last executing test programs: 7m18.709854816s ago: executing program 5 (id=6): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 7m14.950161729s ago: executing program 3 (id=15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7m14.30092919s ago: executing program 5 (id=17): getpgrp(0x0) syz_emit_vhci(&(0x7f0000005b40)=ANY=[@ANYBLOB="0401"], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) lstat(&(0x7f0000003a80)='./cgroup.net/devices.allow\x00', &(0x7f0000003ac0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000004c0)={0x3, @bcast, r4}) 7m12.512236741s ago: executing program 5 (id=18): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7m9.953133116s ago: executing program 3 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xaaa, @local, 0xff, 0x1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffb, 0x34014c40, 0x0, 0x0, 0x5b0, 0x0, 0x0, 0x0, 0x10, 0xb}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008340)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8000, 0xfffffffc, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6m56.409192508s ago: executing program 32 (id=18): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6m56.231749207s ago: executing program 3 (id=37): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xffdd) mkdir(0x0, 0x0) mkdir(0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mknodat$loop(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) rename(0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x10004) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000003c0), 0x0}, 0x20) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x140) 6m53.203223272s ago: executing program 3 (id=40): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0xa0042, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000000)='c:::\x00', 0x0) r5 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffffffffe3d}, &(0x7f0000000080)={&(0x7f0000000040)}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='fsi_master_acf_copro_response\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) tkill(r5, 0xb) 6m51.783938361s ago: executing program 3 (id=43): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x66ff, &(0x7f0000000440)={0x0, 0xbb97, 0x10000, 0x0, 0x92}, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000009c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)="a5ce", 0xfed0) r7 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0xcea5, 0x6) 6m46.452236146s ago: executing program 3 (id=49): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) gettid() 6m31.333153073s ago: executing program 33 (id=49): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) gettid() 22.002955794s ago: executing program 4 (id=571): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {0x3bb, 0x10, 0x5, 0x5}, 0xe, [0xf, 0x0, 0x6, 0x0, 0x4, 0x7, 0x3, 0x10002, 0x7, 0xcf, 0x16, 0x8d, 0x2, 0x9, 0xff, 0x7f, 0x9, 0x0, 0x9, 0x2, 0x4, 0x7, 0x149d, 0x3, 0x497d, 0x3, 0xe5be, 0xd, 0x200, 0xffffffff, 0x1, 0xab, 0xe9, 0x7ff, 0x0, 0x21f3, 0xfffffffd, 0xf688, 0x8, 0x1, 0x10, 0x8, 0x430, 0x7, 0x5ced2a4a, 0x4, 0x3, 0x9, 0x101, 0x1, 0x2, 0x4, 0xcfc4, 0x6, 0x6, 0x80000000, 0x4, 0x401, 0x2, 0x9, 0x4, 0x800, 0x6, 0x8], [0x3, 0x2, 0xffffffff, 0x3f7a, 0x0, 0x1, 0x2, 0x5738, 0xb, 0xffd, 0xc, 0x3, 0x25, 0x9, 0xe, 0x8, 0x9, 0xa, 0x6, 0x818, 0x3, 0x4, 0x7fffffff, 0x2, 0xffffff00, 0x0, 0x7, 0x1, 0x7, 0x0, 0x10, 0x6, 0xfffffff7, 0x4, 0x4, 0x8, 0x6, 0x1000, 0x80000001, 0x2, 0x16, 0x1220, 0x1, 0x8, 0x5, 0x759b, 0x80, 0x7, 0x9, 0x5, 0xfff, 0xa1de, 0x7, 0x0, 0x7, 0x1, 0x4, 0xff, 0x6, 0x3, 0xfffffffe, 0x5, 0x7579, 0x2], [0x0, 0x2, 0x8, 0x8, 0x1, 0x1, 0x7f, 0x0, 0x5, 0x4, 0x5, 0x5, 0x6, 0x0, 0xff, 0x5, 0x2, 0x7ffd, 0x1, 0x6, 0x4, 0x6, 0x4, 0x8, 0x1000, 0x100, 0x8, 0x7, 0xfffff646, 0xd5c3, 0x9, 0x9, 0xffffffff, 0x9, 0xd, 0xffffff96, 0xa1, 0x7, 0x7, 0xa, 0x9, 0x2bb, 0xfffffffa, 0x6, 0xf3, 0xff, 0x6, 0x16d, 0x3, 0x7, 0xa0aa, 0xffff71a5, 0x9, 0x5207, 0x7ff, 0xffff, 0xfffffffa, 0xb, 0x4, 0x1, 0x7, 0xc, 0xbfb2, 0x2], [0x9, 0x10001, 0x7f, 0x0, 0x2, 0x8, 0xf, 0x1000, 0x8, 0x5d0, 0x3, 0x6, 0x1, 0xa89, 0x0, 0x0, 0x9, 0xdce, 0x80000000, 0x9, 0x8, 0x1, 0x536, 0x9, 0x0, 0x9, 0xfffffffe, 0x9, 0xea59, 0x101, 0x100005, 0x7, 0x0, 0x4, 0xa, 0xfa7, 0xd6, 0x2, 0x9, 0x8, 0x8, 0x8000, 0xffff, 0x0, 0x2080, 0xfffff330, 0x8, 0x8, 0x754d, 0x4, 0x3, 0x2, 0x400, 0x3, 0x3, 0x3ff, 0xff, 0xfffffff9, 0x0, 0x0, 0x60000000, 0xfffffff8, 0x6, 0x80000]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setresuid(0xee00, 0xee01, 0xee01) shmat(r3, &(0x7f0000fee000/0x1000)=nil, 0x4800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = io_uring_setup(0x5199, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r1, 0x0, 0x0) 15.128407928s ago: executing program 0 (id=579): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x66ff, &(0x7f0000000440)={0x0, 0xbb97, 0x10000, 0x0, 0x92}, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000009c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)="a5ce", 0xfed0) r7 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0xcea5, 0x6) 15.028586377s ago: executing program 4 (id=580): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r5, 0x0, 0x0, 0x6}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079101a00000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x7, 0x0, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000340), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, r6, 0x1b, 0x8, r6, @void, @value, @void, @void, r7}, 0x20) 13.482692863s ago: executing program 4 (id=581): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x66ff, &(0x7f0000000440)={0x0, 0xbb97, 0x10000, 0x0, 0x92}, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000009c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)="a5ce", 0xfed0) r7 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0xcea5, 0x6) 11.893210455s ago: executing program 2 (id=582): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {0x3bb, 0x10, 0x5, 0x5}, 0xe, [0xf, 0x0, 0x6, 0x0, 0x4, 0x7, 0x3, 0x10002, 0x7, 0xcf, 0x16, 0x8d, 0x2, 0x9, 0xff, 0x7f, 0x9, 0x0, 0x9, 0x2, 0x4, 0x7, 0x149d, 0x3, 0x497d, 0x3, 0xe5be, 0xd, 0x200, 0xffffffff, 0x1, 0xab, 0xe9, 0x7ff, 0x0, 0x21f3, 0xfffffffd, 0xf688, 0x8, 0x1, 0x10, 0x8, 0x430, 0x7, 0x5ced2a4a, 0x4, 0x3, 0x9, 0x101, 0x1, 0x2, 0x4, 0xcfc4, 0x6, 0x6, 0x80000000, 0x4, 0x401, 0x2, 0x9, 0x4, 0x800, 0x6, 0x8], [0x3, 0x2, 0xffffffff, 0x3f7a, 0x0, 0x1, 0x2, 0x5738, 0xb, 0xffd, 0xc, 0x3, 0x25, 0x9, 0xe, 0x8, 0x9, 0xa, 0x6, 0x818, 0x3, 0x4, 0x7fffffff, 0x2, 0xffffff00, 0x0, 0x7, 0x1, 0x7, 0x0, 0x10, 0x6, 0xfffffff7, 0x4, 0x4, 0x8, 0x6, 0x1000, 0x80000001, 0x2, 0x16, 0x1220, 0x1, 0x8, 0x5, 0x759b, 0x80, 0x7, 0x9, 0x5, 0xfff, 0xa1de, 0x7, 0x0, 0x7, 0x1, 0x4, 0xff, 0x6, 0x3, 0xfffffffe, 0x5, 0x7579, 0x2], [0x0, 0x2, 0x8, 0x8, 0x1, 0x1, 0x7f, 0x0, 0x5, 0x4, 0x5, 0x5, 0x6, 0x0, 0xff, 0x5, 0x2, 0x7ffd, 0x1, 0x6, 0x4, 0x6, 0x4, 0x8, 0x1000, 0x100, 0x8, 0x7, 0xfffff646, 0xd5c3, 0x9, 0x9, 0xffffffff, 0x9, 0xd, 0xffffff96, 0xa1, 0x7, 0x7, 0xa, 0x9, 0x2bb, 0xfffffffa, 0x6, 0xf3, 0xff, 0x6, 0x16d, 0x3, 0x7, 0xa0aa, 0xffff71a5, 0x9, 0x5207, 0x7ff, 0xffff, 0xfffffffa, 0xb, 0x4, 0x1, 0x7, 0xc, 0xbfb2, 0x2], [0x9, 0x10001, 0x7f, 0x0, 0x2, 0x8, 0xf, 0x1000, 0x8, 0x5d0, 0x3, 0x6, 0x1, 0xa89, 0x0, 0x0, 0x9, 0xdce, 0x80000000, 0x9, 0x8, 0x1, 0x536, 0x9, 0x0, 0x9, 0xfffffffe, 0x9, 0xea59, 0x101, 0x100005, 0x7, 0x0, 0x4, 0xa, 0xfa7, 0xd6, 0x2, 0x9, 0x8, 0x8, 0x8000, 0xffff, 0x0, 0x2080, 0xfffff330, 0x8, 0x8, 0x754d, 0x4, 0x3, 0x2, 0x400, 0x3, 0x3, 0x3ff, 0xff, 0xfffffff9, 0x0, 0x0, 0x60000000, 0xfffffff8, 0x6, 0x80000]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setresuid(0xee00, 0xee01, 0xee01) shmat(r3, &(0x7f0000fee000/0x1000)=nil, 0x4800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 10.883634656s ago: executing program 0 (id=583): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000380)={0x0, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000500)={0x0, 0x8, 0x3, 0x3, 0x1, [0x0, 0x0, 0x0, r1], [0x3, 0x0, 0x81, 0x1], [0xc3, 0x10, 0x80, 0x9], [0x1000, 0xc45c, 0x10000, 0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) shutdown(r0, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r5, r0, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) 10.882940548s ago: executing program 4 (id=584): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080)=0x38034f2d, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 10.73733349s ago: executing program 2 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) 10.362558562s ago: executing program 1 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xff, {0xfffffffffffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.659721839s ago: executing program 2 (id=587): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080)=0x38034f2d, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 8.732875223s ago: executing program 0 (id=588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) accept$unix(r1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.989270713s ago: executing program 1 (id=589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 6.634074768s ago: executing program 1 (id=590): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="efb8bfd4b90d12481478c5a0bd7d826014f5f0fa71b0e047733f7c6d90ff9c167d1787f711913b92915a7e758c1ae08eb91c8ffce113c64cda300e645db8468d2464adb2ba44e0862b86c7a89a91e94f42ee2f9e9732fa65414aad93dd75c7951caab2355a40d16e13e37b8d73ddd586f1d09f8c6b914c94e345988b4375aa9aa4190a705b48814ae2e426f084ae5e7dd5a2d4057430cde7a58421cb", 0x9c}, {&(0x7f0000000380)="7805ab43a3848187f45dd76357f435ff15f97386d50e139406de9349580e3b8f18b3077d8a25a386e3f43e26dc05d5468eaf5d203222ea2d84602bd0e8f3e103dd90c158afc0f2e7b7ba97317177f9953f3ee35de10caaf20f80ba6f689a59c2c47d189beb4248e337dcbcc40e8f8bcf11bd5cc81c66581ac4ad73e362b51120f370c6db897080c7b70780582f0946171bdf5d1270baad6dffa5ce07e617f6460970616947039b90d5fcf451d88babc5e81dfe21f2c53389a9f164957f275d936975", 0xc2}, {&(0x7f0000000140)="01ce13a0a2173f83c8161f3eb0e280d9f38997566372de372d80f76b115f8216da8f36c4a8559824931269faaa87e9ef22e72089dddf5692b2c635154e8e6ec76a39650c7b71e32dd3f9a519129e43a5fdd3bc6c", 0x54}, {&(0x7f00000000c0)="1400b4860f6e11b1e127b4bd0d96e921c1aec6a146285ddf350f779ebc56c8adf70888f4766d35d09e14d8c5cda9", 0x2e}, {&(0x7f0000000200)="ce96c286e6ed709ee3b9d898795e4d18e47a10204e1b3ac4e3d7d91b581f1bdae0cf2fd41add7dddb9028012d153a88996e6fe229f8a30d5e484fb8fc0c6bfc7f6f9b12d7ac2bf93a340d3f1197b5894593b3744b50675936a668dd274af0d344a5321acd34802d72aa99a5edb208847b5a0dcd3", 0x74}, {&(0x7f0000000640)="7c9e22b60452fca9bea75e65496005e21586e01e84cf82652c9d5638d9916a2e1b29b0e2e86a510e0eb087a15b6429a0dc10f4b6baf6ddd9a08d5e5839a433026d4c10a487f0249b1677037d2c06fa649fa6572905c0a29a8fc1c3c4d49de6cf42cf50c2f1a4f1d53a77df0d9e1d737349a1532e7565365961455f32cd3b7e91c180a17cb831a56705ca18413b44cfe2c06b51cad8fa599a287979d9650b677464fbbb1c308caf5e63115700e62e62b040a37720312a93ae338ee84dbafabe6461d2f7295d18a79a3639f40631448ab7b4350f54e382", 0xd6}], 0x6}}], 0x1, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.385632158s ago: executing program 2 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 6.339965101s ago: executing program 1 (id=592): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, 0x0, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 5.350550878s ago: executing program 0 (id=593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.42658285s ago: executing program 0 (id=594): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) gettid() 4.189953732s ago: executing program 1 (id=595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) socket$unix(0x1, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.696407118s ago: executing program 2 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x15, 0x80002, 0xff) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 1.908015869s ago: executing program 4 (id=597): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) 1.833132781s ago: executing program 0 (id=598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000380)={0x0, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000500)={0x0, 0x8, 0x3, 0x3, 0x1, [0x0, 0x0, 0x0, r1], [0x3, 0x0, 0x81, 0x1], [0xc3, 0x10, 0x80, 0x9], [0x1000, 0xc45c, 0x10000, 0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) shutdown(r0, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r5, r0, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) 1.659581495s ago: executing program 2 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 653.77036ms ago: executing program 1 (id=600): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=601): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(&(0x7f0000000200)='./file1\x00', 0x0) io_setup(0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r5, 0x0, 0x0, 0x6}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079101a00000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x7, 0x0, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000340), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, r6, 0x1b, 0x8, r6, @void, @value, @void, @void, r7}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 84.735368][ T5809] cgroup: Unknown subsys name 'net' [ 84.924099][ T5809] cgroup: Unknown subsys name 'cpuset' [ 84.933577][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.510278][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.396680][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.405048][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.405078][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.412639][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.420808][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.426715][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.434588][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.440436][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.447364][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.461453][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.468965][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.476983][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.478781][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.491153][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.491730][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.499051][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.507140][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.512403][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.520562][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.527349][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.540349][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.548338][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.550274][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.560290][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.570619][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.573900][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.585286][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.585338][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.593912][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.611044][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.111661][ T975] cfg80211: failed to load regulatory.db [ 91.341777][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.558778][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.691240][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.711897][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.725575][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.880134][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.887338][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.894724][ T5829] bridge_slave_0: entered allmulticast mode [ 91.902534][ T5829] bridge_slave_0: entered promiscuous mode [ 91.910922][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.923709][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.931273][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.938578][ T5829] bridge_slave_1: entered allmulticast mode [ 91.946123][ T5829] bridge_slave_1: entered promiscuous mode [ 92.133243][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.162164][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.169422][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.176687][ T5831] bridge_slave_0: entered allmulticast mode [ 92.184483][ T5831] bridge_slave_0: entered promiscuous mode [ 92.214044][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.266231][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.273496][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.281251][ T5831] bridge_slave_1: entered allmulticast mode [ 92.288578][ T5831] bridge_slave_1: entered promiscuous mode [ 92.302063][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.309187][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.316381][ T5833] bridge_slave_0: entered allmulticast mode [ 92.324099][ T5833] bridge_slave_0: entered promiscuous mode [ 92.345024][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.352167][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.359296][ T5830] bridge_slave_0: entered allmulticast mode [ 92.367216][ T5830] bridge_slave_0: entered promiscuous mode [ 92.375023][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.382442][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.389842][ T5827] bridge_slave_0: entered allmulticast mode [ 92.397253][ T5827] bridge_slave_0: entered promiscuous mode [ 92.424426][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.431614][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.438759][ T5833] bridge_slave_1: entered allmulticast mode [ 92.446317][ T5833] bridge_slave_1: entered promiscuous mode [ 92.467735][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.475727][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.483079][ T5830] bridge_slave_1: entered allmulticast mode [ 92.490588][ T5830] bridge_slave_1: entered promiscuous mode [ 92.497521][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.505008][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.512310][ T5827] bridge_slave_1: entered allmulticast mode [ 92.519641][ T5827] bridge_slave_1: entered promiscuous mode [ 92.568992][ T5829] team0: Port device team_slave_0 added [ 92.604208][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.630705][ T5835] Bluetooth: hci2: command tx timeout [ 92.636340][ T5842] Bluetooth: hci5: command tx timeout [ 92.642381][ T5852] Bluetooth: hci3: command tx timeout [ 92.647913][ T52] Bluetooth: hci0: command tx timeout [ 92.649528][ T5142] Bluetooth: hci4: command tx timeout [ 92.663016][ T5829] team0: Port device team_slave_1 added [ 92.703468][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.712899][ T5142] Bluetooth: hci1: command tx timeout [ 92.713107][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.726279][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.733915][ T5828] bridge_slave_0: entered allmulticast mode [ 92.741372][ T5828] bridge_slave_0: entered promiscuous mode [ 92.751622][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.776477][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.788957][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.811882][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.819087][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.826396][ T5828] bridge_slave_1: entered allmulticast mode [ 92.834122][ T5828] bridge_slave_1: entered promiscuous mode [ 92.843794][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.867958][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.879856][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.930836][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.937788][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964021][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.004865][ T5831] team0: Port device team_slave_0 added [ 93.038652][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.045654][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.072096][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.112574][ T5831] team0: Port device team_slave_1 added [ 93.121063][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.133851][ T5833] team0: Port device team_slave_0 added [ 93.150372][ T5830] team0: Port device team_slave_0 added [ 93.158353][ T5827] team0: Port device team_slave_0 added [ 93.179530][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.192146][ T5833] team0: Port device team_slave_1 added [ 93.200370][ T5830] team0: Port device team_slave_1 added [ 93.208725][ T5827] team0: Port device team_slave_1 added [ 93.282366][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.289318][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.315633][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.408662][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.416064][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.442130][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.454939][ T5828] team0: Port device team_slave_0 added [ 93.461302][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.468246][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.495065][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.506893][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.514323][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.540662][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.565951][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.573101][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.599475][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.620839][ T5828] team0: Port device team_slave_1 added [ 93.627046][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.634034][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.660252][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.671913][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.678852][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.709031][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.727000][ T5829] hsr_slave_0: entered promiscuous mode [ 93.733601][ T5829] hsr_slave_1: entered promiscuous mode [ 93.741758][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.748691][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.774754][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.853857][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.861278][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.887372][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.901213][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.908189][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.934872][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.973568][ T5831] hsr_slave_0: entered promiscuous mode [ 93.981297][ T5831] hsr_slave_1: entered promiscuous mode [ 93.987465][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 93.993852][ T5831] Cannot create hsr debugfs directory [ 94.138426][ T5830] hsr_slave_0: entered promiscuous mode [ 94.146170][ T5830] hsr_slave_1: entered promiscuous mode [ 94.152932][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 94.158651][ T5830] Cannot create hsr debugfs directory [ 94.170466][ T5827] hsr_slave_0: entered promiscuous mode [ 94.200089][ T5827] hsr_slave_1: entered promiscuous mode [ 94.206334][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 94.214361][ T5827] Cannot create hsr debugfs directory [ 94.226809][ T5833] hsr_slave_0: entered promiscuous mode [ 94.237897][ T5833] hsr_slave_1: entered promiscuous mode [ 94.244228][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 94.250085][ T5833] Cannot create hsr debugfs directory [ 94.330081][ T5828] hsr_slave_0: entered promiscuous mode [ 94.336537][ T5828] hsr_slave_1: entered promiscuous mode [ 94.343337][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 94.349055][ T5828] Cannot create hsr debugfs directory [ 94.710151][ T5142] Bluetooth: hci0: command tx timeout [ 94.710171][ T5842] Bluetooth: hci3: command tx timeout [ 94.715627][ T5142] Bluetooth: hci2: command tx timeout [ 94.726777][ T5842] Bluetooth: hci5: command tx timeout [ 94.726945][ T52] Bluetooth: hci4: command tx timeout [ 94.789957][ T52] Bluetooth: hci1: command tx timeout [ 95.031826][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.052794][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.064711][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.085282][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.143935][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.164287][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.177467][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.192342][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.287962][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.308033][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.334593][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.346931][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.452037][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.464883][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.475608][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.486707][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.557877][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.635972][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.660863][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.682427][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.693175][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.712371][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.778464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.785703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.805156][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.836791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.843977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.861654][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.887456][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.896166][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.916613][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.928722][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.973666][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.029044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.036224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.052507][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.074373][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.081516][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.104223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.111360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.154596][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.161834][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.205473][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.302614][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.369370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.376547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.432954][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.440145][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.474783][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.539143][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.655888][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.677918][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.695388][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.702559][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.757457][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.764744][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.796762][ T5852] Bluetooth: hci0: command tx timeout [ 96.796866][ T5842] Bluetooth: hci2: command tx timeout [ 96.804078][ T5835] Bluetooth: hci5: command tx timeout [ 96.814204][ T52] Bluetooth: hci4: command tx timeout [ 96.820364][ T5142] Bluetooth: hci3: command tx timeout [ 96.821857][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.832944][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.874727][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.880149][ T5835] Bluetooth: hci1: command tx timeout [ 96.927661][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.934823][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.005648][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.067076][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.185528][ T5829] veth0_vlan: entered promiscuous mode [ 97.213812][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.286956][ T5829] veth1_vlan: entered promiscuous mode [ 97.459348][ T5829] veth0_macvtap: entered promiscuous mode [ 97.493224][ T5829] veth1_macvtap: entered promiscuous mode [ 97.542689][ T5830] veth0_vlan: entered promiscuous mode [ 97.604122][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.617261][ T5830] veth1_vlan: entered promiscuous mode [ 97.638394][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.727933][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756837][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781998][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.793464][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.803122][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.828496][ T5830] veth0_macvtap: entered promiscuous mode [ 97.861350][ T5830] veth1_macvtap: entered promiscuous mode [ 97.893855][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.945401][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.956521][ T5831] veth0_vlan: entered promiscuous mode [ 97.999427][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.019274][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.033764][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044179][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.062533][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.077407][ T5831] veth1_vlan: entered promiscuous mode [ 98.091299][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.100408][ T5833] veth0_vlan: entered promiscuous mode [ 98.107064][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.172413][ T5833] veth1_vlan: entered promiscuous mode [ 98.215557][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.216211][ T5827] veth0_vlan: entered promiscuous mode [ 98.229230][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.285664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.308163][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.334213][ T5827] veth1_vlan: entered promiscuous mode [ 98.345974][ T5831] veth0_macvtap: entered promiscuous mode [ 98.358533][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.434394][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.449751][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.459568][ T5831] veth1_macvtap: entered promiscuous mode [ 98.552808][ T5833] veth0_macvtap: entered promiscuous mode [ 98.575906][ T5827] veth0_macvtap: entered promiscuous mode [ 98.591086][ T5828] veth0_vlan: entered promiscuous mode [ 98.604362][ T5833] veth1_macvtap: entered promiscuous mode [ 98.623064][ T5827] veth1_macvtap: entered promiscuous mode [ 98.675586][ T5828] veth1_vlan: entered promiscuous mode [ 98.721833][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.763987][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.767321][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.930022][ T5835] Bluetooth: hci2: command tx timeout [ 98.935676][ T5835] Bluetooth: hci5: command tx timeout [ 98.941335][ T5835] Bluetooth: hci0: command tx timeout [ 98.950587][ T5835] Bluetooth: hci3: command tx timeout [ 98.956170][ T5835] Bluetooth: hci4: command tx timeout [ 98.962033][ T5852] Bluetooth: hci1: command tx timeout [ 99.355754][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.438856][ T5828] veth0_macvtap: entered promiscuous mode [ 99.461803][ T5828] veth1_macvtap: entered promiscuous mode [ 99.488611][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.564524][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.605007][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.617045][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.626043][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.872999][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.728382][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.914168][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.320792][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.330700][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.339416][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.580928][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.615036][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.622771][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.636235][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.646976][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.319470][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.335679][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.337448][ T3651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.373561][ T3651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.428308][ T3651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.477622][ T3651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.308283][ T6000] loop3: detected capacity change from 0 to 64 [ 103.445312][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.461721][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.518600][ T4163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.540016][ T4163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.593833][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.605978][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.700909][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.708761][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.845151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.915447][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.927934][ T6014] Zero length message leads to an empty skb [ 103.940480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.948706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.957358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.980143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.677058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.688057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.910019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.988298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.500116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.602785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.909687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 107.110321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.765984][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.817911][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.674626][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.128432][ T6063] loop4: detected capacity change from 0 to 4096 [ 114.185783][ T6063] ntfs3: Unknown parameter '18446744073709551615' [ 126.488137][ T6133] loop4: detected capacity change from 0 to 64 [ 126.648229][ T6133] overlayfs: missing 'lowerdir' [ 127.384114][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.405420][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.414678][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.422707][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.440375][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.342374][ T6152] loop3: detected capacity change from 0 to 64 [ 129.720471][ T5835] Bluetooth: hci6: command tx timeout [ 129.762413][ T139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.406888][ T6158] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 130.571368][ T6136] chnl_net:caif_netlink_parms(): no params data found [ 132.279903][ T5835] Bluetooth: hci6: command tx timeout [ 132.286100][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.292708][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.870729][ T139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.242341][ T139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.309824][ T5835] Bluetooth: hci6: command tx timeout [ 135.520655][ T139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.419793][ T5835] Bluetooth: hci6: command tx timeout [ 136.972375][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.979613][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.740538][ T6136] bridge_slave_0: entered allmulticast mode [ 137.748476][ T6136] bridge_slave_0: entered promiscuous mode [ 137.773401][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.859836][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.867160][ T6136] bridge_slave_1: entered allmulticast mode [ 137.913124][ T6136] bridge_slave_1: entered promiscuous mode [ 140.235260][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.362439][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.525936][ T6204] mmap: syz.4.52 (6204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.889601][ T6136] team0: Port device team_slave_0 added [ 141.021424][ T6136] team0: Port device team_slave_1 added [ 141.303714][ T6211] process 'syz.2.44' launched '/dev/fd/6' with NULL argv: empty string added [ 141.634474][ T139] bridge_slave_1: left allmulticast mode [ 141.663952][ T139] bridge_slave_1: left promiscuous mode [ 141.730866][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.815976][ T139] bridge_slave_0: left allmulticast mode [ 141.919837][ T139] bridge_slave_0: left promiscuous mode [ 141.925682][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.232167][ T5890] udevd[5890]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 150.292828][ T6263] netlink: 36 bytes leftover after parsing attributes in process `ÿ'. [ 150.301227][ T6263] netlink: 36 bytes leftover after parsing attributes in process `ÿ'. [ 150.309737][ T6263] netlink: 36 bytes leftover after parsing attributes in process `ÿ'. [ 150.948619][ T6262] loop4: detected capacity change from 0 to 256 [ 150.963260][ T6268] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 151.053163][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.119903][ T6262] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 151.147768][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.848345][ T139] bond0 (unregistering): Released all slaves [ 152.855956][ T6262] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 152.873108][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.029859][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.131833][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.196404][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.229077][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.237986][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.265139][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.265253][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.291265][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.301332][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.316588][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.508401][ T6286] loop4: detected capacity change from 0 to 64 [ 154.018937][ T6291] ceph: No mds server is up or the cluster is laggy [ 154.036071][ T24] libceph: connect (1)[c::]:6789 error -101 [ 154.073847][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 155.360989][ T5142] Bluetooth: hci4: command tx timeout [ 156.591606][ T6306] overlayfs: failed to resolve './bus': -2 [ 156.813717][ T6317] netlink: 67 bytes leftover after parsing attributes in process `syz.4.73'. [ 157.441094][ T5142] Bluetooth: hci4: command tx timeout [ 158.988369][ T6136] hsr_slave_0: entered promiscuous mode [ 159.020933][ T6136] hsr_slave_1: entered promiscuous mode [ 159.027108][ T6136] debugfs: 'hsr0' already exists in 'hsr' [ 159.068770][ T6136] Cannot create hsr debugfs directory [ 159.477690][ T139] hsr_slave_0: left promiscuous mode [ 159.522374][ T5142] Bluetooth: hci4: command tx timeout [ 159.593763][ T139] hsr_slave_1: left promiscuous mode [ 160.910143][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.925933][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.952707][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.960996][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.202892][ T139] veth1_macvtap: left promiscuous mode [ 161.208521][ T139] veth0_macvtap: left promiscuous mode [ 161.649761][ T5142] Bluetooth: hci4: command tx timeout [ 161.689948][ T139] veth1_vlan: left promiscuous mode [ 161.697220][ T139] veth0_vlan: left promiscuous mode [ 161.756135][ T6336] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.052540][ T139] team0 (unregistering): Port device team_slave_1 removed [ 163.150144][ T139] team0 (unregistering): Port device team_slave_0 removed [ 164.314214][ T6358] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 167.151638][ T6383] lo speed is unknown, defaulting to 1000 [ 167.195886][ T6383] lo speed is unknown, defaulting to 1000 [ 167.239027][ T6383] lo speed is unknown, defaulting to 1000 [ 167.625195][ T6383] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.817075][ T6383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.088358][ T139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.192499][ T6136] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.258056][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 168.328256][ T6136] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.335780][ T6383] lo speed is unknown, defaulting to 1000 [ 168.543530][ T139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.632490][ T6383] lo speed is unknown, defaulting to 1000 [ 168.633215][ T6136] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.815045][ T6383] lo speed is unknown, defaulting to 1000 [ 168.831755][ T6383] lo speed is unknown, defaulting to 1000 [ 168.839444][ T6383] lo speed is unknown, defaulting to 1000 [ 168.903312][ T139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.982785][ T6136] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.177626][ T6383] lo speed is unknown, defaulting to 1000 [ 169.248030][ T6383] lo speed is unknown, defaulting to 1000 [ 169.747251][ T139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.286527][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.313016][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.331741][ T6278] bridge_slave_0: entered allmulticast mode [ 170.350734][ T6278] bridge_slave_0: entered promiscuous mode [ 170.375399][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.389859][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.421623][ T6278] bridge_slave_1: entered allmulticast mode [ 170.443553][ T6278] bridge_slave_1: entered promiscuous mode [ 170.775985][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.877113][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.237069][ T6278] team0: Port device team_slave_0 added [ 171.304267][ T6278] team0: Port device team_slave_1 added [ 171.393345][ T139] bridge_slave_1: left allmulticast mode [ 171.421830][ T139] bridge_slave_1: left promiscuous mode [ 171.427637][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.510985][ T139] bridge_slave_0: left allmulticast mode [ 171.516694][ T139] bridge_slave_0: left promiscuous mode [ 171.568375][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.752752][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.768076][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.778791][ T139] bond0 (unregistering): Released all slaves [ 176.101175][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.123555][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.153116][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.471702][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.494185][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.784281][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.554483][ T6278] hsr_slave_0: entered promiscuous mode [ 178.564473][ T6278] hsr_slave_1: entered promiscuous mode [ 178.565413][ T6278] debugfs: 'hsr0' already exists in 'hsr' [ 178.565430][ T6278] Cannot create hsr debugfs directory [ 178.739114][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.205770][ T6136] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.298062][ T139] hsr_slave_0: left promiscuous mode [ 179.350365][ T139] hsr_slave_1: left promiscuous mode [ 179.366832][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.386147][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.441284][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.465359][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.603540][ T139] veth1_macvtap: left promiscuous mode [ 179.622334][ T139] veth0_macvtap: left promiscuous mode [ 179.644216][ T139] veth1_vlan: left promiscuous mode [ 179.666243][ T139] veth0_vlan: left promiscuous mode [ 182.029216][ T6552] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 184.895502][ T139] team0 (unregistering): Port device team_slave_1 removed [ 184.960801][ T139] team0 (unregistering): Port device team_slave_0 removed [ 186.694150][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.701369][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.411005][ T6606] netlink: 128 bytes leftover after parsing attributes in process `ÿ'. [ 190.805803][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.826847][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.858331][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.867270][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.888706][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.662853][ T6612] lo speed is unknown, defaulting to 1000 [ 192.950210][ T5142] Bluetooth: hci2: command tx timeout [ 193.010025][ T6278] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.105756][ T6278] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.515155][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.522970][ T6278] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.530046][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.621557][ T6278] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 195.052518][ T5142] Bluetooth: hci2: command tx timeout [ 197.123745][ T5142] Bluetooth: hci2: command tx timeout [ 197.317430][ T6675] netlink: 96 bytes leftover after parsing attributes in process `syz.0.131'. [ 197.712327][ T139] bridge_slave_1: left allmulticast mode [ 197.744661][ T139] bridge_slave_1: left promiscuous mode [ 198.170835][ T6693] ceph: No mds server is up or the cluster is laggy [ 198.185189][ T6113] libceph: connect (1)[c::]:6789 error -101 [ 198.609149][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.665479][ T6113] libceph: mon0 (1)[c::]:6789 connect error [ 198.841758][ T139] bridge_slave_0: left allmulticast mode [ 198.847443][ T139] bridge_slave_0: left promiscuous mode [ 198.888214][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.090402][ T5142] Bluetooth: hci2: command tx timeout [ 205.187588][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.199307][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.229612][ T139] bond0 (unregistering): Released all slaves [ 208.820142][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 209.464824][ T139] hsr_slave_0: left promiscuous mode [ 209.715752][ T139] hsr_slave_1: left promiscuous mode [ 209.752024][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.810545][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.642419][ T6766] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.767572][ T139] team0 (unregistering): Port device team_slave_1 removed [ 213.937487][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.065877][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.085474][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.100320][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.112143][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.315741][ T139] team0 (unregistering): Port device team_slave_0 removed [ 216.174785][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 216.189760][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 216.199457][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 216.210625][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 216.230213][ T5142] Bluetooth: hci6: command tx timeout [ 218.329830][ T5852] Bluetooth: hci6: command tx timeout [ 220.098594][ T6781] lo speed is unknown, defaulting to 1000 [ 220.389771][ T5852] Bluetooth: hci6: command tx timeout [ 220.778326][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.799846][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.827608][ T6612] bridge_slave_0: entered allmulticast mode [ 220.857709][ T6612] bridge_slave_0: entered promiscuous mode [ 222.169280][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.228009][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.278311][ T6612] bridge_slave_1: entered allmulticast mode [ 222.326431][ T6612] bridge_slave_1: entered promiscuous mode [ 222.470709][ T5852] Bluetooth: hci6: command tx timeout [ 222.910108][ T6886] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 223.561715][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.611818][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.264807][ T6612] team0: Port device team_slave_0 added [ 224.453733][ T6612] team0: Port device team_slave_1 added [ 224.870157][ T5852] Bluetooth: hci3: unexpected event for opcode 0x0003 [ 225.143764][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.169721][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.203168][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.367783][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.405657][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.516855][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.549582][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 227.242881][ T6612] hsr_slave_0: entered promiscuous mode [ 227.249631][ T6612] hsr_slave_1: entered promiscuous mode [ 230.390119][ T6991] lo speed is unknown, defaulting to 1000 [ 232.289202][ T139] bridge_slave_1: left allmulticast mode [ 232.307772][ T139] bridge_slave_1: left promiscuous mode [ 232.338357][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.382427][ T139] bridge_slave_0: left allmulticast mode [ 232.388104][ T139] bridge_slave_0: left promiscuous mode [ 232.411199][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.310302][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.335559][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.371361][ T139] bond0 (unregistering): Released all slaves [ 233.449120][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.479438][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.495658][ T6781] bridge_slave_0: entered allmulticast mode [ 233.515411][ T6781] bridge_slave_0: entered promiscuous mode [ 233.786653][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.804823][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.826640][ T6781] bridge_slave_1: entered allmulticast mode [ 233.853523][ T6781] bridge_slave_1: entered promiscuous mode [ 234.409728][ T139] hsr_slave_0: left promiscuous mode [ 234.459846][ T139] hsr_slave_1: left promiscuous mode [ 234.465888][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.530030][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.303561][ T7042] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.662792][ T139] team0 (unregistering): Port device team_slave_1 removed [ 237.734747][ T139] team0 (unregistering): Port device team_slave_0 removed [ 238.707848][ T7050] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 239.866121][ T7056] ceph: No mds server is up or the cluster is laggy [ 239.882675][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 239.888680][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 241.705389][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.865610][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.030556][ T7084] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 243.617495][ T6781] team0: Port device team_slave_0 added [ 243.775265][ T6781] team0: Port device team_slave_1 added [ 245.584180][ T7123] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.647007][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.682617][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.852260][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.912845][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.936190][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.046269][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.526513][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'. [ 246.555108][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 246.671399][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 246.782708][ T6781] hsr_slave_0: entered promiscuous mode [ 246.803822][ T6781] hsr_slave_1: entered promiscuous mode [ 246.819596][ T6781] debugfs: 'hsr0' already exists in 'hsr' [ 246.837665][ T6781] Cannot create hsr debugfs directory [ 249.147911][ T7142] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 249.393001][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.412100][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.444497][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.457130][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.465645][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.701200][ T7155] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.126892][ T7145] lo speed is unknown, defaulting to 1000 [ 251.509835][ T52] Bluetooth: hci4: command tx timeout [ 253.111549][ T7180] binder: BINDER_SET_CONTEXT_MGR already set [ 253.117757][ T7180] binder: 7176:7180 ioctl 4018620d 2000000002c0 returned -16 [ 254.042251][ T52] Bluetooth: hci4: command tx timeout [ 255.167081][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 255.182637][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.201418][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.328287][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 255.422947][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 256.069754][ T52] Bluetooth: hci4: command tx timeout [ 258.168521][ T52] Bluetooth: hci4: command tx timeout [ 258.517950][ T7200] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 259.449306][ T7211] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 260.968227][ T6781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 261.181304][ T6781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.742711][ T6781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.035309][ T6781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.124267][ T7145] chnl_net:caif_netlink_parms(): no params data found [ 265.551759][ T6072] bridge_slave_1: left allmulticast mode [ 265.557449][ T6072] bridge_slave_1: left promiscuous mode [ 265.577112][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.625067][ T6072] bridge_slave_0: left allmulticast mode [ 265.639915][ T6072] bridge_slave_0: left promiscuous mode [ 265.641036][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.226'. [ 265.655923][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.742416][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 265.813106][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 266.392250][ T7255] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 266.661409][ T6072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.714365][ T6072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.765462][ T6072] bond0 (unregistering): Released all slaves [ 268.123953][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.942126][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.957843][ T7145] bridge_slave_0: entered allmulticast mode [ 270.008570][ T7145] bridge_slave_0: entered promiscuous mode [ 270.055469][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.071728][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.088960][ T7145] bridge_slave_1: entered allmulticast mode [ 270.194821][ T7145] bridge_slave_1: entered promiscuous mode [ 270.398341][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.437783][ T6072] hsr_slave_0: left promiscuous mode [ 270.613044][ T6072] hsr_slave_1: left promiscuous mode [ 270.639935][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.662570][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.341341][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.356979][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.373877][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.391746][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.409263][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.330718][ T6072] team0 (unregistering): Port device team_slave_1 removed [ 274.513390][ T6072] team0 (unregistering): Port device team_slave_0 removed [ 275.509947][ T5852] Bluetooth: hci2: command tx timeout [ 275.584629][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.596832][ T7272] netlink: 96 bytes leftover after parsing attributes in process `syz.4.232'. [ 277.589751][ T5852] Bluetooth: hci2: command tx timeout [ 279.297243][ T7145] team0: Port device team_slave_0 added [ 279.658664][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 279.681935][ T5852] Bluetooth: hci2: command tx timeout [ 279.829383][ T7145] team0: Port device team_slave_1 added [ 279.840937][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 279.865284][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.879000][ T24] usb 1-1: config 0 has no interface number 0 [ 279.891988][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.923708][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 279.956456][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.002411][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.200370][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.209454][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.240492][ T24] usb 1-1: config 0 descriptor?? [ 280.259553][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.070702][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.082396][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.134249][ T24] usb 1-1: USB disconnect, device number 2 [ 281.162616][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.177804][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 281.262343][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.269331][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.429868][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.467181][ T7280] lo speed is unknown, defaulting to 1000 [ 281.749804][ T5852] Bluetooth: hci2: command tx timeout [ 282.936113][ T7145] hsr_slave_0: entered promiscuous mode [ 282.991926][ T7145] hsr_slave_1: entered promiscuous mode [ 287.812311][ T7367] overlayfs: failed to resolve './file0': -2 [ 289.844304][ T7380] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 290.094596][ T7383] netlink: 96 bytes leftover after parsing attributes in process `syz.1.252'. [ 290.276815][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 292.175761][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.179843][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.240168][ T7280] bridge_slave_0: entered allmulticast mode [ 292.242098][ T7280] bridge_slave_0: entered promiscuous mode [ 292.376150][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.376321][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.376537][ T7280] bridge_slave_1: entered allmulticast mode [ 292.378499][ T7280] bridge_slave_1: entered promiscuous mode [ 292.517622][ T7419] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 293.745910][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.749372][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.031433][ T7280] team0: Port device team_slave_0 added [ 295.751939][ T7280] team0: Port device team_slave_1 added [ 295.767316][ T7451] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 295.867051][ T7449] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 296.877385][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.894700][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.015839][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.339851][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.370176][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.427578][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.462981][ T6072] bridge_slave_1: left allmulticast mode [ 297.468674][ T6072] bridge_slave_1: left promiscuous mode [ 297.510567][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.574775][ T6072] bridge_slave_0: left allmulticast mode [ 297.614164][ T6072] bridge_slave_0: left promiscuous mode [ 297.634618][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.847705][ T7470] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 298.818807][ T6072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.884532][ T6072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.925717][ T6072] bond0 (unregistering): Released all slaves [ 299.275331][ T7280] hsr_slave_0: entered promiscuous mode [ 299.316589][ T7280] hsr_slave_1: entered promiscuous mode [ 299.353452][ T7280] debugfs: 'hsr0' already exists in 'hsr' [ 299.370299][ T7280] Cannot create hsr debugfs directory [ 300.459830][ T6072] hsr_slave_0: left promiscuous mode [ 300.479951][ T6072] hsr_slave_1: left promiscuous mode [ 300.516678][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.536427][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.353086][ T6072] team0 (unregistering): Port device team_slave_1 removed [ 302.481211][ T6072] team0 (unregistering): Port device team_slave_0 removed [ 303.836634][ T7145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.895468][ T7145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.941306][ T7145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.038590][ T7145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.919145][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.933054][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.950489][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.958534][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.967814][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.010448][ T7551] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.481524][ T7564] binder: 7560:7564 ioctl c0306201 0 returned -14 [ 312.202389][ T7553] lo speed is unknown, defaulting to 1000 [ 313.518058][ T52] Bluetooth: hci6: command tx timeout [ 313.754883][ T7577] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 314.886524][ T7280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.614438][ T52] Bluetooth: hci6: command tx timeout [ 315.980774][ T7280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.828919][ T5852] Bluetooth: hci6: command tx timeout [ 317.835058][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.841450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.116377][ T7280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.361846][ T7280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.687684][ T7617] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 318.722527][ T7553] chnl_net:caif_netlink_parms(): no params data found [ 319.350783][ T6129] bridge_slave_1: left allmulticast mode [ 319.356766][ T6129] bridge_slave_1: left promiscuous mode [ 319.425100][ T7633] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 319.512377][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.579144][ T6129] bridge_slave_0: left allmulticast mode [ 319.657412][ T6129] bridge_slave_0: left promiscuous mode [ 319.708307][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.915763][ T5852] Bluetooth: hci6: command tx timeout [ 320.476019][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.719004][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.487653][ T6129] bond0 (unregistering): Released all slaves [ 321.961548][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.980003][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.987274][ T7553] bridge_slave_0: entered allmulticast mode [ 322.064445][ T7553] bridge_slave_0: entered promiscuous mode [ 322.095876][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.120075][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.127299][ T7553] bridge_slave_1: entered allmulticast mode [ 322.179872][ T7553] bridge_slave_1: entered promiscuous mode [ 322.895953][ T6129] hsr_slave_0: left promiscuous mode [ 323.129967][ T6129] hsr_slave_1: left promiscuous mode [ 323.219554][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.419873][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.612413][ T7672] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 327.946360][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 328.526480][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 331.948553][ T7705] binder: 7701:7705 ioctl c0306201 0 returned -14 [ 332.951404][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.960707][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.968336][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.976688][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.984538][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.921814][ T7673] netlink: 96 bytes leftover after parsing attributes in process `syz.4.299'. [ 334.023704][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.087094][ T7553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.099857][ T52] Bluetooth: hci4: command tx timeout [ 336.218023][ T7553] team0: Port device team_slave_0 added [ 336.247269][ T7553] team0: Port device team_slave_1 added [ 336.680442][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.720873][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.829746][ T7553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.882126][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.919710][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.024307][ T7553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.047251][ T7710] lo speed is unknown, defaulting to 1000 [ 338.150207][ T52] Bluetooth: hci4: command tx timeout [ 340.249794][ T52] Bluetooth: hci4: command tx timeout [ 341.985092][ T7553] hsr_slave_0: entered promiscuous mode [ 342.008069][ T7553] hsr_slave_1: entered promiscuous mode [ 342.318313][ T52] Bluetooth: hci4: command tx timeout [ 342.425531][ T7772] binder: 7766:7772 ioctl c0306201 0 returned -14 [ 343.149911][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 343.379851][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 343.421695][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.584191][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.612375][ T975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.624099][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.899329][ T975] usb 1-1: config 0 descriptor?? [ 343.908399][ T975] hub 1-1:0.0: USB hub found [ 344.909544][ T975] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 347.789500][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 347.818945][ T975] usbhid 1-1:0.0: can't add hid device: -71 [ 347.862091][ T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 347.895839][ T975] usb 1-1: USB disconnect, device number 3 [ 352.174661][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 352.219768][ T6102] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 352.370580][ T6102] usb 3-1: Using ep0 maxpacket: 32 [ 352.382741][ T6102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.471762][ T6102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.471832][ T6102] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.471860][ T6102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.496353][ T6102] usb 3-1: config 0 descriptor?? [ 352.500952][ T6102] hub 3-1:0.0: USB hub found [ 352.695988][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.696206][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.696391][ T7710] bridge_slave_0: entered allmulticast mode [ 352.698790][ T7710] bridge_slave_0: entered promiscuous mode [ 352.762513][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.762649][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.762877][ T7710] bridge_slave_1: entered allmulticast mode [ 352.765447][ T7710] bridge_slave_1: entered promiscuous mode [ 352.861947][ T7832] syz.1.330 (7832) used greatest stack depth: 16352 bytes left [ 352.907278][ T6102] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 353.142684][ T6102] usbhid 3-1:0.0: can't add hid device: -71 [ 353.142797][ T6102] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 353.226141][ T6102] usb 3-1: USB disconnect, device number 2 [ 353.251050][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.257880][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.722812][ T7843] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 353.872137][ T7710] team0: Port device team_slave_0 added [ 353.889971][ T6129] bridge_slave_1: left allmulticast mode [ 353.903253][ T6129] bridge_slave_1: left promiscuous mode [ 353.919377][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.973408][ T7857] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 354.038981][ T6129] bridge_slave_0: left allmulticast mode [ 354.067235][ T6129] bridge_slave_0: left promiscuous mode [ 354.115005][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.213178][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.262092][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.314129][ T6129] bond0 (unregistering): Released all slaves [ 357.403355][ T7710] team0: Port device team_slave_1 added [ 357.661958][ T7553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.837037][ T6129] hsr_slave_0: left promiscuous mode [ 357.861832][ T6129] hsr_slave_1: left promiscuous mode [ 357.891817][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.920849][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.076926][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 360.124800][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 360.987697][ T7553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.016673][ T7907] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 361.096430][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.105717][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.150452][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.169816][ T7895] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 361.179336][ T7895] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 361.189118][ T7895] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 361.245284][ T7553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.317397][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.599263][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.281878][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.419765][ T7553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.439151][ T52] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 362.996966][ T7927] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 363.104833][ T7710] hsr_slave_0: entered promiscuous mode [ 363.130307][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 363.170084][ T7710] hsr_slave_1: entered promiscuous mode [ 363.196660][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 363.213694][ T7710] Cannot create hsr debugfs directory [ 363.337119][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 363.349399][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.555857][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.729832][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 363.743444][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.773657][ T30] usb 5-1: config 0 descriptor?? [ 363.799048][ T30] hub 5-1:0.0: USB hub found [ 364.108716][ T30] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 364.619611][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 364.716705][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 365.094175][ T30] usb 5-1: USB disconnect, device number 2 [ 366.405980][ T7553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.459543][ T7553] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.504281][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.511496][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.581643][ T7968] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 366.931460][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.938680][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.976183][ T7710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.271262][ T7710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.497068][ T7710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.709165][ T7710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 372.341218][ T8015] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 372.661911][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.671931][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.741052][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.752636][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.540513][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.630494][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.712788][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.748571][ T8021] lo speed is unknown, defaulting to 1000 [ 374.812319][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.819456][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.009390][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.016563][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.174184][ T52] Bluetooth: hci2: command tx timeout [ 379.416370][ T52] Bluetooth: hci2: command tx timeout [ 379.456474][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.462890][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.690629][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 381.060228][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.431398][ T52] Bluetooth: hci2: command tx timeout [ 382.063972][ T8077] random: crng reseeded on system resumption [ 383.509768][ T52] Bluetooth: hci2: command tx timeout [ 386.889596][ T8091] ceph: No mds server is up or the cluster is laggy [ 386.902157][ T6056] libceph: connect (1)[c::]:6789 error -101 [ 386.921291][ T6056] libceph: mon0 (1)[c::]:6789 connect error [ 387.360787][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.377089][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.410353][ T8021] bridge_slave_0: entered allmulticast mode [ 387.432225][ T8021] bridge_slave_0: entered promiscuous mode [ 387.606526][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.634226][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.709922][ T8021] bridge_slave_1: entered allmulticast mode [ 387.734593][ T8021] bridge_slave_1: entered promiscuous mode [ 388.995862][ T8108] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 390.043543][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.203689][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.897227][ T8122] fuse: Bad value for 'fd' [ 393.923624][ T8021] team0: Port device team_slave_0 added [ 394.001214][ T8021] team0: Port device team_slave_1 added [ 394.240863][ T3781] bridge_slave_1: left allmulticast mode [ 394.279726][ T3781] bridge_slave_1: left promiscuous mode [ 394.285464][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.440710][ T3781] bridge_slave_0: left allmulticast mode [ 394.479734][ T3781] bridge_slave_0: left promiscuous mode [ 394.580756][ T8134] overlayfs: failed to resolve './file0': -2 [ 394.620271][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.681989][ T8137] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 394.743337][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.756614][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.767557][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.782566][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.810661][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 398.080412][ T5852] Bluetooth: hci6: command tx timeout [ 398.698100][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 398.707787][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.779327][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.832143][ T3781] bond0 (unregistering): Released all slaves [ 399.232599][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.259871][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.495421][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.771016][ T8164] overlay: ./file1 is not a directory [ 400.052549][ T8167] ceph: No mds server is up or the cluster is laggy [ 400.063626][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 400.069964][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 400.149958][ T5852] Bluetooth: hci6: command tx timeout [ 400.529787][ T5923] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 400.730755][ T3781] hsr_slave_0: left promiscuous mode [ 400.752366][ T3781] hsr_slave_1: left promiscuous mode [ 400.760156][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 400.765984][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.776506][ T5923] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.984771][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.996135][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.008857][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.017330][ T5923] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.115242][ T8178] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 401.124375][ T8178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.236165][ T5923] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.275000][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.512588][ T5923] usb 3-1: GET_CAPABILITIES returned 0 [ 401.522103][ T5923] usbtmc 3-1:16.0: can't read capabilities [ 401.792866][ T5923] usb 3-1: USB disconnect, device number 3 [ 401.913652][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 401.965719][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 402.230782][ T5852] Bluetooth: hci6: command tx timeout [ 402.483756][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.492178][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.518566][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.730578][ T8183] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 403.329457][ T8194] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 403.480152][ T8183] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 403.549776][ T8183] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 403.618513][ T8021] hsr_slave_0: entered promiscuous mode [ 403.640975][ T8021] hsr_slave_1: entered promiscuous mode [ 403.787671][ T8136] lo speed is unknown, defaulting to 1000 [ 403.922571][ T8208] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 403.997179][ T8204] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 404.309985][ T5852] Bluetooth: hci6: command tx timeout [ 406.488510][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 406.826870][ T8230] binder: 8227:8230 ioctl c0306201 0 returned -14 [ 408.792831][ T8021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.007037][ T8244] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 409.234401][ T8021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.257769][ T8021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.400248][ T5969] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 409.446834][ T8021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.498402][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.530199][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.550448][ T8136] bridge_slave_0: entered allmulticast mode [ 409.570832][ T8136] bridge_slave_0: entered promiscuous mode [ 409.579839][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 409.590298][ T5969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.614555][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.619408][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.668443][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.676933][ T5969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.695907][ T5969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.703913][ T8136] bridge_slave_1: entered allmulticast mode [ 409.741293][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.758014][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.782858][ T8136] bridge_slave_1: entered promiscuous mode [ 409.973505][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.020934][ T5969] usb 5-1: GET_CAPABILITIES returned 0 [ 410.043638][ T5969] usbtmc 5-1:16.0: can't read capabilities [ 410.090646][ T6037] bridge_slave_1: left allmulticast mode [ 410.121887][ T6037] bridge_slave_1: left promiscuous mode [ 410.182738][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.230800][ T6037] bridge_slave_0: left allmulticast mode [ 410.253370][ T6037] bridge_slave_0: left promiscuous mode [ 410.259423][ T5969] usb 5-1: USB disconnect, device number 3 [ 410.278328][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.340164][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 411.519870][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 412.012638][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.043136][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.079460][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.113141][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.140562][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.164003][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.178357][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.194118][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.214171][ T6037] bond0 (unregistering): Released all slaves [ 412.250083][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.471028][ T6276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 412.479636][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 412.490094][ T24] usbtmc 1-1:16.0: can't read capabilities [ 412.649812][ T6276] usb 2-1: Using ep0 maxpacket: 8 [ 412.702028][ T6276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.712299][ T6276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.742762][ T6276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.960733][ T24] usb 1-1: USB disconnect, device number 4 [ 412.971615][ T6276] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.987252][ T6276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.997456][ T6276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.120628][ T6037] hsr_slave_0: left promiscuous mode [ 413.137189][ T6037] hsr_slave_1: left promiscuous mode [ 413.150458][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.170472][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.265711][ T6276] usb 2-1: GET_CAPABILITIES returned 0 [ 413.279439][ T8288] binder: 8285:8288 ioctl 3b80 200000000400 returned -22 [ 413.298483][ T8288] binder: 8285:8288 ioctl 3b87 200000000040 returned -22 [ 413.306378][ T8288] binder: 8285:8288 ioctl 3b80 200000000440 returned -22 [ 413.484851][ T6276] usbtmc 2-1:16.0: can't read capabilities [ 413.529637][ T6276] usb 2-1: USB disconnect, device number 2 [ 415.797888][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 416.091490][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 420.887994][ T8326] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 421.142217][ T8333] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 422.745260][ T8340] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 422.861494][ T8347] siw: device registration error -23 [ 422.929565][ T8136] team0: Port device team_slave_0 added [ 422.957294][ T8136] team0: Port device team_slave_1 added [ 423.114016][ T8315] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 423.126045][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.142496][ T8315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 423.162990][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.199820][ T8315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 423.286823][ T8136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.330288][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.337263][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.363209][ T8136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.932560][ T8354] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 424.955387][ T8136] hsr_slave_0: entered promiscuous mode [ 425.003636][ T8136] hsr_slave_1: entered promiscuous mode [ 425.046071][ T8136] debugfs: 'hsr0' already exists in 'hsr' [ 425.305427][ T8136] Cannot create hsr debugfs directory [ 431.684859][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.013701][ T8401] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 433.209772][ T6006] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 433.369805][ T6006] usb 2-1: Using ep0 maxpacket: 32 [ 433.387969][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.418829][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.436887][ T6006] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.465828][ T6006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.507912][ T8136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.529297][ T6006] usb 2-1: config 0 descriptor?? [ 433.548120][ T8136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.566458][ T6006] hub 2-1:0.0: USB hub found [ 433.804505][ T6006] hub 2-1:0.0: 1 port detected [ 434.014087][ T8136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.108033][ T8136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 434.146554][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.158233][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.167544][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.176955][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.190461][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.233581][ T6006] usb 2-1: USB disconnect, device number 3 [ 434.989876][ T5969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 435.219816][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 435.241763][ T5969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.294644][ T5969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.351531][ T5969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.377596][ T5969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.431782][ T5969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.465358][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.239768][ T5852] Bluetooth: hci4: command tx timeout [ 436.682416][ T5969] usb 1-1: GET_CAPABILITIES returned 0 [ 436.695591][ T5969] usbtmc 1-1:16.0: can't read capabilities [ 437.095485][ T5969] usb 1-1: USB disconnect, device number 5 [ 437.102045][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.314550][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 438.366771][ T5852] Bluetooth: hci4: command tx timeout [ 438.395138][ T8455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 439.290279][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.296641][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.719869][ T8460] ceph: No mds server is up or the cluster is laggy [ 439.729146][ T10] libceph: connect (1)[c::]:6789 error -101 [ 439.745613][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 440.857047][ T5852] Bluetooth: hci4: command tx timeout [ 441.999026][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.239435][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.250496][ T8412] bridge_slave_0: entered allmulticast mode [ 442.250894][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 442.258445][ T8412] bridge_slave_0: entered promiscuous mode [ 442.873233][ T5852] Bluetooth: hci4: command tx timeout [ 442.993634][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.046921][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.073064][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.094627][ T8412] bridge_slave_1: entered allmulticast mode [ 443.131872][ T8412] bridge_slave_1: entered promiscuous mode [ 443.227619][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 443.251361][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.283451][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.318944][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.345474][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.378967][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.408604][ T8495] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 443.532032][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.562303][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.663591][ T6157] Bluetooth: hci2: Frame reassembly failed (-84) [ 443.674065][ T6157] Bluetooth: hci2: Frame reassembly failed (-84) [ 443.712351][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.730619][ T8501] Bluetooth: hci2: Frame reassembly failed (-90) [ 443.746196][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.753358][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.866632][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 443.872294][ T10] usbtmc 3-1:16.0: can't read capabilities [ 443.978900][ T8509] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 444.226614][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 444.246589][ T10] usb 3-1: USB disconnect, device number 4 [ 444.287753][ T8412] team0: Port device team_slave_0 added [ 444.367714][ T8412] team0: Port device team_slave_1 added [ 444.485825][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.492981][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.611066][ T139] bridge_slave_1: left allmulticast mode [ 444.879727][ T139] bridge_slave_1: left promiscuous mode [ 444.903597][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.921400][ T139] bridge_slave_0: left allmulticast mode [ 444.979730][ T139] bridge_slave_0: left promiscuous mode [ 444.993790][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.670083][ T5852] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 447.526574][ T8525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 452.577790][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.591950][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.602948][ T139] bond0 (unregistering): Released all slaves [ 453.605237][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.612949][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.599823][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.613321][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.620352][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.648319][ T8545] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 455.327693][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.590079][ T139] hsr_slave_0: left promiscuous mode [ 455.647849][ T139] hsr_slave_1: left promiscuous mode [ 455.676108][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.730550][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.280181][ T6276] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 456.547258][ T6276] usb 3-1: Using ep0 maxpacket: 8 [ 456.745435][ T6276] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 456.872267][ T6276] usb 3-1: config 0 has no interface number 0 [ 458.225554][ T6276] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.516510][ T8572] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 458.537559][ T6276] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 458.673488][ T6276] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.749029][ T6276] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.838010][ T6276] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 458.885961][ T6276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.528573][ T6276] usb 3-1: config 0 descriptor?? [ 459.651858][ T6276] usb 3-1: can't set config #0, error -71 [ 459.710173][ T6276] usb 3-1: USB disconnect, device number 5 [ 459.790509][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.799226][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.807983][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.818122][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.826238][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.960915][ T8584] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 461.793064][ T8590] fuse: Bad value for 'group_id' [ 461.798222][ T8590] fuse: Bad value for 'group_id' [ 461.840559][ T139] team0 (unregistering): Port device team_slave_1 removed [ 462.732146][ T139] team0 (unregistering): Port device team_slave_0 removed [ 463.390251][ T52] Bluetooth: hci2: command tx timeout [ 465.430306][ T52] Bluetooth: hci2: command tx timeout [ 465.772835][ T8619] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 465.950188][ T8617] netlink: 'syz.2.487': attribute type 3 has an invalid length. [ 465.984005][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 466.971289][ T8628] lo speed is unknown, defaulting to 1000 [ 467.022743][ T8412] hsr_slave_0: entered promiscuous mode [ 467.043397][ T8412] hsr_slave_1: entered promiscuous mode [ 467.072689][ T8628] lo speed is unknown, defaulting to 1000 [ 467.149479][ T8628] lo speed is unknown, defaulting to 1000 [ 467.192417][ T8638] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 467.264556][ T8628] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 467.388831][ T8628] lo speed is unknown, defaulting to 1000 [ 467.422210][ T8628] lo speed is unknown, defaulting to 1000 [ 468.049813][ T52] Bluetooth: hci2: command tx timeout [ 468.127963][ T8628] lo speed is unknown, defaulting to 1000 [ 468.156528][ T8579] lo speed is unknown, defaulting to 1000 [ 468.257766][ T8628] lo speed is unknown, defaulting to 1000 [ 468.321159][ T8628] lo speed is unknown, defaulting to 1000 [ 468.328872][ T8628] lo speed is unknown, defaulting to 1000 [ 468.385822][ T8628] lo speed is unknown, defaulting to 1000 [ 468.815956][ T8651] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 469.083493][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 470.137647][ T52] Bluetooth: hci2: command tx timeout [ 470.765592][ T8579] chnl_net:caif_netlink_parms(): no params data found [ 472.005129][ T8412] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.391518][ T8698] siw: device registration error -23 [ 474.229638][ T8412] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 475.765619][ T8412] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 475.776579][ T8412] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 475.798267][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.816246][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.905996][ T8579] bridge_slave_0: entered allmulticast mode [ 475.917533][ T8579] bridge_slave_0: entered promiscuous mode [ 476.237383][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.237498][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.237706][ T8579] bridge_slave_1: entered allmulticast mode [ 476.286785][ T8579] bridge_slave_1: entered promiscuous mode [ 476.333484][ T8720] overlayfs: failed to resolve './file0': -2 [ 476.761316][ T3781] bridge_slave_1: left allmulticast mode [ 476.761338][ T3781] bridge_slave_1: left promiscuous mode [ 476.761495][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.779391][ T3781] bridge_slave_0: left allmulticast mode [ 476.779411][ T3781] bridge_slave_0: left promiscuous mode [ 476.779573][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.821382][ T8733] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 479.200760][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.261965][ T8745] input: syz1 as /devices/virtual/input/input5 [ 479.583911][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.636448][ T3781] bond0 (unregistering): Released all slaves [ 479.875842][ T8579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.916985][ T8750] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 480.131269][ T8579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.555625][ T6508] Bluetooth: hci6: Frame reassembly failed (-84) [ 482.631012][ T8579] team0: Port device team_slave_0 added [ 482.674985][ T8579] team0: Port device team_slave_1 added [ 482.768799][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.780296][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.845076][ T8579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.911607][ T3781] hsr_slave_0: left promiscuous mode [ 482.956766][ T3781] hsr_slave_1: left promiscuous mode [ 482.973342][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.987872][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.165033][ T8764] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 483.691333][ T8766] siw: device registration error -23 [ 483.741794][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 483.904547][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 484.692531][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 486.286084][ T8782] binder: 8779:8782 ioctl 4018620d 0 returned -22 [ 488.884345][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.898401][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.961990][ T8802] 9pnet_virtio: no channels available for device syz [ 489.659865][ T8579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.880536][ T8804] overlayfs: failed to resolve './file1': -2 [ 491.828309][ T8812] input: syz1 as /devices/virtual/input/input6 [ 492.307162][ T8579] hsr_slave_0: entered promiscuous mode [ 492.340065][ T8579] hsr_slave_1: entered promiscuous mode [ 492.372013][ T8579] debugfs: 'hsr0' already exists in 'hsr' [ 492.379942][ T8579] Cannot create hsr debugfs directory [ 495.798751][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 495.815747][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 495.824684][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 495.905420][ T8844] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 495.933000][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 495.942123][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 496.889089][ T8846] lo speed is unknown, defaulting to 1000 [ 497.207195][ T8859] siw: device registration error -23 [ 498.740126][ T52] Bluetooth: hci6: command tx timeout [ 500.770719][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.770808][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.790059][ T52] Bluetooth: hci6: command tx timeout [ 502.869901][ T52] Bluetooth: hci6: command tx timeout [ 504.096341][ T8579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 505.636000][ T52] Bluetooth: hci6: command tx timeout [ 505.773981][ T8579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 505.796460][ T8579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 505.809039][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 505.823945][ T6508] bridge_slave_1: left allmulticast mode [ 505.839875][ T6508] bridge_slave_1: left promiscuous mode [ 505.845715][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.864223][ T6508] bridge_slave_0: left allmulticast mode [ 505.907290][ T6508] bridge_slave_0: left promiscuous mode [ 505.907527][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.620504][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.651273][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.653684][ T6508] bond0 (unregistering): Released all slaves [ 506.685831][ T8920] pim6reg: entered allmulticast mode [ 506.686441][ T8579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 507.675882][ T6508] hsr_slave_0: left promiscuous mode [ 508.861769][ T8938] input: syz1 as /devices/virtual/input/input7 [ 509.234142][ T6508] hsr_slave_1: left promiscuous mode [ 509.270019][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.300631][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.298413][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 512.349261][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 514.150104][ T905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 514.608779][ T905] usb 3-1: Using ep0 maxpacket: 8 [ 514.954274][ T905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.980244][ T905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.005852][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.071487][ T905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.093144][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.110223][ T8846] bridge_slave_0: entered allmulticast mode [ 515.116317][ T905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.139307][ T8846] bridge_slave_0: entered promiscuous mode [ 515.145758][ T905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.247467][ T8981] input: syz1 as /devices/virtual/input/input8 [ 515.612357][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.619522][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.638041][ T905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.658976][ T8846] bridge_slave_1: entered allmulticast mode [ 515.714810][ T8846] bridge_slave_1: entered promiscuous mode [ 515.906833][ T905] usb 3-1: usb_control_msg returned -32 [ 515.923314][ T905] usbtmc 3-1:16.0: can't read capabilities [ 516.005287][ T905] usb 3-1: USB disconnect, device number 6 [ 516.078552][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.135608][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.571333][ T8997] input: syz1 as /devices/virtual/input/input9 [ 519.080465][ T9012] fuse: Unknown parameter 'grou00000000000000000000' [ 520.482002][ T8846] team0: Port device team_slave_0 added [ 521.554608][ T8846] team0: Port device team_slave_1 added [ 521.576041][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.584468][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.813267][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.834860][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.842626][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.486378][ T52] Bluetooth: hci4: command tx timeout [ 524.650250][ T9039] input: syz1 as /devices/virtual/input/input10 [ 527.071471][ T52] Bluetooth: hci4: command tx timeout [ 527.841493][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.869872][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.220007][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.904549][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.911586][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.980315][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.110829][ T52] Bluetooth: hci4: command tx timeout [ 530.575293][ T9019] lo speed is unknown, defaulting to 1000 [ 530.747579][ T9084] input: syz1 as /devices/virtual/input/input11 [ 531.199929][ T52] Bluetooth: hci4: command tx timeout [ 533.229988][ T9111] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 533.261426][ T8846] hsr_slave_0: entered promiscuous mode [ 533.296043][ T8846] hsr_slave_1: entered promiscuous mode [ 534.603228][ T9101] fuse: Bad value for 'fd' [ 535.234092][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 535.567458][ T6157] bridge_slave_1: left allmulticast mode [ 535.607215][ T6157] bridge_slave_1: left promiscuous mode [ 535.634647][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.720935][ T6157] bridge_slave_0: left allmulticast mode [ 535.748908][ T6157] bridge_slave_0: left promiscuous mode [ 535.769502][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.922764][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.093438][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.148845][ T6157] bond0 (unregistering): Released all slaves [ 538.608072][ T9147] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 538.617501][ T9147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 538.628337][ T9147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 539.473301][ T6157] hsr_slave_0: left promiscuous mode [ 539.501915][ T6157] hsr_slave_1: left promiscuous mode [ 539.515999][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.565274][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.779506][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 542.009770][ T7287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 553.189802][ T9191] sound midiC2D0: rawmidi drain error (avail = 261, buffer_size = 4096) [ 646.839718][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 646.846753][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6157/1:b..l [ 646.855229][ C1] rcu: (detected by 1, t=10502 jiffies, g=34233, q=1225 ncpus=2) [ 646.863037][ C1] task:kworker/u8:21 state:R running task stack:23224 pid:6157 tgid:6157 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 646.877625][ C1] Workqueue: netns cleanup_net [ 646.882429][ C1] Call Trace: [ 646.885710][ C1] [ 646.888647][ C1] __schedule+0x149b/0x4fd0 [ 646.893170][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 646.898129][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 646.903080][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.908726][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 646.913676][ C1] ? __pfx___schedule+0x10/0x10 [ 646.918537][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.924184][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 646.929144][ C1] preempt_schedule_irq+0x4d/0xa0 [ 646.934180][ C1] irqentry_exit+0x5d8/0x660 [ 646.938783][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.944434][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.950434][ C1] RIP: 0010:lock_acquire+0x222/0x340 [ 646.955732][ C1] Code: ff ff ff e8 30 a1 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 3a 20 e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 0a 51 72 ff cc 48 8d 3d 57 77 e7 [ 646.975351][ C1] RSP: 0018:ffffc9000536ee58 EFLAGS: 00000282 [ 646.981444][ C1] RAX: 4b838978c5605c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 646.989423][ C1] RDX: 00000000fb80d15a RSI: ffffffff8d975e7a RDI: ffffffff8bc083e0 [ 646.997408][ C1] RBP: ffffffff8173fd65 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 [ 647.005398][ C1] R10: dffffc0000000000 R11: ffffffff81acf3a0 R12: 0000000000000002 [ 647.013384][ C1] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 [ 647.021375][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 647.026515][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.032695][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 647.037830][ C1] ? cleanup_net+0x4d8/0x7a0 [ 647.042432][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 647.047572][ C1] unwind_next_frame+0xc2/0x23d0 [ 647.052522][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 647.057649][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 647.062770][ C1] ? ops_undo_list+0x525/0x990 [ 647.067545][ C1] ? cleanup_net+0x4d8/0x7a0 [ 647.072151][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.078325][ C1] arch_stack_walk+0x11c/0x150 [ 647.083120][ C1] ? cleanup_net+0x4d8/0x7a0 [ 647.087732][ C1] stack_trace_save+0x9c/0xe0 [ 647.092440][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 647.097849][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.103504][ C1] kasan_save_stack+0x3e/0x60 [ 647.108201][ C1] ? kasan_save_stack+0x3e/0x60 [ 647.113062][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 647.118451][ C1] ? call_rcu+0xee/0x890 [ 647.122705][ C1] ? kernfs_put+0x18e/0x470 [ 647.127219][ C1] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 647.132862][ C1] ? sysfs_remove_group+0xfc/0x2f0 [ 647.137979][ C1] ? sysfs_remove_groups+0x54/0xb0 [ 647.143109][ C1] ? device_remove_attrs+0x1aa/0x260 [ 647.148416][ C1] ? device_del+0x509/0x8e0 [ 647.152928][ C1] ? unregister_netdevice_many_notify+0x1ddd/0x2340 [ 647.159534][ C1] ? default_device_exit_batch+0x964/0x9e0 [ 647.165352][ C1] ? ops_undo_list+0x525/0x990 [ 647.170128][ C1] ? cleanup_net+0x4d8/0x7a0 [ 647.174767][ C1] ? __phys_addr+0xd3/0x180 [ 647.179292][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 647.184507][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 647.189796][ C1] call_rcu+0xee/0x890 [ 647.193890][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.199545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.205189][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 647.210421][ C1] kernfs_put+0x18e/0x470 [ 647.214767][ C1] ? __kernfs_remove+0x4d9/0x650 [ 647.219715][ C1] kernfs_remove_by_name_ns+0xb7/0x130 [ 647.225188][ C1] sysfs_remove_group+0xfc/0x2f0 [ 647.230138][ C1] sysfs_remove_groups+0x54/0xb0 [ 647.235109][ C1] device_remove_attrs+0x1aa/0x260 [ 647.240235][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 647.245879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.251536][ C1] device_del+0x509/0x8e0 [ 647.255887][ C1] ? __pfx_device_del+0x10/0x10 [ 647.260754][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.266397][ C1] ? netdev_unregister_kobject+0x344/0x450 [ 647.272234][ C1] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 647.278687][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 647.285481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.291134][ C1] ? unregister_netdevice_queue+0x19b/0x350 [ 647.297058][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 647.303327][ C1] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 647.309519][ C1] default_device_exit_batch+0x964/0x9e0 [ 647.315185][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 647.320491][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 647.326661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.332401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.338054][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 647.344226][ C1] ops_undo_list+0x525/0x990 [ 647.348838][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 647.353955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.359602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.365245][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 647.370468][ C1] cleanup_net+0x4d8/0x7a0 [ 647.374902][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 647.379845][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.385495][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 647.391222][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 647.396951][ C1] process_scheduled_works+0xad1/0x1770 [ 647.402540][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.408525][ C1] ? do_raw_spin_lock+0x121/0x290 [ 647.413574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.419226][ C1] worker_thread+0x8a0/0xda0 [ 647.423831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.429486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.435134][ C1] ? __kthread_parkme+0x7b/0x200 [ 647.440093][ C1] kthread+0x711/0x8a0 [ 647.444181][ C1] ? __pfx_worker_thread+0x10/0x10 [ 647.449301][ C1] ? __pfx_kthread+0x10/0x10 [ 647.453901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.459549][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.464770][ C1] ? __pfx_kthread+0x10/0x10 [ 647.469374][ C1] ret_from_fork+0x510/0xa50 [ 647.473980][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 647.479094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.484738][ C1] ? __switch_to+0xc9e/0x1480 [ 647.489440][ C1] ? __pfx_kthread+0x10/0x10 [ 647.494049][ C1] ret_from_fork_asm+0x1a/0x30 [ 647.498849][ C1] [ 647.501868][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g34233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 647.513067][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 647.523045][ C1] rcu: RCU grace-period kthread stack dump: [ 647.528932][ C1] task:rcu_preempt state:R running task stack:28008 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 647.542459][ C1] Call Trace: [ 647.545748][ C1] [ 647.548686][ C1] __schedule+0x149b/0x4fd0 [ 647.553250][ C1] ? __pfx___schedule+0x10/0x10 [ 647.558142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.563802][ C1] ? schedule+0x91/0x360 [ 647.568057][ C1] schedule+0x165/0x360 [ 647.572221][ C1] schedule_timeout+0x12b/0x270 [ 647.577093][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 647.582489][ C1] ? __pfx_process_timeout+0x10/0x10 [ 647.587795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.593436][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 647.599262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.604905][ C1] ? prepare_to_swait_event+0x341/0x380 [ 647.610478][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 647.615351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.621000][ C1] ? rcu_gp_init+0x11dc/0x1650 [ 647.625776][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 647.631940][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 647.637241][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 647.643068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.648716][ C1] rcu_gp_kthread+0x99/0x390 [ 647.653321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 647.658531][ C1] ? __kthread_parkme+0x7b/0x200 [ 647.663478][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.669120][ C1] ? __kthread_parkme+0x1a1/0x200 [ 647.674164][ C1] kthread+0x711/0x8a0 [ 647.678257][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 647.683466][ C1] ? __pfx_kthread+0x10/0x10 [ 647.688072][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.693726][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.698943][ C1] ? __pfx_kthread+0x10/0x10 [ 647.703550][ C1] ret_from_fork+0x510/0xa50 [ 647.708155][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 647.713275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.718923][ C1] ? __switch_to+0xc9e/0x1480 [ 647.723629][ C1] ? __pfx_kthread+0x10/0x10 [ 647.728241][ C1] ret_from_fork_asm+0x1a/0x30 [ 647.733045][ C1] [ 647.736062][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 647.742391][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 647.751330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.761392][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 647.767124][ C1] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 647.786738][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 647.792821][ C1] RAX: 000000000101c08f RBX: ffffffff819713be RCX: 0000000080000001 [ 647.800798][ C1] RDX: 0000000000000001 RSI: ffffffff8d791fea RDI: ffffffff8bc083e0 [ 647.808781][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 647.816768][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 647.824744][ C1] R13: 1ffff1100385fb70 R14: 0000000000000001 R15: 0000000000000001 [ 647.832723][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 647.841660][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.848250][ C1] CR2: 0000001b31113ff8 CR3: 000000004a310000 CR4: 0000000000350ef0 [ 647.856231][ C1] Call Trace: [ 647.859511][ C1] [ 647.862440][ C1] default_idle+0x13/0x20 [ 647.866787][ C1] default_idle_call+0x73/0xb0 [ 647.871571][ C1] do_idle+0x1be/0x4d0 [ 647.875655][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 647.881839][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.887513][ C1] ? __pfx_do_idle+0x10/0x10 [ 647.892124][ C1] cpu_startup_entry+0x44/0x60 [ 647.896894][ C1] start_secondary+0x101/0x110 [ 647.901671][ C1] common_startup_64+0x13e/0x147 [ 647.906636][ C1]