last executing test programs: 20.377500172s ago: executing program 1 (id=46): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) timerfd_create(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.974458333s ago: executing program 1 (id=58): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r2) mknodat$loop(r2, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 12.471598432s ago: executing program 1 (id=67): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mknodat$loop(r2, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 12.420275107s ago: executing program 4 (id=69): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_execute_start\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10.779225563s ago: executing program 2 (id=71): socket$igmp6(0xa, 0x3, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{}, {0x6}]}) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000040)) 10.573222853s ago: executing program 3 (id=72): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.84970278s ago: executing program 4 (id=73): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r2) mknodat$loop(r2, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 9.710578743s ago: executing program 2 (id=74): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.280076187s ago: executing program 0 (id=75): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000052c0), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x48524742}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0a00180003030303030300001c01000080000080140003000000000000000000000000000000000074dead5b3b60ee4dbb982f5a31c15a710ed58a97ac2a1328e0bc3c737dfaeb7c9cfecd35b66621c3c7f650540946e6f1d5853c1683dea3355dfa997a6de2bf0beb9bfc4221579281bd17a71d9bf692c5049bd09d7fc3baf0ebe856db2940c9a08747ea30d4222c30db4c292b073c5800a87b89617fa7ab946ecc4af64330ce6ce6890c2293a3fed41ef771669ca7fc57fde0"], 0x44}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r9, 0x0, 0x2, 0x4}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r11 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 8.53800177s ago: executing program 2 (id=76): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.431356658s ago: executing program 3 (id=77): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x240, @time, 0x22, {0x8}, 0x0, 0x1, 0x4}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x200}, 0x8) 6.743294885s ago: executing program 3 (id=78): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x4018831, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0xe) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0x48) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@private1}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$bt_hci(r0, &(0x7f0000000100), 0x6) 6.61518665s ago: executing program 1 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 6.430893589s ago: executing program 0 (id=80): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mknodat$loop(r2, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6.404142054s ago: executing program 1 (id=81): sched_setaffinity(0x0, 0x26, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6.390704998s ago: executing program 4 (id=82): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @private1}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 6.207042169s ago: executing program 3 (id=83): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_execute_start\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.149224842s ago: executing program 4 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x101, 0x0, 0x0, 0x200, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r2, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="10090000000000000025090000002000018014000400"/32, @ANYRES32, @ANYBLOB="08000200020000000800030000000000050005000900000008000300060000000800040004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4040) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.12035261s ago: executing program 2 (id=85): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) timerfd_create(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.037817149s ago: executing program 3 (id=86): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.837745479s ago: executing program 3 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x0, 0x101, 0x0, 0x0, 0x200, 0x2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000194c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1009000000000000002509000000200001801400040000000000000000000000ffff000014bb08000700", @ANYRES32, @ANYBLOB="0800020002000000080003000000000005000500090000000800030006000000080004"], 0x5c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4040) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000008c0)={@empty, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x0, 0xf7, 0x0, 0x9}, @end]}}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xffffffff, @multicast2}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.679799969s ago: executing program 1 (id=88): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRES8=r2, @ANYRES8=r1]) pipe2(&(0x7f0000000040), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/191, 0xbf}], 0x2}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000400)=""/115, 0x73}], 0x2}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) 3.678498364s ago: executing program 0 (id=89): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRES8=r2, @ANYRES8=r1]) pipe2(&(0x7f0000000040), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/191, 0xbf}], 0x2}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000400)=""/115, 0x73}], 0x2}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) 2.459825521s ago: executing program 2 (id=90): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) dup2(r4, r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x60006019}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000a5}) 2.299050816s ago: executing program 0 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 2.189095617s ago: executing program 4 (id=92): socket$igmp6(0xa, 0x3, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{}, {0x6}]}) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000040)) 1.940040451s ago: executing program 0 (id=93): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x4018831, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0xe) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0x48) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@private1}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$bt_hci(r0, &(0x7f0000000100), 0x6) 1.128821246s ago: executing program 2 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x0, 0x101, 0x0, 0x0, 0x200, 0x2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000194c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18002100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1009000000000000002509000000200001801400040000000000000000000000ffff000014bb08000700", @ANYRES32, @ANYBLOB="08000200020000000800030000000000050005000900000008000300060000000800040004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4040) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000008c0)={@empty, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x0, 0xf7, 0x0, 0x9}, @end]}}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xffffffff, @multicast2}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 182.887475ms ago: executing program 4 (id=95): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRES8=r2, @ANYRES8=r1]) pipe2(&(0x7f0000000040), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/191, 0xbf}], 0x2}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000400)=""/115, 0x73}], 0x2}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) 0s ago: executing program 0 (id=96): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_execute_start\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 49.885007][ T5206] cgroup: Unknown subsys name 'net' [ 50.017429][ T5206] cgroup: Unknown subsys name 'cpuset' [ 50.025593][ T5206] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.287060][ T5206] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.444458][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.452604][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.459029][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.460967][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.476039][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.476191][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.485031][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.491684][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.498405][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.505336][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.512235][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.519104][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.525700][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.532743][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.540246][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.553367][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.584358][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.591639][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.593443][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.599909][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.606528][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.615476][ T4612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.621014][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.626586][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.642397][ T4612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.650553][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.654663][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.657955][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.672988][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.680987][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.014816][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 54.100173][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 54.203915][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 54.237922][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.245866][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.253572][ T5229] bridge_slave_0: entered allmulticast mode [ 54.260591][ T5229] bridge_slave_0: entered promiscuous mode [ 54.282627][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 54.291927][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.299260][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.306509][ T5229] bridge_slave_1: entered allmulticast mode [ 54.313060][ T5229] bridge_slave_1: entered promiscuous mode [ 54.337372][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 54.379670][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.386944][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.394423][ T5219] bridge_slave_0: entered allmulticast mode [ 54.400958][ T5219] bridge_slave_0: entered promiscuous mode [ 54.420052][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.429617][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.437199][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.445408][ T5219] bridge_slave_1: entered allmulticast mode [ 54.452037][ T5219] bridge_slave_1: entered promiscuous mode [ 54.478764][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.529164][ T5229] team0: Port device team_slave_0 added [ 54.537152][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.549005][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.578327][ T5229] team0: Port device team_slave_1 added [ 54.602970][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.610842][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.618875][ T5226] bridge_slave_0: entered allmulticast mode [ 54.625801][ T5226] bridge_slave_0: entered promiscuous mode [ 54.665345][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.672454][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.680180][ T5226] bridge_slave_1: entered allmulticast mode [ 54.687395][ T5226] bridge_slave_1: entered promiscuous mode [ 54.693762][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.701080][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.708638][ T5217] bridge_slave_0: entered allmulticast mode [ 54.715806][ T5217] bridge_slave_0: entered promiscuous mode [ 54.723392][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.730652][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.737952][ T5217] bridge_slave_1: entered allmulticast mode [ 54.745300][ T5217] bridge_slave_1: entered promiscuous mode [ 54.752615][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.759736][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.786459][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.799767][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.806803][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.832756][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.846507][ T5219] team0: Port device team_slave_0 added [ 54.894402][ T5219] team0: Port device team_slave_1 added [ 54.900330][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.907724][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.915009][ T5216] bridge_slave_0: entered allmulticast mode [ 54.921777][ T5216] bridge_slave_0: entered promiscuous mode [ 54.930546][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.942158][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.972705][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.981081][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.988473][ T5216] bridge_slave_1: entered allmulticast mode [ 54.995643][ T5216] bridge_slave_1: entered promiscuous mode [ 55.018238][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.030126][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.042151][ T5229] hsr_slave_0: entered promiscuous mode [ 55.049260][ T5229] hsr_slave_1: entered promiscuous mode [ 55.098034][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.108696][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.135060][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.148079][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.159928][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.171624][ T5226] team0: Port device team_slave_0 added [ 55.180324][ T5226] team0: Port device team_slave_1 added [ 55.206967][ T5217] team0: Port device team_slave_0 added [ 55.213331][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.220436][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.246452][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.270804][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.278703][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.305477][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.319227][ T5217] team0: Port device team_slave_1 added [ 55.348886][ T5216] team0: Port device team_slave_0 added [ 55.359591][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.366773][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.393700][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.416579][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.423573][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.449880][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.461914][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.469026][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.495096][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.509444][ T5216] team0: Port device team_slave_1 added [ 55.591704][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.598941][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.625163][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.637506][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.644534][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.671877][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.683149][ T5234] Bluetooth: hci3: command tx timeout [ 55.689069][ T5234] Bluetooth: hci0: command tx timeout [ 55.705554][ T5219] hsr_slave_0: entered promiscuous mode [ 55.711696][ T5219] hsr_slave_1: entered promiscuous mode [ 55.718797][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.727502][ T5219] Cannot create hsr debugfs directory [ 55.742791][ T5226] hsr_slave_0: entered promiscuous mode [ 55.748853][ T5224] Bluetooth: hci1: command tx timeout [ 55.749056][ T5224] Bluetooth: hci4: command tx timeout [ 55.754977][ T5234] Bluetooth: hci2: command tx timeout [ 55.766262][ T5226] hsr_slave_1: entered promiscuous mode [ 55.772449][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.780399][ T5226] Cannot create hsr debugfs directory [ 55.835521][ T5217] hsr_slave_0: entered promiscuous mode [ 55.842068][ T5217] hsr_slave_1: entered promiscuous mode [ 55.848642][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.856306][ T5217] Cannot create hsr debugfs directory [ 55.905530][ T5216] hsr_slave_0: entered promiscuous mode [ 55.911752][ T5216] hsr_slave_1: entered promiscuous mode [ 55.918736][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.927617][ T5216] Cannot create hsr debugfs directory [ 56.088505][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.102552][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.130708][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.177148][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.280433][ T5219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.296022][ T5219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.306221][ T5219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.323846][ T5219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.377476][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.393297][ T5217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.403226][ T5217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.416520][ T5217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.433626][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.449378][ T5217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.466929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.474288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.503018][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.510187][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.570422][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.580269][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.605987][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.618954][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.699614][ T5216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.711013][ T5216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.723642][ T5216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.744798][ T5216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.796028][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.832386][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.861841][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.910624][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.928111][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.935326][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.951929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.959072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.994986][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.002112][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.030670][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.041220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.048374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.098969][ T5217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.137206][ T5219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.148554][ T5219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.179178][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.211090][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.258819][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.266281][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.288482][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.309035][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.316221][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.388517][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.412213][ T5229] veth0_vlan: entered promiscuous mode [ 57.465693][ T5229] veth1_vlan: entered promiscuous mode [ 57.496892][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.507398][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.520160][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.527346][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.539671][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.546890][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.657867][ T5217] veth0_vlan: entered promiscuous mode [ 57.668317][ T5229] veth0_macvtap: entered promiscuous mode [ 57.707613][ T5217] veth1_vlan: entered promiscuous mode [ 57.722452][ T5229] veth1_macvtap: entered promiscuous mode [ 57.745512][ T5234] Bluetooth: hci3: command tx timeout [ 57.750974][ T5234] Bluetooth: hci0: command tx timeout [ 57.793326][ T5217] veth0_macvtap: entered promiscuous mode [ 57.805739][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.821340][ T5217] veth1_macvtap: entered promiscuous mode [ 57.828792][ T5234] Bluetooth: hci2: command tx timeout [ 57.834716][ T5234] Bluetooth: hci4: command tx timeout [ 57.840426][ T5234] Bluetooth: hci1: command tx timeout [ 57.858327][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.890510][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.902749][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.926815][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.941111][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.950865][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.963506][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.973301][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.988851][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.000968][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.012585][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.032498][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.046038][ T5217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.055160][ T5217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.063971][ T5217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.080588][ T5217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.204633][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.217664][ T5226] veth0_vlan: entered promiscuous mode [ 58.232826][ T5226] veth1_vlan: entered promiscuous mode [ 58.241060][ T5219] veth0_vlan: entered promiscuous mode [ 58.277939][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.287326][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.317983][ T5219] veth1_vlan: entered promiscuous mode [ 58.356222][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.365644][ T5226] veth0_macvtap: entered promiscuous mode [ 58.376744][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.399292][ T5226] veth1_macvtap: entered promiscuous mode [ 58.412438][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.419366][ T5219] veth0_macvtap: entered promiscuous mode [ 58.429761][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.469326][ T5216] veth0_vlan: entered promiscuous mode [ 58.481593][ T5219] veth1_macvtap: entered promiscuous mode [ 58.490920][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.491427][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.501938][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.521993][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.529953][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.532827][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.556534][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.565910][ T5216] veth1_vlan: entered promiscuous mode [ 58.589557][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.600759][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.611916][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.622958][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.636301][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.647068][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.659345][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.686268][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.702581][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.726900][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.741095][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.759238][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.769619][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.787936][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.799761][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.810933][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.821616][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.832716][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.850256][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.869048][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.879410][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.888267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 58.898781][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.936051][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.984931][ T5219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.995668][ T5219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.006844][ T5219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019192][ T5219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.119061][ T5216] veth0_macvtap: entered promiscuous mode [ 59.132031][ T5216] veth1_macvtap: entered promiscuous mode [ 59.291734][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.307360][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.319264][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.331768][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.342784][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.355568][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.369985][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.381942][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.393227][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.464804][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.494679][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.510079][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.523620][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.537755][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.550900][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565583][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.579109][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.602816][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.664579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.673428][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.687009][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.718676][ T5216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746264][ T5216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.762160][ T5216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.778917][ T5216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.825311][ T5235] Bluetooth: hci0: command tx timeout [ 59.832273][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.834395][ T5235] Bluetooth: hci3: command tx timeout [ 59.858692][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.906634][ T5235] Bluetooth: hci1: command tx timeout [ 59.912065][ T5235] Bluetooth: hci2: command tx timeout [ 59.920208][ T5235] Bluetooth: hci4: command tx timeout [ 59.954348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.963046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.024147][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.044082][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.071963][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.107516][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.263693][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.314673][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.347200][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.045626][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.069448][ T5234] Bluetooth: hci3: command tx timeout [ 62.081182][ T5234] Bluetooth: hci0: command tx timeout [ 62.094281][ T5235] Bluetooth: hci4: command tx timeout [ 62.100912][ T5235] Bluetooth: hci2: command tx timeout [ 62.107141][ T5234] Bluetooth: hci1: command tx timeout [ 62.313349][ T5320] ceph: No mds server is up or the cluster is laggy [ 62.355895][ T9] libceph: connect (1)[c::]:6789 error -101 [ 62.362553][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 62.558132][ T5308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.736893][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 62.778616][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 62.800440][ T5268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.900135][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 62.916986][ T5308] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 62.930251][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.704065][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 63.715177][ T5335] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 63.784134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.802806][ T5308] usb 4-1: config 0 descriptor?? [ 63.815554][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 63.844202][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 63.854284][ T5268] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 63.863432][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.875848][ T5268] usb 3-1: config 0 descriptor?? [ 63.974282][ T5308] usb 4-1: can't set config #0, error -71 [ 64.065094][ T5308] usb 4-1: USB disconnect, device number 2 [ 64.292818][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.324503][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.375382][ T5268] hid (null): bogus close delimiter [ 64.406176][ T5268] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 64.431410][ T5268] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 64.447694][ T5268] hid-generic 0003:0158:0100.0001: bogus close delimiter [ 64.470195][ T5268] hid-generic 0003:0158:0100.0001: item 0 0 2 10 parsing failed [ 64.495516][ T5308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.509818][ T5268] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 64.626284][ T5268] usb 3-1: USB disconnect, device number 2 [ 64.664513][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 64.680090][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 64.693784][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 64.704469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.728803][ T5308] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 64.744253][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.754910][ T5308] usb 4-1: config 0 descriptor?? [ 65.045007][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.168865][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.199952][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.214115][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 65.244959][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 65.267454][ T5308] hid (null): bogus close delimiter [ 65.273608][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 65.283657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.316087][ T5308] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 65.333176][ T46] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 65.343134][ T5308] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 65.357335][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.365728][ T5308] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 65.397763][ T5308] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 65.425713][ T46] usb 2-1: config 0 descriptor?? [ 65.431389][ T5308] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 65.574455][ T5324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.596141][ T9] usb 4-1: USB disconnect, device number 3 [ 65.745062][ T5324] usb 3-1: Using ep0 maxpacket: 16 [ 65.775963][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 65.796082][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 65.853785][ T5324] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 65.865097][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.869204][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.917415][ T5324] usb 3-1: config 0 descriptor?? [ 65.938604][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.952575][ T46] hid (null): bogus close delimiter [ 65.978365][ T46] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 65.998593][ T46] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 66.006980][ T46] hid-generic 0003:0158:0100.0003: bogus close delimiter [ 66.015419][ T46] hid-generic 0003:0158:0100.0003: item 0 0 2 10 parsing failed [ 66.033850][ T46] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 66.207958][ T46] usb 2-1: USB disconnect, device number 2 [ 66.348217][ T5224] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 66.370830][ T5354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.387653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.396499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.114087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.284794][ T5354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.621724][ T5324] hid (null): bogus close delimiter [ 67.642827][ T5324] hid-generic 0003:0158:0100.0004: unknown main item tag 0x0 [ 67.658237][ T5324] hid-generic 0003:0158:0100.0004: unknown main item tag 0x0 [ 67.667570][ T5324] hid-generic 0003:0158:0100.0004: bogus close delimiter [ 67.675383][ T5324] hid-generic 0003:0158:0100.0004: item 0 0 2 10 parsing failed [ 67.684381][ T5324] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 67.709498][ T5324] usb 3-1: USB disconnect, device number 3 [ 67.766595][ T5224] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 68.686845][ T5224] Bluetooth: hci3: command tx timeout [ 69.034166][ T5268] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.204242][ T5268] usb 2-1: Using ep0 maxpacket: 16 [ 69.218820][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 69.383343][ T29] audit: type=1326 audit(1726671843.176:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5381 comm="syz.2.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c17d7def9 code=0x0 [ 69.414579][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 69.570310][ T5268] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 69.827494][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.928621][ T5268] usb 2-1: config 0 descriptor?? [ 70.275945][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.459267][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.495036][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.538329][ T5268] hid (null): bogus close delimiter [ 70.568716][ T5268] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 70.603029][ T5268] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 70.632329][ T5268] hid-generic 0003:0158:0100.0005: bogus close delimiter [ 70.654213][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 70.670722][ T5268] hid-generic 0003:0158:0100.0005: item 0 0 2 10 parsing failed [ 70.682866][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 70.701811][ T5268] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 70.712133][ T5235] Bluetooth: hci3: command tx timeout [ 70.721417][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 70.738786][ T46] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 70.758346][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.781377][ T5268] usb 2-1: USB disconnect, device number 3 [ 70.790606][ T46] usb 4-1: config 0 descriptor?? [ 71.219881][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.929056][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.935916][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.552450][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.639630][ T46] hid (null): bogus close delimiter [ 72.654793][ T46] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 72.676667][ T46] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 72.713347][ T46] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 72.752840][ T46] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 72.771482][ T46] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 72.934224][ T5271] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.973698][ T5235] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 73.021629][ T5268] usb 4-1: USB disconnect, device number 4 [ 73.344185][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 73.616632][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 73.829414][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 73.839584][ T5271] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 73.848780][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.112615][ T5271] usb 3-1: config 0 descriptor?? [ 74.547473][ T5405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.611029][ T5405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.684602][ T5271] hid (null): bogus close delimiter [ 74.700052][ T5271] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 74.714411][ T5271] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 74.724193][ T5271] hid-generic 0003:0158:0100.0007: bogus close delimiter [ 74.731343][ T5271] hid-generic 0003:0158:0100.0007: item 0 0 2 10 parsing failed [ 74.739972][ T5271] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 74.915978][ T5271] usb 3-1: USB disconnect, device number 4 [ 75.035192][ T5235] Bluetooth: hci3: command tx timeout [ 76.593864][ T29] audit: type=1326 audit(1726671851.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5434 comm="syz.2.37" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c17d7def9 code=0x0 [ 76.965738][ T940] cfg80211: failed to load regulatory.db [ 77.054182][ T5271] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.101951][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 78.133134][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 78.147356][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 78.157228][ T5271] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 78.424326][ T940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.634236][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.650052][ T5271] usb 4-1: config 0 descriptor?? [ 78.682301][ T5271] usb 4-1: can't set config #0, error -71 [ 78.690999][ T5271] usb 4-1: USB disconnect, device number 5 [ 78.791192][ T5299] libceph: connect (1)[c::]:6789 error -101 [ 78.820613][ T5299] libceph: mon0 (1)[c::]:6789 connect error [ 78.834875][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 78.848176][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 78.897915][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 78.917315][ T940] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 78.932344][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.549089][ T5271] libceph: connect (1)[c::]:6789 error -101 [ 79.716264][ T29] audit: type=1326 audit(1726671854.521:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5463 comm="syz.1.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9f7def9 code=0x0 [ 79.737188][ T5271] libceph: mon0 (1)[c::]:6789 connect error [ 79.765520][ T940] usb 5-1: config 0 descriptor?? [ 79.785007][ T5271] libceph: connect (1)[c::]:6789 error -101 [ 79.786484][ T29] audit: type=1326 audit(1726671854.571:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5457 comm="syz.0.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c4c97def9 code=0x0 [ 79.811989][ T5271] libceph: mon0 (1)[c::]:6789 connect error [ 79.857640][ T29] audit: type=1326 audit(1726671854.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5464 comm="syz.3.44" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12c6d7def9 code=0x0 [ 80.031883][ T5459] ceph: No mds server is up or the cluster is laggy [ 80.189595][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.200219][ T5271] libceph: connect (1)[c::]:6789 error -101 [ 80.206493][ T5271] libceph: mon0 (1)[c::]:6789 connect error [ 80.267798][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.728354][ T5271] libceph: connect (1)[c::]:6789 error -101 [ 80.820606][ T5471] ceph: No mds server is up or the cluster is laggy [ 80.958251][ T5271] libceph: mon0 (1)[c::]:6789 connect error [ 81.091000][ T940] hid (null): bogus close delimiter [ 81.130874][ T940] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 81.138783][ T940] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 81.151530][ T940] hid-generic 0003:0158:0100.0008: bogus close delimiter [ 81.177613][ T940] hid-generic 0003:0158:0100.0008: item 0 0 2 10 parsing failed [ 81.194722][ T940] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 81.271583][ T940] usb 5-1: USB disconnect, device number 2 [ 81.436813][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 81.516014][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 81.540270][ T29] audit: type=1326 audit(1726671856.341:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.0.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c4c97def9 code=0x0 [ 81.824797][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 81.843749][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 82.117847][ T5488] ceph: No mds server is up or the cluster is laggy [ 82.502892][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 82.515568][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 82.947039][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 83.037668][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 83.053330][ T29] audit: type=1326 audit(1726671857.841:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5503 comm="syz.4.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f5b7def9 code=0x0 [ 83.445388][ T5505] ceph: No mds server is up or the cluster is laggy [ 83.586577][ T940] libceph: connect (1)[c::]:6789 error -101 [ 83.592898][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 83.855509][ T5235] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 85.944817][ T5235] Bluetooth: hci1: command tx timeout [ 86.992752][ T940] libceph: connect (1)[c::]:6789 error -101 [ 87.253131][ T5550] ceph: No mds server is up or the cluster is laggy [ 87.284985][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 87.403210][ T5337] libceph: connect (1)[c::]:6789 error -101 [ 87.421785][ T29] audit: type=1326 audit(1726671863.211:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5540 comm="syz.1.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9f7def9 code=0x0 [ 87.459528][ T5337] libceph: mon0 (1)[c::]:6789 connect error [ 88.300999][ T940] libceph: connect (1)[c::]:6789 error -101 [ 88.311368][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 88.581069][ T5568] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 88.667799][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 88.736290][ T29] audit: type=1326 audit(1726671864.541:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.2.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c17d7def9 code=0x0 [ 88.771996][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 89.937451][ T940] libceph: connect (1)[c::]:6789 error -101 [ 89.943666][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 89.998695][ T29] audit: type=1326 audit(1726671865.591:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5576 comm="syz.3.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12c6d7def9 code=0x0 [ 90.068921][ T5554] ceph: No mds server is up or the cluster is laggy [ 90.664564][ T5299] libceph: connect (1)[c::]:6789 error -101 [ 90.719366][ T5299] libceph: mon0 (1)[c::]:6789 connect error [ 91.668842][ T29] audit: type=1326 audit(1726671866.881:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5598 comm="syz.2.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c17d7def9 code=0x0 [ 91.695428][ T46] libceph: connect (1)[c::]:6789 error -101 [ 91.701668][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 91.868747][ T29] audit: type=1326 audit(1726671867.671:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5577 comm="syz.1.67" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9f7def9 code=0x0 [ 92.085822][ T5589] ceph: No mds server is up or the cluster is laggy [ 92.100630][ T46] libceph: connect (1)[c::]:6789 error -101 [ 92.105844][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 92.106940][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 92.135535][ T29] audit: type=1326 audit(1726671867.931:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5608 comm="syz.4.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f5b7def9 code=0x0 [ 92.418841][ T46] libceph: connect (1)[c::]:6789 error -101 [ 92.425789][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 92.490946][ T46] libceph: connect (1)[c::]:6789 error -101 [ 92.642547][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 92.734591][ T5611] ceph: No mds server is up or the cluster is laggy [ 92.888373][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 93.070172][ T5612] ceph: No mds server is up or the cluster is laggy [ 93.320239][ T5324] libceph: connect (1)[c::]:6789 error -101 [ 94.664548][ T5324] libceph: mon0 (1)[c::]:6789 connect error [ 94.701840][ T5635] ceph: No mds server is up or the cluster is laggy [ 94.852347][ T940] libceph: connect (1)[c::]:6789 error -101 [ 94.875704][ T46] libceph: connect (1)[c::]:6789 error -101 [ 94.881806][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 94.899448][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 95.183332][ T5640] ceph: No mds server is up or the cluster is laggy [ 95.204450][ T940] libceph: connect (1)[c::]:6789 error -101 [ 95.210494][ T940] libceph: mon0 (1)[c::]:6789 connect error [ 95.400550][ T46] libceph: connect (1)[c::]:6789 error -101 [ 95.524167][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 95.534547][ T5268] libceph: connect (1)[c::]:6789 error -101 [ 95.540651][ T5268] libceph: mon0 (1)[c::]:6789 connect error [ 95.568098][ T29] audit: type=1326 audit(1726671871.371:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5656 comm="syz.0.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c4c97def9 code=0x0 [ 95.820239][ T5299] libceph: connect (1)[c::]:6789 error -101 [ 96.470139][ T5299] libceph: mon0 (1)[c::]:6789 connect error [ 96.601712][ T29] audit: type=1326 audit(1726671872.281:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5657 comm="syz.1.81" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f9f7def9 code=0x0 [ 96.734953][ T5660] ceph: No mds server is up or the cluster is laggy [ 96.851982][ T5662] ceph: No mds server is up or the cluster is laggy [ 96.864474][ T5268] libceph: connect (1)[c::]:6789 error -101 [ 96.872834][ T5268] libceph: mon0 (1)[c::]:6789 connect error [ 97.172408][ T5299] libceph: connect (1)[c::]:6789 error -101 [ 97.179389][ T5299] libceph: mon0 (1)[c::]:6789 connect error [ 97.848332][ T5235] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 99.284469][ T5235] Bluetooth: hci0: unexpected event 0x04 length: 14 > 10 [ 99.598244][ T5711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.723801][ T5235] Bluetooth: hci4: link tx timeout [ 99.729669][ T5235] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 100.084210][ T5234] Bluetooth: hci3: command tx timeout [ 101.200536][ T29] audit: type=1326 audit(1726671878.774:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5703 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f5b7def9 code=0x0 [ 101.355107][ T5224] Bluetooth: hci0: command tx timeout [ 101.451932][ T5224] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 101.710281][ T5224] Bluetooth: hci4: link tx timeout [ 101.722643][ T5224] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.733350][ T5224] Bluetooth: hci4: link tx timeout [ 101.738544][ T5224] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.752222][ T5224] ================================================================== [ 101.760311][ T5224] BUG: KASAN: slab-use-after-free in hci_disconnect+0x208/0x2d0 [ 101.767962][ T5224] Read of size 1 at addr ffff88807762803b by task kworker/u9:2/5224 [ 101.776030][ T5224] [ 101.778384][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: kworker/u9:2 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 101.788883][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.798943][ T5224] Workqueue: hci4 hci_tx_work [ 101.803621][ T5224] Call Trace: [ 101.807096][ T5224] [ 101.810024][ T5224] dump_stack_lvl+0x241/0x360 [ 101.814712][ T5224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.819934][ T5224] ? __pfx__printk+0x10/0x10 [ 101.824531][ T5224] ? _printk+0xd5/0x120 [ 101.828689][ T5224] ? __virt_addr_valid+0x183/0x530 [ 101.834065][ T5224] ? __virt_addr_valid+0x183/0x530 [ 101.839171][ T5224] print_report+0x169/0x550 [ 101.843669][ T5224] ? __virt_addr_valid+0x183/0x530 [ 101.848772][ T5224] ? __virt_addr_valid+0x183/0x530 [ 101.853862][ T5224] ? __virt_addr_valid+0x45f/0x530 [ 101.858962][ T5224] ? __phys_addr+0xba/0x170 [ 101.863451][ T5224] ? hci_disconnect+0x208/0x2d0 [ 101.868294][ T5224] kasan_report+0x143/0x180 [ 101.872804][ T5224] ? hci_disconnect+0x208/0x2d0 [ 101.877776][ T5224] hci_disconnect+0x208/0x2d0 [ 101.882447][ T5224] ? __pfx_hci_disconnect+0x10/0x10 [ 101.887650][ T5224] ? hci_sched_esco+0x336/0x440 [ 101.892488][ T5224] ? __rcu_read_unlock+0xa1/0x110 [ 101.897520][ T5224] ? __check_timeout+0x181/0x550 [ 101.902453][ T5224] __check_timeout+0x3a5/0x550 [ 101.907387][ T5224] ? __check_timeout+0x181/0x550 [ 101.912330][ T5224] hci_tx_work+0xb68/0x1590 [ 101.916822][ T5224] ? __pfx_lock_acquire+0x10/0x10 [ 101.921836][ T5224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.927917][ T5224] ? __pfx_hci_tx_work+0x10/0x10 [ 101.932850][ T5224] ? process_scheduled_works+0x976/0x1850 [ 101.938672][ T5224] process_scheduled_works+0xa63/0x1850 [ 101.944227][ T5224] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.950211][ T5224] ? assign_work+0x364/0x3d0 [ 101.954815][ T5224] worker_thread+0x870/0xd30 [ 101.959440][ T5224] ? __kthread_parkme+0x169/0x1d0 [ 101.964456][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 101.969644][ T5224] kthread+0x2f0/0x390 [ 101.973717][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 101.978832][ T5224] ? __pfx_kthread+0x10/0x10 [ 101.983426][ T5224] ret_from_fork+0x4b/0x80 [ 101.987937][ T5224] ? __pfx_kthread+0x10/0x10 [ 101.992535][ T5224] ret_from_fork_asm+0x1a/0x30 [ 101.997300][ T5224] [ 102.000309][ T5224] [ 102.002632][ T5224] Allocated by task 5234: [ 102.006944][ T5224] kasan_save_track+0x3f/0x80 [ 102.011626][ T5224] __kasan_kmalloc+0x98/0xb0 [ 102.016203][ T5224] __kmalloc_cache_noprof+0x19c/0x2c0 [ 102.021556][ T5224] __hci_conn_add+0x2f9/0x1850 [ 102.026312][ T5224] le_conn_complete_evt+0x2f6/0x12e0 [ 102.031593][ T5224] hci_le_conn_complete_evt+0x18c/0x420 [ 102.037172][ T5224] hci_event_packet+0xa55/0x1540 [ 102.042102][ T5224] hci_rx_work+0x3e8/0xca0 [ 102.046596][ T5224] process_scheduled_works+0xa63/0x1850 [ 102.052134][ T5224] worker_thread+0x870/0xd30 [ 102.056721][ T5224] kthread+0x2f0/0x390 [ 102.060785][ T5224] ret_from_fork+0x4b/0x80 [ 102.065208][ T5224] ret_from_fork_asm+0x1a/0x30 [ 102.069958][ T5224] [ 102.072358][ T5224] Freed by task 5235: [ 102.076340][ T5224] kasan_save_track+0x3f/0x80 [ 102.081108][ T5224] kasan_save_free_info+0x40/0x50 [ 102.086123][ T5224] __kasan_slab_free+0x59/0x70 [ 102.090913][ T5224] kfree+0x1a1/0x440 [ 102.094824][ T5224] device_release+0x99/0x1c0 [ 102.099406][ T5224] kobject_put+0x22f/0x480 [ 102.103818][ T5224] hci_conn_del+0x8c4/0xc40 [ 102.108324][ T5224] hci_abort_conn_sync+0x583/0xde0 [ 102.113431][ T5224] hci_cmd_sync_work+0x22b/0x400 [ 102.118357][ T5224] process_scheduled_works+0xa63/0x1850 [ 102.123888][ T5224] worker_thread+0x870/0xd30 [ 102.128467][ T5224] kthread+0x2f0/0x390 [ 102.132518][ T5224] ret_from_fork+0x4b/0x80 [ 102.136952][ T5224] ret_from_fork_asm+0x1a/0x30 [ 102.141706][ T5224] [ 102.144019][ T5224] The buggy address belongs to the object at ffff888077628000 [ 102.144019][ T5224] which belongs to the cache kmalloc-8k of size 8192 [ 102.158168][ T5224] The buggy address is located 59 bytes inside of [ 102.158168][ T5224] freed 8192-byte region [ffff888077628000, ffff88807762a000) [ 102.172201][ T5224] [ 102.174536][ T5224] The buggy address belongs to the physical page: [ 102.181033][ T5224] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77628 [ 102.189806][ T5224] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.198295][ T5224] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 102.206353][ T5224] page_type: 0xfdffffff(slab) [ 102.211035][ T5224] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 0000000000000001 [ 102.219625][ T5224] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 102.228193][ T5224] head: 00fff00000000040 ffff88801ac42280 0000000000000000 0000000000000001 [ 102.236859][ T5224] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 102.245529][ T5224] head: 00fff00000000003 ffffea0001dd8a01 ffffffffffffffff 0000000000000000 [ 102.254200][ T5224] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 102.262861][ T5224] page dumped because: kasan: bad access detected [ 102.269357][ T5224] page_owner tracks the page as allocated [ 102.275066][ T5224] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4888, tgid 4888 (dhcpcd), ts 28641000942, free_ts 28530834581 [ 102.295751][ T5224] post_alloc_hook+0x1f3/0x230 [ 102.300524][ T5224] get_page_from_freelist+0x2e4c/0x2f10 [ 102.306059][ T5224] __alloc_pages_noprof+0x256/0x6c0 [ 102.311271][ T5224] alloc_pages_mpol_noprof+0x3e8/0x680 [ 102.316756][ T5224] alloc_slab_page+0x6a/0x130 [ 102.321416][ T5224] allocate_slab+0x5a/0x2f0 [ 102.325901][ T5224] ___slab_alloc+0xcd1/0x14b0 [ 102.330565][ T5224] __slab_alloc+0x58/0xa0 [ 102.334877][ T5224] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 102.341278][ T5224] kmalloc_reserve+0x111/0x2a0 [ 102.346043][ T5224] __alloc_skb+0x1f3/0x440 [ 102.350529][ T5224] netlink_dump+0x1f7/0xd80 [ 102.355025][ T5224] netlink_recvmsg+0x6bb/0x11d0 [ 102.359866][ T5224] sock_recvmsg+0x22f/0x280 [ 102.364354][ T5224] ____sys_recvmsg+0x1c6/0x480 [ 102.369096][ T5224] __sys_recvmsg+0x2ea/0x3d0 [ 102.373666][ T5224] page last free pid 4885 tgid 4885 stack trace: [ 102.379970][ T5224] free_unref_page+0xd19/0xea0 [ 102.384716][ T5224] __put_partials+0xeb/0x130 [ 102.389291][ T5224] put_cpu_partial+0x17c/0x250 [ 102.394059][ T5224] __slab_free+0x2ea/0x3d0 [ 102.398469][ T5224] qlist_free_all+0x9e/0x140 [ 102.403057][ T5224] kasan_quarantine_reduce+0x14f/0x170 [ 102.408507][ T5224] __kasan_slab_alloc+0x23/0x80 [ 102.413360][ T5224] __kmalloc_cache_noprof+0x132/0x2c0 [ 102.418721][ T5224] tomoyo_init_log+0x11cd/0x2050 [ 102.423658][ T5224] tomoyo_supervisor+0x38a/0x11f0 [ 102.428668][ T5224] tomoyo_env_perm+0x178/0x210 [ 102.433413][ T5224] tomoyo_find_next_domain+0x1383/0x1cf0 [ 102.439058][ T5224] tomoyo_bprm_check_security+0x114/0x180 [ 102.444773][ T5224] security_bprm_check+0x86/0x250 [ 102.449788][ T5224] bprm_execve+0xa56/0x1770 [ 102.454271][ T5224] do_execveat_common+0x55f/0x6f0 [ 102.459288][ T5224] [ 102.461588][ T5224] Memory state around the buggy address: [ 102.467191][ T5224] ffff888077627f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.475239][ T5224] ffff888077627f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.483283][ T5224] >ffff888077628000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.491327][ T5224] ^ [ 102.497197][ T5224] ffff888077628080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.505243][ T5224] ffff888077628100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.513281][ T5224] ================================================================== [ 102.528076][ T5224] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.535293][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: kworker/u9:2 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 102.545790][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 102.555857][ T5224] Workqueue: hci4 hci_tx_work [ 102.560540][ T5224] Call Trace: [ 102.563812][ T5224] [ 102.566728][ T5224] dump_stack_lvl+0x241/0x360 [ 102.571410][ T5224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.576617][ T5224] ? __pfx__printk+0x10/0x10 [ 102.581205][ T5224] ? preempt_schedule+0xe1/0xf0 [ 102.586070][ T5224] ? vscnprintf+0x5d/0x90 [ 102.590386][ T5224] panic+0x349/0x870 [ 102.594272][ T5224] ? check_panic_on_warn+0x21/0xb0 [ 102.599373][ T5224] ? __pfx_panic+0x10/0x10 [ 102.603779][ T5224] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 102.609746][ T5224] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.616058][ T5224] ? print_report+0x502/0x550 [ 102.620724][ T5224] check_panic_on_warn+0x86/0xb0 [ 102.625647][ T5224] ? hci_disconnect+0x208/0x2d0 [ 102.630482][ T5224] end_report+0x77/0x160 [ 102.634710][ T5224] kasan_report+0x154/0x180 [ 102.639195][ T5224] ? hci_disconnect+0x208/0x2d0 [ 102.644036][ T5224] hci_disconnect+0x208/0x2d0 [ 102.648712][ T5224] ? __pfx_hci_disconnect+0x10/0x10 [ 102.653893][ T5224] ? hci_sched_esco+0x336/0x440 [ 102.658726][ T5224] ? __rcu_read_unlock+0xa1/0x110 [ 102.663732][ T5224] ? __check_timeout+0x181/0x550 [ 102.668649][ T5224] __check_timeout+0x3a5/0x550 [ 102.673419][ T5224] ? __check_timeout+0x181/0x550 [ 102.678365][ T5224] hci_tx_work+0xb68/0x1590 [ 102.682967][ T5224] ? __pfx_lock_acquire+0x10/0x10 [ 102.687984][ T5224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.693950][ T5224] ? __pfx_hci_tx_work+0x10/0x10 [ 102.698871][ T5224] ? process_scheduled_works+0x976/0x1850 [ 102.704575][ T5224] process_scheduled_works+0xa63/0x1850 [ 102.710107][ T5224] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.716073][ T5224] ? assign_work+0x364/0x3d0 [ 102.720644][ T5224] worker_thread+0x870/0xd30 [ 102.725220][ T5224] ? __kthread_parkme+0x169/0x1d0 [ 102.730234][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 102.735331][ T5224] kthread+0x2f0/0x390 [ 102.739398][ T5224] ? __pfx_worker_thread+0x10/0x10 [ 102.744490][ T5224] ? __pfx_kthread+0x10/0x10 [ 102.749074][ T5224] ret_from_fork+0x4b/0x80 [ 102.753500][ T5224] ? __pfx_kthread+0x10/0x10 [ 102.758073][ T5224] ret_from_fork_asm+0x1a/0x30 [ 102.762849][ T5224] [ 102.766130][ T5224] Kernel Offset: disabled [ 102.770471][ T5224] Rebooting in 86400 seconds..