last executing test programs: 22m0.754479135s ago: executing program 32 (id=160): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000f7ffffff03000000090000008c140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500000001000000000000e6483339000001000000000000"], 0x50) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc04000000"], 0x0) 19m37.874669268s ago: executing program 34 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x1ff005}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f0000000c80)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/215, 0xd7}, {&(0x7f0000001a00)=""/4080, 0xff0}, {&(0x7f0000002e00)=""/4078, 0xfee}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000080)=""/105, 0x69}], 0x7}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x10060, 0x0) 12m39.354534754s ago: executing program 2 (id=910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) write(r2, &(0x7f0000000180)="ec", 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) 12m39.167920404s ago: executing program 2 (id=911): syz_io_uring_setup(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) recvmsg(r2, 0x0, 0x40000060) bind$alg(r1, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) 12m38.022886695s ago: executing program 2 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x0, 0x0, 0x0, 0x41000008, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 12m36.997258661s ago: executing program 2 (id=916): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248", @ANYBLOB=',roo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12m36.045088542s ago: executing program 2 (id=918): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setgroups(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) 12m34.169742144s ago: executing program 2 (id=920): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$evdev(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4) 12m18.4687294s ago: executing program 35 (id=920): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$evdev(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4) 11m52.803202999s ago: executing program 5 (id=960): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r7 = syz_open_dev$evdev(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) getpid() ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) 11m40.893129322s ago: executing program 5 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f000001b700)=""/102395, 0x1900f) r1 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c000004004680681101"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x10, 0x3, 0xa) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) 11m36.974418821s ago: executing program 5 (id=978): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x1ff}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m35.745092193s ago: executing program 5 (id=981): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 11m34.547940275s ago: executing program 1 (id=982): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffff0000000200000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000004010007ac1414aa640100fe867700000000000ce256b28c59881601fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11c"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000580)="17000000020001000002d68c5ee17688a200649b722052fd16f10200000300000a000000009afc5ad9485bbb6a820000d6c8db0000dba67e060180000a0000f106bd12b1b1ce22736e9a5b0e68780ed98907bdff59100ac45761407a681f009cee4ad41200001fb700634f19b44e09f9315033928bc06c8d0aa506003901000d0000000000ea000000000000000009ffff02dfccebf6cc0008400200000000e90554062a80e205007f71174aa951f3c63e5c83f1bb2112ce", 0xb8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 11m31.870105171s ago: executing program 5 (id=986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x221}], 0x1}}], 0x1, 0x480e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m31.717241s ago: executing program 5 (id=989): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248", @ANYBLOB=',roo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11m28.712385538s ago: executing program 1 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000008340)=""/145, 0x91}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000002c0)=""/33, 0x21}], 0x5}, 0x101}], 0x3, 0x40010022, 0x0) 11m26.959679077s ago: executing program 1 (id=994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, 0x0, 0x4048043) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m21.968571509s ago: executing program 1 (id=1002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f00000001c0)}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$netlink(0x10, 0x3, 0x0) 11m15.631009274s ago: executing program 36 (id=989): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248", @ANYBLOB=',roo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11m10.250223792s ago: executing program 1 (id=1014): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x221}], 0x1}}], 0x1, 0x480e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m10.009823517s ago: executing program 1 (id=1015): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x9, 0x4, 0x80, 0x7, 'syz1\x00', 0xfff}, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0xc2d0, 'syz0\x00', 0x0}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x13) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc04000000"], 0x0) 10m54.85131521s ago: executing program 37 (id=1015): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x9, 0x4, 0x80, 0x7, 'syz1\x00', 0xfff}, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0xc2d0, 'syz0\x00', 0x0}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x13) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc04000000"], 0x0) 10m15.404985836s ago: executing program 6 (id=1072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 10m15.083753722s ago: executing program 6 (id=1073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) setfsgid(0xee00) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(0xffffffffffffffff) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10m12.892837692s ago: executing program 6 (id=1075): socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6(0xa, 0x2, 0x80000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1687144bc88b8e9168f2c064962af57af9365925640aad2972cdb80b12a24dab71dc1db1f7d8bcc27a58fd1078ad5b428046cd939874efe0ed8355a92cca0074f0444fbc568f56129a739d21bc7e5821cd9331dbed0584485aee4e61b0d2367e94852a7eebd628010ac792ce2ad7897afc9afef1749751289dc2ae64c78ee6458525d291dd9fb66027fe9b060d9d3bc21fab95a5d07e467fb483478355dd6e5eea3562c859608eea1fed7c58f39dc1fdd2d31e1240bbd030aa0127163f059b6059a41dad8998364ef6ebc34a3ebc", @ANYBLOB='\\\x00'], 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) 10m10.546222194s ago: executing program 6 (id=1078): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 10m9.28334508s ago: executing program 6 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 10m3.929465391s ago: executing program 6 (id=1090): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r2, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2000, 0x0, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) 9m57.042092915s ago: executing program 8 (id=1099): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x400000000010, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c006}, 0x2000040) read$msr(r1, &(0x7f000001b240)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) geteuid() openat$cgroup_subtree(r2, &(0x7f0000004680), 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x60) 9m56.010186854s ago: executing program 8 (id=1101): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000080)=ANY=[]) 9m51.959986315s ago: executing program 8 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109062, 0x15) 9m51.7456399s ago: executing program 8 (id=1106): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x7d}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 9m50.31149821s ago: executing program 8 (id=1109): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x400000000010, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c006}, 0x2000040) read$msr(r1, &(0x7f000001b240)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) geteuid() openat$cgroup_subtree(r2, &(0x7f0000004680), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1) ioctl$TCSETS(r3, 0x5402, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x60) 9m48.877947433s ago: executing program 8 (id=1111): socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r4, 0x10ada85e65c25349, 0x70bd2d, 0xffffffff, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xfffffffd}}}}}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) 9m47.979979181s ago: executing program 38 (id=1090): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r2, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2000, 0x0, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) 9m33.708546491s ago: executing program 39 (id=1111): socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r4, 0x10ada85e65c25349, 0x70bd2d, 0xffffffff, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xfffffffd}}}}}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) 17.983922423s ago: executing program 9 (id=3319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000540)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 12.150619859s ago: executing program 4 (id=3332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10) getpid() 12.055669653s ago: executing program 0 (id=3333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xc4, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0xb0, 0x1, [@m_xt={0x7c, 0xa, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x30, 0xa, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.615746215s ago: executing program 9 (id=3335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000140)=@newtaction={0xfb4, 0x30, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{0x14c, 0x1, [@m_mpls={0x148, 0x3, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc00f0}, @TCA_MPLS_PROTO={0x6, 0x4, 0x891f}, @TCA_MPLS_TTL={0x5, 0x7, 0x4d}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xab, 0x4, 0x10000000, 0xd, 0x3ff}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xc13, 0x3, 0x6, 0x4}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x4, 0xf831, 0xc}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfcd, 0xf, 0x7, 0x10}, 0x1}}]}, {0x81, 0x6, "a2ef2edd69381b2ca2b69757e40efd2dca01c6c0023c9c3c29e1e850053662f9674326d01e8cfa004883c374d7c31389cfe947dbe0079a848e897f7bf6fb02f9797561aa7ad43e1fbedfd403c1767103d47ed834a41d56ad330cc8e56d232064c4aeef9be6a0e057b7b3a8a55afa70a270f0929a8ccd84efc1cdd32e94"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xe54, 0x1, [@m_pedit={0xe50, 0xb, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x3ff, 0x6, 0x2, 0x5}, 0xa7, 0x81}, [{0x1, 0x2, 0x7, 0x0, 0x9, 0x1}, {0x2f, 0x80, 0x7, 0x1000, 0x8, 0x4}, {0xda, 0x7, 0xff, 0xfffffffa, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x6, 0x6, 0xe}, {0x44, 0x80000001, 0x229, 0x4, 0x400, 0x401}, {0xffffff7f, 0x8, 0x9, 0xd, 0x6, 0x114e}, {0x9, 0x9bb, 0x9, 0x8, 0x3, 0xfc}, {0x4e7, 0x9, 0x2, 0x86, 0x7537, 0x1}, {0x1198feff, 0xf08, 0x9, 0x8, 0x1, 0x7fffffff}, {0x5, 0x10, 0x10, 0x400, 0x5, 0x1000}, {0x81, 0xc, 0xffffbcd1, 0xb, 0x0, 0x3}, {0x2, 0x5, 0xd7c, 0x23f2, 0x9, 0xd}, {0x400, 0x8, 0x7, 0x4, 0x5, 0x5}, {0x6, 0xff, 0x296, 0xe1, 0x1, 0x7}, {0x8, 0x1, 0x4, 0x9, 0x5, 0x3}, {0x7, 0xc1, 0xd6c, 0x80000, 0x8, 0x242}, {0x7fffffff, 0x5, 0x6, 0x3, 0x0, 0xc5}, {0x8, 0x9bb2, 0x7fffffff, 0x7fff, 0x7, 0x6}, {0x7, 0x0, 0x800, 0x894, 0x82, 0x8001}, {0x4, 0xe2da, 0x80, 0x76b, 0x2, 0xffffff01}, {0xf, 0x9, 0x1, 0x2, 0x9, 0x2}, {0xd73, 0x0, 0xffffffff, 0x8, 0xd6, 0xfffffffd}, {0x1, 0x5ee, 0x3, 0x8, 0x100, 0x9}, {0x80, 0x6, 0x5, 0x8, 0x3ff, 0x6}, {0x101, 0x6, 0xe44, 0x0, 0x3, 0x3}, {0x4, 0x4, 0x6, 0x2, 0x8, 0x2}, {0x7fffffff, 0x3, 0x4, 0x4, 0x5, 0xfffffffc}, {0x4e, 0x40, 0x0, 0x5, 0x5, 0x8}, {0xac6, 0xb, 0x9, 0x3, 0x7}, {0x0, 0xd, 0x2, 0x6, 0x3, 0xfffffffc}, {0x0, 0x3, 0x30000000, 0x2, 0x4, 0x5}, {0x8, 0x5, 0x2, 0xfffffffb, 0x0, 0x2}, {0xc9c, 0x7, 0x2, 0xfff, 0xcc84, 0x2732000}, {0x0, 0xb, 0x6, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x400, 0xfffffffb, 0xffffff00, 0x9}, {0x1ff, 0x4, 0x5, 0x5c6, 0x9, 0x1}, {0x1, 0xfffff000, 0x10001, 0x10, 0x2, 0x551}, {0x1ff, 0xfffffffc, 0x7fffffff, 0x56, 0x4bd7555, 0x940}, {0x7, 0x1000, 0x1, 0x40, 0x9, 0xc}, {0x6, 0x100, 0x80, 0x6, 0x8, 0xd1fe}, {0x51f, 0xb39, 0x8, 0xff, 0x6, 0x6}, {0x7, 0x10000, 0x5, 0x4, 0x0, 0xed42}, {0x7, 0x4, 0x1, 0x80000000, 0x7, 0x10001}, {0x5, 0x6, 0x6, 0x3, 0x7, 0x3}, {0x1, 0x1, 0x5f7, 0x2, 0x0, 0x5}, {0x1, 0x5, 0x7, 0x3, 0x6, 0x2}, {0x10, 0x1, 0x8, 0x8, 0x5d, 0x5}, {0xfffffff9, 0x9, 0x40, 0x8, 0x1, 0xffff}, {0xa, 0x10, 0x80000000, 0xb, 0x101, 0x2}, {0x4, 0x2, 0x5b, 0xf, 0xa0b, 0x20}, {0x4a, 0x9, 0x7, 0x0, 0x4, 0x3}, {0xd0, 0x7ff, 0x6, 0x1878, 0x2, 0x1}, {0x7, 0xc, 0x8, 0x0, 0x3, 0x101}, {0x80000000, 0x4, 0xffffff00, 0x2, 0x9}, {0x7f, 0x2, 0x8, 0x1, 0xfffffff6, 0xb}, {0x0, 0x7, 0x86000000, 0x86, 0x6, 0x9}, {0x6, 0x1, 0x2, 0x25b9, 0x2, 0x4}, {0x5, 0x80, 0x4, 0x6, 0x200, 0x1}, {0x8, 0x200, 0x10, 0xfffffff9, 0x7fff, 0x6}, {0x7, 0x4aae, 0x2, 0x8, 0x6, 0x8}, {0x9b, 0x1ff, 0x8001, 0x697, 0x8001, 0x6}, {0x0, 0x0, 0xff, 0x46e, 0x8, 0x6}, {0x3, 0x200, 0x401, 0x3, 0x1bf178e6, 0x101}, {0x1, 0x5, 0x26, 0xc59, 0xfff, 0x1}, {0x2, 0x5, 0x23, 0x44, 0x0, 0x1}, {0x0, 0xb0, 0xcf1c4f6, 0x0, 0x868, 0x3}, {0x1, 0x3, 0x5, 0x3, 0x7fff, 0xf}, {0x80000000, 0x39cd, 0x7f, 0xffff, 0xff, 0x7}, {0x4, 0x4f7, 0x80, 0x3, 0x3, 0x5}, {0x200, 0x2f, 0x6, 0x6cc, 0x4, 0x3ff}, {0x5, 0x40, 0x1be, 0x7fff, 0x200, 0x5}, {0xfcc, 0xdac, 0x9, 0x4, 0x3}, {0xf9e3, 0x4, 0x8b, 0xfb, 0x5, 0x3}, {0x2, 0x4, 0xff, 0x8, 0x9, 0x9}, {0x1, 0x3e44, 0xefd3, 0x6, 0x100, 0x5}, {0x7, 0x0, 0xc69f, 0x1, 0x8, 0x2}, {0x10000, 0x1ff, 0x1d94, 0x54e, 0x2, 0x400}, {0xc48, 0x1, 0x1, 0x0, 0xffffffff, 0x7ff}, {0x9, 0x70f1, 0xa, 0x80000001, 0x1, 0x2}, {0x9, 0xd, 0x4c3, 0xe, 0x10000, 0x8}, {0x2, 0x82, 0x1000, 0x7, 0x7, 0x400}, {0x80000000, 0x9, 0xfff, 0x1, 0x9, 0x7}, {0x5, 0x1, 0x4, 0x239, 0x4, 0x2}, {0x9, 0x3f0a, 0x4, 0x6, 0x389dd1fa, 0xd85}, {0x200, 0x8, 0x8, 0xa, 0x4, 0x5}, {0x0, 0x2020, 0x7, 0x4999, 0xc8, 0x4}, {0x4, 0x2, 0x6, 0x0, 0x80000001, 0x4}, {0x2, 0xe56, 0x0, 0x5, 0x396, 0x10}, {0x6, 0x7fff, 0x8c1, 0x80, 0x50, 0x44d}, {0x2, 0xc0, 0x2550, 0x1000, 0x100, 0xffffffff}, {0x400, 0x2, 0xff, 0x2, 0x4, 0xffffff96}, {0x1, 0x1, 0xc, 0xc, 0x40000000, 0x1}, {0x9, 0x7f, 0xd, 0x101, 0xa98, 0x6}, {0x5, 0x8, 0x6, 0x2, 0x10, 0x1}, {0x4, 0x7fff, 0x0, 0xc5c5, 0x1000, 0x10001}, {0x5, 0x8000, 0x37a, 0x6, 0xfffffff7, 0xffff8001}, {0x4, 0x6, 0x88, 0xfffff6a8, 0x0, 0x5}, {0xfffffff3, 0x1eca8e1a, 0xfff, 0x7, 0x7, 0x5}, {0x6, 0x1ff, 0x7f, 0x1, 0xfffffff9, 0x4edc}, {0xeb5e, 0x4, 0x4, 0x7, 0x2, 0x8ddb}, {0x1, 0x9, 0x7, 0x7f, 0x1, 0x2}, {0x8, 0x27, 0x8, 0x8, 0x9, 0x1}, {0x6, 0x7, 0x3, 0x9, 0x80000001, 0x7fff}, {0x7fff, 0xf, 0x10001, 0x459d, 0x3ff, 0x1}, {0x5, 0x400, 0x5, 0x6, 0x928a, 0x4}, {0x1, 0x7, 0x9, 0x81, 0x4, 0x80000000}, {0x6c, 0x9, 0x2, 0xb, 0x2, 0x4}, {0xe, 0x379a9e7d, 0xec64, 0x2, 0xfa, 0x5}, {0xf0, 0xb6aa, 0x7, 0x5, 0x2, 0x8}, {0x1, 0x5, 0x7, 0xe846, 0xbb, 0x4}, {0x9, 0x1, 0x4, 0x4b9, 0xcc6e, 0x1}, {0x0, 0xac73, 0x9, 0x2, 0x7f, 0x81}, {0x8, 0x8, 0xffffff28, 0x8, 0x7ff, 0x4}, {0x174, 0x7, 0x3, 0x8, 0x5, 0x9}, {0x100, 0x101, 0x6, 0x0, 0x5, 0x3}, {0xfff, 0xc83b, 0x8, 0x10000, 0x3, 0x200}, {0x8, 0x5, 0x7fff, 0xf0, 0x4, 0xffff}, {0x5, 0x1, 0xe, 0xffffffff, 0xbd54}, {0x12d, 0x6, 0x8, 0x8, 0x7}, {0x1000, 0xfffff153, 0xf4, 0x8000, 0x2, 0x2}, {0x7, 0x1, 0x8894, 0x2, 0x1bdb, 0x5}, {0x2, 0x7, 0x800, 0x9, 0x754, 0x6}, {0x1, 0x1, 0x5, 0x101, 0x5, 0x4}, {0x2, 0x9, 0x1, 0x8, 0x2, 0x1}, {0x7701bd00, 0x8, 0xfffffff8, 0xfffffff9, 0x5, 0x9}, {0x3, 0x9, 0x9, 0x2963, 0x401, 0x6}, {0x3, 0x100, 0x200, 0x7, 0xffff, 0x600}, {0x233d, 0x311a, 0x7, 0x7, 0x3, 0x8}], [{0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x96cc3c5f3d6c9393}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0xb}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0xaa1ca5bde2e27f69, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xfb4}, 0x1, 0x0, 0x0, 0x48801}, 0x8000) 9.132133589s ago: executing program 0 (id=3338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) 9.067753116s ago: executing program 4 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4049000}, 0x4000) 8.913845441s ago: executing program 4 (id=3340): capset(0x0, &(0x7f0000000280)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8919, &(0x7f0000000040)) 8.246362606s ago: executing program 3 (id=3342): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0), 0x8) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 8.157278572s ago: executing program 0 (id=3343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.156200254s ago: executing program 9 (id=3344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 7.909256128s ago: executing program 4 (id=3345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000540)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.820424966s ago: executing program 9 (id=3347): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a316600000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x804, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x1, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) 6.817554578s ago: executing program 0 (id=3348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xc4, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0xb0, 0x1, [@m_xt={0x7c, 0xa, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x30, 0xa, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.659993323s ago: executing program 3 (id=3349): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10) getpid() 6.645385804s ago: executing program 7 (id=3350): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x8000) 6.320592236s ago: executing program 0 (id=3351): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) 4.662795596s ago: executing program 4 (id=3352): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) 4.662226117s ago: executing program 3 (id=3353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) 4.659483518s ago: executing program 7 (id=3354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x40002003, 0x0) 3.032070551s ago: executing program 7 (id=3355): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.031836042s ago: executing program 3 (id=3356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@setlink={0x38, 0x13, 0x1, 0xfff7fffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) 2.926348219s ago: executing program 0 (id=3357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 2.918139298s ago: executing program 9 (id=3358): ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x1}, &(0x7f0000000340)=[{}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x1a, r0, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d}) 2.886237166s ago: executing program 7 (id=3359): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) 2.828517755s ago: executing program 3 (id=3360): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x15) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000c6835807974b5da7297f4b32f0293ba1d7eb8f37f4f769a60696a546f0020fa9bc3291e2f8adcf5aa9c6751a"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073798d30000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 2.75627145s ago: executing program 7 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 2.580109343s ago: executing program 9 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000540)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.439425234s ago: executing program 3 (id=3363): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10) getpid() 2.412452784s ago: executing program 4 (id=3364): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 0s ago: executing program 7 (id=3365): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) semget(0x1, 0x2, 0x7b0) kernel console output (not intermixed with test programs): d_slave_1): Enslaving as an active interface with an up link [ 1165.198855][T12027] team0: Port device team_slave_0 added [ 1165.217179][T12027] team0: Port device team_slave_1 added [ 1166.138166][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.138184][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.138209][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.227044][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.227061][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.227087][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.151519][T12229] No control pipe specified [ 1167.303762][T12027] hsr_slave_0: entered promiscuous mode [ 1167.310017][T12027] hsr_slave_1: entered promiscuous mode [ 1167.321992][T12027] debugfs: 'hsr0' already exists in 'hsr' [ 1167.322020][T12027] Cannot create hsr debugfs directory [ 1167.322905][T11830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1167.377965][T12171] chnl_net:caif_netlink_parms(): no params data found [ 1167.389375][T11830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1169.062282][T11830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1169.735011][T12241] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1170.390879][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1170.414269][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1170.416006][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1170.420631][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1170.450420][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.114420][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.118840][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.157293][T12171] bridge_slave_0: entered allmulticast mode [ 1171.299202][T12171] bridge_slave_0: entered promiscuous mode [ 1171.600257][T11863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1171.728351][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.728512][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.728724][T12171] bridge_slave_1: entered allmulticast mode [ 1171.740673][T12171] bridge_slave_1: entered promiscuous mode [ 1171.840632][T11863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1171.963214][T11863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1172.071569][T10310] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1172.095168][T11863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1172.138038][T12171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.160914][T12171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.231443][T10310] usb 8-1: Using ep0 maxpacket: 16 [ 1172.233841][T10310] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1172.233865][T10310] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.233882][T10310] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.236160][T10310] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1172.236181][T10310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.236191][T10310] usb 8-1: Product: syz [ 1172.236198][T10310] usb 8-1: Manufacturer: syz [ 1172.236205][T10310] usb 8-1: SerialNumber: syz [ 1172.483881][T10310] usb 8-1: 0:2 : does not exist [ 1172.497896][T10310] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 1172.549871][T10310] usb 8-1: USB disconnect, device number 22 [ 1172.571613][ T5806] Bluetooth: hci1: command tx timeout [ 1172.605280][T12199] udevd[12199]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.990063][T12171] team0: Port device team_slave_0 added [ 1173.408377][T12284] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1174.344143][T12286] No control pipe specified [ 1174.367109][T12171] team0: Port device team_slave_1 added [ 1174.651636][ T5806] Bluetooth: hci1: command tx timeout [ 1174.943409][T12293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.200746][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.217801][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.219601][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1175.220815][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1175.243627][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.843209][T12171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.843222][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.843237][T12171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.741466][ T5804] Bluetooth: hci1: command tx timeout [ 1177.295561][T12171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.295578][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.295604][T12171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.529074][ T5804] Bluetooth: hci2: command tx timeout [ 1177.542018][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.542085][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.811312][ T5804] Bluetooth: hci1: command tx timeout [ 1179.621785][ T5804] Bluetooth: hci2: command tx timeout [ 1179.816351][T12171] hsr_slave_0: entered promiscuous mode [ 1179.817203][T12171] hsr_slave_1: entered promiscuous mode [ 1179.817769][T12171] debugfs: 'hsr0' already exists in 'hsr' [ 1179.817787][T12171] Cannot create hsr debugfs directory [ 1179.865254][ T9503] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1180.011405][ T9503] usb 8-1: Using ep0 maxpacket: 16 [ 1180.013151][ T9503] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1180.013174][ T9503] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.013192][ T9503] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1180.015379][ T9503] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1180.015400][ T9503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.015410][ T9503] usb 8-1: Product: syz [ 1180.015417][ T9503] usb 8-1: Manufacturer: syz [ 1180.015424][ T9503] usb 8-1: SerialNumber: syz [ 1180.368823][ T9503] usb 8-1: 0:2 : does not exist [ 1180.379172][ T9503] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 1180.413850][ T9503] usb 8-1: USB disconnect, device number 23 [ 1180.447388][T12199] udevd[12199]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.729216][T12027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1180.797580][T12027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1180.857977][T12027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1181.256700][T12027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1181.295924][T12243] chnl_net:caif_netlink_parms(): no params data found [ 1182.136313][ T5804] Bluetooth: hci2: command tx timeout [ 1183.579646][T10310] libceph: connect (1)[c::]:6789 error -101 [ 1183.579849][T10310] libceph: mon0 (1)[c::]:6789 connect error [ 1183.597002][T10310] libceph: connect (1)[c::]:6789 error -101 [ 1183.597209][T10310] libceph: mon0 (1)[c::]:6789 connect error [ 1183.851869][T10310] libceph: connect (1)[c::]:6789 error -101 [ 1183.852154][T10310] libceph: mon0 (1)[c::]:6789 connect error [ 1184.171642][ T5804] Bluetooth: hci2: command tx timeout [ 1184.309614][T12360] ceph: No mds server is up or the cluster is laggy [ 1184.382389][ T993] libceph: connect (1)[c::]:6789 error -101 [ 1184.382595][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 1184.802595][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.802683][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.802866][T12243] bridge_slave_0: entered allmulticast mode [ 1184.804487][T12243] bridge_slave_0: entered promiscuous mode [ 1184.858471][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.858546][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.858707][T12243] bridge_slave_1: entered allmulticast mode [ 1184.860293][T12243] bridge_slave_1: entered promiscuous mode [ 1185.038770][T12294] chnl_net:caif_netlink_parms(): no params data found [ 1185.805363][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.866585][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.576354][T12243] team0: Port device team_slave_0 added [ 1189.600270][T12243] team0: Port device team_slave_1 added [ 1191.508089][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.519202][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.534083][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.578425][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.608272][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1191.623462][T12294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.623585][T12294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.623833][T12294] bridge_slave_0: entered allmulticast mode [ 1191.626811][T12294] bridge_slave_0: entered promiscuous mode [ 1192.098122][T12475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1192.098306][T12475] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1193.002385][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.002402][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.002428][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.092102][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.092238][T12294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.092478][T12294] bridge_slave_1: entered allmulticast mode [ 1193.095256][T12294] bridge_slave_1: entered promiscuous mode [ 1193.100300][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.100315][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.100341][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.692556][ T5804] Bluetooth: hci3: command tx timeout [ 1194.370354][T12294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.441854][T12294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.895650][T10259] bridge_slave_1: left allmulticast mode [ 1194.895680][T10259] bridge_slave_1: left promiscuous mode [ 1194.895876][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.983620][T10259] bridge_slave_0: left allmulticast mode [ 1194.983648][T10259] bridge_slave_0: left promiscuous mode [ 1194.983931][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.075906][T10259] bridge_slave_1: left allmulticast mode [ 1195.075926][T10259] bridge_slave_1: left promiscuous mode [ 1195.076079][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.163445][T10259] bridge_slave_0: left allmulticast mode [ 1195.163472][T10259] bridge_slave_0: left promiscuous mode [ 1195.163720][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.253866][T10259] bridge_slave_1: left allmulticast mode [ 1195.253886][T10259] bridge_slave_1: left promiscuous mode [ 1195.256413][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.422333][T10259] bridge_slave_0: left allmulticast mode [ 1195.422353][T10259] bridge_slave_0: left promiscuous mode [ 1195.422520][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.771359][ T5804] Bluetooth: hci3: command tx timeout [ 1196.525931][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.643522][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.704471][T10259] bond0 (unregistering): Released all slaves [ 1197.851336][ T5804] Bluetooth: hci3: command tx timeout [ 1199.802234][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.878165][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.916204][T10259] bond0 (unregistering): Released all slaves [ 1199.931371][ T5804] Bluetooth: hci3: command tx timeout [ 1201.982440][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.042214][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.083800][T10259] bond0 (unregistering): Released all slaves [ 1202.526857][T12243] hsr_slave_0: entered promiscuous mode [ 1202.527726][T12243] hsr_slave_1: entered promiscuous mode [ 1202.528934][T12243] debugfs: 'hsr0' already exists in 'hsr' [ 1202.528952][T12243] Cannot create hsr debugfs directory [ 1202.542210][T12294] team0: Port device team_slave_0 added [ 1202.557678][T12294] team0: Port device team_slave_1 added [ 1204.990236][T12294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.990254][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.990281][T12294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.103047][T12294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.103065][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.103090][T12294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.381623][T10259] hsr_slave_0: left promiscuous mode [ 1205.424764][T10259] hsr_slave_1: left promiscuous mode [ 1205.425766][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.444880][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.616561][T10259] hsr_slave_0: left promiscuous mode [ 1205.631407][T10259] hsr_slave_1: left promiscuous mode [ 1205.632088][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.673738][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.811383][T10259] hsr_slave_0: left promiscuous mode [ 1205.832972][T10259] hsr_slave_1: left promiscuous mode [ 1205.833934][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.883943][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.997313][T10259] veth0_macvtap: left promiscuous mode [ 1205.997591][T10259] veth1_vlan: left promiscuous mode [ 1205.999551][T10259] veth0_vlan: left promiscuous mode [ 1207.224352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.397879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.620391][T12663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1207.622384][T12663] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1207.686422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.202234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.607106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.658119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.736784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.863096][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1209.413948][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1209.810007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.288726][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1210.313695][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1210.315102][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1210.316419][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1210.317285][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1212.421536][ T5806] Bluetooth: hci5: command tx timeout [ 1212.622107][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1213.087251][T12685] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1213.682952][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1214.491369][ T5806] Bluetooth: hci5: command tx timeout [ 1215.312692][T12693] fuse: Bad value for 'fd' [ 1215.355907][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1215.355983][ T37] audit: type=1326 audit(2000000727.729:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.356333][ T37] audit: type=1326 audit(2000000727.729:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.356592][ T37] audit: type=1326 audit(2000000727.729:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.356952][ T37] audit: type=1326 audit(2000000727.729:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.357463][ T37] audit: type=1326 audit(2000000727.729:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.358341][ T37] audit: type=1326 audit(2000000727.729:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.358962][ T37] audit: type=1326 audit(2000000727.729:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.359494][ T37] audit: type=1326 audit(2000000727.729:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.360042][ T37] audit: type=1326 audit(2000000727.729:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1215.360530][ T37] audit: type=1326 audit(2000000727.729:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.7.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474f3efc9 code=0x7ffc0000 [ 1216.591767][ T5806] Bluetooth: hci5: command tx timeout [ 1218.660976][ T5806] Bluetooth: hci5: command tx timeout [ 1219.622044][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1219.872260][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1222.451859][T12715] netlink: 'syz.7.1330': attribute type 2 has an invalid length. [ 1222.451883][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1330'. [ 1222.630418][T12718] netlink: 'syz.7.1331': attribute type 13 has an invalid length. [ 1222.681087][T12722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1222.694911][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1332'. [ 1222.825649][T12294] hsr_slave_0: entered promiscuous mode [ 1222.826488][T12294] hsr_slave_1: entered promiscuous mode [ 1223.069987][T12727] capability: warning: `syz.7.1334' uses deprecated v2 capabilities in a way that may be insecure [ 1223.469281][T12729] team0: Port device vlan2 added [ 1223.695499][T12733] netlink: 'syz.7.1336': attribute type 2 has an invalid length. [ 1224.374657][T12462] chnl_net:caif_netlink_parms(): no params data found [ 1224.491520][T10310] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1224.641322][T10310] usb 8-1: Using ep0 maxpacket: 32 [ 1224.643635][T10310] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1224.643659][T10310] usb 8-1: config 0 has no interface number 0 [ 1224.643712][T10310] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1224.651986][T10310] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1224.652013][T10310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.652032][T10310] usb 8-1: Product: syz [ 1224.652045][T10310] usb 8-1: Manufacturer: syz [ 1224.652058][T10310] usb 8-1: SerialNumber: syz [ 1224.667599][T10310] usb 8-1: config 0 descriptor?? [ 1224.676974][T10310] smsc75xx v1.0.0 [ 1225.270561][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.270760][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.270979][T12462] bridge_slave_0: entered allmulticast mode [ 1225.295112][T12462] bridge_slave_0: entered promiscuous mode [ 1225.410411][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.410554][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.410789][T12462] bridge_slave_1: entered allmulticast mode [ 1225.419625][T12462] bridge_slave_1: entered promiscuous mode [ 1225.723949][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1225.723978][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1225.929817][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1225.929847][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1225.929865][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1225.929887][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1225.930519][T10310] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1225.945340][T10310] usb 8-1: USB disconnect, device number 24 [ 1226.105468][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.382929][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.575229][T12670] chnl_net:caif_netlink_parms(): no params data found [ 1226.760688][T12751] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1226.763747][T12462] team0: Port device team_slave_0 added [ 1226.786761][ T7173] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.789579][T12462] team0: Port device team_slave_1 added [ 1226.821931][ T7173] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.003495][ T7173] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.472400][ T7173] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1227.604497][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.604515][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.604544][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.662763][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.662780][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.662805][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.984771][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.985722][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.986005][T12670] bridge_slave_0: entered allmulticast mode [ 1227.994812][T12670] bridge_slave_0: entered promiscuous mode [ 1228.084960][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.085136][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.085410][T12670] bridge_slave_1: entered allmulticast mode [ 1228.089137][T12670] bridge_slave_1: entered promiscuous mode [ 1228.430640][T12462] hsr_slave_0: entered promiscuous mode [ 1228.432478][T12462] hsr_slave_1: entered promiscuous mode [ 1228.433502][T12462] debugfs: 'hsr0' already exists in 'hsr' [ 1228.433534][T12462] Cannot create hsr debugfs directory [ 1228.646849][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.811677][T10310] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1228.935690][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.965085][T10310] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.965117][T10310] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.965140][T10310] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1228.965152][T10310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.968930][T10310] usb 8-1: config 0 descriptor?? [ 1229.395097][T10310] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1229.402670][T10310] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1229.595401][T10310] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 1229.643629][T12670] team0: Port device team_slave_0 added [ 1229.684043][T12670] team0: Port device team_slave_1 added [ 1229.785489][T12243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1230.222452][T12243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1230.294176][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.294260][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.294284][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.348880][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.348896][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.348920][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.909308][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1230.916730][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1230.920597][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1230.922686][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1230.923912][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1231.511937][ T5873] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 1231.532747][ T5873] usb 8-1: device reset changed ep0 maxpacket size! [ 1231.552313][T12670] hsr_slave_0: entered promiscuous mode [ 1231.553757][T12670] hsr_slave_1: entered promiscuous mode [ 1231.555038][T12670] debugfs: 'hsr0' already exists in 'hsr' [ 1231.555059][T12670] Cannot create hsr debugfs directory [ 1231.595325][ T5908] usb 8-1: USB disconnect, device number 25 [ 1231.703946][T12294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1231.738485][T12294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1231.867489][T12294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1231.891678][ T5908] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1231.965374][T12294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1232.042397][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 1232.052318][ T5908] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1232.052345][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.059297][ T5908] usb 8-1: config 0 descriptor?? [ 1232.286400][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1232.293889][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1232.302296][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1232.302370][ T5908] usb 8-1: media controller created [ 1232.357783][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.453259][T10259] bridge_slave_1: left allmulticast mode [ 1232.453296][T10259] bridge_slave_1: left promiscuous mode [ 1232.453637][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.497175][ T5908] az6027: usb out operation failed. (-71) [ 1232.498070][ T5908] az6027: usb out operation failed. (-71) [ 1232.498084][ T5908] stb0899_attach: Driver disabled by Kconfig [ 1232.498131][ T5908] az6027: no front-end attached [ 1232.498131][ T5908] [ 1232.500442][ T5908] az6027: usb out operation failed. (-71) [ 1232.500458][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1232.504088][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 1232.508372][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 1232.508393][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1232.512907][ T5908] usb 8-1: USB disconnect, device number 26 [ 1232.534784][T10259] bridge_slave_0: left allmulticast mode [ 1232.534813][T10259] bridge_slave_0: left promiscuous mode [ 1232.535063][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.630156][T10259] bridge_slave_1: left allmulticast mode [ 1232.630175][T10259] bridge_slave_1: left promiscuous mode [ 1232.630374][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.663819][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1232.713330][T10259] bridge_slave_0: left allmulticast mode [ 1232.713349][T10259] bridge_slave_0: left promiscuous mode [ 1232.713496][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.773768][T10259] bridge_slave_1: left allmulticast mode [ 1232.773787][T10259] bridge_slave_1: left promiscuous mode [ 1232.773932][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.832319][T10259] bridge_slave_0: left allmulticast mode [ 1232.832339][T10259] bridge_slave_0: left promiscuous mode [ 1232.832490][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.981354][ T5804] Bluetooth: hci0: command tx timeout [ 1233.264406][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.402690][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.454646][T10259] bond0 (unregistering): Released all slaves [ 1233.842957][T12805] Bluetooth: MGMT ver 1.23 [ 1233.982912][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.082782][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.147505][T10259] bond0 (unregistering): Released all slaves [ 1234.363521][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.442017][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.506361][T10259] bond0 (unregistering): Released all slaves [ 1234.711849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.872290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.964206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.042657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.062082][ T5806] Bluetooth: hci0: command tx timeout [ 1235.166745][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.724061][T10259] hsr_slave_0: left promiscuous mode [ 1235.773302][T10259] hsr_slave_1: left promiscuous mode [ 1235.773413][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1235.774272][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.789991][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1235.792052][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1235.795058][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1235.798726][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1235.838969][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.971687][T10259] hsr_slave_0: left promiscuous mode [ 1236.012207][T10259] hsr_slave_1: left promiscuous mode [ 1236.012860][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.032304][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.201470][T10259] hsr_slave_0: left promiscuous mode [ 1236.221660][T10259] hsr_slave_1: left promiscuous mode [ 1236.222398][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.261963][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.570720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.619556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.676710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.804898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.860178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.921946][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1237.074445][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1237.133273][ T5804] Bluetooth: hci0: command tx timeout [ 1237.179288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.228084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.390201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.456597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.871418][ T5804] Bluetooth: hci1: command tx timeout [ 1238.041658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.185751][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1238.229046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.269875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.332256][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1238.410936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.918818][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.918919][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.215183][ T5804] Bluetooth: hci0: command tx timeout [ 1239.552011][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1239.702021][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1239.958756][ T5804] Bluetooth: hci1: command tx timeout [ 1240.634644][T12784] chnl_net:caif_netlink_parms(): no params data found [ 1241.121388][T10310] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1241.221629][T12784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.221807][T12784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.222023][T12784] bridge_slave_0: entered allmulticast mode [ 1241.224764][T12784] bridge_slave_0: entered promiscuous mode [ 1241.244995][T12784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.245169][T12784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.245349][T12784] bridge_slave_1: entered allmulticast mode [ 1241.248125][T12784] bridge_slave_1: entered promiscuous mode [ 1241.309037][T10310] usb 8-1: Using ep0 maxpacket: 32 [ 1241.315885][T10310] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1241.315912][T10310] usb 8-1: config 0 has no interface number 0 [ 1241.315963][T10310] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1241.318937][T10310] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1241.318963][T10310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.318981][T10310] usb 8-1: Product: syz [ 1241.318994][T10310] usb 8-1: Manufacturer: syz [ 1241.319008][T10310] usb 8-1: SerialNumber: syz [ 1241.337058][T10310] usb 8-1: config 0 descriptor?? [ 1241.347252][T10310] smsc75xx v1.0.0 [ 1241.564802][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.614755][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.614917][T12670] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1241.825711][T12670] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1241.989692][T12670] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1242.011599][ T5804] Bluetooth: hci1: command tx timeout [ 1242.036989][T12784] team0: Port device team_slave_0 added [ 1242.112603][T12670] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1242.196333][T12784] team0: Port device team_slave_1 added [ 1242.400430][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1242.400460][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1242.409807][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1242.409835][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1242.409853][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1242.409871][T10310] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1242.410162][T10310] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1242.500185][T10310] usb 8-1: USB disconnect, device number 27 [ 1242.600286][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.600302][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.600328][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.659750][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.659764][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.659778][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.825996][T12462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1242.875077][T12462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1243.067650][T12462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1243.209849][T12462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1243.288244][T12784] hsr_slave_0: entered promiscuous mode [ 1243.289175][T12784] hsr_slave_1: entered promiscuous mode [ 1243.289775][T12784] debugfs: 'hsr0' already exists in 'hsr' [ 1243.289794][T12784] Cannot create hsr debugfs directory [ 1243.291104][T12818] chnl_net:caif_netlink_parms(): no params data found [ 1243.421420][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1243.591369][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1243.594098][ T10] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 1243.594124][ T10] usb 8-1: config 0 has no interface number 0 [ 1243.597762][ T10] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1243.597789][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.597808][ T10] usb 8-1: Product: syz [ 1243.597821][ T10] usb 8-1: Manufacturer: syz [ 1243.597835][ T10] usb 8-1: SerialNumber: syz [ 1243.603967][ T10] usb 8-1: config 0 descriptor?? [ 1243.611532][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1243.612239][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1243.626185][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1243.627992][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1243.628049][ T10] usb 8-1: media controller created [ 1243.664064][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1243.683332][ T10] cxusb: set interface failed [ 1243.683351][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1243.770065][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1243.770081][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1243.849964][T12845] cxusb: i2c wr: len=80 is too big! [ 1243.849964][T12845] [ 1243.891421][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1243.891443][ T10] Registered IR keymap rc-empty [ 1243.892737][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1243.894796][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input10 [ 1243.899439][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1243.899460][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1243.910592][ T10] usb 8-1: USB disconnect, device number 28 [ 1244.076794][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1244.091609][ T5804] Bluetooth: hci1: command tx timeout [ 1244.308871][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.309082][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.309293][T12818] bridge_slave_0: entered allmulticast mode [ 1244.316391][T12818] bridge_slave_0: entered promiscuous mode [ 1244.350468][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.350596][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.350804][T12818] bridge_slave_1: entered allmulticast mode [ 1244.354533][T12818] bridge_slave_1: entered promiscuous mode [ 1244.698830][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.744929][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.059001][T12818] team0: Port device team_slave_0 added [ 1245.137277][T12818] team0: Port device team_slave_1 added [ 1245.161461][ T1870] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1245.312321][ T1870] usb 8-1: Using ep0 maxpacket: 8 [ 1245.317588][ T1870] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1245.317606][ T1870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.353706][ T1870] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1245.353726][ T1870] pvrusb2: ********** [ 1245.353733][ T1870] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1245.353744][ T1870] pvrusb2: Important functionality might not be entirely working. [ 1245.353752][ T1870] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1245.353764][ T1870] pvrusb2: ********** [ 1245.566631][ T2367] pvrusb2: Invalid write control endpoint [ 1245.582933][T12818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.582950][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.582976][T12818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.669706][ T2367] pvrusb2: Invalid write control endpoint [ 1245.669722][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1245.669732][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1245.669740][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1245.669754][ T2367] pvrusb2: Device being rendered inoperable [ 1245.677323][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1245.677425][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1245.705342][ T2367] pvrusb2: Attached sub-driver cx25840 [ 1245.705359][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1245.705369][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1245.766954][T12871] pvrusb2: Attempted to execute control transfer when device not ok [ 1245.767941][ T5873] usb 8-1: USB disconnect, device number 29 [ 1245.825923][T12818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.825935][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.825950][T12818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.904097][T12818] hsr_slave_0: entered promiscuous mode [ 1246.904939][T12818] hsr_slave_1: entered promiscuous mode [ 1246.905513][T12818] debugfs: 'hsr0' already exists in 'hsr' [ 1246.905532][T12818] Cannot create hsr debugfs directory [ 1246.919197][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.892040][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.107652][T12462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.146231][T12784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1248.166618][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.167297][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.216776][T12784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1248.391981][T12784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1248.462966][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.463150][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.465599][T12784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1248.677763][T12462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.798967][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.799097][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.962236][T10259] bridge_slave_1: left allmulticast mode [ 1248.962263][T10259] bridge_slave_1: left promiscuous mode [ 1248.962552][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.063113][T10259] bridge_slave_0: left allmulticast mode [ 1249.063143][T10259] bridge_slave_0: left promiscuous mode [ 1249.063429][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.163793][T10259] bridge_slave_1: left allmulticast mode [ 1249.163814][T10259] bridge_slave_1: left promiscuous mode [ 1249.163983][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.242318][T10259] bridge_slave_0: left allmulticast mode [ 1249.242342][T10259] bridge_slave_0: left promiscuous mode [ 1249.242503][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.539062][T12915] 9pnet_fd: Insufficient options for proto=fd [ 1249.772051][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.862664][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.926396][T10259] bond0 (unregistering): Released all slaves [ 1250.121987][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.223782][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.307853][T10259] bond0 (unregistering): Released all slaves [ 1250.407637][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.462354][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.519289][T12924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1250.570380][T12924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1250.580001][T12924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1250.592586][T12924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1250.593991][T12924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1250.841383][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1251.021512][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1251.023696][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1251.023721][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.029059][ T10] usb 8-1: config 0 descriptor?? [ 1251.284642][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1251.289485][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1251.290748][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1251.290831][ T10] usb 8-1: media controller created [ 1251.315685][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1251.333690][T10259] hsr_slave_0: left promiscuous mode [ 1251.372420][T10259] hsr_slave_1: left promiscuous mode [ 1251.373319][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.412231][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.485653][ T10] az6027: usb out operation failed. (-71) [ 1251.491583][ T10] az6027: usb out operation failed. (-71) [ 1251.491602][ T10] stb0899_attach: Driver disabled by Kconfig [ 1251.491612][ T10] az6027: no front-end attached [ 1251.491612][ T10] [ 1251.492026][ T10] az6027: usb out operation failed. (-71) [ 1251.492039][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1251.495282][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 1251.499219][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1251.499239][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1251.510118][ T10] usb 8-1: USB disconnect, device number 30 [ 1251.650156][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1251.662008][T10259] hsr_slave_0: left promiscuous mode [ 1251.701491][T10259] hsr_slave_1: left promiscuous mode [ 1251.702153][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.762702][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.533644][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1252.651394][ T5804] Bluetooth: hci2: command tx timeout [ 1252.683554][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1252.781631][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1252.961445][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1252.963296][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1252.963323][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.967115][ T10] usb 8-1: config 0 descriptor?? [ 1253.175068][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1253.182656][ T10] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1253.182684][ T10] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1253.982101][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1254.161830][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1254.743218][ T5804] Bluetooth: hci2: command tx timeout [ 1255.689786][T12784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.902845][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.942636][T12818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1255.980473][T12818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1256.052852][T12818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1256.128730][T12923] chnl_net:caif_netlink_parms(): no params data found [ 1256.155986][T12784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.193468][T12818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1256.390005][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.390135][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.635034][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.635162][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.725316][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.725431][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.725596][T12923] bridge_slave_0: entered allmulticast mode [ 1256.727137][T12923] bridge_slave_0: entered promiscuous mode [ 1256.746800][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.746962][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.747154][T12923] bridge_slave_1: entered allmulticast mode [ 1256.753312][T12923] bridge_slave_1: entered promiscuous mode [ 1256.811602][ T5804] Bluetooth: hci2: command tx timeout [ 1257.022130][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.050912][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.309489][T12923] team0: Port device team_slave_0 added [ 1257.322203][T12923] team0: Port device team_slave_1 added [ 1257.500853][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.500866][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.500880][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.526608][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.526626][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.526652][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.595388][T12670] veth0_vlan: entered promiscuous mode [ 1257.837594][T12923] hsr_slave_0: entered promiscuous mode [ 1257.838416][T12923] hsr_slave_1: entered promiscuous mode [ 1258.070072][T12670] veth1_vlan: entered promiscuous mode [ 1258.891412][ T5804] Bluetooth: hci2: command tx timeout [ 1259.025901][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.101795][T12784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.116314][T12670] veth0_macvtap: entered promiscuous mode [ 1259.154725][T12670] veth1_macvtap: entered promiscuous mode [ 1259.190994][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.254628][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.255610][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.354970][T10310] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1259.391083][T10310] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1259.403057][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.417814][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.436797][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.592980][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.704121][ T1106] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.705826][ T1106] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.705870][ T1106] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.705904][ T1106] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.764813][T10259] bridge_slave_1: left allmulticast mode [ 1259.764842][T10259] bridge_slave_1: left promiscuous mode [ 1259.765098][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.842872][T10259] bridge_slave_0: left allmulticast mode [ 1259.842892][T10259] bridge_slave_0: left promiscuous mode [ 1259.843044][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.831850][T10259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.922878][T10259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.983275][T10259] bond0 (unregistering): Released all slaves [ 1262.455837][T10259] hsr_slave_0: left promiscuous mode [ 1262.492270][T10259] hsr_slave_1: left promiscuous mode [ 1262.492924][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.522254][T10259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.234242][T10259] team0 (unregistering): Port device team_slave_1 removed [ 1263.402333][T10259] team0 (unregistering): Port device team_slave_0 removed [ 1264.116850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.190156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.253819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.400925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.482201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.670418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.718739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.934289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.074435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.133204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.190445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.443308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.838001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.889174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.007260][ T6951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.007280][ T6951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.107980][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.108002][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.108842][T12784] veth0_vlan: entered promiscuous mode [ 1266.170119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.256551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.292499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.368162][T12784] veth1_vlan: entered promiscuous mode [ 1266.413405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.638601][T12818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.231367][T12923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1267.756144][T12923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1267.908118][T12923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1268.135071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.487691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.531013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.559080][T12923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1268.633357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.785046][T12784] veth0_macvtap: entered promiscuous mode [ 1268.826990][T12784] veth1_macvtap: entered promiscuous mode [ 1268.953052][T12784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.000854][T12818] veth0_vlan: entered promiscuous mode [ 1269.007242][T12784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.109279][T12818] veth1_vlan: entered promiscuous mode [ 1269.110896][ T7173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.113392][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.590102][ T7173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.715731][ T7173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.759634][ T7173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.098971][T12818] veth0_macvtap: entered promiscuous mode [ 1271.209400][T12818] veth1_macvtap: entered promiscuous mode [ 1271.240639][ T7173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.240661][ T7173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.379347][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.473169][T12818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.506203][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.506225][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.536151][T12818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.618151][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.618563][ T5918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.620530][ T5918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.622155][ T5918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.637850][ T5918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.699268][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.699416][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.732595][T13099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1271.814765][T10259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.814915][T10259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.895781][T13099] overlayfs: failed to resolve './file1': -2 [ 1273.284603][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.284627][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.538795][ T7173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.538815][ T7173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.661521][ T1627] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1273.821412][ T1627] usb 5-1: Using ep0 maxpacket: 32 [ 1273.828868][ T1627] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1273.828897][ T1627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.844025][ T1627] usb 5-1: config 0 descriptor?? [ 1274.072427][ T1627] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1274.087886][ T1627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.092024][ T1627] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1274.092081][ T1627] usb 5-1: media controller created [ 1274.210447][ T1627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.351004][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.408318][ T1627] az6027: usb out operation failed. (-71) [ 1274.409843][ T1627] az6027: usb out operation failed. (-71) [ 1274.409858][ T1627] stb0899_attach: Driver disabled by Kconfig [ 1274.409868][ T1627] az6027: no front-end attached [ 1274.409868][ T1627] [ 1274.413252][ T1627] az6027: usb out operation failed. (-71) [ 1274.413270][ T1627] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1274.428161][ T1627] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 1274.446414][ T1627] dvb-usb: schedule remote query interval to 400 msecs. [ 1274.446439][ T1627] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1274.453064][ T1627] usb 5-1: USB disconnect, device number 5 [ 1274.736757][T12923] veth0_vlan: entered promiscuous mode [ 1275.241042][T12923] veth1_vlan: entered promiscuous mode [ 1275.344322][ T1627] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1275.635769][T12923] veth0_macvtap: entered promiscuous mode [ 1275.711565][T12923] veth1_macvtap: entered promiscuous mode [ 1276.037153][T13164] bond1 (unregistering): Released all slaves [ 1276.249288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.354003][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.418494][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.489300][T10259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.523742][T10259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.530318][T10259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.543544][T10259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.121383][ T9898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1277.245872][ T6951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.245897][ T6951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.299426][ T9898] usb 4-1: Using ep0 maxpacket: 32 [ 1277.307721][ T9898] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1277.307750][ T9898] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1277.307772][ T9898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1277.307830][ T9898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1277.307854][ T9898] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1277.307878][ T9898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1277.307922][ T9898] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1277.307946][ T9898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.360806][ T9898] usb 4-1: config 0 descriptor?? [ 1277.504863][ T6861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.504886][ T6861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.672706][ T9898] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1277.678689][ T9898] usb 4-1: USB disconnect, device number 8 [ 1277.728588][ T9898] usblp0: removed [ 1277.802105][ T1870] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1277.951480][ T1870] usb 10-1: Using ep0 maxpacket: 32 [ 1277.953811][ T1870] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1277.953838][ T1870] usb 10-1: config 0 has no interface number 0 [ 1277.953868][ T1870] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1277.994216][ T1870] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1277.994245][ T1870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.994263][ T1870] usb 10-1: Product: syz [ 1277.994277][ T1870] usb 10-1: Manufacturer: syz [ 1277.994291][ T1870] usb 10-1: SerialNumber: syz [ 1278.098022][ T1870] usb 10-1: config 0 descriptor?? [ 1278.191354][ T9898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1278.332704][ T1870] ipheth 10-1:0.196: Unable to find endpoints [ 1278.344075][ T9898] usb 4-1: Using ep0 maxpacket: 32 [ 1278.347174][ T9898] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1278.347199][ T9898] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1278.347220][ T9898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1278.347271][ T9898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1278.347291][ T9898] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1278.347337][ T9898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1278.347383][ T9898] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1278.347406][ T9898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.448697][ T9898] usb 4-1: config 0 descriptor?? [ 1278.461795][ T1870] usb 10-1: USB disconnect, device number 2 [ 1278.734472][ T9898] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1279.385922][T12782] usb 4-1: USB disconnect, device number 9 [ 1279.409309][T12782] usblp0: removed [ 1279.901360][ T1627] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1280.060224][ T1627] usb 5-1: Using ep0 maxpacket: 32 [ 1280.081097][ T1627] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1280.081114][ T1627] usb 5-1: config 0 has no interface number 0 [ 1280.106536][ T1627] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1280.106566][ T1627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.107216][ T1627] usb 5-1: Product: syz [ 1280.107441][ T1627] usb 5-1: Manufacturer: syz [ 1280.108716][ T1627] usb 5-1: SerialNumber: syz [ 1280.168083][ T1627] usb 5-1: config 0 descriptor?? [ 1280.193252][ T1627] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1280.193305][ T1627] dvb-usb: bulk message failed: -22 (2/0) [ 1280.218482][ T1627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1280.219673][ T1627] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1280.219729][ T1627] usb 5-1: media controller created [ 1280.284339][ T1627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.325020][ T1627] cxusb: set interface failed [ 1280.325040][ T1627] dvb-usb: bulk message failed: -22 (1/0) [ 1280.407499][ T1627] DVB: Unable to find symbol lgdt330x_attach() [ 1280.407515][ T1627] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1280.671497][ T1627] rc_core: IR keymap rc-dvico-portable not found [ 1280.671518][ T1627] Registered IR keymap rc-empty [ 1280.718495][ T1627] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1280.743465][ T1627] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13 [ 1280.749226][ T1627] dvb-usb: schedule remote query interval to 100 msecs. [ 1280.749249][ T1627] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1280.780294][ T1627] usb 5-1: USB disconnect, device number 6 [ 1281.029647][ T1627] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1281.870886][T13302] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1282.801379][ T9898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1282.966410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.067328][ T9898] usb 5-1: Using ep0 maxpacket: 32 [ 1283.069843][ T9898] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1283.069868][ T9898] usb 5-1: config 0 has no interface number 0 [ 1283.069899][ T9898] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1283.234089][ T9898] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1283.234119][ T9898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.234139][ T9898] usb 5-1: Product: syz [ 1283.234152][ T9898] usb 5-1: Manufacturer: syz [ 1283.234167][ T9898] usb 5-1: SerialNumber: syz [ 1283.283588][ T9898] usb 5-1: config 0 descriptor?? [ 1283.572169][ T9898] ipheth 5-1:0.196: Unable to find endpoints [ 1283.611058][ T9898] usb 5-1: USB disconnect, device number 7 [ 1284.467705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.633550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.275623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.921610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.058630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.739361][T13418] fuse: Bad value for 'fd' [ 1288.101359][T12782] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1288.231356][T12782] usb 5-1: device descriptor read/64, error -71 [ 1288.481527][T12782] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1288.611384][T12782] usb 5-1: device descriptor read/64, error -71 [ 1288.741884][T12782] usb usb5-port1: attempt power cycle [ 1289.121824][T12782] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1289.142209][T12782] usb 5-1: device descriptor read/8, error -71 [ 1289.401392][T12782] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1289.422093][T12782] usb 5-1: device descriptor read/8, error -71 [ 1289.532073][T12782] usb usb5-port1: unable to enumerate USB device [ 1290.436444][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1290.436465][ T37] audit: type=1326 audit(2000000802.729:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13476 comm="syz.9.1532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1c91fefc9 code=0x0 [ 1297.012449][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 1297.631419][T12779] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1297.781385][T12779] usb 1-1: Using ep0 maxpacket: 32 [ 1297.783934][T12779] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1297.783956][T12779] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1297.783975][T12779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1297.784025][T12779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1297.784046][T12779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1297.784068][T12779] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1297.784107][T12779] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1297.784129][T12779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.842249][T12779] usb 1-1: config 0 descriptor?? [ 1298.070649][T12779] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1298.090910][T12779] usb 1-1: USB disconnect, device number 17 [ 1298.125363][T12779] usblp0: removed [ 1298.127086][T13645] fuse: Bad value for 'fd' [ 1298.581442][T12779] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1298.735253][T12779] usb 1-1: Using ep0 maxpacket: 32 [ 1298.738544][T12779] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1298.738572][T12779] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1298.738684][T12779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1298.738741][T12779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1298.738763][T12779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1298.738788][T12779] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1298.738830][T12779] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1298.738853][T12779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.764682][T12779] usb 1-1: config 0 descriptor?? [ 1298.984802][T12779] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1299.476501][T13687] fuse: Bad value for 'fd' [ 1300.362146][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.362221][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.570949][ T9898] usb 1-1: USB disconnect, device number 18 [ 1300.596027][ T9898] usblp0: removed [ 1301.512886][T13756] 9pnet_fd: Insufficient options for proto=fd [ 1301.701383][ T993] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1301.861298][ T993] usb 1-1: Using ep0 maxpacket: 8 [ 1301.866453][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.866505][ T993] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1301.866529][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1301.866552][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1301.866578][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1301.869628][ T993] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1301.869656][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1301.869677][ T993] usb 1-1: Product: syz [ 1301.869691][ T993] usb 1-1: Manufacturer: syz [ 1301.869706][ T993] usb 1-1: SerialNumber: syz [ 1301.974576][ T993] usb 1-1: config 0 descriptor?? [ 1302.201520][ T993] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1302.201546][ T993] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1302.398257][ T993] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1302.398281][ T993] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1302.398302][ T993] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1302.600213][ T993] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1302.790628][T13795] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1624'. [ 1303.351991][T13805] 9pnet_fd: Insufficient options for proto=fd [ 1303.418124][ T993] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1303.418487][ T993] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1303.447562][ T993] usb 1-1: USB disconnect, device number 19 [ 1304.881338][T10282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1305.031374][T10282] usb 5-1: Using ep0 maxpacket: 32 [ 1305.034963][T10282] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1305.034989][T10282] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1305.035008][T10282] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1305.035058][T10282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1305.035080][T10282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1305.035102][T10282] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1305.035143][T10282] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1305.035166][T10282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.160136][T10282] usb 5-1: config 0 descriptor?? [ 1305.380282][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 1305.422758][T10282] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1305.583725][T10282] usb 5-1: USB disconnect, device number 12 [ 1305.726317][T10282] usblp0: removed [ 1306.141357][T10282] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1306.321332][T10282] usb 5-1: Using ep0 maxpacket: 32 [ 1306.323630][T10282] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1306.323654][T10282] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1306.323674][T10282] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1306.323730][T10282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1306.323751][T10282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1306.323774][T10282] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1306.323815][T10282] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1306.323836][T10282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.346579][T10282] usb 5-1: config 0 descriptor?? [ 1306.707003][T10282] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1307.265683][T10282] usb 5-1: USB disconnect, device number 13 [ 1307.281775][T13909] batadv_slave_1: entered promiscuous mode [ 1307.282441][T13909] batadv_slave_0: entered promiscuous mode [ 1307.282971][T13908] batadv_slave_0: left promiscuous mode [ 1307.283771][T13908] batadv_slave_1: left promiscuous mode [ 1307.293007][T10282] usblp0: removed [ 1308.697952][T13949] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1309.187014][T13973] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1681'. [ 1314.066345][T14090] fuse: Bad value for 'fd' [ 1314.292919][T14104] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 1315.713302][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1315.713386][ T10] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1315.738205][ T10] usb 8-1: USB disconnect, device number 31 [ 1316.373316][T14162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1316.650477][T14172] fuse: Bad value for 'fd' [ 1317.028808][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 1317.630188][T14210] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 1320.382459][T14322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 1322.212856][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1839'. [ 1323.009307][T14395] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1323.009349][T14395] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1323.009369][T14395] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1323.118411][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1855'. [ 1323.448145][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1863'. [ 1323.653558][T14426] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1323.653758][T14426] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1324.064486][T14448] fuse: Bad value for 'fd' [ 1325.658231][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.695176][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.696469][T14481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.754434][T14481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.288312][T14548] overlayfs: failed to clone lowerpath [ 1327.774617][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1926'. [ 1328.231322][T14533] bridge0: port 3(vxlan0) entered blocking state [ 1328.231411][T14533] bridge0: port 3(vxlan0) entered disabled state [ 1328.231546][T14533] vxlan0: entered allmulticast mode [ 1328.233402][T14533] vxlan0: entered promiscuous mode [ 1328.234473][ T5920] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.443547][ T5920] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.444814][ T5920] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.444859][ T5920] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.640657][T14574] overlayfs: failed to clone lowerpath [ 1328.933291][T14587] netlink: 'syz.4.1938': attribute type 8 has an invalid length. [ 1329.384557][T14613] overlayfs: failed to clone lowerpath [ 1330.346404][T14661] overlayfs: failed to clone upperpath [ 1330.731443][T14674] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1331.153041][T14685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1980'. [ 1331.485348][T14699] bridge0: port 3(syz_tun) entered blocking state [ 1331.485582][T14699] bridge0: port 3(syz_tun) entered disabled state [ 1331.486228][T14699] syz_tun: entered allmulticast mode [ 1331.513812][T14699] syz_tun: entered promiscuous mode [ 1331.541295][T14700] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1331.735275][T14707] overlayfs: failed to clone upperpath [ 1333.134890][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 1333.176372][T14777] overlayfs: failed to clone upperpath [ 1333.418245][T14791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1334.187469][T14829] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 1334.206815][T14827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2041'. [ 1334.844962][T14853] syz_tun: left allmulticast mode [ 1334.844992][T14853] syz_tun: left promiscuous mode [ 1334.845273][T14853] bridge0: port 3(syz_tun) entered disabled state [ 1335.076936][T14858] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2053'. [ 1335.108083][T14853] bridge_slave_0: left allmulticast mode [ 1335.108112][T14853] bridge_slave_0: left promiscuous mode [ 1335.108400][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.211007][T14853] bridge_slave_1: left allmulticast mode [ 1335.211038][T14853] bridge_slave_1: left promiscuous mode [ 1335.211784][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.412825][T14853] bond0: (slave bond_slave_0): Releasing backup interface [ 1335.472124][T14853] bond0: (slave bond_slave_1): Releasing backup interface [ 1335.545287][T14853] team0: Failed to send options change via netlink (err -105) [ 1335.545534][T14853] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1335.546197][T14853] team0: Port device team_slave_0 removed [ 1335.596369][T14853] team0: Failed to send options change via netlink (err -105) [ 1335.596683][T14853] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1335.597262][T14853] team0: Port device team_slave_1 removed [ 1335.597846][T14853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.638436][T14853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.732905][T14853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1335.767674][T14858] team0: Failed to send options change via netlink (err -105) [ 1335.767702][T14858] team0: Mode changed to "loadbalance" [ 1335.779648][T14859] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 1337.660146][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2096'. [ 1338.089914][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 1338.089945][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2101'. [ 1338.244226][T14968] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2104'. [ 1338.654136][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1338.886325][T14996] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2119'. [ 1338.915726][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 1339.174643][T15000] bridge_slave_0: left allmulticast mode [ 1339.174675][T15000] bridge_slave_0: left promiscuous mode [ 1339.174946][T15000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.689304][T15025] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2131'. [ 1339.764516][T15000] bridge_slave_1: left allmulticast mode [ 1339.764537][T15000] bridge_slave_1: left promiscuous mode [ 1339.764682][T15000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.962722][T15000] bond0: (slave bond_slave_0): Releasing backup interface [ 1340.043264][T15000] bond0: (slave bond_slave_1): Releasing backup interface [ 1340.108153][T15000] team0: Port device team_slave_0 removed [ 1340.157466][T15000] team0: Port device team_slave_1 removed [ 1340.158553][T15000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.158580][T15000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.214640][T15000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.214669][T15000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.254145][T15000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1340.470161][T15043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2139'. [ 1340.718570][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2143'. [ 1340.965916][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2148'. [ 1340.965970][T15067] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2148'. [ 1341.165376][T15069] bridge_slave_0: left allmulticast mode [ 1341.165405][T15069] bridge_slave_0: left promiscuous mode [ 1341.165657][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.689614][T15069] bridge_slave_1: left allmulticast mode [ 1341.689646][T15069] bridge_slave_1: left promiscuous mode [ 1341.689896][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.032237][T15069] bond0: (slave bond_slave_0): Releasing backup interface [ 1342.135068][T15069] bond0: (slave bond_slave_1): Releasing backup interface [ 1342.197627][T15069] team0: Port device team_slave_0 removed [ 1342.234753][T15069] team0: Port device team_slave_1 removed [ 1342.239646][T15069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.239678][T15069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.294667][T15069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.294688][T15069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.345918][T15069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1342.725408][T15117] netlink: 'syz.7.2171': attribute type 13 has an invalid length. [ 1342.725432][T15117] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2171'. [ 1343.944455][T15175] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2194'. [ 1343.979687][T15175] team0: Mode changed to "loadbalance" [ 1344.258688][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2204'. [ 1344.652952][T15216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1344.959675][T15227] bridge_slave_0: left allmulticast mode [ 1344.959705][T15227] bridge_slave_0: left promiscuous mode [ 1344.959968][T15227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.017294][T15230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2219'. [ 1345.053982][T15227] bridge_slave_1: left allmulticast mode [ 1345.054012][T15227] bridge_slave_1: left promiscuous mode [ 1345.054246][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.192225][T15227] bond0: (slave bond_slave_0): Releasing backup interface [ 1345.262144][T15227] bond0: (slave bond_slave_1): Releasing backup interface [ 1345.332395][T15227] team0: Failed to send options change via netlink (err -105) [ 1345.332939][T15227] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1345.333504][T15227] team0: Port device team_slave_0 removed [ 1345.650113][T15227] team0: Failed to send options change via netlink (err -105) [ 1345.650673][T15227] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1345.675003][T15227] team0: Port device team_slave_1 removed [ 1345.678600][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.678630][T15227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.905950][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.905979][T15227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.956494][T15227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1347.009310][T15230] team0: Failed to send options change via netlink (err -105) [ 1347.009336][T15230] team0: Mode changed to "loadbalance" [ 1347.597729][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 1348.423241][T15290] netlink: 'syz.7.2242': attribute type 1 has an invalid length. [ 1349.726459][T15306] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2248'. [ 1350.217681][T15290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1350.310835][T15303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1350.331454][T15306] team0: Unable to change to the same mode the team is in [ 1351.020141][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2268'. [ 1351.055769][T15356] macvlan0: entered promiscuous mode [ 1351.055798][T15356] macvlan0: entered allmulticast mode [ 1351.272696][T15365] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 1352.260659][T15400] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2289'. [ 1353.645040][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 1358.018062][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1358.020458][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1358.033598][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1358.052820][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2365'. [ 1358.736683][T12924] Bluetooth: hci1: command 0x0406 tx timeout [ 1359.696274][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2389'. [ 1359.697239][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2389'. [ 1359.847159][T15642] fuse: Unknown parameter 'grou00000000000000000000' [ 1361.794090][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.794163][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.182578][T15663] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1362.574096][T15678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1362.616288][T15678] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2409'. [ 1362.616322][T15678] team0: Unable to change to the same mode the team is in [ 1365.449530][T15730] fuse: Bad value for 'user_id' [ 1365.449551][T15730] fuse: Bad value for 'user_id' [ 1365.722259][T15737] fuse: Bad value for 'fd' [ 1366.437529][T15764] fuse: Bad value for 'user_id' [ 1366.437550][T15764] fuse: Bad value for 'user_id' [ 1366.481141][T15761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.507504][T15761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.574475][T15761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1367.082980][T15774] fuse: Bad value for 'fd' [ 1367.859113][T15792] fuse: Bad value for 'user_id' [ 1367.859134][T15792] fuse: Bad value for 'user_id' [ 1370.976993][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 1374.124196][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 1374.364351][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1374.399759][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1374.433800][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1374.452744][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1374.465021][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.748215][T15941] fuse: Bad value for 'fd' [ 1375.017749][T15956] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2526'. [ 1375.264241][T15960] netlink: 'syz.0.2528': attribute type 72 has an invalid length. [ 1375.264260][T15960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1375.295577][T15962] netlink: 'syz.9.2529': attribute type 10 has an invalid length. [ 1375.365014][T15963] netlink: 'syz.9.2529': attribute type 10 has an invalid length. [ 1375.403701][ T6861] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.403736][ T6861] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.473230][T15962] team0: Failed to send options change via netlink (err -105) [ 1375.473248][T15962] team0: Port device dummy0 added [ 1375.478643][T15963] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1375.556538][T15963] team0: Failed to send options change via netlink (err -105) [ 1375.556813][T15963] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1375.557618][T15963] team0: Port device dummy0 removed [ 1375.584659][T15969] fuse: Invalid rootmode [ 1375.598406][T15963] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1375.920173][ T6861] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.920208][ T6861] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.139024][T15996] fuse: Invalid rootmode [ 1376.236658][ T6861] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.236691][ T6861] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.474717][ T6861] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.474753][ T6861] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.571537][T12924] Bluetooth: hci3: command tx timeout [ 1376.698267][T16015] lo speed is unknown, defaulting to 1000 [ 1376.698491][T16015] lo speed is unknown, defaulting to 1000 [ 1376.775001][T15919] chnl_net:caif_netlink_parms(): no params data found [ 1376.800876][T16015] lo speed is unknown, defaulting to 1000 [ 1376.882067][T16015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1376.956223][T16015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1377.282617][T16015] lo speed is unknown, defaulting to 1000 [ 1377.286606][T16015] lo speed is unknown, defaulting to 1000 [ 1377.289564][T16015] lo speed is unknown, defaulting to 1000 [ 1377.453061][T16015] lo speed is unknown, defaulting to 1000 [ 1377.477529][T16015] lo speed is unknown, defaulting to 1000 [ 1377.511374][T16015] lo speed is unknown, defaulting to 1000 [ 1378.684472][T12924] Bluetooth: hci3: command tx timeout [ 1378.737571][T16064] fuse: Unknown parameter 'user_i00000000000000000000' [ 1379.390539][T16084] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 1379.441979][ T6861] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1380.555655][ T6861] bond0 (unregistering): Released all slaves [ 1380.732930][T12924] Bluetooth: hci3: command tx timeout [ 1381.575170][ T6861] bond1 (unregistering): Released all slaves [ 1381.612605][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.612738][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.612911][T15919] bridge_slave_0: entered allmulticast mode [ 1381.614457][T15919] bridge_slave_0: entered promiscuous mode [ 1381.702361][T16084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1381.878066][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.878221][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.878460][T15919] bridge_slave_1: entered allmulticast mode [ 1381.910514][T15919] bridge_slave_1: entered promiscuous mode [ 1382.483771][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 1382.556892][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 1382.602674][T15919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.607100][T15919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.811380][T12924] Bluetooth: hci3: command tx timeout [ 1382.941952][T16140] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2602'. [ 1383.973883][T16139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1383.974127][T16140] team0: Unable to change to the same mode the team is in [ 1383.974191][T16147] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1384.102315][T15919] team0: Port device team_slave_0 added [ 1384.108061][T10282] lo speed is unknown, defaulting to 1000 [ 1384.129589][T15919] team0: Port device team_slave_1 added [ 1384.271622][ T6861] hsr_slave_0: left promiscuous mode [ 1384.312859][ T6861] hsr_slave_1: left promiscuous mode [ 1384.387358][ T6861] veth1_macvtap: left promiscuous mode [ 1384.387461][ T6861] veth0_macvtap: left promiscuous mode [ 1384.387676][ T6861] veth1_vlan: left promiscuous mode [ 1384.387724][ T6861] veth0_vlan: left promiscuous mode [ 1384.993399][ T6861] team0 (unregistering): Port device vlan2 removed [ 1390.623963][T16177] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 1390.781464][T16196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1390.823540][T16205] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2626'. [ 1390.912059][T16204] bond0: (slave dummy0): Releasing backup interface [ 1391.056546][T16204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1391.059377][T16205] team0: Unable to change to the same mode the team is in [ 1391.089245][T15919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.089261][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.089283][T15919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.126592][T15919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.126611][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.126638][T15919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.498970][T15919] hsr_slave_0: entered promiscuous mode [ 1391.500324][T15919] hsr_slave_1: entered promiscuous mode [ 1391.513256][T15919] debugfs: 'hsr0' already exists in 'hsr' [ 1391.513285][T15919] Cannot create hsr debugfs directory [ 1394.645917][T16308] fuse: Unknown parameter 'user_id00000000000000000000' [ 1395.023390][T15919] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1395.056978][T15919] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1395.096622][T15919] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1395.137643][T15919] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1395.312004][T16331] bridge0: entered allmulticast mode [ 1395.604232][T15919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.684308][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.695756][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.697293][T13413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.749263][T13413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.750096][T13413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.784918][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'. [ 1395.882216][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2681'. [ 1395.903164][T16346] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2681'. [ 1396.232214][T15919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.856664][T15919] veth0_vlan: entered promiscuous mode [ 1396.876542][T15919] veth1_vlan: entered promiscuous mode [ 1396.956986][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 1396.957021][T16381] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2692'. [ 1397.037542][T15919] veth0_macvtap: entered promiscuous mode [ 1397.049606][T15919] veth1_macvtap: entered promiscuous mode [ 1397.101289][T15919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.154125][T15919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.216817][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.217992][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.218057][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.218092][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.344367][ T5918] tipc: Subscription rejected, illegal request [ 1397.793223][ T6577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.793245][ T6577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.938684][T16411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1397.950718][T16411] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2705'. [ 1397.967140][T16411] team0: Unable to change to the same mode the team is in [ 1397.969386][T13413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.969407][T13413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.203632][T16418] bridge_slave_0: left allmulticast mode [ 1398.203653][T16418] bridge_slave_0: left promiscuous mode [ 1398.203842][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.296539][T16418] bridge_slave_1: left allmulticast mode [ 1398.296559][T16418] bridge_slave_1: left promiscuous mode [ 1398.299936][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.422524][T16418] bond0: (slave bond_slave_0): Releasing backup interface [ 1398.482318][T16418] bond0: (slave bond_slave_1): Releasing backup interface [ 1398.577178][T16418] team0: Failed to send options change via netlink (err -105) [ 1398.578100][T16418] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1398.578848][T16418] team0: Port device team_slave_0 removed [ 1398.656254][T16418] team0: Failed to send options change via netlink (err -105) [ 1398.656884][T16418] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1398.657615][T16418] team0: Port device team_slave_1 removed [ 1398.682451][T16418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.682480][T16418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.723773][T16418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.723800][T16418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.777613][T16418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1399.050824][T16442] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2716'. [ 1400.916775][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 1400.916813][T16493] macvlan0: entered promiscuous mode [ 1400.916833][T16493] macvlan0: entered allmulticast mode [ 1401.112646][T16497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1401.119550][T16497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2741'. [ 1401.119580][T16497] team0: Unable to change to the same mode the team is in [ 1401.828261][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2750'. [ 1401.866069][T16516] macvlan0: entered promiscuous mode [ 1401.866098][T16516] macvlan0: entered allmulticast mode [ 1402.016186][T16523] netlink: 'syz.9.2752': attribute type 10 has an invalid length. [ 1402.022930][T16523] team0: Port device dummy0 added [ 1402.031272][T16523] netlink: 'syz.9.2752': attribute type 10 has an invalid length. [ 1402.036562][T16526] fuse: Unknown parameter '0x0000000000000003' [ 1402.092644][T16523] team0: Port device dummy0 removed [ 1402.097992][T16523] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1402.243966][T16533] bridge_slave_0: left allmulticast mode [ 1402.243996][T16533] bridge_slave_0: left promiscuous mode [ 1402.244262][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.347359][T16533] bridge_slave_1: left allmulticast mode [ 1402.347390][T16533] bridge_slave_1: left promiscuous mode [ 1402.347611][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.508025][T16550] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2763'. [ 1402.511978][T16533] bond0: (slave bond_slave_0): Releasing backup interface [ 1402.594009][T16533] bond0: (slave bond_slave_1): Releasing backup interface [ 1402.600287][T16555] fuse: Unknown parameter '0x0000000000000003' [ 1402.728972][T16533] team0: Port device team_slave_0 removed [ 1402.777663][T16533] team0: Port device team_slave_1 removed [ 1402.778515][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.778532][T16533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.823995][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.824015][T16533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.864279][T16533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1402.903354][T16546] bond0: (slave dummy0): Releasing backup interface [ 1402.989705][T16546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1402.989958][T16550] team0: Unable to change to the same mode the team is in [ 1403.106462][T16571] netlink: 'syz.7.2773': attribute type 8 has an invalid length. [ 1403.107113][T16563] batman_adv: batadv0: Adding interface: dummy0 [ 1403.107128][T16563] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.108531][T16563] batman_adv: batadv0: Interface activated: dummy0 [ 1403.231496][T16564] batadv0: mtu less than device minimum [ 1403.258673][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.280048][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.288202][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.297089][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.316751][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.331626][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.339503][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.354432][T16564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.780581][ T37] audit: type=1326 audit(2000000916.189:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16582 comm="syz.9.2779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1c91fefc9 code=0x0 [ 1403.926743][T16590] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1404.042093][T16590] kvm: pic: level sensitive irq not supported [ 1404.043226][T16590] kvm: pic: non byte read [ 1404.043896][T16590] kvm: pic: level sensitive irq not supported [ 1404.043954][T16590] kvm: pic: non byte read [ 1404.044357][T16590] kvm: pic: level sensitive irq not supported [ 1404.044886][T16590] kvm: pic: non byte read [ 1404.045310][T16590] kvm: pic: level sensitive irq not supported [ 1404.045363][T16590] kvm: pic: non byte read [ 1404.046125][T16590] kvm: pic: level sensitive irq not supported [ 1404.046434][T16590] kvm: pic: non byte read [ 1404.330915][T16604] lo speed is unknown, defaulting to 1000 [ 1404.331011][T16604] lo speed is unknown, defaulting to 1000 [ 1404.332441][T16604] lo speed is unknown, defaulting to 1000 [ 1404.429900][T16604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1404.556631][T16604] lo speed is unknown, defaulting to 1000 [ 1404.563681][T16604] lo speed is unknown, defaulting to 1000 [ 1404.566868][T16604] lo speed is unknown, defaulting to 1000 [ 1404.610798][T16604] lo speed is unknown, defaulting to 1000 [ 1404.620591][T16604] lo speed is unknown, defaulting to 1000 [ 1404.634962][T16616] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2791'. [ 1404.739794][T16618] netlink: 'syz.4.2792': attribute type 10 has an invalid length. [ 1404.739938][T16618] batman_adv: batadv0: Interface deactivated: dummy0 [ 1404.744789][T16618] batman_adv: batadv0: Removing interface: dummy0 [ 1404.791680][T16619] netlink: 'syz.4.2792': attribute type 10 has an invalid length. [ 1404.814289][T16618] team0: Port device dummy0 added [ 1404.857754][T16619] team0: Port device dummy0 removed [ 1404.898344][T16619] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1405.555221][T16651] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1405.604161][T16651] kvm: pic: level sensitive irq not supported [ 1405.604232][T16651] kvm: pic: non byte read [ 1405.604522][T16651] kvm: pic: level sensitive irq not supported [ 1405.604578][T16651] kvm: pic: non byte read [ 1405.604766][T16651] kvm: pic: level sensitive irq not supported [ 1405.604818][T16651] kvm: pic: non byte read [ 1405.605039][T16651] kvm: pic: level sensitive irq not supported [ 1405.605156][T16651] kvm: pic: non byte read [ 1405.605327][T16651] kvm: pic: level sensitive irq not supported [ 1405.605378][T16651] kvm: pic: non byte read [ 1406.065812][T16665] netlink: 'syz.9.2810': attribute type 10 has an invalid length. [ 1406.076483][T16665] team0: Port device dummy0 added [ 1406.079084][T16665] netlink: 'syz.9.2810': attribute type 10 has an invalid length. [ 1406.098935][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1406.123297][T16665] team0: Port device dummy0 removed [ 1406.128628][T16665] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1406.231681][T16667] macvlan0: entered promiscuous mode [ 1406.231710][T16667] macvlan0: entered allmulticast mode [ 1406.816383][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2829'. [ 1407.074784][T16717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2835'. [ 1407.512513][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1408.201773][T16748] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2848'. [ 1409.986878][T16779] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2860'. [ 1410.016640][T16769] net_ratelimit: 11 callbacks suppressed [ 1410.016653][T16769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.333154][T16791] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1410.680889][T16811] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2874'. [ 1411.454177][T16806] bond0: (slave dummy0): Releasing backup interface [ 1411.554612][T16806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1411.554954][T16811] team0: Unable to change to the same mode the team is in [ 1411.604650][T16836] batman_adv: batadv0: Adding interface: dummy0 [ 1411.604669][T16836] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.605501][T16836] batman_adv: batadv0: Interface activated: dummy0 [ 1412.251519][T12924] Bluetooth: hci3: command 0x0406 tx timeout [ 1413.324288][T16881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1413.339939][T16881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1413.339972][T16881] team0: Unable to change to the same mode the team is in [ 1413.600901][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1413.907815][T16899] siw: device registration error -23 [ 1415.611751][T16929] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2923'. [ 1419.262420][T17005] fuse: Bad value for 'fd' [ 1421.803397][T17037] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 1421.860859][T17037] team0: Failed to send options change via netlink (err -105) [ 1421.860885][T17037] team0: Port device dummy0 added [ 1421.861055][T17040] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 1421.863896][T17040] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1421.939816][T17040] team0: Failed to send options change via netlink (err -105) [ 1421.940083][T17040] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1421.945917][T17040] team0: Port device dummy0 removed [ 1421.998876][T17040] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1422.316034][T17053] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2968'. [ 1422.921510][T17077] trusted_key: syz.9.2972 sent an empty control message without MSG_MORE. [ 1423.472189][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.472272][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.034057][T17088] netlink: 'syz.9.2979': attribute type 10 has an invalid length. [ 1424.821814][T17090] netlink: 'syz.9.2979': attribute type 10 has an invalid length. [ 1424.861743][T17088] bond0: (slave dummy0): Releasing backup interface [ 1425.219339][T17088] team0: Port device dummy0 added [ 1426.201512][T17100] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2983'. [ 1426.314815][T17090] team0: Port device dummy0 removed [ 1426.350711][T17090] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1427.361784][ T5804] Bluetooth: hci5: unexpected event for opcode 0x202d [ 1428.103057][T17142] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3001'. [ 1431.614316][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3011'. [ 1435.119858][T17217] netlink: 'syz.4.3030': attribute type 10 has an invalid length. [ 1435.166312][T17217] team0: Port device dummy0 added [ 1435.233410][T17217] netlink: 'syz.4.3030': attribute type 10 has an invalid length. [ 1435.375325][T17217] team0: Port device dummy0 removed [ 1435.394270][T17217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1435.647986][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3037'. [ 1439.049828][T17258] bond0: (slave dummy0): Releasing backup interface [ 1439.302860][T17261] lo speed is unknown, defaulting to 1000 [ 1439.309339][T17261] lo speed is unknown, defaulting to 1000 [ 1445.751120][T17356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1445.763234][T17356] IPv6: NLM_F_CREATE should be set when creating new route [ 1445.763274][T17356] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.474436][T17368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.127729][T17409] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3104'. [ 1453.838813][T17433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1454.111992][T17441] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3117'. [ 1455.258961][T17452] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3121'. [ 1459.775353][T17494] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3138'. [ 1460.885104][T17508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1462.399312][ T7184] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.402717][ T7184] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.402807][ T7184] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.402841][ T7184] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.045774][T17528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1463.801904][T17539] netlink: 'syz.9.3157': attribute type 10 has an invalid length. [ 1464.714592][T17559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1464.714636][T17559] IPv6: NLM_F_CREATE should be set when creating new route [ 1464.714667][T17559] IPv6: NLM_F_CREATE should be set when creating new route [ 1465.132224][T17569] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3172'. [ 1467.007586][T17596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1467.780075][T17618] netlink: 'syz.9.3190': attribute type 10 has an invalid length. [ 1469.375735][T17632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1469.946482][T17650] netlink: 'syz.9.3205': attribute type 10 has an invalid length. [ 1471.300146][T17663] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3209'. [ 1474.117903][T17683] netlink: 'syz.7.3217': attribute type 10 has an invalid length. [ 1474.143401][T17683] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1479.593621][T17761] overlayfs: failed to clone upperpath [ 1482.651430][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1482.809160][T17804] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 1482.882596][T17804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.989281][T17810] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1485.354432][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.354492][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.394329][T17804] vlan2: entered allmulticast mode [ 1485.394352][T17804] veth1: entered allmulticast mode [ 1485.396426][T17804] veth1: entered promiscuous mode [ 1485.398566][T17804] veth1: left promiscuous mode [ 1485.447787][T17804] bond1: (slave vlan2): making interface the new active one [ 1485.448567][T17804] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1485.448697][T17804] veth1: entered promiscuous mode [ 1485.449999][T17804] vlan2: entered promiscuous mode [ 1485.450868][T17804] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1495.386378][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1497.115440][ T5804] Bluetooth: hci5: unexpected event 0x06 length: 4 > 3 [ 1497.156919][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 1503.930445][T17999] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1503.930477][T17999] team0: Unable to change to the same mode the team is in [ 1503.959426][T18000] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1504.550720][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1508.575253][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3331'. [ 1508.926423][T18037] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1510.625037][T18047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.660096][T18049] tipc: Enabling of bearer rejected, failed to enable media [ 1512.589342][T18069] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3344'. [ 1513.892525][T18082] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1515.876146][T18088] netlink: 'syz.7.3350': attribute type 10 has an invalid length. [ 1515.883270][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3347'. [ 1517.557002][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3355'. [ 1517.779400][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3357'. [ 1517.869443][T18115] siw: device registration error -23 [ 1520.631150][ C0] ------------[ cut here ]------------ [ 1520.631165][ C0] refcount_t: addition on 0; use-after-free. [ 1520.631727][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1520.631985][ C0] Modules linked in: [ 1520.632012][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1520.632040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1520.632058][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1520.632084][ C0] Code: 00 00 e8 59 f5 3d fd 5b 41 5e e9 81 67 49 06 cc e8 4b f5 3d fd c6 05 b2 a7 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 b7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b f5 3d fd c6 05 93 a7 60 0a 01 90 48 c7 c7 [ 1520.632105][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1520.632125][ C0] RAX: 4c8416712770a700 RBX: 0000000000000002 RCX: ffff88801baa5a00 [ 1520.632172][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1520.632189][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1520.632204][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1520.632223][ C0] R13: ffff888049c5b158 R14: ffff888049c5ad80 R15: dffffc0000000000 [ 1520.632241][ C0] FS: 0000000000000000(0000) GS:ffff888126bc6000(0000) knlGS:0000000000000000 [ 1520.632260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1520.632277][ C0] CR2: 0000200000000058 CR3: 000000002a04a000 CR4: 00000000003526f0 [ 1520.632297][ C0] Call Trace: [ 1520.632310][ C0] [ 1520.632322][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1520.632454][ C0] mptcp_tout_timer+0x21/0xa0 [ 1520.632488][ C0] call_timer_fn+0x17e/0x5f0 [ 1520.632544][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1520.632581][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1520.632603][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1520.632639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1520.632756][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1520.632810][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1520.632844][ C0] __run_timer_base+0x648/0x970 [ 1520.632898][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1520.632953][ C0] run_timer_softirq+0xb7/0x180 [ 1520.632976][ C0] handle_softirqs+0x22f/0x710 [ 1520.633039][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1520.633086][ C0] run_ktimerd+0xcf/0x190 [ 1520.633110][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1520.633132][ C0] ? schedule+0x91/0x360 [ 1520.633173][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1520.633194][ C0] smpboot_thread_fn+0x542/0xa60 [ 1520.633218][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1520.633251][ C0] kthread+0x711/0x8a0 [ 1520.633282][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1520.633304][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.633327][ C0] ? rt_spin_unlock+0x150/0x200 [ 1520.633359][ C0] ? rt_spin_unlock+0x161/0x200 [ 1520.633384][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.633412][ C0] ret_from_fork+0x4bc/0x870 [ 1520.633462][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1520.633504][ C0] ? __switch_to_asm+0x39/0x70 [ 1520.633551][ C0] ? __switch_to_asm+0x33/0x70 [ 1520.633578][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.633606][ C0] ret_from_fork_asm+0x1a/0x30 [ 1520.633657][ C0] [ 1520.633676][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1520.633694][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1520.633720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1520.633735][ C0] Call Trace: [ 1520.633744][ C0] [ 1520.633759][ C0] dump_stack_lvl+0x99/0x250 [ 1520.633786][ C0] ? __asan_memcpy+0x40/0x70 [ 1520.633843][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.633870][ C0] ? __pfx__printk+0x10/0x10 [ 1520.633916][ C0] vpanic+0x237/0x6d0 [ 1520.633948][ C0] ? __pfx_vpanic+0x10/0x10 [ 1520.633984][ C0] panic+0xb9/0xc0 [ 1520.634006][ C0] ? __pfx_panic+0x10/0x10 [ 1520.634048][ C0] __warn+0x31b/0x4b0 [ 1520.634069][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1520.634096][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1520.634120][ C0] report_bug+0x2be/0x4f0 [ 1520.634200][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1520.634225][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1520.634248][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 1520.634271][ C0] handle_bug+0x84/0x160 [ 1520.634296][ C0] exc_invalid_op+0x1a/0x50 [ 1520.634326][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1520.634361][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1520.634386][ C0] Code: 00 00 e8 59 f5 3d fd 5b 41 5e e9 81 67 49 06 cc e8 4b f5 3d fd c6 05 b2 a7 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 b7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 2b f5 3d fd c6 05 93 a7 60 0a 01 90 48 c7 c7 [ 1520.634410][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1520.634430][ C0] RAX: 4c8416712770a700 RBX: 0000000000000002 RCX: ffff88801baa5a00 [ 1520.634448][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1520.634463][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1520.634477][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1520.634496][ C0] R13: ffff888049c5b158 R14: ffff888049c5ad80 R15: dffffc0000000000 [ 1520.634537][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1520.634566][ C0] mptcp_tout_timer+0x21/0xa0 [ 1520.634600][ C0] call_timer_fn+0x17e/0x5f0 [ 1520.634623][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1520.634654][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1520.634677][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1520.634712][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1520.634744][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1520.634781][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1520.634815][ C0] __run_timer_base+0x648/0x970 [ 1520.634867][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1520.634922][ C0] run_timer_softirq+0xb7/0x180 [ 1520.634945][ C0] handle_softirqs+0x22f/0x710 [ 1520.634988][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1520.635035][ C0] run_ktimerd+0xcf/0x190 [ 1520.635058][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1520.635079][ C0] ? schedule+0x91/0x360 [ 1520.635118][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1520.635139][ C0] smpboot_thread_fn+0x542/0xa60 [ 1520.635162][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1520.635195][ C0] kthread+0x711/0x8a0 [ 1520.635225][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1520.635247][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.635270][ C0] ? rt_spin_unlock+0x150/0x200 [ 1520.635303][ C0] ? rt_spin_unlock+0x161/0x200 [ 1520.635328][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.635356][ C0] ret_from_fork+0x4bc/0x870 [ 1520.635391][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1520.635432][ C0] ? __switch_to_asm+0x39/0x70 [ 1520.635459][ C0] ? __switch_to_asm+0x33/0x70 [ 1520.635486][ C0] ? __pfx_kthread+0x10/0x10 [ 1520.635513][ C0] ret_from_fork_asm+0x1a/0x30 [ 1520.635564][ C0] [ 1520.635822][ C0] Kernel Offset: disabled