 0xfb, 0x42, 0x0, 0x10, "a7f96dcea1b9b7c80a5e089f9688e53e", "e7c6791f01be2faf61be11bf35b51651e49e6fae2b480ec667c64069ee97881c6c23a6bf2123d6017c6a319fef"}}, 0x46000) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc8, 0x4, 0x7}}}}, 0x9) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) 15m23.485284161s ago: executing program 6 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) 15m23.265620177s ago: executing program 6 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) fsopen(0x0, 0x0) flock(0xffffffffffffffff, 0x6) readv(r2, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) 15m23.19485523s ago: executing program 9 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}], 0x1, 0x0, 0x0, 0x480d1}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r5, 0x400, 0x4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0, 0x4, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x1, 0x10000, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) r7 = accept4(r3, 0x0, &(0x7f0000000440), 0x800) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000480)='veth0_virt_wifi\x00') mremap(&(0x7f0000693000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f00002b1000/0x1000)=nil) recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @multicast2}, 0x0) 15m22.53508776s ago: executing program 6 (id=887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) creat(0x0, 0xecf86c37d53049cc) 15m21.923591529s ago: executing program 41 (id=887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) creat(0x0, 0xecf86c37d53049cc) 15m21.90909226s ago: executing program 9 (id=889): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x100102, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x6) 15m20.741819056s ago: executing program 9 (id=890): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 15m20.539525722s ago: executing program 9 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) 15m20.425368976s ago: executing program 9 (id=892): syz_open_dev$usbmon(&(0x7f0000000200), 0x2, 0x501000) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000003f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 15m18.923493563s ago: executing program 9 (id=893): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 15m18.531061605s ago: executing program 42 (id=893): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 11m47.915413195s ago: executing program 4 (id=1458): lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x2) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 11m46.698247113s ago: executing program 4 (id=1462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x3004c8d1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf252180000008000300", @ANYRES32=r7, @ANYBLOB="04007d80"], 0x20}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 11m45.50358075s ago: executing program 4 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0xfffffffe, 0xf2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800850000000000fd7bfd171e8e3de048a010e787c69440f651de0061194c0000000000958e355b440200946835edfd3ee1b92e1eb7a32d80"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, &(0x7f0000000300)) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x4, 0x7, 0x0) 11m44.55898066s ago: executing program 4 (id=1468): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6c}) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x27]}], 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m43.419226265s ago: executing program 4 (id=1471): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000c80)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$netlink(0x10, 0x3, 0x6) landlock_create_ruleset(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 11m41.31845334s ago: executing program 4 (id=1476): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') syz_open_dev$usbfs(0x0, 0x76, 0x342) 11m26.172432232s ago: executing program 43 (id=1476): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') syz_open_dev$usbfs(0x0, 0x76, 0x342) 5m1.555221474s ago: executing program 3 (id=2685): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 4m59.862664117s ago: executing program 3 (id=2688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 4m59.641593754s ago: executing program 3 (id=2692): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 4m47.952086592s ago: executing program 3 (id=2701): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) getpgid(r3) vmsplice(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0) sendmmsg$sock(r4, 0x0, 0x0, 0x20000044) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x3fffff7, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040b0b09c9007c031f67d1207cfe5680824e9bf91d31f29f72db5f2b622fbc5205339fb429aebeff3c5e018ac81b4d7a8351e1f4c7fca9cdd7f590cba8748be4d208d42648ebd176c24d723633f1ba78d6d44ca22a2225127a4d00b06c63bb6492faf996044d392ed832abba69d3e65640f25c8fe63225512965d9ae7233db934d842de79943831938abf5e78fb778fecef4b653e2ed2749"], 0xe) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000dde0d3f05a203efebbbddfe14805f30fad5d9301b3458c0180fddb1cc468c04e7550cc1cd9f69e33f43b4a74be53544f0aa7e6a59f6e0913e2e9ca2917f3022820a6f7cdacef227ff83f94c2e472b8c7fac1171093b393a7861a241f63c883c00084d161a4dd93b75c97cca5a3e39377f450c5e7acd07babdde3907ed2b38766b748", @ANYRES16=r0, @ANYBLOB="0500ffffffff000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0c0023800500110001000000"], 0x28}, 0x1, 0x0, 0x0, 0x404c095}, 0x0) 4m43.854939792s ago: executing program 3 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x9) poll(&(0x7f00000005c0)=[{r1, 0x400}], 0x1, 0x44) 4m43.062954837s ago: executing program 3 (id=2709): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 4m27.591303108s ago: executing program 44 (id=2709): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 3m2.293338798s ago: executing program 2 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m58.789783969s ago: executing program 2 (id=2817): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2d, 0x80000001, 0x800, "a02e078cc1187a3129da434800080000ef2d05f00b1d864690250b5c06f0497c3d661ef4c25cfcc1c39f8638f2"}) 2m58.723390031s ago: executing program 2 (id=2819): syz_usb_connect(0x5, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf0"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) 2m55.083743276s ago: executing program 2 (id=2824): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2m51.558226537s ago: executing program 2 (id=2829): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x4, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x442, 0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x5, r2, 0x0, 0x0, 0x8}]) 2m43.210811091s ago: executing program 2 (id=2834): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x18) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m27.326682813s ago: executing program 45 (id=2834): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x18) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m20.269975413s ago: executing program 5 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1) tkill(r2, 0xb) 1m19.005745032s ago: executing program 5 (id=2877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000100)) 1m16.336537237s ago: executing program 5 (id=2880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) semget(0x2, 0x2, 0x600) semget(0x2, 0x3, 0x8) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ff"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x81) 1m11.623360446s ago: executing program 5 (id=2884): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 1m5.262666737s ago: executing program 5 (id=2886): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x40014) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 1m2.192571864s ago: executing program 5 (id=2887): listen(0xffffffffffffffff, 0x7f) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[], 0x48) r0 = syz_open_procfs(0x0, 0x0) write$bt_hci(r0, 0x0, 0xb) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x578410eb) 1m2.139426125s ago: executing program 1 (id=2888): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00"], 0x1c}}, 0x0) 53.936887845s ago: executing program 1 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) 48.743832719s ago: executing program 1 (id=2890): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) semget(0x2, 0x2, 0x600) semget(0x2, 0x3, 0x8) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ff"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x81) 46.456547591s ago: executing program 46 (id=2887): listen(0xffffffffffffffff, 0x7f) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[], 0x48) r0 = syz_open_procfs(0x0, 0x0) write$bt_hci(r0, 0x0, 0xb) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x578410eb) 42.289828953s ago: executing program 1 (id=2892): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 39.785341832s ago: executing program 1 (id=2893): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 39.619984977s ago: executing program 1 (id=2894): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 23.249887285s ago: executing program 47 (id=2894): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f0000001040)={0x6fe4, 0x7, 0x401, 0x8, 0x4, 0x3}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 0s ago: executing program 7 (id=2717): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000001ffffffffffff86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) kernel console output (not intermixed with test programs): send abort [ 788.014986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801feb1000: abort rx timeout. Force session deactivation [ 788.506260][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024a69c00: abort rx timeout. Force session deactivation [ 790.614677][T14577] fuse: Bad value for 'fd' [ 790.982533][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1883'. [ 791.000072][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1883'. [ 791.020502][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1883'. [ 791.200625][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 791.340668][T14589] siw: device registration error -23 [ 792.311170][T14593] validate_nla: 2 callbacks suppressed [ 792.311190][T14593] netlink: 'syz.5.1884': attribute type 7 has an invalid length. [ 792.336701][T14593] netlink: 'syz.5.1884': attribute type 8 has an invalid length. [ 792.364601][T14592] netlink: 'syz.5.1884': attribute type 7 has an invalid length. [ 792.372543][T14592] netlink: 'syz.5.1884': attribute type 8 has an invalid length. [ 793.113332][T14608] netlink: 'syz.3.1889': attribute type 7 has an invalid length. [ 793.121547][T14608] netlink: 'syz.3.1889': attribute type 8 has an invalid length. [ 793.400012][ T5787] Bluetooth: hci4: Malformed Event: 0x2f [ 793.610651][T14614] fuse: Bad value for 'fd' [ 793.622474][T14616] __nla_validate_parse: 1 callbacks suppressed [ 793.622492][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 793.643700][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 793.668353][T14616] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.677396][T14616] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.686382][T14616] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.695295][T14616] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.754562][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 793.764785][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 794.336856][T14631] netlink: 'syz.2.1895': attribute type 7 has an invalid length. [ 794.361109][T14631] netlink: 'syz.2.1895': attribute type 8 has an invalid length. [ 794.381458][T14626] netlink: 'syz.2.1895': attribute type 7 has an invalid length. [ 794.392691][T14626] netlink: 'syz.2.1895': attribute type 8 has an invalid length. [ 794.620015][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 794.719715][T14643] fuse: Bad value for 'fd' [ 794.833827][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.851108][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 794.861135][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'. [ 794.873636][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 794.910089][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 794.913772][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 794.918823][ T42] usb 4-1: Product: syz [ 794.931982][ T42] usb 4-1: Manufacturer: syz [ 794.936687][ T42] usb 4-1: SerialNumber: syz [ 794.966943][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'. [ 795.172112][ T42] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 795.950893][T12008] usb 4-1: USB disconnect, device number 11 [ 796.060337][T12008] usblp0: removed [ 796.188900][T14686] fuse: Bad value for 'fd' [ 796.195935][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 796.206690][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'. [ 796.723260][T14704] atomic_op ffff88807edd9998 conn xmit_atomic 0000000000000000 [ 797.709985][ T5156] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 798.069732][ T5156] usb 4-1: Using ep0 maxpacket: 8 [ 798.091451][ T5156] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 798.143902][ T5156] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 798.190963][ T5156] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 798.218023][ T5156] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.257289][ T5156] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 798.277148][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.438205][T14738] validate_nla: 14 callbacks suppressed [ 798.438219][T14738] netlink: 'syz.5.1928': attribute type 7 has an invalid length. [ 798.452514][T14738] netlink: 'syz.5.1928': attribute type 8 has an invalid length. [ 798.461059][T14737] netlink: 'syz.5.1928': attribute type 7 has an invalid length. [ 798.468966][T14737] netlink: 'syz.5.1928': attribute type 8 has an invalid length. [ 798.565241][ T5156] usb 4-1: GET_CAPABILITIES returned 0 [ 798.618945][ T5156] usbtmc 4-1:16.0: can't read capabilities [ 798.691201][T14744] netlink: 'syz.1.1929': attribute type 7 has an invalid length. [ 798.720571][T14744] netlink: 'syz.1.1929': attribute type 8 has an invalid length. [ 798.759877][T14741] netlink: 'syz.1.1929': attribute type 7 has an invalid length. [ 798.767663][T14741] netlink: 'syz.1.1929': attribute type 8 has an invalid length. [ 798.829439][ T7378] usb 4-1: USB disconnect, device number 12 [ 800.892342][ T27] audit: type=1400 audit(3927399736.535:87): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14761 comm="syz.3.1933" [ 801.603669][T14780] netlink: 'syz.2.1938': attribute type 7 has an invalid length. [ 801.634574][T14780] netlink: 'syz.2.1938': attribute type 8 has an invalid length. [ 805.440559][T14831] validate_nla: 6 callbacks suppressed [ 805.440570][T14831] netlink: 'syz.2.1950': attribute type 7 has an invalid length. [ 805.478593][T14831] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 805.942516][T14835] netlink: 'syz.3.1951': attribute type 7 has an invalid length. [ 806.000000][T14835] netlink: 'syz.3.1951': attribute type 8 has an invalid length. [ 806.060892][T14834] netlink: 'syz.3.1951': attribute type 7 has an invalid length. [ 806.085709][T14834] netlink: 'syz.3.1951': attribute type 8 has an invalid length. [ 807.080734][T14847] netlink: 'syz.2.1954': attribute type 3 has an invalid length. [ 809.114980][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.123818][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.613103][ T27] audit: type=1400 audit(3927399747.256:88): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14885 comm="syz.3.1964" [ 820.702228][T14981] overlayfs: missing 'lowerdir' [ 820.754176][T14979] __nla_validate_parse: 6 callbacks suppressed [ 820.754195][T14979] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1985'. [ 825.902564][T15041] overlayfs: missing 'lowerdir' [ 826.251061][T15054] syzkaller0: entered promiscuous mode [ 826.256637][T15054] syzkaller0: entered allmulticast mode [ 828.333219][T15077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.250703][T15236] overlayfs: missing 'lowerdir' [ 845.370167][T15227] lo speed is unknown, defaulting to 1000 [ 845.524231][ T27] audit: type=1326 audit(3927399782.058:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.5.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c479ce59 code=0x0 [ 847.061156][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 850.155719][T15278] overlayfs: failed to clone upperpath [ 852.753320][T15303] NILFS (nullb0): couldn't find nilfs on the device [ 856.701195][ T27] audit: type=1400 audit(3927399792.309:90): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15328 comm="syz.3.2059" [ 859.547442][T15371] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2062'. [ 859.556972][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2062'. [ 860.214959][T15377] lo speed is unknown, defaulting to 1000 [ 862.714794][ T27] audit: type=1326 audit(3927399799.249:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.5.2069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c479ce59 code=0x0 [ 862.748944][ T7237] Process accounting resumed [ 870.399834][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.417084][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.339611][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 875.389660][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 875.683679][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 875.722053][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 877.376872][T15613] netlink: 'syz.5.2118': attribute type 6 has an invalid length. [ 877.500293][T15608] netlink: 'syz.5.2118': attribute type 6 has an invalid length. [ 878.346543][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 878.384874][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 878.594077][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 878.604028][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 879.057259][T15648] syzkaller0: entered promiscuous mode [ 879.062818][T15648] syzkaller0: entered allmulticast mode [ 880.267350][T15665] netlink: 'syz.2.2131': attribute type 6 has an invalid length. [ 880.295633][T15657] netlink: 'syz.2.2131': attribute type 6 has an invalid length. [ 881.070960][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 881.132808][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 881.381503][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 881.433741][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 884.635631][T15717] netlink: 'syz.1.2142': attribute type 6 has an invalid length. [ 884.644773][T15714] netlink: 'syz.1.2142': attribute type 6 has an invalid length. [ 884.895756][T15724] overlayfs: failed to clone lowerpath [ 885.138716][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 885.147944][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2148'. [ 885.508951][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 885.628703][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2148'. [ 887.106511][T15751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 887.115371][T15751] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 887.123631][T15751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 890.581495][T15774] overlayfs: missing 'lowerdir' [ 891.424465][ T27] audit: type=1400 audit(3927399827.111:92): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15772 comm="syz.3.2157" [ 892.408187][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 892.424477][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 892.605587][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 892.629512][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 893.512911][T15796] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 893.521680][T15796] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 893.529979][T15796] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 895.365445][T15828] overlayfs: missing 'lowerdir' [ 895.475488][T11999] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 895.704181][T11999] usb 4-1: Using ep0 maxpacket: 8 [ 895.725921][T11999] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.763852][T11999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 895.790854][T11999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 895.819923][T11999] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.853731][T11999] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 895.874596][T11999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.130966][T11999] usb 4-1: GET_CAPABILITIES returned 0 [ 896.148722][T11999] usbtmc 4-1:16.0: can't read capabilities [ 896.436206][ T5838] usb 4-1: USB disconnect, device number 13 [ 897.359209][T15851] overlayfs: missing 'lowerdir' [ 897.467988][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 897.495782][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 897.632938][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 897.654002][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 899.337643][T15870] vlan2: entered allmulticast mode [ 899.342850][T15870] bond0: entered allmulticast mode [ 899.348056][T15870] bond_slave_0: entered allmulticast mode [ 899.353772][T15870] bond_slave_1: entered allmulticast mode [ 899.590426][T11999] libceph: connect (1)[c::]:6789 error -101 [ 899.626663][T11999] libceph: mon0 (1)[c::]:6789 connect error [ 899.679504][T15883] ceph: No mds server is up or the cluster is laggy [ 901.436750][T15896] overlayfs: missing 'lowerdir' [ 901.873822][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 902.113786][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 902.142995][ T42] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 902.184039][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.202340][ T42] usb 4-1: Product: syz [ 902.212477][ T42] usb 4-1: Manufacturer: syz [ 902.227578][ T42] usb 4-1: SerialNumber: syz [ 902.250101][ T42] usb 4-1: config 0 descriptor?? [ 902.268164][ T42] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 902.305221][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 902.393320][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.434130][ T42] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 902.458288][ T42] usb 4-1: media controller created [ 902.595815][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.659440][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 902.936415][ T42] DVB: Unable to find symbol mt352_attach() [ 902.942398][ T42] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 903.355144][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.443765][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.597529][ T42] rc_core: IR keymap rc-dvico-portable not found [ 903.623432][ T42] Registered IR keymap rc-empty [ 903.633908][ T42] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 904.119194][T15933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.416360][ T42] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input26 [ 904.455277][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2189'. [ 904.464267][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 904.464292][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 904.483454][T15933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.353438][T15936] overlayfs: missing 'lowerdir' [ 905.377986][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 905.534659][T15934] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.542508][T15934] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.545694][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 905.569856][ T5838] usb 4-1: USB disconnect, device number 14 [ 905.699077][T15939] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2189'. [ 906.244103][ T5838] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 906.813551][ T5838] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 907.108551][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.132782][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.144209][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.153816][ T5838] usb 4-1: Product: syz [ 907.158111][ T5838] usb 4-1: Manufacturer: syz [ 907.162817][ T5838] usb 4-1: SerialNumber: syz [ 907.182135][ T5838] usb 4-1: selecting invalid altsetting 1 [ 907.733223][ T5838] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 907.753590][ T5838] cdc_ncm 4-1:1.0: bind() failure [ 907.794337][ T5838] cdc_ncm 4-1:1.1: skipping garbage [ 907.800285][ T5838] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 907.860322][ T5838] cdc_ncm 4-1:1.1: bind() failure [ 909.697359][T11999] Process accounting resumed [ 910.503033][T12011] usb 4-1: USB disconnect, device number 15 [ 911.463663][T15999] overlayfs: missing 'workdir' [ 912.043707][T12011] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 912.243328][T12011] usb 4-1: Using ep0 maxpacket: 8 [ 912.258756][T12011] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 912.278942][T12011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.303610][T12011] usb 4-1: Product: syz [ 912.307906][T12011] usb 4-1: Manufacturer: syz [ 912.332938][T12011] usb 4-1: SerialNumber: syz [ 912.340978][T12011] usb 4-1: config 0 descriptor?? [ 912.367940][T12011] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 912.399625][T12011] dvb-usb: bulk message failed: -22 (2/0) [ 912.435014][T12011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 912.469064][T12011] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 912.488769][T12011] usb 4-1: media controller created [ 912.552173][T12011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.672413][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 912.871914][T12011] DVB: Unable to find symbol mt352_attach() [ 912.901354][T12011] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 913.233167][T12011] rc_core: IR keymap rc-dvico-portable not found [ 913.239737][T12011] Registered IR keymap rc-empty [ 913.252029][T12011] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 913.280562][T12011] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27 [ 913.462156][T12011] dvb-usb: schedule remote query interval to 100 msecs. [ 913.484803][T16034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.502015][T12011] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 913.556427][T16034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.606424][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 914.425844][T16040] overlayfs: failed to clone upperpath [ 914.658968][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 914.813729][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 914.900908][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.923403][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 914.936271][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.955649][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.984304][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.052003][T16048] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2208'. [ 915.053835][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 915.112035][ T5838] Process accounting resumed [ 915.790238][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.799986][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 915.818042][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.895438][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 915.913335][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 916.043109][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 916.173040][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 916.439076][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 916.632262][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 916.874937][T12011] dvb-usb: bulk message failed: -22 (1/0) [ 917.097463][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 917.293186][ T5838] dvb-usb: bulk message failed: -22 (1/0) [ 917.381037][ T42] usb 4-1: USB disconnect, device number 16 [ 917.585600][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 917.721377][T16082] fuse: Bad value for 'fd' [ 918.003274][ T42] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 918.213915][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 918.255658][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.289230][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 918.369687][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 918.434898][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.516581][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 918.548246][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.804351][T16102] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.811852][T16102] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.835315][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 918.859984][ T42] usbtmc 4-1:16.0: can't read capabilities [ 919.084842][ T42] usb 4-1: USB disconnect, device number 17 [ 919.324708][ T5156] Process accounting resumed [ 919.338715][T16119] siw: device registration error -23 [ 920.299909][T16102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.918925][T16102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.872290][T16131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 922.336176][T16102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.348473][T16102] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.360537][T16102] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.376142][T16102] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.548891][T16134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.556874][T16134] IPv6: NLM_F_CREATE should be set when creating new route [ 923.193484][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 923.502682][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 923.610416][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 923.738384][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 923.761416][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.783626][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.819060][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 923.848824][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.093575][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 924.099384][ T42] usbtmc 4-1:16.0: can't read capabilities [ 924.335593][ T5820] usb 4-1: USB disconnect, device number 18 [ 926.643402][T12008] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 926.881290][T12008] usb 4-1: Using ep0 maxpacket: 8 [ 926.894529][T12008] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 926.924760][T12008] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 926.948321][T12008] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 926.982798][T12008] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.016580][T12008] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 927.082690][T12008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.425022][T12008] usb 4-1: GET_CAPABILITIES returned 0 [ 928.532441][T12008] usbtmc 4-1:16.0: can't read capabilities [ 928.563992][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.571451][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.606168][T12008] usb 4-1: USB disconnect, device number 19 [ 929.648526][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 929.862238][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 930.107927][ T42] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 930.121689][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.144368][ T42] usb 4-1: Product: syz [ 930.281373][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.424124][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.752384][T16247] siw: device registration error -23 [ 931.249805][T16196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.261443][T16196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.275089][T16196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.290725][T16196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.432104][ T42] usb 4-1: Manufacturer: syz [ 931.436787][ T42] usb 4-1: SerialNumber: syz [ 931.454235][ T42] usb 4-1: config 0 descriptor?? [ 931.466486][T16196] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 931.476647][T16196] ipvlan2: left allmulticast mode [ 931.481764][T16196] batadv_slave_1: left allmulticast mode [ 931.501613][ T42] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 931.523184][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 931.536340][T16196] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.545593][T16196] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.554717][T16196] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.563698][T16196] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.575882][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 931.598274][ T42] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 931.615503][ T42] usb 4-1: media controller created [ 931.692435][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.719538][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2254'. [ 931.739008][T16252] netlink: 'syz.5.2254': attribute type 4 has an invalid length. [ 931.842955][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.850570][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.035194][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 933.095879][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.130415][ T42] DVB: Unable to find symbol mt352_attach() [ 933.145012][ T42] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 933.155632][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.524446][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.551531][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.596140][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.625339][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.848495][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.907323][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.953178][ T42] rc_core: IR keymap rc-dvico-portable not found [ 933.962137][ T42] Registered IR keymap rc-empty [ 933.968153][ T42] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 934.000159][ T42] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28 [ 934.013728][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 934.020750][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 934.122282][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 934.365479][ T5820] usb 4-1: USB disconnect, device number 20 [ 934.797152][ T5820] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 943.519363][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.594744][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.319973][T16371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.331584][T16371] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.340577][T16371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.355110][T16371] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.588083][T16371] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.597211][T16371] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.606346][T16371] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.615286][T16371] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.262707][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 950.345927][T16455] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2294'. [ 950.371502][T16455] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2294'. [ 950.716275][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2298'. [ 950.790984][T16466] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 952.360034][T16511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2305'. [ 952.371674][T16511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2305'. [ 954.035338][T16541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2312'. [ 955.365825][T16552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2314'. [ 955.421009][T16552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2314'. [ 958.094027][T16604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2322'. [ 958.133350][T16605] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2323'. [ 958.171814][T16605] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2323'. [ 958.524809][T16611] siw: device registration error -23 [ 959.463065][T16637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2332'. [ 959.790037][T16646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2334'. [ 959.812038][T16646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2334'. [ 963.148632][T16672] IPVS: dh: FWM 3 0x00000003 - no destination available [ 964.280263][ T5848] IPVS: starting estimator thread 0... [ 964.380440][T16685] IPVS: using max 15 ests per chain, 36000 per kthread [ 964.439672][T16689] 9pnet_fd: Insufficient options for proto=fd [ 964.868565][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2343'. [ 964.881228][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2343'. [ 966.473372][T16725] PKCS7: Unknown OID: [4] 0.0 [ 966.478696][T16725] PKCS7: Only support pkcs7_signedData type [ 967.309809][T16729] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2353'. [ 967.319351][T16729] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2353'. [ 971.225271][T16803] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2371'. [ 971.234458][T16803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2371'. [ 977.960527][T16897] syz.1.2397[16897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.960695][T16897] syz.1.2397[16897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.381168][T16949] syz.1.2409[16949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.403373][T16949] syz.1.2409[16949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.540162][ T5838] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 985.971832][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 985.987720][ T5838] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=d7.00 [ 986.000278][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.040582][ T5838] usb 4-1: config 0 descriptor?? [ 986.046422][T16989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 986.527844][ T5838] hid (null): invalid report_size 37598 [ 986.560091][ T5838] hid (null): global environment stack underflow [ 986.641874][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 986.697663][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 986.728689][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.750702][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 986.757552][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 986.799827][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.846829][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 986.889996][T17029] siw: device registration error -23 [ 988.116285][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.219334][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.227168][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.234938][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.242017][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.249046][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.256068][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.282074][T17039] ceph: No mds server is up or the cluster is laggy [ 988.290566][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 988.532854][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 988.539715][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.570401][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.577270][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.640063][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.688810][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.731633][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.747519][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.754838][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.819194][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.866980][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.905212][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.961534][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 988.993866][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.037238][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.100832][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.140136][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.170777][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.194914][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.225199][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.266646][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.295119][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.307162][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.317065][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.326882][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.335088][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.352861][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.376400][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.416338][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.456364][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.486741][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.504086][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.530113][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.557313][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.583218][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.638482][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.660044][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.677163][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.697438][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.720245][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.727107][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.836989][ T7237] libceph: connect (1)[c::]:6789 error -101 [ 989.841046][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.850649][ T7237] libceph: mon0 (1)[c::]:6789 connect error [ 989.873884][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 989.884548][T17074] ceph: No mds server is up or the cluster is laggy [ 989.911923][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 990.080492][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 990.087367][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 990.094811][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x2 [ 990.102017][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x3 [ 990.112069][ T5838] asus 0003:0B05:1ABE.0003: unknown main item tag 0x4 [ 990.118909][ T5838] asus 0003:0B05:1ABE.0003: invalid report_size 37598 [ 990.126454][ T5838] asus 0003:0B05:1ABE.0003: item 0 2 1 7 parsing failed [ 990.134674][ T5838] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 990.142057][ T5838] asus: probe of 0003:0B05:1ABE.0003 failed with error -22 [ 990.165334][ T5838] usb 4-1: USB disconnect, device number 21 [ 992.144455][T17099] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 992.151996][T17099] ALSA: mixer_oss: invalid index 1374389 [ 992.404573][T17105] syzkaller0: entered promiscuous mode [ 992.420201][T17105] syzkaller0: entered allmulticast mode [ 993.277786][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.288066][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.853064][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 994.227766][T17160] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2461'. [ 994.237269][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 995.784892][T17159] overlayfs: failed to clone upperpath [ 996.148600][T17168] binder_alloc: 17167: binder_alloc_buf, no vma [ 1002.456597][T17276] overlayfs: failed to clone upperpath [ 1003.537100][T17280] tipc: Started in network mode [ 1003.544638][T17280] tipc: Node identity 4, cluster identity 4711 [ 1003.572981][T17280] tipc: Node number set to 4 [ 1004.223379][T17284] 9pnet_fd: p9_fd_create_tcp (17284): problem connecting socket to 127.0.0.1 [ 1006.800761][ T5787] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 1006.809331][ T5787] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 1007.885926][T17356] overlayfs: failed to clone upperpath [ 1009.292216][T17391] input: syz0 as /devices/virtual/input/input29 [ 1010.872240][ T5787] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1011.077448][ T5787] Bluetooth: hci4: Injecting HCI hardware error event [ 1011.087019][ T5782] Bluetooth: hci4: hardware error 0x00 [ 1012.800256][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1013.190876][ T5782] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1014.719675][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 1014.730265][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 1015.020131][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1015.026657][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1015.052282][T17454] trusted_key: encrypted_key: key user:syz not found [ 1015.055305][T17454] UBIFS error (pid: 17454): cannot open "", error -22 [ 1015.861570][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 1015.898400][T17452] ceph: No mds server is up or the cluster is laggy [ 1015.941144][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 1018.038295][T17513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2554'. [ 1019.648750][T17534] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.670112][T17534] binder: 17532:17534 ioctl 4018620d 200000004a80 returned -16 [ 1022.310250][T17562] siw: device registration error -23 [ 1022.982431][T17558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 1024.965453][T17602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1025.024337][T17606] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2576'. [ 1025.468132][T17622] comedi comedi3: aio_aio12_8: I/O port conflict (0xa,32) [ 1029.601043][T17692] autofs4:pid:17692:autofs_fill_super: called with bogus options [ 1030.893619][T12001] libceph: connect (1)[c::]:6789 error -101 [ 1030.899837][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 1031.180361][ T7237] libceph: connect (1)[c::]:6789 error -101 [ 1031.196756][ T7237] libceph: mon0 (1)[c::]:6789 connect error [ 1031.628344][T17714] ceph: No mds server is up or the cluster is laggy [ 1033.952915][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1035.430755][T17786] UBIFS error (pid: 17786): cannot open "", error -22 [ 1036.890307][ T5838] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1037.115051][ T5838] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1037.139984][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.159516][ T5838] usb 4-1: Product: syz [ 1037.180353][ T5838] usb 4-1: Manufacturer: syz [ 1037.185025][ T5838] usb 4-1: SerialNumber: syz [ 1037.202476][ T5838] usb 4-1: config 0 descriptor?? [ 1037.229721][ T5838] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 022 [ 1037.477445][T17645] Set syz1 is full, maxelem 65536 reached [ 1038.885213][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 1038.904675][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 1038.925493][T17839] ceph: No mds server is up or the cluster is laggy [ 1038.968884][ T5838] i2c i2c-1: failure reading functionality [ 1039.005758][ T5838] i2c i2c-1: connected i2c-tiny-usb device [ 1039.064133][ T5838] usb 4-1: USB disconnect, device number 22 [ 1040.698243][ T7237] libceph: connect (1)[c::]:6789 error -101 [ 1040.706082][ T7237] libceph: mon0 (1)[c::]:6789 connect error [ 1040.741395][T17879] ceph: No mds server is up or the cluster is laggy [ 1044.362199][T12009] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1044.562084][T12009] usb 4-1: config 0 has no interfaces? [ 1044.567657][T12009] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1044.658044][T12009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.717688][T12009] usb 4-1: config 0 descriptor?? [ 1045.002117][T17930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.034841][T17930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.110682][T17930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2651'. [ 1045.133348][T12009] usb 4-1: USB disconnect, device number 23 [ 1045.207337][T17967] netlink: 'syz.5.2661': attribute type 12 has an invalid length. [ 1045.227864][T17967] netlink: 'syz.5.2661': attribute type 29 has an invalid length. [ 1045.239635][T17967] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1045.265697][T17967] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 1045.287942][T17967] netlink: 'syz.5.2661': attribute type 2 has an invalid length. [ 1045.308382][T17967] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1045.343794][T17969] netlink: 'syz.5.2661': attribute type 12 has an invalid length. [ 1045.375771][T17969] netlink: 'syz.5.2661': attribute type 29 has an invalid length. [ 1045.384966][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1046.320450][T17969] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1046.345888][T17969] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 1046.356020][T17969] netlink: 'syz.5.2661': attribute type 2 has an invalid length. [ 1046.370954][T17969] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1046.460981][T12009] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1046.477505][T17978] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1046.660229][T12009] usb 4-1: Using ep0 maxpacket: 16 [ 1046.682201][T12009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.724339][T12009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.759724][T12009] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1046.783306][T12009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.803783][T12009] usb 4-1: config 0 descriptor?? [ 1046.981019][T12009] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1046.989369][T12009] powermate: probe of 4-1:0.0 failed with error -5 [ 1047.041239][T12009] usb 4-1: USB disconnect, device number 24 [ 1050.901007][ C0] hrtimer: interrupt took 2224157 ns [ 1054.720555][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.726938][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1087.110285][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1088.905465][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1088.918803][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1088.950499][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1088.958462][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1088.968844][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1093.809311][T18269] lo speed is unknown, defaulting to 1000 [ 1093.840235][ T5787] Bluetooth: hci0: command tx timeout [ 1095.916657][T18269] chnl_net:caif_netlink_parms(): no params data found [ 1096.919973][ T5782] Bluetooth: hci0: command tx timeout [ 1100.224102][ T5782] Bluetooth: hci0: command tx timeout [ 1101.408901][ T9341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.654208][T18269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.677108][T18269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.698276][T18269] bridge_slave_0: entered allmulticast mode [ 1101.720051][T18269] bridge_slave_0: entered promiscuous mode [ 1101.736712][T18269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.756671][T18269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.770451][T18269] bridge_slave_1: entered allmulticast mode [ 1101.785801][T18269] bridge_slave_1: entered promiscuous mode [ 1101.867686][T18269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.904658][T18269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.993089][T18269] team0: Port device team_slave_0 added [ 1103.002668][T18269] team0: Port device team_slave_1 added [ 1103.035117][T18269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.042134][T18269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.783927][ T5782] Bluetooth: hci0: command tx timeout [ 1104.801515][T18269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.557057][T18269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.564540][T18269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.658328][T18269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.810748][T16110] libceph: connect (1)[c::]:6789 error -101 [ 1106.822395][T16110] libceph: mon0 (1)[c::]:6789 connect error [ 1106.910736][T18379] ceph: No mds server is up or the cluster is laggy [ 1107.081918][T16110] libceph: connect (1)[c::]:6789 error -101 [ 1107.088299][T16110] libceph: mon0 (1)[c::]:6789 connect error [ 1107.953234][T18269] hsr_slave_0: entered promiscuous mode [ 1107.961554][T16110] libceph: connect (1)[c::]:6789 error -101 [ 1107.967686][T16110] libceph: mon0 (1)[c::]:6789 connect error [ 1107.997674][T18269] hsr_slave_1: entered promiscuous mode [ 1108.012870][T18269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.169973][T18269] Cannot create hsr debugfs directory [ 1115.479439][ T9341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.610530][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.616916][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.814542][ T9341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.953072][T18462] lo speed is unknown, defaulting to 1000 [ 1128.958939][T18462] lo speed is unknown, defaulting to 1000 [ 1128.965471][T18462] lo speed is unknown, defaulting to 1000 [ 1128.983231][T18462] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1129.517419][T18462] lo speed is unknown, defaulting to 1000 [ 1129.561015][T18462] lo speed is unknown, defaulting to 1000 [ 1129.597283][T18462] lo speed is unknown, defaulting to 1000 [ 1129.605085][T18462] lo speed is unknown, defaulting to 1000 [ 1129.612543][T18462] lo speed is unknown, defaulting to 1000 [ 1133.526085][ T9341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.281905][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1138.437263][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1148.368999][T16110] libceph: connect (1)[c::]:6789 error -101 [ 1148.391699][T16110] libceph: mon0 (1)[c::]:6789 connect error [ 1149.018368][T18542] ceph: No mds server is up or the cluster is laggy [ 1150.154604][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1150.164230][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1151.152391][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1151.219601][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1151.280094][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1151.375753][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1151.413578][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1151.440124][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1152.350200][T18561] lo speed is unknown, defaulting to 1000 [ 1152.357512][T18561] lo speed is unknown, defaulting to 1000 [ 1154.100926][ T5787] Bluetooth: hci1: command tx timeout [ 1154.148533][T18561] chnl_net:caif_netlink_parms(): no params data found [ 1157.500108][ T5782] Bluetooth: hci1: command tx timeout [ 1157.751180][T18561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.996150][T18561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.004536][T18561] bridge_slave_0: entered allmulticast mode [ 1158.012850][T18561] bridge_slave_0: entered promiscuous mode [ 1158.020818][T18561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.027962][T18561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.035131][T18561] bridge_slave_1: entered allmulticast mode [ 1158.042021][T18561] bridge_slave_1: entered promiscuous mode [ 1161.527054][T18561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.538184][T18561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.564723][T18561] team0: Port device team_slave_0 added [ 1161.572430][T18561] team0: Port device team_slave_1 added [ 1161.592958][T18561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.599948][T18561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.893155][T18561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.910550][T18561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.917520][T18561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.943393][T18561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.453088][ T5782] Bluetooth: hci1: command tx timeout [ 1162.464971][T18561] hsr_slave_0: entered promiscuous mode [ 1162.500485][T18561] hsr_slave_1: entered promiscuous mode [ 1162.518676][T18561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.526275][T18561] Cannot create hsr debugfs directory [ 1162.746938][T18611] 9pnet_fd: Insufficient options for proto=fd [ 1164.518853][ T5787] Bluetooth: hci1: command tx timeout [ 1164.914915][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'. [ 1167.268048][T18561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1167.322690][T18561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1167.407027][T18561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1167.444122][T18561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1167.467540][ T9341] hsr_slave_0: left promiscuous mode [ 1167.479172][ T9341] hsr_slave_1: left promiscuous mode [ 1168.143090][ T9341] batman_adv: batadv0: Removing interface: bridge_slave_0 [ 1168.252330][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.319043][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.374335][ T9341] bridge_slave_1: left allmulticast mode [ 1168.389643][ T9341] bridge_slave_1: left promiscuous mode [ 1168.421802][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.756216][ T9341] team0 (unregistering): Port device team_slave_1 removed [ 1170.817476][ T9341] team0 (unregistering): Port device team_slave_0 removed [ 1170.879190][ T9341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.888233][ T9341] bond_slave_1 (unregistering): left allmulticast mode [ 1170.945357][ T9341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.957618][ T9341] bond_slave_0 (unregistering): left allmulticast mode [ 1171.393627][ T9341] bond0 (unregistering): Released all slaves [ 1171.546469][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1171.816226][T18561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.022388][T18561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.045779][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.053076][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.098152][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.105570][T18695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.634996][ T9341] IPVS: stop unused estimator thread 0... [ 1176.922777][T18561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.680980][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.687382][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.504108][T18561] veth0_vlan: entered promiscuous mode [ 1184.518815][T18561] veth1_vlan: entered promiscuous mode [ 1184.557985][T18561] veth0_macvtap: entered promiscuous mode [ 1184.569001][T18561] veth1_macvtap: entered promiscuous mode [ 1184.589367][T18561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.601475][T18561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.647869][T18561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.656896][T18561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.679262][T18561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.688163][T18561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.931669][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.978297][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.136199][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.170599][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.109908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1207.820076][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1207.970987][T18880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1208.106049][T18880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1208.194694][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.206258][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.223597][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.230865][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1208.260956][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1208.276795][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1208.284091][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.304420][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1208.321801][T18893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1213.098957][ T5787] Bluetooth: hci3: command tx timeout [ 1213.105603][ T5787] Bluetooth: hci0: command tx timeout [ 1213.150177][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2844'. [ 1214.071313][T18915] trusted_key: encrypted_key: insufficient parameters specified [ 1214.097603][T18876] lo speed is unknown, defaulting to 1000 [ 1214.103650][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2846'. [ 1214.122316][T18890] lo speed is unknown, defaulting to 1000 [ 1214.137953][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1214.150074][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1215.627153][T18893] Bluetooth: hci0: command tx timeout [ 1215.634387][T18893] Bluetooth: hci3: command tx timeout [ 1215.651326][T18876] chnl_net:caif_netlink_parms(): no params data found [ 1218.230168][ T5787] Bluetooth: hci3: command tx timeout [ 1218.235863][ T5787] Bluetooth: hci0: command tx timeout [ 1218.400285][T18890] chnl_net:caif_netlink_parms(): no params data found [ 1218.501051][T18876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.508563][T18876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.516244][T18876] bridge_slave_0: entered allmulticast mode [ 1219.547446][T18876] bridge_slave_0: entered promiscuous mode [ 1219.563102][T18876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.575457][T18876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.582866][T18876] bridge_slave_1: entered allmulticast mode [ 1219.590072][T18876] bridge_slave_1: entered promiscuous mode [ 1219.623190][T18876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.634771][T18876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.674468][T18876] team0: Port device team_slave_0 added [ 1219.683859][T18876] team0: Port device team_slave_1 added [ 1219.719375][T18876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.960238][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.986287][T18893] Bluetooth: hci0: command tx timeout [ 1220.992226][T18893] Bluetooth: hci3: command tx timeout [ 1221.036277][T18876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.634661][T18876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.642221][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.680818][T18876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.875863][T18876] hsr_slave_0: entered promiscuous mode [ 1231.906775][T18876] hsr_slave_1: entered promiscuous mode [ 1231.935334][T18876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1231.969897][T18876] Cannot create hsr debugfs directory [ 1231.989286][T18890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.997747][T18890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.012347][T18890] bridge_slave_0: entered allmulticast mode [ 1232.021805][T18890] bridge_slave_0: entered promiscuous mode [ 1234.126223][T18890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.139450][T18890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.159977][T18890] bridge_slave_1: entered allmulticast mode [ 1234.167297][T18890] bridge_slave_1: entered promiscuous mode [ 1234.196998][T18890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.210536][T18890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.252147][T18890] team0: Port device team_slave_0 added [ 1234.262840][T18890] team0: Port device team_slave_1 added [ 1234.295539][T18890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.302647][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.369193][T18890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.401845][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1238.210744][T18890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.217775][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.918678][T18890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.982257][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.988658][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.061665][T18890] hsr_slave_0: entered promiscuous mode [ 1242.691451][T18890] hsr_slave_1: entered promiscuous mode [ 1242.698467][T18890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.706176][T18890] Cannot create hsr debugfs directory [ 1248.391460][T18991] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1264.851290][T18893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1264.873598][T18893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1264.892694][T18893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1264.901742][T18893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1264.909671][T18893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1264.917792][T18893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1268.329235][ T5787] Bluetooth: hci1: command tx timeout [ 1270.510191][ T5787] Bluetooth: hci1: command tx timeout [ 1270.607724][T18893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.618435][T18893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.627395][T18893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.637287][T18893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.645440][T18893] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1270.653172][T18893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1271.574558][T19063] lo speed is unknown, defaulting to 1000 [ 1271.682139][T19078] lo speed is unknown, defaulting to 1000 [ 1272.396699][T19063] chnl_net:caif_netlink_parms(): no params data found [ 1272.456780][T19078] chnl_net:caif_netlink_parms(): no params data found [ 1272.563774][T18893] Bluetooth: hci1: command tx timeout [ 1274.118110][T18893] Bluetooth: hci5: command tx timeout [ 1274.511213][T19063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.518424][T19063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.525678][T19063] bridge_slave_0: entered allmulticast mode [ 1274.532837][T19063] bridge_slave_0: entered promiscuous mode [ 1274.540954][T19063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.548063][T19063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.555225][T19063] bridge_slave_1: entered allmulticast mode [ 1274.562048][T19063] bridge_slave_1: entered promiscuous mode [ 1274.584570][T19063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.815424][T19063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.843053][T19063] team0: Port device team_slave_0 added [ 1274.850795][T19063] team0: Port device team_slave_1 added [ 1274.870853][T19063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.877820][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.903685][T19063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.096179][T19063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.103164][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.129059][T19063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.170047][T18893] Bluetooth: hci1: command tx timeout [ 1275.407030][T19063] hsr_slave_0: entered promiscuous mode [ 1275.430516][T19063] hsr_slave_1: entered promiscuous mode [ 1275.476580][T19063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.484426][T19063] Cannot create hsr debugfs directory [ 1276.170790][T18893] Bluetooth: hci5: command tx timeout [ 1278.045018][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 1278.051335][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 1278.721059][T18893] Bluetooth: hci5: command tx timeout [ 1278.800189][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 1278.806326][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 1278.880967][T19123] ceph: No mds server is up or the cluster is laggy [ 1280.834681][T16115] libceph: connect (1)[c::]:6789 error -101 [ 1280.847402][T16115] libceph: mon0 (1)[c::]:6789 connect error [ 1280.856694][T18893] Bluetooth: hci5: command tx timeout [ 1285.387676][T19078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.407414][T19078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.660151][T19078] bridge_slave_0: entered allmulticast mode [ 1285.678112][T19078] bridge_slave_0: entered promiscuous mode [ 1286.155631][T19078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.171007][T19078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.186864][T19078] bridge_slave_1: entered allmulticast mode [ 1286.203608][T19078] bridge_slave_1: entered promiscuous mode [ 1286.335424][T19078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.403421][T19078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.481544][T19078] team0: Port device team_slave_0 added [ 1286.501466][T19078] team0: Port device team_slave_1 added [ 1286.563306][T19078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.570594][T19078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.597997][T19078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.640005][T19078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.659829][T19078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.729697][T19078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.141330][T19078] hsr_slave_0: entered promiscuous mode [ 1296.507865][T19078] hsr_slave_1: entered promiscuous mode [ 1296.557262][T19078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.565370][T19078] Cannot create hsr debugfs directory [ 1301.623663][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.630406][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.621457][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1306.646632][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1306.655244][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1306.663745][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1306.676906][ T5787] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1306.684573][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1308.916923][ T5787] Bluetooth: hci6: command tx timeout [ 1309.908472][T19175] lo speed is unknown, defaulting to 1000 [ 1310.967143][T19175] chnl_net:caif_netlink_parms(): no params data found [ 1311.281097][T19175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.299393][T19175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.320031][T19175] bridge_slave_0: entered allmulticast mode [ 1311.327639][T19175] bridge_slave_0: entered promiscuous mode [ 1311.366369][T19175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.374074][ T5787] Bluetooth: hci6: command tx timeout [ 1311.399978][T19175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.407320][T19175] bridge_slave_1: entered allmulticast mode [ 1311.444103][T19175] bridge_slave_1: entered promiscuous mode [ 1311.560420][T19175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.613833][T19175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.683557][T19175] team0: Port device team_slave_0 added [ 1314.713104][T19175] team0: Port device team_slave_1 added [ 1314.816318][T19175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.829853][ T5787] Bluetooth: hci6: command tx timeout [ 1314.836090][T19175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.910971][T19175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.291625][T18893] Bluetooth: hci6: command tx timeout [ 1319.794669][T19175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.802488][T19175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.828800][T19175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.236874][T19175] hsr_slave_0: entered promiscuous mode [ 1324.751740][T19175] hsr_slave_1: entered promiscuous mode [ 1327.107803][T19175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.116688][T19175] Cannot create hsr debugfs directory [ 1332.406278][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1334.626810][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1334.630909][T18880] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1334.634512][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 1334.647517][ T5782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1334.690226][T19239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1334.702239][T19239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1334.711665][T19239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1334.719608][T18880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1334.728601][T19239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1334.739949][T19239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1334.770567][T19239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1334.779026][T19239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1334.790808][T19239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1334.798222][T19239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1340.269053][T18880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.311725][T19239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.320620][T19239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1342.783393][T19239] Bluetooth: hci7: command tx timeout [ 1342.789937][T19239] Bluetooth: hci4: command tx timeout [ 1342.826301][T18890] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.328859][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1345.336066][ T5787] Bluetooth: hci4: command tx timeout [ 1345.341624][ T5787] Bluetooth: hci7: command tx timeout [ 1347.729567][T18893] Bluetooth: hci0: Opcode 0x0c25 failed: -110 [ 1347.733215][T19239] Bluetooth: hci7: command tx timeout [ 1347.737110][T18893] Bluetooth: hci4: command tx timeout [ 1347.804154][T18893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1347.812134][T18893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1347.825203][T18893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1350.049838][T19242] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 1350.058791][ T5787] Bluetooth: hci7: command tx timeout [ 1350.064638][ T5787] Bluetooth: hci4: command tx timeout [ 1350.339277][T19233] lo speed is unknown, defaulting to 1000 [ 1350.612344][T19237] lo speed is unknown, defaulting to 1000 [ 1355.281112][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1355.298641][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1355.308589][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1357.778160][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1357.801039][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1357.808520][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1361.786231][T18890] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.828000][T18695] hsr_slave_0: left promiscuous mode [ 1363.233609][ T5787] Bluetooth: hci0: command tx timeout [ 1363.240402][T18695] hsr_slave_1: left promiscuous mode [ 1363.247107][T18695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.247959][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.260692][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.263636][T18695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.275724][T18695] bridge_slave_1: left allmulticast mode [ 1363.281431][T18695] bridge_slave_1: left promiscuous mode [ 1363.287223][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.751712][T18695] bridge_slave_0: left allmulticast mode [ 1364.757427][T18695] bridge_slave_0: left promiscuous mode [ 1364.763208][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.291365][ T5787] Bluetooth: hci0: command tx timeout [ 1365.327961][T19239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1365.338514][T19239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1365.359599][T19239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1365.369054][T19239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1365.377630][T19239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1365.385376][T19239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1367.908773][T19239] Bluetooth: hci0: command tx timeout [ 1367.914463][T19239] Bluetooth: hci2: command tx timeout [ 1369.661062][T18695] team0 (unregistering): Port device team_slave_1 removed [ 1370.715306][T18695] team0 (unregistering): Port device team_slave_0 removed [ 1370.767322][ T5787] Bluetooth: hci2: command tx timeout [ 1370.773339][ T5787] Bluetooth: hci0: command tx timeout [ 1370.807188][T18695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.146970][T18695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.705717][T19239] Bluetooth: hci2: command tx timeout [ 1375.196143][T18695] bond0 (unregistering): Released all slaves [ 1375.798395][T19239] Bluetooth: hci2: command tx timeout [ 1376.595433][T18890] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.674215][T19255] lo speed is unknown, defaulting to 1000 [ 1376.697374][T19270] lo speed is unknown, defaulting to 1000 [ 1378.203854][T19237] chnl_net:caif_netlink_parms(): no params data found [ 1379.397208][T19233] chnl_net:caif_netlink_parms(): no params data found [ 1381.833142][T18890] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.881106][T19237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.888266][T19237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.895530][T19237] bridge_slave_0: entered allmulticast mode [ 1382.554908][T19237] bridge_slave_0: entered promiscuous mode [ 1382.568287][T19237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.575540][T19237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.582883][T19237] bridge_slave_1: entered allmulticast mode [ 1382.618891][T19237] bridge_slave_1: entered promiscuous mode [ 1382.655537][T19237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.669696][T19237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.721403][T19255] chnl_net:caif_netlink_parms(): no params data found [ 1383.609611][T19233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.618314][T19233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.626013][T19233] bridge_slave_0: entered allmulticast mode [ 1383.633651][T19233] bridge_slave_0: entered promiscuous mode [ 1383.642453][T19233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.650179][T19233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.657441][T19233] bridge_slave_1: entered allmulticast mode [ 1383.665535][T19233] bridge_slave_1: entered promiscuous mode [ 1383.723377][T19233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.753972][T19233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.819122][T19233] team0: Port device team_slave_0 added [ 1383.841512][T19233] team0: Port device team_slave_1 added [ 1385.608344][T19233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.616002][T19233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.120748][T19233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.153600][T19233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.169780][T19233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.499785][T19233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.963098][T18893] Bluetooth: hci1: command 0x0406 tx timeout [ 1393.016162][T19233] hsr_slave_0: entered promiscuous mode [ 1393.770717][T18880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1393.782088][T18880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1393.792601][T18880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1393.801520][T18880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1393.812104][T18880] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1393.823416][T18880] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1393.831931][T18880] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1393.840818][T18880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1393.848054][T18880] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1393.860291][T18893] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1393.868247][T18893] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1393.878441][T18893] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1395.062914][T18880] Bluetooth: hci5: command 0x0406 tx timeout [ 1395.082059][T19233] hsr_slave_1: entered promiscuous mode [ 1395.116700][T19233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1395.129792][T19233] Cannot create hsr debugfs directory [ 1395.149031][T19237] team0: Port device team_slave_0 added [ 1395.176882][T19270] chnl_net:caif_netlink_parms(): no params data found [ 1396.745137][T19361] lo speed is unknown, defaulting to 1000 [ 1396.855535][T19255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.863694][T19255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.871851][T19255] bridge_slave_0: entered allmulticast mode [ 1396.879435][T19255] bridge_slave_0: entered promiscuous mode [ 1396.888200][T19255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.896177][T19255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.903615][T19255] bridge_slave_1: entered allmulticast mode [ 1396.911454][T19255] bridge_slave_1: entered promiscuous mode [ 1396.950883][T19255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.965736][T19255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.113197][T19362] lo speed is unknown, defaulting to 1000 [ 1398.470375][ T5787] Bluetooth: hci6: command tx timeout [ 1398.476867][ T5787] Bluetooth: hci8: command tx timeout [ 1400.607856][T19239] Bluetooth: hci8: command tx timeout [ 1400.619789][T19239] Bluetooth: hci6: command tx timeout [ 1400.692840][T19255] team0: Port device team_slave_0 added [ 1400.712516][T19255] team0: Port device team_slave_1 added [ 1400.750454][T19255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.757461][T19255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.783448][T19255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.796732][T19255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.803769][T19255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.830000][T19255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.731008][ T5787] Bluetooth: hci6: command tx timeout [ 1402.736498][ T5787] Bluetooth: hci8: command tx timeout [ 1404.925787][T19239] Bluetooth: hci8: command tx timeout [ 1404.931724][T19239] Bluetooth: hci6: command tx timeout [ 1407.033933][T19255] hsr_slave_0: entered promiscuous mode [ 1411.167177][T19255] hsr_slave_1: entered promiscuous mode [ 1411.227084][T19255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.234738][T19255] Cannot create hsr debugfs directory [ 1421.511443][T19239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1421.522937][T19239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1421.531903][T19239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1421.541285][T19239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1421.549070][T19239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1421.556477][T19239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1423.878173][T19239] Bluetooth: hci1: command tx timeout [ 1423.900417][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.906810][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.184630][T19239] Bluetooth: hci1: command tx timeout [ 1427.783550][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1427.794705][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1427.803644][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1427.813868][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1427.821970][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1427.831603][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1428.260255][ T5787] Bluetooth: hci1: command tx timeout [ 1428.569655][T19270] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1430.541892][ T5787] Bluetooth: hci0: command tx timeout [ 1430.557680][ T5787] Bluetooth: hci1: command tx timeout [ 1432.848509][T19239] Bluetooth: hci0: command tx timeout [ 1435.320328][ T5787] Bluetooth: hci0: command tx timeout [ 1437.880703][T19239] Bluetooth: hci0: command tx timeout [ 1437.973603][T19379] lo speed is unknown, defaulting to 1000 [ 1440.930271][T19361] chnl_net:caif_netlink_parms(): no params data found [ 1440.999089][T19408] lo speed is unknown, defaulting to 1000 [ 1441.056884][T19362] chnl_net:caif_netlink_parms(): no params data found [ 1441.838553][T19361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.860280][T19361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.867634][T19361] bridge_slave_0: entered allmulticast mode [ 1441.890951][T19361] bridge_slave_0: entered promiscuous mode [ 1441.952495][T19361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.959678][T19361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.990165][T19361] bridge_slave_1: entered allmulticast mode [ 1442.009919][T19361] bridge_slave_1: entered promiscuous mode [ 1442.093800][T19362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.105131][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.112889][T19362] bridge_slave_0: entered allmulticast mode [ 1442.131366][T19362] bridge_slave_0: entered promiscuous mode [ 1442.202550][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.221271][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.228970][T19362] bridge_slave_1: entered allmulticast mode [ 1442.267693][T19362] bridge_slave_1: entered promiscuous mode [ 1442.291374][T19361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.342216][T19361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.396258][T19362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.522631][T19362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.589012][T19361] team0: Port device team_slave_0 added [ 1442.686632][T19361] team0: Port device team_slave_1 added [ 1442.788632][T19362] team0: Port device team_slave_0 added [ 1442.858142][T19408] chnl_net:caif_netlink_parms(): no params data found [ 1442.912516][T19362] team0: Port device team_slave_1 added [ 1442.919231][T19361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.946471][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.010901][T19361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.132489][T19361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.139500][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.238302][T19361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.326839][T19362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.334179][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.405819][T19362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.837996][T19362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.847407][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.873859][T19362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.445907][T19362] hsr_slave_0: entered promiscuous mode [ 1445.452921][T19362] hsr_slave_1: entered promiscuous mode [ 1445.462572][T19362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.470252][T19362] Cannot create hsr debugfs directory [ 1445.506383][T19361] hsr_slave_0: entered promiscuous mode [ 1445.512787][T19361] hsr_slave_1: entered promiscuous mode [ 1445.518877][T19361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.526469][T19361] Cannot create hsr debugfs directory [ 1445.847544][T19408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.855076][T19408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.862868][T19408] bridge_slave_0: entered allmulticast mode [ 1445.870925][T19408] bridge_slave_0: entered promiscuous mode [ 1445.912591][T19408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.920964][T19408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.928289][T19408] bridge_slave_1: entered allmulticast mode [ 1445.936582][T19408] bridge_slave_1: entered promiscuous mode [ 1446.070207][T19408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.136241][T19408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.193121][T19379] chnl_net:caif_netlink_parms(): no params data found [ 1446.297092][T19408] team0: Port device team_slave_0 added [ 1446.322757][T19408] team0: Port device team_slave_1 added [ 1446.448142][T19408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.455218][T19408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.485498][T19408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.850557][T19408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.857590][T19408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.884244][T19408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.915926][T19379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.923122][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.198242][T19379] bridge_slave_0: entered allmulticast mode [ 1448.205968][T19379] bridge_slave_0: entered promiscuous mode [ 1452.130657][T19361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1453.637384][T19361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1455.834694][T19239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1455.930940][T19239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1455.999851][T19239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1456.109853][T19239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1456.149839][T19239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1456.160078][T19239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1457.615304][T19379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.622505][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.629993][T19379] bridge_slave_1: entered allmulticast mode [ 1457.637766][T19379] bridge_slave_1: entered promiscuous mode [ 1460.059892][T19239] Bluetooth: hci2: command tx timeout [ 1460.268379][T19366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1460.305694][T19366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1460.314525][T19366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1460.350614][T19366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1460.366571][T19366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1460.394723][T19366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1462.693633][T19366] Bluetooth: hci2: command tx timeout [ 1464.140223][T19470] lo speed is unknown, defaulting to 1000 [ 1464.155476][T19379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.167777][T19379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.285839][T19379] team0: Port device team_slave_0 added [ 1465.295345][T19379] team0: Port device team_slave_1 added [ 1465.299850][ T5787] Bluetooth: hci3: command tx timeout [ 1465.307351][ T5787] Bluetooth: hci2: command tx timeout [ 1465.328450][T19379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.335461][T19379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.613291][T19379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.628122][T19379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.635129][T19379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.661042][T19379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.350425][T19366] Bluetooth: hci2: command tx timeout [ 1467.355905][T19366] Bluetooth: hci3: command tx timeout [ 1469.195901][T19408] hsr_slave_0: entered promiscuous mode [ 1469.202509][T19408] hsr_slave_1: entered promiscuous mode [ 1469.460945][T19366] Bluetooth: hci3: command tx timeout [ 1470.259653][T19408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.267409][T19408] Cannot create hsr debugfs directory [ 1471.495058][T19379] hsr_slave_0: entered promiscuous mode [ 1471.501520][T19379] hsr_slave_1: entered promiscuous mode [ 1471.508151][T19379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.515774][T19379] Cannot create hsr debugfs directory [ 1471.521811][T19366] Bluetooth: hci3: command tx timeout [ 1471.659286][T19473] lo speed is unknown, defaulting to 1000 [ 1472.263890][T19470] chnl_net:caif_netlink_parms(): no params data found [ 1472.433592][T19473] chnl_net:caif_netlink_parms(): no params data found [ 1472.525601][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.535982][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.543733][T19470] bridge_slave_0: entered allmulticast mode [ 1472.551666][T19470] bridge_slave_0: entered promiscuous mode [ 1472.575248][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.582752][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.590505][T19470] bridge_slave_1: entered allmulticast mode [ 1472.598172][T19470] bridge_slave_1: entered promiscuous mode [ 1472.732258][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.780563][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.791549][T19473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.798806][T19473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.809301][T19473] bridge_slave_0: entered allmulticast mode [ 1472.817329][T19473] bridge_slave_0: entered promiscuous mode [ 1472.841564][T19473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.848763][T19473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.856754][T19473] bridge_slave_1: entered allmulticast mode [ 1472.865674][T19473] bridge_slave_1: entered promiscuous mode [ 1472.896416][T19470] team0: Port device team_slave_0 added [ 1472.919082][T19470] team0: Port device team_slave_1 added [ 1473.012045][T19473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.051461][T19473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.074849][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.082224][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.110106][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.145581][T19473] team0: Port device team_slave_0 added [ 1473.181350][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.188359][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.241474][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.256271][T19473] team0: Port device team_slave_1 added [ 1473.327343][T19473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.334433][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.361751][T19473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.389318][T19473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.430742][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.478322][T19473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.637084][T19470] hsr_slave_0: entered promiscuous mode [ 1473.692458][T19470] hsr_slave_1: entered promiscuous mode [ 1473.700437][T19470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.708046][T19470] Cannot create hsr debugfs directory [ 1477.657138][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1477.667742][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1477.677238][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1477.686508][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1477.710383][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1477.719095][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1481.006164][ T5787] Bluetooth: hci4: command tx timeout [ 1484.339764][ T5787] Bluetooth: hci4: command tx timeout [ 1484.379011][T19473] hsr_slave_0: entered promiscuous mode [ 1484.400282][T19473] hsr_slave_1: entered promiscuous mode [ 1485.494826][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.494894][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.524126][T19473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1485.544693][T19473] Cannot create hsr debugfs directory [ 1486.526881][ T5787] Bluetooth: hci4: command tx timeout [ 1488.181442][T19366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1488.193027][T19366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1488.202134][T19366] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1488.213649][T19366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1488.221513][T19366] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1488.228879][T19366] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1488.580165][T19366] Bluetooth: hci4: command tx timeout [ 1490.107288][T19504] lo speed is unknown, defaulting to 1000 [ 1491.180213][T19366] Bluetooth: hci5: command tx timeout [ 1491.226513][T19532] lo speed is unknown, defaulting to 1000 [ 1491.905928][T19504] chnl_net:caif_netlink_parms(): no params data found [ 1492.064952][T19532] chnl_net:caif_netlink_parms(): no params data found [ 1492.915326][T19504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.922837][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.932491][T19504] bridge_slave_0: entered allmulticast mode [ 1492.940469][T19504] bridge_slave_0: entered promiscuous mode [ 1493.024253][T19504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.039917][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.047269][T19504] bridge_slave_1: entered allmulticast mode [ 1493.230524][T19366] Bluetooth: hci5: command tx timeout [ 1494.720328][T19504] bridge_slave_1: entered promiscuous mode [ 1496.016036][T19504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.030955][T19504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.069925][T19504] team0: Port device team_slave_0 added [ 1496.080014][T19504] team0: Port device team_slave_1 added [ 1496.089032][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.109757][T19366] Bluetooth: hci5: command tx timeout [ 1498.000477][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.007882][T19532] bridge_slave_0: entered allmulticast mode [ 1498.025960][T19532] bridge_slave_0: entered promiscuous mode [ 1498.036813][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.044418][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.052345][T19532] bridge_slave_1: entered allmulticast mode [ 1498.060321][T19532] bridge_slave_1: entered promiscuous mode [ 1498.200279][ T5787] Bluetooth: hci5: command tx timeout [ 1502.344381][T19532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.382971][T19504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.598637][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.624590][T19504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.993796][T19532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.003830][T19504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.323100][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.349897][T19504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.901629][T19532] team0: Port device team_slave_0 added [ 1508.933214][T19532] team0: Port device team_slave_1 added [ 1508.997993][T19532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.019723][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.069738][T19532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.103310][T19532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.119726][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.169728][T19532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.099367][T19532] hsr_slave_0: entered promiscuous mode [ 1510.119938][T19532] hsr_slave_1: entered promiscuous mode [ 1510.129730][T19532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.137340][T19532] Cannot create hsr debugfs directory [ 1510.162707][T19504] hsr_slave_0: entered promiscuous mode [ 1510.172215][T19504] hsr_slave_1: entered promiscuous mode [ 1510.178484][T19504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.186142][T19504] Cannot create hsr debugfs directory [ 1523.711131][T19366] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1523.812171][T19239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1523.837637][T19239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1523.864417][T19239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1523.890329][T19239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1523.903707][T19239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1523.912265][T19239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1523.919655][T18893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1523.929204][T19239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1523.939453][T18893] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1523.968295][T18893] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1523.991149][T18893] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1524.108267][T19615] lo speed is unknown, defaulting to 1000 [ 1524.190959][T19612] lo speed is unknown, defaulting to 1000 [ 1525.025708][T19612] chnl_net:caif_netlink_parms(): no params data found [ 1525.129264][T19615] chnl_net:caif_netlink_parms(): no params data found [ 1525.887215][T19612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.899827][T19612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.907151][T19612] bridge_slave_0: entered allmulticast mode [ 1525.932917][T19612] bridge_slave_0: entered promiscuous mode [ 1525.952307][T19612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.959479][T19612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.980685][T19612] bridge_slave_1: entered allmulticast mode [ 1525.999891][T19612] bridge_slave_1: entered promiscuous mode [ 1526.011531][T19615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.024435][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.035567][T18893] Bluetooth: hci7: command tx timeout [ 1526.050017][T19615] bridge_slave_0: entered allmulticast mode [ 1526.069912][T19615] bridge_slave_0: entered promiscuous mode [ 1526.081053][T18893] Bluetooth: hci6: command tx timeout [ 1526.101515][T19615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.108683][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.130688][T19615] bridge_slave_1: entered allmulticast mode [ 1526.140084][T19615] bridge_slave_1: entered promiscuous mode [ 1526.277923][T19615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.314230][T19615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.345745][T19612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.374391][T19612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.540800][T19612] team0: Port device team_slave_0 added [ 1526.568065][T19615] team0: Port device team_slave_0 added [ 1526.585643][T19612] team0: Port device team_slave_1 added [ 1526.603649][T19615] team0: Port device team_slave_1 added [ 1526.737488][T19612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.759712][T19612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.809718][T19612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.841770][T19615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.848766][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.909717][T19615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.942475][T19615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.949467][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.009717][T19615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.912970][T19612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.939706][T19612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.973693][T19612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.270301][T19612] hsr_slave_0: entered promiscuous mode [ 1532.277325][T19612] hsr_slave_1: entered promiscuous mode [ 1532.283928][T19612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.291870][T19612] Cannot create hsr debugfs directory [ 1532.298869][T18893] Bluetooth: hci7: command tx timeout [ 1532.304358][T18893] Bluetooth: hci6: command tx timeout [ 1536.023118][ T5787] Bluetooth: hci6: command tx timeout [ 1536.028620][ T5787] Bluetooth: hci7: command tx timeout [ 1536.097103][T19615] hsr_slave_0: entered promiscuous mode [ 1536.104170][T19615] hsr_slave_1: entered promiscuous mode [ 1537.856968][T19615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1537.865370][T19615] Cannot create hsr debugfs directory [ 1539.270359][ T5787] Bluetooth: hci7: command tx timeout [ 1539.275843][ T5787] Bluetooth: hci6: command tx timeout [ 1539.817635][ T5787] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1539.829822][ T5787] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1539.838259][ T5787] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1539.847346][ T5787] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1539.855609][ T5787] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1539.867438][ T5787] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1541.238913][T19631] lo speed is unknown, defaulting to 1000 [ 1543.226846][ T5787] Bluetooth: hci8: command tx timeout [ 1545.312204][T18893] Bluetooth: hci8: command tx timeout [ 1547.399656][T18893] Bluetooth: hci8: command tx timeout [ 1547.524564][T19631] chnl_net:caif_netlink_parms(): no params data found [ 1547.532046][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.538377][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.193037][T19631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.209910][T19631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.217325][T19631] bridge_slave_0: entered allmulticast mode [ 1548.241927][T19631] bridge_slave_0: entered promiscuous mode [ 1548.264894][T19631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.289824][T19631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.297192][T19631] bridge_slave_1: entered allmulticast mode [ 1548.321598][T19631] bridge_slave_1: entered promiscuous mode [ 1548.406823][T19631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.434170][T19631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.532276][T19631] team0: Port device team_slave_0 added [ 1548.555359][T19631] team0: Port device team_slave_1 added [ 1548.629849][T19631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.636895][T19631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.699710][T19631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.521989][T19239] Bluetooth: hci1: command 0x0406 tx timeout [ 1549.530692][ T5787] Bluetooth: hci8: command tx timeout [ 1550.104622][T19631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.121944][T19631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.779728][T19631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.857763][T19631] hsr_slave_0: entered promiscuous mode [ 1552.870166][T19631] hsr_slave_1: entered promiscuous mode [ 1555.721699][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 1555.734218][T19631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1555.753980][T19631] Cannot create hsr debugfs directory [ 1555.791499][T19239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1555.809916][T19239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1555.818609][T19239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1555.830707][T19239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1555.838512][T19239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1555.845930][T19239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1563.419174][T19239] Bluetooth: hci9: command tx timeout [ 1566.880400][T18893] Bluetooth: hci9: command tx timeout [ 1570.110516][T19659] lo speed is unknown, defaulting to 1000 [ 1570.152181][T18893] Bluetooth: hci9: command tx timeout [ 1573.289892][T18893] Bluetooth: hci9: command tx timeout [ 1576.435356][T19659] chnl_net:caif_netlink_parms(): no params data found [ 1582.205125][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 1582.774263][T19659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.781529][T19659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.788940][T19659] bridge_slave_0: entered allmulticast mode [ 1582.796664][T19659] bridge_slave_0: entered promiscuous mode [ 1582.805513][T19659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.829696][T19659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.837123][T19659] bridge_slave_1: entered allmulticast mode [ 1582.866798][T18893] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1582.882171][T19659] bridge_slave_1: entered promiscuous mode [ 1582.905947][T18893] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1583.006658][T19366] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1583.036328][T19659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.073833][T19659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.173343][T19659] team0: Port device team_slave_0 added [ 1583.203049][T19659] team0: Port device team_slave_1 added [ 1583.299800][T19366] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1585.592488][T19366] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1585.601655][T19366] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1588.961132][T19659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.968149][T19659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.012951][T19366] Bluetooth: hci10: command tx timeout [ 1589.059953][T19659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.088033][T19659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.119715][T19659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.199385][T19659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.449461][ T5787] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1589.476987][ T5787] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1589.533263][ T5787] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1589.655369][ T5787] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1589.709797][ T5787] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1589.739798][ T5787] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1592.629447][T19239] Bluetooth: hci3: command 0x0406 tx timeout [ 1592.649809][T19239] Bluetooth: hci10: command tx timeout [ 1592.655425][T19239] Bluetooth: hci11: command tx timeout [ 1596.084816][ T5787] Bluetooth: hci11: command tx timeout [ 1596.090448][ T5787] Bluetooth: hci10: command tx timeout [ 1596.182728][T19703] lo speed is unknown, defaulting to 1000 [ 1596.440427][T19696] lo speed is unknown, defaulting to 1000 [ 1599.963813][T19239] Bluetooth: hci10: command tx timeout [ 1599.969388][T19239] Bluetooth: hci11: command tx timeout [ 1603.809000][T19366] Bluetooth: hci11: command tx timeout [ 1603.921420][T19659] hsr_slave_0: entered promiscuous mode [ 1604.567843][ T5787] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1604.579573][ T5787] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1604.624713][ T5787] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1604.715082][ T5787] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1604.723102][ T5787] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1604.769780][ T5787] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1608.004850][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 1608.004979][T19239] Bluetooth: hci12: command tx timeout [ 1608.018244][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.018322][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.056434][T19659] hsr_slave_1: entered promiscuous mode [ 1615.892323][T19239] Bluetooth: hci12: command tx timeout [ 1615.924219][T19659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1619.380794][T18880] Bluetooth: hci12: command tx timeout [ 1619.386368][T18880] Bluetooth: hci5: command 0x0406 tx timeout [ 1619.392986][T19659] Cannot create hsr debugfs directory [ 1619.704661][T19730] lo speed is unknown, defaulting to 1000 [ 1620.164735][T19703] chnl_net:caif_netlink_parms(): no params data found [ 1620.225702][T19696] chnl_net:caif_netlink_parms(): no params data found [ 1621.431176][T18893] Bluetooth: hci12: command tx timeout [ 1621.662157][T19703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.669360][T19703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.690029][T19703] bridge_slave_0: entered allmulticast mode [ 1621.709922][T19703] bridge_slave_0: entered promiscuous mode [ 1621.738037][T19696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.745371][T19696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.760573][T19696] bridge_slave_0: entered allmulticast mode [ 1621.780450][T19696] bridge_slave_0: entered promiscuous mode [ 1621.788884][T19703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.809865][T19703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.817245][T19703] bridge_slave_1: entered allmulticast mode [ 1621.841572][T19703] bridge_slave_1: entered promiscuous mode [ 1621.857204][T19696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.880848][T19696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.888615][T19696] bridge_slave_1: entered allmulticast mode [ 1621.911595][T19696] bridge_slave_1: entered promiscuous mode [ 1622.062892][T19703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.114059][T19703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.174130][T19696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.231818][T19696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.289952][T19730] chnl_net:caif_netlink_parms(): no params data found [ 1622.441938][T19696] team0: Port device team_slave_0 added [ 1622.467783][T19703] team0: Port device team_slave_0 added [ 1622.488274][T19703] team0: Port device team_slave_1 added [ 1622.537386][T19696] team0: Port device team_slave_1 added [ 1622.897183][T19696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.919887][T19696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.999687][T19696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.021481][T19703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.028476][T19703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.089675][T19703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.609979][ T28] INFO: task syz-executor:19379 blocked for more than 154 seconds. [ 1635.617970][ T28] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1635.659706][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1635.729684][ T28] task:syz-executor state:D stack:22280 pid:19379 ppid:1 flags:0x00004004 [ 1635.738998][ T28] Call Trace: [ 1639.589698][ T28] [ 1639.592727][ T28] __schedule+0x1553/0x45a0 [ 1639.597295][ T28] ? simple_strntoull+0x112/0x180 [ 1639.620519][ T28] ? asan.module_dtor+0x20/0x20 [ 1639.625471][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1639.639691][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1639.645231][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1639.660271][ T28] schedule+0xbd/0x170 [ 1639.664511][ T28] schedule_preempt_disabled+0x13/0x20 [ 1639.689676][ T28] __mutex_lock+0x6a9/0xcc0 [ 1639.694260][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1639.698976][ T28] ? del_device_store+0xd8/0x370 [ 1639.719676][ T28] ? mutex_lock_nested+0x20/0x20 [ 1639.724705][ T28] del_device_store+0xd8/0x370 [ 1639.729508][ T28] ? del_port_store+0x170/0x170 [ 1639.749738][ T28] ? sysfs_kf_write+0x187/0x2a0 [ 1639.754663][ T28] ? sysfs_kf_read+0x310/0x310 [ 1639.759454][ T28] kernfs_fop_write_iter+0x3b6/0x520 [ 1639.779677][ T28] vfs_write+0x46c/0x990 [ 1639.784000][ T28] ? file_end_write+0x250/0x250 [ 1639.788911][ T28] ? do_sys_openat2+0x170/0x1d0 [ 1639.810282][ T28] ? __fdget_pos+0x2ba/0x330 [ 1639.814936][ T28] ksys_write+0x150/0x260 [ 1639.819308][ T28] ? __ia32_sys_read+0x90/0x90 [ 1639.839670][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1639.844937][ T28] do_syscall_64+0x55/0xb0 [ 1639.849385][ T28] ? clear_bhb_loop+0x40/0x90 [ 1639.869673][ T28] ? clear_bhb_loop+0x40/0x90 [ 1639.874432][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1639.889664][ T28] RIP: 0033:0x7f9ea0b5d68e [ 1639.894123][ T28] RSP: 002b:00007ffe5aea3338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1639.909988][ T28] RAX: ffffffffffffffda RBX: 0000555557380500 RCX: 00007f9ea0b5d68e [ 1639.918006][ T28] RDX: 0000000000000001 RSI: 00007ffe5aea33c0 RDI: 0000000000000005 [ 1639.979768][ T28] RBP: 00007f9ea0c335f2 R08: 0000000000000000 R09: 0000000000000000 [ 1639.987868][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.083566][ T28] R13: 00007ffe5aea33c0 R14: 00007f9ea1944620 R15: 0000000000000003 [ 1640.099689][ T28] [ 1640.110128][ T28] [ 1640.110128][ T28] Showing all locks held in the system: [ 1640.117975][ T28] 1 lock held by khungtaskd/28: [ 1640.142709][ T28] #0: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1640.161355][ T28] 4 locks held by kworker/u4:4/59: [ 1640.166508][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.199680][ T28] #1: ffffc900015a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.219677][ T28] #2: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1640.228738][ T28] #3: ffffffff8d137af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1640.259716][ T28] 2 locks held by getty/5539: [ 1640.264952][ T28] #0: ffff88802d33d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1640.289672][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1640.309669][ T28] 3 locks held by kworker/u4:12/5867: [ 1640.315088][ T28] 3 locks held by kworker/u4:17/9341: [ 1640.339665][ T28] #0: ffff88802c61d538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.359660][ T28] #1: ffffc9000da1fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.389665][ T28] #2: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1640.399246][ T28] 5 locks held by kworker/u4:18/9343: [ 1640.419670][ T28] 3 locks held by kworker/1:0/11999: [ 1640.425008][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.459664][ T28] #1: ffffc9001122fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.479666][ T28] #2: ffff88807ec6b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x286/0x31b0 [ 1640.507727][ T28] 2 locks held by kworker/0:0/16115: [ 1640.519675][ T28] 5 locks held by kworker/u4:0/18695: [ 1640.525089][ T28] #0: ffff888140048938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.559672][ T28] #1: ffffc90003957d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.579665][ T28] #2: ffffffff8e3b8850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1640.589147][ T28] #3: ffff88807d32f250 (&devlink->lock_key#14){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xee/0x360 [ 1640.629673][ T28] #4: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 1640.638657][ T28] 4 locks held by kworker/0:1/18793: [ 1640.679680][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.699669][ T28] #1: ffffc90003a37d00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1640.739687][ T28] #2: ffffffff8d1a1148 (pack_mutex){+.+.}-{3:3}, at: bpf_prog_pack_free+0x2e/0x440 [ 1640.749267][ T28] #3: ffffffff8cfe2068 (text_mutex){+.+.}-{3:3}, at: text_poke_set+0xa4/0x170 [ 1640.779696][ T28] 4 locks held by syz-executor/19379: [ 1640.785130][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1640.810831][ T28] #1: ffff88804b677488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1640.829670][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1640.849667][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1640.879693][ T28] 7 locks held by syz-executor/19408: [ 1640.885156][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1640.910630][ T28] #1: ffff88805d524088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1640.920506][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1640.949663][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1640.969668][ T28] #4: ffff88807a2980e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x7a0 [ 1640.989711][ T28] #5: ffff88807a29b250 (&devlink->lock_key#11){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 [ 1641.010437][ T28] #6: ffffffff8d1379c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 1641.029670][ T28] 4 locks held by syz-executor/19470: [ 1641.035079][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.061217][ T28] #1: ffff888075315488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.079660][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.099670][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.119672][ T28] 4 locks held by syz-executor/19473: [ 1641.125087][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.149698][ T28] #1: ffff88804fc58088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.169702][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.190287][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.219689][ T28] 4 locks held by syz-executor/19504: [ 1641.225139][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.249663][ T28] #1: ffff88805d96e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.259507][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.289678][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.310383][ T28] 4 locks held by syz-executor/19532: [ 1641.315793][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.339711][ T28] #1: ffff88804f967888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.360614][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.379668][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.399692][ T28] 4 locks held by syz-executor/19612: [ 1641.405133][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.429673][ T28] #1: ffff88803caba488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.439532][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.469661][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.489660][ T28] 4 locks held by syz-executor/19615: [ 1641.495512][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.519664][ T28] #1: ffff88803cabd888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.529506][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.560657][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.589672][ T28] 4 locks held by syz-executor/19631: [ 1641.595533][ T28] #0: ffff888031d9a418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 1641.610907][ T28] #1: ffff888080a1b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x520 [ 1641.639660][ T28] #2: ffff88802450d008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x520 [ 1641.660597][ T28] #3: ffffffff8dca52e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd8/0x370 [ 1641.679666][ T28] 2 locks held by syz-executor/19659: [ 1641.685077][ T28] #0: ffff88803d4a4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 1641.710765][ T28] #1: ffff88803d4a40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5d6/0x1220 [ 1641.729673][ T28] 1 lock held by syz-executor/19696: [ 1641.735011][ T28] #0: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1641.760433][ T28] 1 lock held by syz-executor/19703: [ 1641.765799][ T28] #0: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1641.797702][ T28] 1 lock held by syz-executor/19730: [ 1641.803529][ T28] #0: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1641.829667][ T28] 2 locks held by syz-executor/19740: [ 1641.835101][ T28] [ 1641.837458][ T28] ============================================= [ 1641.837458][ T28] [ 1641.861703][ T28] NMI backtrace for cpu 0 [ 1641.866171][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1641.873394][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.883484][ T28] Call Trace: [ 1641.886787][ T28] [ 1641.889750][ T28] dump_stack_lvl+0x18c/0x250 [ 1641.894474][ T28] ? preempt_count_add+0x91/0x1a0 [ 1641.899632][ T28] ? show_regs_print_info+0x20/0x20 [ 1641.904858][ T28] ? load_image+0x420/0x420 [ 1641.909404][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1641.914381][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1641.920566][ T28] ? _printk+0xde/0x130 [ 1641.924745][ T28] ? load_image+0x420/0x420 [ 1641.929275][ T28] ? load_image+0x420/0x420 [ 1641.933803][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1641.939906][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1641.945923][ T28] watchdog+0xf3d/0xf80 [ 1641.950114][ T28] ? watchdog+0x1e1/0xf80 [ 1641.954483][ T28] kthread+0x2fa/0x390 [ 1641.958580][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1641.963632][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1641.968253][ T28] ret_from_fork+0x48/0x80 [ 1641.972701][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1641.977329][ T28] ret_from_fork_asm+0x11/0x20 [ 1641.982145][ T28] [ 1641.985559][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1641.991003][ C1] NMI backtrace for cpu 1 [ 1641.991014][ C1] CPU: 1 PID: 19740 Comm: syz-executor Not tainted syzkaller #0 [ 1641.991032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.991040][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x82/0x90 [ 1641.991064][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 [ 1641.991077][ C1] RSP: 0018:ffffc900001f0c70 EFLAGS: 00000006 [ 1641.991092][ C1] RAX: ffffffff88af66c1 RBX: ffff88801931d000 RCX: 0000000000010000 [ 1641.991103][ C1] RDX: ffff88802d645a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1641.991114][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 1641.991123][ C1] R10: dffffc0000000000 R11: fffff5200003e180 R12: ffff88807f641340 [ 1641.991134][ C1] R13: ffff88807f641000 R14: ffff88805e6f3c00 R15: ffff88807f641330 [ 1641.991145][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1641.991158][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1641.991170][ C1] CR2: 00007ff3da415f40 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1641.991187][ C1] Call Trace: [ 1641.991192][ C1] [ 1641.991198][ C1] advance_sched+0x1b1/0xc20 [ 1641.991220][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1641.991241][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1641.991265][ C1] __hrtimer_run_queues+0x520/0xc40 [ 1641.991281][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1641.991303][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1641.991327][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1641.991343][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1641.991365][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1641.991394][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1641.991413][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1641.991433][ C1] [ 1641.991438][ C1] [ 1641.991444][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1641.991465][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1641.991483][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 6c 26 04 0d 48 89 de 5b e9 f3 6f 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 89 7c 7e 65 8b 15 c1 89 7c [ 1641.991495][ C1] RSP: 0018:ffffc9000439f4b0 EFLAGS: 00000297 [ 1641.991508][ C1] RAX: ffffffff8ea3a7ac RBX: ffffffff8ea3a7b8 RCX: ffff88802d645a00 [ 1641.991519][ C1] RDX: 0000000000000000 RSI: ffffffff81e89c9d RDI: ffffffff81e89c5d [ 1641.991529][ C1] RBP: ffffffff8ea3a7b0 R08: ffffc9000439f650 R09: 0000000000000000 [ 1641.991540][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8ea3a7b4 [ 1641.991550][ C1] R13: ffffffff81e89c5d R14: ffffffff81e89c9d R15: ffffffff8ea3a7b0 [ 1641.991562][ C1] ? __reset_page_owner+0x4d/0x190 [ 1641.991575][ C1] ? __reset_page_owner+0xd/0x190 [ 1641.991592][ C1] ? __reset_page_owner+0x4d/0x190 [ 1641.991605][ C1] ? __reset_page_owner+0xd/0x190 [ 1641.991621][ C1] unwind_next_frame+0x4d9/0x2970 [ 1641.991639][ C1] ? __reset_page_owner+0x4d/0x190 [ 1641.991653][ C1] ? __reset_page_owner+0x4e/0x190 [ 1641.991667][ C1] ? __reset_page_owner+0x4e/0x190 [ 1641.991680][ C1] ? stack_trace_save+0x100/0x100 [ 1641.991698][ C1] arch_stack_walk+0x144/0x190 [ 1641.991716][ C1] ? __reset_page_owner+0x4e/0x190 [ 1641.991732][ C1] stack_trace_save+0xaa/0x100 [ 1641.991749][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1641.991771][ C1] save_stack+0x125/0x230 [ 1641.991786][ C1] ? __reset_page_owner+0x190/0x190 [ 1641.991815][ C1] ? page_ext_get+0x22/0x2b0 [ 1641.991833][ C1] ? page_ext_get+0x1e2/0x2b0 [ 1641.991851][ C1] __reset_page_owner+0x4e/0x190 [ 1641.991864][ C1] ? rcu_is_watching+0x15/0xb0 [ 1641.991885][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 1641.991909][ C1] free_unref_page+0x32/0x2e0 [ 1641.991932][ C1] vfree+0x1a6/0x320 [ 1641.991951][ C1] ? kcov_open+0x90/0x90 [ 1641.991968][ C1] kcov_close+0x2b/0x50 [ 1641.991984][ C1] __fput+0x234/0x970 [ 1641.992006][ C1] task_work_run+0x1d4/0x260 [ 1641.992026][ C1] ? task_work_cancel+0x220/0x220 [ 1641.992050][ C1] do_exit+0x95a/0x2460 [ 1641.992078][ C1] ? put_task_struct+0xc0/0xc0 [ 1641.992100][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1641.992117][ C1] ? get_signal+0x1068/0x13f0 [ 1641.992133][ C1] ? lock_chain_count+0x20/0x20 [ 1641.992149][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1641.992169][ C1] do_group_exit+0x21b/0x2d0 [ 1641.992190][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1641.992210][ C1] get_signal+0x12fc/0x13f0 [ 1641.992236][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 1641.992259][ C1] ? get_sigframe_size+0x20/0x20 [ 1641.992278][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1641.992307][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1641.992329][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1641.992349][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1641.992369][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1641.992389][ C1] do_syscall_64+0x61/0xb0 [ 1641.992404][ C1] ? clear_bhb_loop+0x40/0x90 [ 1641.992423][ C1] ? clear_bhb_loop+0x40/0x90 [ 1641.992443][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.992463][ C1] RIP: 0033:0x7ff3da19caeb [ 1641.992475][ C1] Code: Unable to access opcode bytes at 0x7ff3da19cac1. [ 1641.992482][ C1] RSP: 002b:00007fff4163d2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1641.992497][ C1] RAX: 0000000000000000 RBX: 0000000000100000 RCX: 00007ff3da19caeb [ 1641.992507][ C1] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 1641.992517][ C1] RBP: 00007ff3da415f40 R08: 0000000000000000 R09: 0000000000000000 [ 1641.992527][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.992536][ C1] R13: 0000000000000003 R14: 00007fff4163d568 R15: 0000000000000000 [ 1641.992554][ C1] [ 1642.568400][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1642.575317][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1642.582542][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.592704][ T28] Call Trace: [ 1642.596005][ T28] [ 1642.598971][ T28] dump_stack_lvl+0x18c/0x250 [ 1642.603686][ T28] ? show_regs_print_info+0x20/0x20 [ 1642.608912][ T28] ? load_image+0x420/0x420 [ 1642.613452][ T28] panic+0x2dc/0x730 [ 1642.617376][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1642.623044][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1642.627585][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 1642.633174][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1642.639366][ T28] watchdog+0xf7c/0xf80 [ 1642.643565][ T28] ? watchdog+0x1e1/0xf80 [ 1642.648031][ T28] kthread+0x2fa/0x390 [ 1642.652215][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1642.657267][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1642.661884][ T28] ret_from_fork+0x48/0x80 [ 1642.666332][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1642.670956][ T28] ret_from_fork_asm+0x11/0x20 [ 1642.675767][ T28] [ 1643.826210][ T28] Shutting down cpus with NMI [ 1643.831742][ T28] Kernel Offset: disabled [ 1643.836098][ T28] Rebooting in 86400 seconds..