last executing test programs: 48m55.706723228s ago: executing program 0 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, 0x0, 0x38}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x82}, 'port0\x00', 0x25, 0x60041, 0x8000, 0xfffffffe, 0x9, 0x0, 0x5, 0x0, 0x7, 0x9}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000480)="b3f2374f665499d25612b04b77fca3910d1f5b", 0x13, 0x2400c811, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) syz_emit_ethernet(0xe, &(0x7f00000009c0)={@empty, @broadcast, @void, {@generic={0x8847}}}, &(0x7f0000000080)={0x0, 0x1, [0xf97, 0x3bf, 0x79c, 0x41]}) 48m54.527926526s ago: executing program 0 (id=1286): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 48m54.335206559s ago: executing program 0 (id=1288): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x7d, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x68000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCMGET(r0, 0x541e, &(0x7f0000000240)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x800810, &(0x7f00000000c0)={[{@discard_sync}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {@discard_async}, {@ssd}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 48m50.274533042s ago: executing program 0 (id=1301): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 48m49.09548898s ago: executing program 0 (id=1304): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x7, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xb8, &(0x7f00000001c0)=""/184}) 48m48.797663175s ago: executing program 0 (id=1306): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x890b, &(0x7f0000000080)={0xffffc0fe, 'erspan0\x00', {}, 0x20}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000c18, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000001024d38f19f0000000000000200000824000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x40000081}, 0x20004010) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x1d64, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES8=r6, @ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 48m33.635343941s ago: executing program 32 (id=1306): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x890b, &(0x7f0000000080)={0xffffc0fe, 'erspan0\x00', {}, 0x20}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000c18, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000001024d38f19f0000000000000200000824000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x40000081}, 0x20004010) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x1d64, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES8=r6, @ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 9m2.749208065s ago: executing program 3 (id=8163): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0xffffbffd}, 0xc) 9m1.979330487s ago: executing program 3 (id=8164): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)='9', 0x1}], 0x1}}], 0x2, 0xc010) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1}, 0xfe}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/217, 0xd9}], 0x1}, 0xff}], 0x2, 0x141, 0x0) 9m1.858094149s ago: executing program 3 (id=8166): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) 9m1.727952591s ago: executing program 3 (id=8167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 9m1.638665512s ago: executing program 3 (id=8168): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_register(r0, 0x0, 0x0) 9m1.439605805s ago: executing program 3 (id=8170): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 8m46.378737945s ago: executing program 33 (id=8170): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 12.151665894s ago: executing program 2 (id=9454): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x5}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x51, 0x0, 0xa, {0x2, 0xdac}, {0x7, 0xf}, @period={0x5a, 0x7f, 0x7ff, 0xbfb, 0x8, {0xff, 0x4, 0x40, 0x9ac}, 0x0, 0x0}}) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c) syz_clone3(&(0x7f0000000480)={0x220000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x6}, &(0x7f0000000240)=""/196, 0xc4, &(0x7f0000000380)=""/226, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x2, 0x4, 0x0, 0x6, r3}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a3240000000090001006de64381000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$netlink(0x10, 0x3, 0xf) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltfilter={0x80, 0x2d, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xfff1, 0x6}, {0x7, 0xd}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x43, 0x81}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0xe110, 0x3) 11.056712861s ago: executing program 2 (id=9456): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000040)=0x7, 0x4) 10.973748872s ago: executing program 2 (id=9457): unshare(0x20400) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) connect$ax25(r0, 0x0, 0x0) 10.793680785s ago: executing program 2 (id=9460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r8}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 9.247989319s ago: executing program 2 (id=9461): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/12, 0xc, 0x0, &(0x7f0000000340)=""/237, 0xed}, &(0x7f0000000200)=0x40) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) bind$ax25(r3, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x1, &(0x7f0000000240)=""/254) ioctl$TIOCVHANGUP(r5, 0x5437, 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0xfffffff7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 7.370550707s ago: executing program 1 (id=9470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x0) 6.119429936s ago: executing program 4 (id=9471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 5.128481462s ago: executing program 5 (id=9472): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000002b00)=ANY=[@ANYBLOB="0b00000073797a310000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000"], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 5.025312083s ago: executing program 4 (id=9473): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[], 0xa) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r9 = dup(r8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x307, 0x1, 0x2d, 0x9}, 0x9c) 4.097633238s ago: executing program 5 (id=9474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 3.882009421s ago: executing program 4 (id=9475): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 3.710398463s ago: executing program 1 (id=9476): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x40084c0) 3.459533007s ago: executing program 1 (id=9477): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x101) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0xffffffffffffffff, 0xe, 0x5, {0x80000000000004, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r1, r2, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x6, 0x2, 0x3, 0x10000007, 0x0, 0xa, {0x8000000, 0x6, 0x5, 0x18, 0x2000005, 0x80, 0x6e, 0x30, 0x5, 0x8000, 0x10000, r1, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x18'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x18) 3.120552072s ago: executing program 5 (id=9478): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000002b00)=ANY=[@ANYBLOB="0b00000073797a310000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000"], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="5e8a04d57f80ed0d21f1c62e6568355db200bf5646f4f4c6915e95ae5fad20b17a6358ee62337eb3513d22df842fe68dd59026d36b4a0b845b34956869922816cce3e4000d") 3.062089743s ago: executing program 1 (id=9479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r8}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 2.403073643s ago: executing program 5 (id=9480): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000400)={'filter\x00', 0x0, [0x1, 0x1, 0x7, 0xc, 0x80010001]}, &(0x7f00000003c0)=0x54) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x10001, 0x12) sendfile(0xffffffffffffffff, r6, 0x0, 0x3) unshare(0x24040400) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs$namespace(r9, &(0x7f0000000140)='ns/pid_for_children\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001"], 0x0) 2.354839944s ago: executing program 4 (id=9481): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x5}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x51, 0x0, 0xa, {0x2, 0xdac}, {0x7, 0xf}, @period={0x5a, 0x7f, 0x7ff, 0xbfb, 0x8, {0xff, 0x4, 0x40, 0x9ac}, 0x0, 0x0}}) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c) syz_clone3(&(0x7f0000000480)={0x220000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x6}, &(0x7f0000000240)=""/196, 0xc4, &(0x7f0000000380)=""/226, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000500)={0x2, 0x4, 0x0, 0x6, r3}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a3240000000090001006de64381000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$netlink(0x10, 0x3, 0xf) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltfilter={0x80, 0x2d, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xfff1, 0x6}, {0x7, 0xd}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x43, 0x81}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0xe110, 0x3) 1.864785552s ago: executing program 1 (id=9482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x613) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0xffaa) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) 1.30282814s ago: executing program 5 (id=9483): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[], 0xa) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r9 = dup(r8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x307, 0x1, 0x2d, 0x9}, 0x9c) 1.30083557s ago: executing program 2 (id=9484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008054}, 0x0) 1.127863333s ago: executing program 4 (id=9485): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) 326.031165ms ago: executing program 1 (id=9486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) 160.406227ms ago: executing program 4 (id=9487): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x101) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562cb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd054cb0e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa0fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d211522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0xffffffffffffffff, 0xe, 0x5, {0x80000000000004, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r1, r2, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x6, 0x2, 0x3, 0x10000007, 0x0, 0xa, {0x8000000, 0x6, 0x5, 0x18, 0x2000005, 0x80, 0x6e, 0x30, 0x5, 0x8000, 0x10000, r1, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x18'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x18) 0s ago: executing program 5 (id=9488): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000002b00)=ANY=[@ANYBLOB="0b00000073797a310000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000"], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="5e8a04d57f80ed0d21f1c62e6568355db200bf5646f4f4c6915e95ae5fad20b17a6358ee62337eb3513d22df842fe68dd59026d36b4a0b845b34956869922816cce3e4000d") kernel console output (not intermixed with test programs): ystem [ 2758.550571][ T1246] udevd[1246]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2760.351031][ T1493] sctp: [Deprecated]: syz.2.8138 (pid 1493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2760.351031][ T1493] Use struct sctp_sack_info instead [ 2760.388613][ T1246] udevd[1246]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2760.639974][ T1505] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8143'. [ 2761.454062][T27217] Bluetooth: hci0: command 0x0405 tx timeout [ 2762.144551][ T1483] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2762.153827][ T1483] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2762.159937][ T1483] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2762.170251][ T1483] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2762.462554][ T1501] udevd[1501]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2762.593703][ T1518] (null): rxe_set_mtu: Set mtu to 1024 [ 2762.599597][ T1518] rdma_rxe: rxe_newlink: failed to add wg1 [ 2762.633115][ T1501] udevd[1501]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2763.221030][T27217] Bluetooth: hci2: command 0x0c1a tx timeout [ 2764.244099][T27217] Bluetooth: hci0: command 0x0405 tx timeout [ 2764.250383][T27217] Bluetooth: hci1: command 0x0419 tx timeout [ 2764.261355][ T1351] Bluetooth: hci3: command 0x040f tx timeout [ 2768.629367][ T1548] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8156'. [ 2769.988375][ T1550] udevd[1550]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2770.052034][ T1559] sctp: [Deprecated]: syz.2.8160 (pid 1559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2770.052034][ T1559] Use struct sctp_sack_info instead [ 2770.113950][ T1557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2770.126022][ T1557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2770.216515][ T1557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2770.240939][ T1557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2770.659627][ T1550] udevd[1550]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2770.814237][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2770.831134][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2770.858557][ T1550] udevd[1550]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2770.982508][ T1550] udevd[1550]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2771.104131][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2771.115478][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2771.649007][ T1550] udevd[1550]: symlink '../../loop3' '/dev/disk/by-diskseq/566.tmp-b7:3' failed: Read-only file system [ 2771.684510][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2771.804973][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2772.496535][T27217] Bluetooth: hci3: command 0x040f tx timeout [ 2772.502796][T27217] Bluetooth: hci2: command 0x0c1a tx timeout [ 2772.509008][T27217] Bluetooth: hci0: command 0x0405 tx timeout [ 2772.515208][T27217] Bluetooth: hci1: command 0x0419 tx timeout [ 2772.582093][ T1587] syzkaller0: entered promiscuous mode [ 2772.598511][ T1587] syzkaller0: entered allmulticast mode [ 2772.730213][ T1593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8171'. [ 2773.044777][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2773.063190][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2773.764675][ T1577] ceph: No mds server is up or the cluster is laggy [ 2775.661160][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.669708][ T1615] Cannot find add_set index 0 as target [ 2776.120341][ T1619] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8179'. [ 2776.147195][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8179'. [ 2776.241127][ T1621] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8180'. [ 2776.323606][T27217] Bluetooth: hci0: command 0x0405 tx timeout [ 2776.526999][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2776.543824][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2776.859730][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2776.908038][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2777.424139][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2778.437398][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2778.632932][ T1644] netlink: 'syz.1.8186': attribute type 1 has an invalid length. [ 2779.498127][ T1626] ceph: No mds server is up or the cluster is laggy [ 2781.651968][ T1660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8190'. [ 2781.869886][ T1664] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2781.915627][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8191'. [ 2782.483805][ T1351] Bluetooth: hci0: command 0x0405 tx timeout [ 2785.129045][ T1684] netlink: 'syz.1.8197': attribute type 1 has an invalid length. [ 2787.032011][T27217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2787.063803][T27217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2787.089684][T27217] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2787.120098][T27217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2787.133877][T27217] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2787.141957][T27217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2787.228173][ T1689] ip6_vti0 speed is unknown, defaulting to 1000 [ 2787.676865][ T1703] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input59 [ 2789.198480][ T1689] wg1 speed is unknown, defaulting to 1000 [ 2789.213706][ T1351] Bluetooth: hci4: command tx timeout [ 2791.293577][ T1351] Bluetooth: hci4: command tx timeout [ 2791.887164][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2792.336189][ T1738] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8211'. [ 2792.834762][ T1737] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8212'. [ 2792.882448][ T1094] infiniband syz0: set down [ 2793.363600][ T1351] Bluetooth: hci4: command tx timeout [ 2793.838252][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2793.875808][ T7673] wg1 speed is unknown, defaulting to 1000 [ 2794.033601][ T1751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input60 [ 2794.843082][ T1758] binder_alloc: 1755: pid 1755 spamming oneway? 2 buffers allocated for a total size of 5120 [ 2794.874117][ T1758] binder_alloc: 1755: pid 1755 spamming oneway? 3 buffers allocated for a total size of 5128 [ 2794.875314][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.946197][ T7673] wg1 speed is unknown, defaulting to 1000 [ 2794.953164][ T1765] : renamed from lo (while UP) [ 2795.039581][ T1767] netlink: 'syz.4.8221': attribute type 1 has an invalid length. [ 2795.189166][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.464550][ T1351] Bluetooth: hci4: command tx timeout [ 2796.006642][ T1770] bond1: (slave bridge1): making interface the new active one [ 2796.032852][ T1770] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2798.194862][ T1689] chnl_net:caif_netlink_parms(): no params data found [ 2798.393846][ T1796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input61 [ 2799.192138][ T1807] loop6: detected capacity change from 0 to 524287999 [ 2799.307182][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2799.316799][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2799.423656][ T2984] loop: Write error at byte offset 1, length 1024. [ 2799.440451][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2799.450219][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2799.461212][ T2984] loop: Write error at byte offset 521217, length 4096. [ 2799.468356][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2799.468380][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2799.545527][ C1] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 2799.555535][ C1] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 2799.576396][ T2984] loop: Write error at byte offset 1045505, length 4096. [ 2799.649776][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2799.659958][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2799.903827][ T2984] loop: Write error at byte offset 1569793, length 4096. [ 2799.910955][ T2984] loop: Write error at byte offset 2094081, length 4096. [ 2799.918073][ C1] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 2799.918097][ C1] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 2799.948041][ T2984] loop: Write error at byte offset 2618369, length 4096. [ 2799.984496][ T2984] loop: Write error at byte offset 3142657, length 4096. [ 2800.021375][ T2984] loop: Write error at byte offset 3666945, length 4096. [ 2800.021685][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 2800.063089][ T1689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2800.063151][ T2984] loop: Write error at byte offset 4191233, length 4096. [ 2800.103690][ T2984] loop: Write error at byte offset 4715521, length 4096. [ 2800.108102][ T1689] bridge_slave_0: entered allmulticast mode [ 2800.121390][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.135526][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.137236][ T1689] bridge_slave_0: entered promiscuous mode [ 2800.149565][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.159437][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.169562][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.183794][ T1807] ldm_validate_partition_table(): Disk read failed. [ 2800.191654][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.201514][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.211650][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2800.220579][ T1807] Dev loop6: unable to read RDB block 0 [ 2800.228136][ T1807] loop6: unable to read partition table [ 2800.234725][ T1807] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2800.276571][ T1808] udevd[1808]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 2800.326617][ T5158] ldm_validate_partition_table(): Disk read failed. [ 2800.334447][ T5158] Dev loop6: unable to read RDB block 0 [ 2800.340612][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 2800.358745][ T1689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2800.366731][ T5158] loop6: unable to read partition table [ 2800.393840][ T1689] bridge_slave_1: entered allmulticast mode [ 2800.426122][ T1689] bridge_slave_1: entered promiscuous mode [ 2800.433890][ T1802] udevd[1802]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 2800.486969][ T1802] udevd[1802]: symlink '../../loop6' '/dev/disk/by-diskseq/579.tmp-b7:6' failed: Read-only file system [ 2800.527043][ T1802] udevd[1802]: symlink '../../loop6' '/dev/disk/by-diskseq/580.tmp-b7:6' failed: Read-only file system [ 2800.663254][ T1689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2800.685179][ T1689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2800.992490][ T1689] team0: Port device team_slave_0 added [ 2801.154917][ T1689] team0: Port device team_slave_1 added [ 2801.372312][ T1839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input62 [ 2802.228622][ T1689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.260578][ T1689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.363320][ T1689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.630482][ T1689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.709897][ T1689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.867379][ T1689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2804.783131][ T1689] hsr_slave_0: entered promiscuous mode [ 2805.271980][ T1689] hsr_slave_1: entered promiscuous mode [ 2805.316166][ T1689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2805.363326][ T1689] Cannot create hsr debugfs directory [ 2806.837892][ T1887] sctp: [Deprecated]: syz.4.8251 (pid 1887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2806.837892][ T1887] Use struct sctp_sack_info instead [ 2806.854021][ T59] hsr_slave_0: left promiscuous mode [ 2806.945398][ T1899] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8256'. [ 2807.254526][ T59] hsr_slave_1: left promiscuous mode [ 2807.260512][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2807.303602][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2807.341463][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2807.622062][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2807.731849][ T59] bridge_slave_1: left allmulticast mode [ 2807.873509][ T59] bridge_slave_1: left promiscuous mode [ 2807.905353][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.996219][ T59] bridge_slave_0: left allmulticast mode [ 2808.011489][ T59] bridge_slave_0: left promiscuous mode [ 2808.873778][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2808.894503][ T1351] Bluetooth: hci4: command 0x0405 tx timeout [ 2808.941867][ T59] veth1_macvtap: left promiscuous mode [ 2808.950278][ T59] veth0_macvtap: left promiscuous mode [ 2808.964258][ T59] veth1_vlan: left promiscuous mode [ 2808.969619][ T59] veth0_vlan: left promiscuous mode [ 2809.102617][ T59] infiniband syz0: set down [ 2812.010935][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2812.158342][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2812.345863][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2812.448564][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2812.991788][T19780] smc: removing ib device syz0 [ 2814.213943][ T59] bond0 (unregistering): Released all slaves [ 2814.315139][ T5791] wg1 speed is unknown, defaulting to 1000 [ 2814.376500][ T1689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2814.387298][ T1689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2814.399558][ T1689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2814.407969][ T1885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2814.415228][ T1885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2814.427251][ T1689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2814.427585][ T1885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2814.473049][ T1885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2814.495140][ T1885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2814.502581][ T1885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2814.948848][ T1689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2815.100601][ T1689] 8021q: adding VLAN 0 to HW filter on device team0 [ 2815.153084][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2815.160353][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2815.208933][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.216085][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2816.483695][T27217] Bluetooth: hci1: command 0x0419 tx timeout [ 2816.483728][T29462] Bluetooth: hci3: command 0x040f tx timeout [ 2816.489868][T27217] Bluetooth: hci2: command 0x0c1a tx timeout [ 2816.502250][ T1351] Bluetooth: hci4: command 0x0405 tx timeout [ 2816.864554][ T1689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2818.565180][ T1994] Bluetooth: hci4: command 0x0405 tx timeout [ 2820.643654][ T1994] Bluetooth: hci4: command 0x0405 tx timeout [ 2820.882620][ T2019] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8290'. [ 2820.929889][ T2019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8290'. [ 2821.042641][ T1689] veth0_vlan: entered promiscuous mode [ 2821.121498][ T1689] veth1_vlan: entered promiscuous mode [ 2821.172478][ T2024] sctp: [Deprecated]: syz.4.8288 (pid 2024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2821.172478][ T2024] Use struct sctp_sack_info instead [ 2821.179874][ T1689] veth0_macvtap: entered promiscuous mode [ 2821.264794][ T1689] veth1_macvtap: entered promiscuous mode [ 2821.781524][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.792489][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.820224][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.831988][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.870239][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.888214][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.901316][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2821.911962][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.923273][ T1689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2821.952369][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.964403][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2821.983364][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2821.994294][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.016070][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2822.057395][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.068181][ T1689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2822.079534][ T1689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2822.100420][ T1689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2822.129709][ T1689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.144603][ T1689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.796096][ T2021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2823.123673][ T1994] Bluetooth: hci4: command 0x0405 tx timeout [ 2823.533819][ T1994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2824.367739][ T1689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.376064][ T2021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2824.388796][ T1689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.414966][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2824.424703][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2824.437706][ T2021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2824.447767][ T2021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2824.629963][T31728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.673815][T31728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.705493][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2825.565854][T19780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2825.573935][T19780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2825.604189][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2825.782479][ T2035] ceph: No mds server is up or the cluster is laggy [ 2826.127343][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2826.134019][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2826.423136][T20467] Bluetooth: hci3: command 0x040f tx timeout [ 2826.509296][T20467] Bluetooth: hci4: command 0x0405 tx timeout [ 2826.511604][ T1994] Bluetooth: hci1: command 0x0419 tx timeout [ 2831.131524][T23653] libceph: connect (1)[c::]:6789 error -101 [ 2833.299174][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 2833.647660][T23653] libceph: connect (1)[c::]:6789 error -101 [ 2833.669573][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 2834.087907][T23653] libceph: connect (1)[c::]:6789 error -101 [ 2834.113654][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 2834.301389][ T2077] ceph: No mds server is up or the cluster is laggy [ 2834.445072][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2834.451483][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2834.977850][ T2091] sctp: [Deprecated]: syz.4.8308 (pid 2091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2834.977850][ T2091] Use struct sctp_sack_info instead [ 2835.916143][ T2110] netlink: 'syz.1.8314': attribute type 1 has an invalid length. [ 2836.333609][T20467] Bluetooth: hci4: command 0x0405 tx timeout [ 2836.417580][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.883781][T20467] Bluetooth: hci2: command 0x0c1a tx timeout [ 2837.729505][ T2095] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2837.736726][ T2095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2837.743024][ T2095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2837.750531][ T2095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2839.301435][ T2121] input: syz1 as /devices/virtual/input/input63 [ 2839.916320][T20467] Bluetooth: hci4: command 0x0405 tx timeout [ 2839.916361][ T1994] Bluetooth: hci1: command 0x0419 tx timeout [ 2839.922412][T20467] Bluetooth: hci3: command 0x040f tx timeout [ 2841.131675][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2841.193037][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2842.604390][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2842.610517][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2844.603183][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2844.663805][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2844.710201][ T2135] ceph: No mds server is up or the cluster is laggy [ 2844.731035][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2844.753833][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2845.141622][ T2152] (null): rxe_set_mtu: Set mtu to 1024 [ 2845.153690][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2845.856979][ T2150] pim6reg1: entered allmulticast mode [ 2845.864561][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2845.885437][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2846.683320][ T2168] netlink: 'syz.4.8335': attribute type 1 has an invalid length. [ 2846.723877][ T2164] lo: entered promiscuous mode [ 2846.773368][ T2152] infiniband syz0: set active [ 2846.779842][ T2164] tunl0: entered promiscuous mode [ 2846.785769][ T2152] infiniband syz0: added wg1 [ 2846.814376][ T2164] gre0: entered promiscuous mode [ 2846.820790][ T2152] syz0: rxe_create_cq: returned err = -12 [ 2846.855642][ T2152] infiniband syz0: Couldn't create ib_mad CQ [ 2846.865477][ T2152] infiniband syz0: Couldn't open port 1 [ 2846.908731][ T2164] gretap0: entered promiscuous mode [ 2846.919947][ T2152] RDS/IB: syz0: added [ 2846.925649][ T2152] smc: adding ib device syz0 with port count 1 [ 2846.931810][ T2152] smc: ib device syz0 port 1 has pnetid [ 2846.980575][ T2164] erspan0: entered promiscuous mode [ 2847.005470][ T2164] ip_vti0: entered promiscuous mode [ 2847.011738][ T2164] ip6_vti0: entered promiscuous mode [ 2847.085971][ T2164] sit0: entered promiscuous mode [ 2847.560799][ T2164] ip6tnl0: entered promiscuous mode [ 2847.606946][ T2164] ip6gre0: entered promiscuous mode [ 2847.621588][ T2164] syz_tun: entered promiscuous mode [ 2847.640901][ T2164] ip6gretap0: entered promiscuous mode [ 2847.662090][ T2164] bridge0: entered promiscuous mode [ 2847.717193][ T2164] vcan0: entered promiscuous mode [ 2847.733045][ T2164] bond0: entered promiscuous mode [ 2847.742051][ T2164] bond_slave_0: entered promiscuous mode [ 2847.751992][ T2164] bond_slave_1: entered promiscuous mode [ 2847.762179][ T2164] team0: entered promiscuous mode [ 2847.770593][ T2164] team_slave_0: entered promiscuous mode [ 2847.787880][ T2164] team_slave_1: entered promiscuous mode [ 2847.798367][ T2164] dummy0: entered promiscuous mode [ 2847.809441][ T2164] nlmon0: entered promiscuous mode [ 2847.818760][ T2164] caif0: entered promiscuous mode [ 2847.827000][ T2164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2847.854393][ T5791] wg1 speed is unknown, defaulting to 1000 [ 2847.861427][T23135] wg1 speed is unknown, defaulting to 1000 [ 2847.872186][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2848.855626][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2849.813906][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2850.504364][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2850.533702][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2851.755430][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2851.773160][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2851.822426][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2851.828718][T30417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2852.026272][T30417] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2852.043850][T30417] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2852.061699][T30417] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2852.074444][T30417] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 2852.083395][T30417] usb 6-1: Product: syz [ 2852.118332][ T2198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2852.135359][T30417] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2852.294962][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2852.302084][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2852.700838][ T2152] wg1 speed is unknown, defaulting to 1000 [ 2853.011782][ T2194] ceph: No mds server is up or the cluster is laggy [ 2853.506042][ T2208] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8346'. [ 2854.544165][ T5791] usb 6-1: USB disconnect, device number 2 [ 2854.666200][ T2216] input: syz1 as /devices/virtual/input/input64 [ 2855.684978][ T5791] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2856.043703][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 2856.074924][ T5791] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2856.085964][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.207902][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 2856.214105][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 2856.253601][ T5791] usb 5-1: Product: syz [ 2856.257940][ T5791] usb 5-1: Manufacturer: syz [ 2856.262649][ T5791] usb 5-1: SerialNumber: syz [ 2856.271722][ T5791] usb 5-1: config 0 descriptor?? [ 2856.288642][ T5791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2856.305478][ T5791] usb 5-1: setting power ON [ 2856.316242][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 2856.372534][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2856.416046][ T5791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2856.449706][ T5791] usb 5-1: media controller created [ 2856.496010][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 2856.824380][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 2857.014395][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2857.070386][ T5791] usb 5-1: selecting invalid altsetting 6 [ 2857.087947][ T5791] usb 5-1: digital interface selection failed (-22) [ 2857.095713][ T5791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2857.108295][ T5791] usb 5-1: setting power OFF [ 2857.127297][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 2857.140829][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2857.154197][ T5791] (NULL device *): no alternate interface [ 2857.466959][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2857.507118][T23135] libceph: connect (1)[c::]:6789 error -101 [ 2857.522842][T23135] libceph: mon0 (1)[c::]:6789 connect error [ 2858.203033][ T5791] usb 5-1: USB disconnect, device number 67 [ 2859.078669][ T2237] ceph: No mds server is up or the cluster is laggy [ 2859.138214][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 2859.144565][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 2859.367981][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 2859.483252][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 2860.204394][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8366'. [ 2861.461977][ T2286] input: syz1 as /devices/virtual/input/input65 [ 2861.853826][T20467] Bluetooth: hci4: command 0x0405 tx timeout [ 2863.612229][ T2323] input: syz1 as /devices/virtual/input/input66 [ 2866.438497][ T2356] input: syz1 as /devices/virtual/input/input67 [ 2870.763655][ T7673] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2871.760589][ T2422] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8415'. [ 2872.273553][ T7673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2872.307674][ T7673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2872.351528][ T7673] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2872.394844][ T2427] : entered promiscuous mode [ 2872.395145][ T7673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2872.408648][ T2427] tunl0: entered promiscuous mode [ 2872.419340][ T2427] gre0: entered promiscuous mode [ 2872.432779][ T2427] gretap0: entered promiscuous mode [ 2872.433898][ T7673] usb 5-1: SerialNumber: syz [ 2872.442110][ T2427] erspan0: entered promiscuous mode [ 2872.635207][ T2427] ip_vti0: entered promiscuous mode [ 2872.833119][ T7673] usb 5-1: 0:2 : does not exist [ 2872.993227][ T7673] usb 5-1: USB disconnect, device number 68 [ 2873.357394][ T2427] ip6_vti0: entered promiscuous mode [ 2873.544770][ T2427] sit0: entered promiscuous mode [ 2873.551087][ T2427] ip6tnl0: entered promiscuous mode [ 2873.565068][ T2427] ip6gre0: entered promiscuous mode [ 2873.581891][ T2413] udevd[2413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2873.590974][ T2427] syz_tun: entered promiscuous mode [ 2873.635535][ T2427] ip6gretap0: entered promiscuous mode [ 2874.505983][ T2427] vcan0: entered promiscuous mode [ 2874.512682][ T2427] bond0: entered promiscuous mode [ 2874.562535][ T2427] bond_slave_0: entered promiscuous mode [ 2874.603909][ T2427] bond_slave_1: entered promiscuous mode [ 2874.628065][ T2427] team0: entered promiscuous mode [ 2874.633370][ T2427] team_slave_0: entered promiscuous mode [ 2874.652080][ T2427] team_slave_1: entered promiscuous mode [ 2874.672203][ T2427] dummy0: entered promiscuous mode [ 2874.682606][ T2427] nlmon0: entered promiscuous mode [ 2874.747429][ T2427] caif0: entered promiscuous mode [ 2874.793880][ T2427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2875.915108][ T2463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8425'. [ 2876.536957][ T2473] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8428'. [ 2878.430467][ T2504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2880.701149][ T2524] input: syz1 as /devices/virtual/input/input68 [ 2881.314185][ T2441] udevd[2441]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 2881.581599][T23135] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2881.773687][T23135] usb 5-1: Using ep0 maxpacket: 8 [ 2881.793713][T23135] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2881.813633][T23135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.822034][T23135] usb 5-1: Product: syz [ 2881.832235][T23135] usb 5-1: Manufacturer: syz [ 2881.842321][T23135] usb 5-1: SerialNumber: syz [ 2881.865435][T23135] usb 5-1: config 0 descriptor?? [ 2881.889685][T23135] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2881.919756][T23135] usb 5-1: setting power ON [ 2881.935459][T23135] dvb-usb: bulk message failed: -22 (2/0) [ 2882.005402][T23135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2882.155779][T23135] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2882.278494][T23135] usb 5-1: media controller created [ 2882.668756][T23135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2882.819706][T23135] usb 5-1: selecting invalid altsetting 6 [ 2882.827418][T23135] usb 5-1: digital interface selection failed (-22) [ 2882.834961][T23135] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2882.848522][T23135] usb 5-1: setting power OFF [ 2883.537436][T23135] dvb-usb: bulk message failed: -22 (2/0) [ 2883.543231][T23135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2883.564489][T23135] (NULL device *): no alternate interface [ 2883.673893][T23135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2883.720159][T23135] usb 5-1: USB disconnect, device number 69 [ 2885.216108][ T2570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2886.229261][ T2584] ALSA: mixer_oss: invalid OSS volume '' [ 2889.871138][ T2610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2895.734624][ T2682] lo: entered promiscuous mode [ 2895.765145][ T2682] tunl0: entered promiscuous mode [ 2895.771247][ T2682] gre0: entered promiscuous mode [ 2895.787635][ T2682] gretap0: entered promiscuous mode [ 2895.804900][ T2682] erspan0: entered promiscuous mode [ 2895.819400][ T2682] ip_vti0: entered promiscuous mode [ 2895.829680][ T2682] ip6_vti0: entered promiscuous mode [ 2895.844516][ T2682] sit0: entered promiscuous mode [ 2895.977463][ T2682] ip6tnl0: entered promiscuous mode [ 2896.024654][ T2671] ALSA: mixer_oss: invalid OSS volume '' [ 2896.034534][ T2682] ip6gre0: entered promiscuous mode [ 2896.064203][ T2682] syz_tun: entered promiscuous mode [ 2896.080485][ T2682] ip6gretap0: entered promiscuous mode [ 2896.104986][ T2682] vcan0: entered promiscuous mode [ 2896.110803][ T2682] bond0: entered promiscuous mode [ 2896.154235][ T2682] bond_slave_0: entered promiscuous mode [ 2896.243741][ T2682] bond_slave_1: entered promiscuous mode [ 2896.327145][ T2682] team0: entered promiscuous mode [ 2896.385760][ T2682] team_slave_0: entered promiscuous mode [ 2896.510337][ T2682] team_slave_1: entered promiscuous mode [ 2896.817535][ T2682] dummy0: entered promiscuous mode [ 2897.208683][ T2682] nlmon0: entered promiscuous mode [ 2897.504056][ T2682] caif0: entered promiscuous mode [ 2897.577939][ T2682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2897.673685][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8484'. [ 2897.711037][ T2703] bridge0: port 2(bridge_slave_1) entered disabled state [ 2897.849604][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.859468][ T2703] bridge_slave_1 (unregistering): left allmulticast mode [ 2897.867841][ T2703] bridge_slave_1 (unregistering): left promiscuous mode [ 2897.874877][ T2703] bridge0: port 2(bridge_slave_1) entered disabled state [ 2902.117965][ T2746] input: syz1 as /devices/virtual/input/input69 [ 2902.217170][ T2751] lo: entered promiscuous mode [ 2902.222854][ T2751] tunl0: entered promiscuous mode [ 2902.262323][ T2751] gre0: entered promiscuous mode [ 2902.298399][ T2751] gretap0: entered promiscuous mode [ 2902.344493][ T2751] erspan0: entered promiscuous mode [ 2902.350479][ T2751] ip_vti0: entered promiscuous mode [ 2902.378746][ T2751] ip6_vti0: entered promiscuous mode [ 2902.442128][ T2751] sit0: entered promiscuous mode [ 2902.484066][ T2751] ip6tnl0: entered promiscuous mode [ 2902.504981][ T2751] ip6gre0: entered promiscuous mode [ 2902.511049][ T2751] syz_tun: entered promiscuous mode [ 2902.517418][ T2751] ip6gretap0: entered promiscuous mode [ 2902.524654][ T2751] vcan0: entered promiscuous mode [ 2902.530501][ T2751] bond0: entered promiscuous mode [ 2902.535692][ T2751] bond_slave_0: entered promiscuous mode [ 2902.541626][ T2751] bond_slave_1: entered promiscuous mode [ 2902.548862][ T2751] team0: entered promiscuous mode [ 2902.704415][ T2751] team_slave_0: entered promiscuous mode [ 2902.862911][ T2751] team_slave_1: entered promiscuous mode [ 2903.154900][ T2751] dummy0: entered promiscuous mode [ 2903.213468][ T2751] nlmon0: entered promiscuous mode [ 2903.272668][ T2751] caif0: entered promiscuous mode [ 2903.292036][ T2751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2907.453829][ T2039] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2907.913605][ T2039] usb 3-1: Using ep0 maxpacket: 8 [ 2907.993901][ T2039] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 2908.050907][ T2039] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 2908.176443][ T2039] usb 3-1: config 150 has no interface number 0 [ 2908.182785][ T2039] usb 3-1: config 150 interface 204 has no altsetting 0 [ 2908.189851][ T2039] usb 3-1: config 150 interface 1 has no altsetting 0 [ 2908.201794][ T2039] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2908.221336][ T2039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.233630][ T2039] usb 3-1: Product: syz [ 2908.237869][ T2039] usb 3-1: Manufacturer: syz [ 2908.253255][ T2039] usb 3-1: SerialNumber: syz [ 2908.414952][ T2820] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8514'. [ 2908.468815][ T2039] xr_serial 3-1:150.204: skipping garbage [ 2908.485495][ T2039] xr_serial 3-1:150.204: xr_serial converter detected [ 2908.535256][ T2039] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2908.543091][ T2039] xr_serial: probe of ttyUSB0 failed with error -71 [ 2908.564117][ T2039] usb 3-1: USB disconnect, device number 73 [ 2908.590702][ T2039] xr_serial 3-1:150.204: device disconnected [ 2909.916900][ T1351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2909.964424][ T1351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2909.990195][ T1351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2909.999113][ T1351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2910.014196][ T1351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2910.021495][T24888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.021749][ T1351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2910.675899][ T2832] ip6_vti0 speed is unknown, defaulting to 1000 [ 2910.738912][T24888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.833935][ T2845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2911.039362][T24888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2911.103820][ T2832] wg1 speed is unknown, defaulting to 1000 [ 2911.223532][ T7673] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2911.405857][ T7673] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2911.463616][ T7673] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2911.475403][T24888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2911.571537][ T2857] Bluetooth: MGMT ver 1.22 [ 2912.129388][ T7673] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2912.138596][ T7673] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 2912.146751][ T7673] usb 6-1: Product: syz [ 2912.185813][ T2853] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2912.197348][ T7673] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2912.220965][T20467] Bluetooth: hci0: command tx timeout [ 2913.620742][T30417] usb 6-1: USB disconnect, device number 3 [ 2913.684347][ T1351] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2914.253517][ T1351] Bluetooth: hci0: command 0x041b tx timeout [ 2914.986410][ T2832] chnl_net:caif_netlink_parms(): no params data found [ 2916.352537][ T1351] Bluetooth: hci0: command 0x041b tx timeout [ 2918.403548][ T1351] Bluetooth: hci0: command 0x041b tx timeout [ 2918.970620][ T2906] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8533'. [ 2918.994934][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2919.010734][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 2919.028737][ T2832] bridge_slave_0: entered allmulticast mode [ 2919.043891][ T2832] bridge_slave_0: entered promiscuous mode [ 2919.096398][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2919.103755][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 2919.115647][ T2832] bridge_slave_1: entered allmulticast mode [ 2919.144259][ T2832] bridge_slave_1: entered promiscuous mode [ 2919.509377][ T2832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2919.614892][ T2832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2919.631310][ T2909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2919.835738][ T2832] team0: Port device team_slave_0 added [ 2919.936225][ T2832] team0: Port device team_slave_1 added [ 2920.041579][ T2832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2920.061113][ T2832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2920.202891][ T2832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2920.483954][ T1351] Bluetooth: hci0: command 0x041b tx timeout [ 2920.537410][ T2832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2920.563865][ T2832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2920.612696][ T2832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2920.702579][T24888] hsr_slave_0: left promiscuous mode [ 2920.721434][T24888] hsr_slave_1: left promiscuous mode [ 2920.737861][T24888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2920.763606][T24888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2920.802271][T24888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2920.823772][T24888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2920.848651][T24888] bridge_slave_0: left allmulticast mode [ 2920.866960][T24888] bridge_slave_0: left promiscuous mode [ 2920.872996][T24888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.996494][T24888] veth1_macvtap: left promiscuous mode [ 2921.005914][T24888] veth0_macvtap: left promiscuous mode [ 2921.021698][T24888] veth1_vlan: left promiscuous mode [ 2921.048530][T24888] veth0_vlan: left promiscuous mode [ 2921.746162][T24888] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2921.859383][T24888] bond1 (unregistering): Released all slaves [ 2921.920168][ T2926] sctp: [Deprecated]: syz.2.8536 (pid 2926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2921.920168][ T2926] Use struct sctp_sack_info instead [ 2923.771914][T20467] Bluetooth: hci0: command 0x041b tx timeout [ 2925.092289][T24888] team_slave_1 (unregistering): left promiscuous mode [ 2925.114300][T24888] team0 (unregistering): Port device team_slave_1 removed [ 2925.198269][T24888] team_slave_0 (unregistering): left promiscuous mode [ 2925.207964][T24888] team0 (unregistering): Port device team_slave_0 removed [ 2925.292517][T24888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2925.302514][T24888] bond_slave_1 (unregistering): left promiscuous mode [ 2925.388700][T24888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2925.407264][T24888] bond_slave_0 (unregistering): left promiscuous mode [ 2926.400973][T24888] bond0 (unregistering): Released all slaves [ 2926.547216][ T2941] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8543'. [ 2926.603877][ T2922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2926.610221][ T2922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2926.627076][ T2922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2926.657967][ T2832] hsr_slave_0: entered promiscuous mode [ 2926.668965][ T2922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2926.680479][ T2922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2926.692890][ T2832] hsr_slave_1: entered promiscuous mode [ 2926.710321][ T2922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2926.716606][ T2832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2926.743655][ T2832] Cannot create hsr debugfs directory [ 2926.880136][ T2922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2928.653555][T20467] Bluetooth: hci4: command 0x0405 tx timeout [ 2928.659695][ T1351] Bluetooth: hci1: command 0x0419 tx timeout [ 2928.665965][ T1994] Bluetooth: hci3: command 0x040f tx timeout [ 2928.723716][T20467] Bluetooth: hci0: command 0x041b tx timeout [ 2929.359868][ T2832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2929.388425][ T2832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2929.413096][ T2969] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8552'. [ 2929.436463][ T2832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2929.465013][ T2832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2929.859230][ T2832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2930.403242][ T2982] (null): rxe_set_mtu: Set mtu to 1024 [ 2930.409060][ T2982] rdma_rxe: rxe_newlink: failed to add wg1 [ 2930.416080][ T2982] pim6reg1: entered allmulticast mode [ 2930.422471][ T2982] pim6reg1: left allmulticast mode [ 2930.439854][ T2832] 8021q: adding VLAN 0 to HW filter on device team0 [ 2930.569880][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2930.577029][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2930.658261][T24888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2930.665481][T24888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2930.804406][T20467] Bluetooth: hci0: command 0x041b tx timeout [ 2931.329243][ T2832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2932.668254][ T2832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2932.721214][ T3009] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8563'. [ 2932.864099][ T3014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2932.887042][T20467] Bluetooth: hci0: command 0x041b tx timeout [ 2933.128974][ T2832] veth0_vlan: entered promiscuous mode [ 2933.147608][ T2832] veth1_vlan: entered promiscuous mode [ 2933.191871][ T2832] veth0_macvtap: entered promiscuous mode [ 2933.210900][ T2832] veth1_macvtap: entered promiscuous mode [ 2933.253036][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.277859][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.306449][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.328465][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.340724][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.353298][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.372981][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.387566][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.416512][ T2832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2933.536429][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.566620][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.590310][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.620049][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.641518][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.662829][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.693682][ T2832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.713934][ T2832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.745426][ T2832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2933.778573][ T2832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.816525][ T2832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.839154][ T2832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.857276][ T2832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.987888][T19780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2934.011566][T19780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2934.058977][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2934.073654][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2934.248212][ T3021] input: syz1 as /devices/virtual/input/input70 [ 2934.715816][T30434] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2934.990239][T20467] Bluetooth: hci0: command 0x041b tx timeout [ 2935.033630][T30434] usb 5-1: Using ep0 maxpacket: 8 [ 2935.122203][T30434] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2935.196878][T30434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.269718][T30434] usb 5-1: Product: syz [ 2935.395043][T30434] usb 5-1: Manufacturer: syz [ 2935.417866][T30434] usb 5-1: SerialNumber: syz [ 2935.449819][T30434] usb 5-1: config 0 descriptor?? [ 2935.507961][T30434] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2935.539106][T30434] usb 5-1: setting power ON [ 2935.552546][T30434] dvb-usb: bulk message failed: -22 (2/0) [ 2935.588892][T30434] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2935.619806][T30434] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2935.638701][T30434] usb 5-1: media controller created [ 2935.708539][T30434] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2935.928924][T30434] usb 5-1: selecting invalid altsetting 6 [ 2935.937211][T30434] usb 5-1: digital interface selection failed (-22) [ 2935.944588][T30434] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2935.983788][T30434] usb 5-1: setting power OFF [ 2935.988511][T30434] dvb-usb: bulk message failed: -22 (2/0) [ 2936.031551][T30434] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2936.108892][T30434] (NULL device *): no alternate interface [ 2936.692375][T30434] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2936.768104][T30434] usb 5-1: USB disconnect, device number 70 [ 2936.854218][ T3046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2938.204338][ T3063] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8577'. [ 2938.388885][ T3068] (null): rxe_set_mtu: Set mtu to 1024 [ 2938.394751][ T3068] rdma_rxe: rxe_newlink: failed to add wg1 [ 2938.416599][ T3068] pim6reg1: entered allmulticast mode [ 2938.422668][ T3068] pim6reg1: left allmulticast mode [ 2940.684191][ T3085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2948.577048][ T3153] kernel profiling enabled (shift: 63) [ 2948.585542][ T3153] profiling shift: 63 too large [ 2952.863590][T26001] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2953.828330][T26001] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2953.861187][T26001] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2953.885635][T26001] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2953.898803][ T3205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2953.899194][T26001] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 2953.913622][ T3205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2953.920178][T26001] usb 6-1: Product: syz [ 2953.927010][ T3205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2953.929374][ T3186] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2953.939477][ T3205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2953.945249][T26001] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2955.017087][ T5791] usb 6-1: USB disconnect, device number 4 [ 2955.127842][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2955.177591][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2955.513217][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2955.545362][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2958.089101][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2958.096097][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2958.372099][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2958.388593][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2958.987031][T30417] libceph: connect (1)[c::]:6789 error -101 [ 2959.070571][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 2959.214137][ T3215] ceph: No mds server is up or the cluster is laggy [ 2959.299037][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.748181][ T3248] sctp: [Deprecated]: syz.4.8626 (pid 3248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2959.748181][ T3248] Use struct sctp_sack_info instead [ 2959.956660][ T3250] input: syz1 as /devices/virtual/input/input71 [ 2963.761288][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 2963.783292][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 2964.086800][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 2964.097014][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 2964.604350][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 2964.611673][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 2964.957397][ T3270] ceph: No mds server is up or the cluster is laggy [ 2966.874781][ T3306] netlink: set zone limit has 8 unknown bytes [ 2969.880522][T23653] libceph: connect (1)[c::]:6789 error -101 [ 2969.900468][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 2970.250166][ T3318] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8653'. [ 2970.259703][ T3318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8653'. [ 2970.268926][ T3318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8653'. [ 2970.734683][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2970.772753][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2970.894385][ T3314] ceph: No mds server is up or the cluster is laggy [ 2971.944671][T26001] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2972.145694][T26001] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2972.238820][T26001] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2972.260312][T26001] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2972.279481][T26001] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 2972.300535][T26001] usb 3-1: Product: syz [ 2972.320242][ T3331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2972.330195][T26001] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2973.242069][T23653] usb 3-1: USB disconnect, device number 74 [ 2977.682876][ T3394] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2977.699616][ T3394] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 2978.492107][ T3403] input: syz1 as /devices/virtual/input/input72 [ 2978.534282][T23653] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2978.777285][T23653] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2978.803656][T23653] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2978.825721][T23653] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2978.835639][T23653] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 2978.844593][T23653] usb 3-1: Product: syz [ 2978.881918][ T3398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2978.893197][T23653] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2979.469965][ T5791] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2980.423570][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 2980.434284][ T5791] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2980.453345][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.461518][ T5791] usb 5-1: Product: syz [ 2980.466021][ T5791] usb 5-1: Manufacturer: syz [ 2980.470892][ T5791] usb 5-1: SerialNumber: syz [ 2980.521794][ T5791] usb 5-1: config 0 descriptor?? [ 2980.540886][ T2039] usb 3-1: USB disconnect, device number 75 [ 2980.616590][ T5791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2981.090472][ T5791] usb 5-1: setting power ON [ 2981.098501][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 2981.118318][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2981.156402][ T5791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2981.169252][ T5791] usb 5-1: media controller created [ 2981.216335][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2981.250668][ T5791] usb 5-1: selecting invalid altsetting 6 [ 2981.259731][ T5791] usb 5-1: digital interface selection failed (-22) [ 2981.272239][ T5791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2981.290640][ T5791] usb 5-1: setting power OFF [ 2981.300823][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 2981.317772][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2981.327704][ T5791] (NULL device *): no alternate interface [ 2981.490984][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2981.573121][ T5791] usb 5-1: USB disconnect, device number 71 [ 2984.750020][ T3462] (null): rxe_set_mtu: Set mtu to 1024 [ 2984.785840][ T3462] rdma_rxe: rxe_newlink: failed to add wg1 [ 2984.803615][ T3462] pim6reg1: entered allmulticast mode [ 2984.838710][ T3462] pim6reg1: left allmulticast mode [ 2984.914307][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2984.922122][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2984.938293][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2984.948707][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2985.183251][ T3473] block nbd4: shutting down sockets [ 2985.818981][ T3476] sctp: [Deprecated]: syz.1.8693 (pid 3476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2985.818981][ T3476] Use struct sctp_sack_info instead [ 2991.307014][T23653] libceph: connect (1)[c::]:6789 error -101 [ 2991.553541][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 2991.863908][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2991.880346][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2992.438191][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 2992.445654][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 2993.051700][ T3508] ceph: No mds server is up or the cluster is laggy [ 2998.806424][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 2998.933682][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 2999.825070][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3001.372835][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3001.646703][ T3566] ceph: No mds server is up or the cluster is laggy [ 3001.840799][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3001.946779][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3003.439621][ T28] audit: type=1326 audit(1752855812.606:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3004.085569][ T28] audit: type=1326 audit(1752855812.606:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3004.107800][ C0] vkms_vblank_simulate: vblank timer overrun [ 3004.235847][ T28] audit: type=1326 audit(1752855812.636:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3004.338027][ T28] audit: type=1326 audit(1752855812.636:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3004.953557][ T28] audit: type=1326 audit(1752855812.636:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.289198][ T28] audit: type=1326 audit(1752855812.636:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.363712][ T28] audit: type=1326 audit(1752855812.636:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.386547][ T28] audit: type=1326 audit(1752855812.636:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.409012][ T28] audit: type=1326 audit(1752855812.636:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.431688][ T28] audit: type=1326 audit(1752855812.636:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3592 comm="syz.1.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d398e9a9 code=0x7ffc0000 [ 3005.716524][ T3613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3006.497738][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3006.585796][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3007.077940][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3007.126464][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3008.448263][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3008.522702][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3009.077911][T30417] libceph: connect (1)[c::]:6789 error -101 [ 3009.136573][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 3009.463640][ T3617] ceph: No mds server is up or the cluster is laggy [ 3010.084061][T30417] libceph: connect (1)[c::]:6789 error -101 [ 3010.090249][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 3010.140949][T30417] libceph: connect (1)[c::]:6789 error -101 [ 3010.148871][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 3013.240204][ T3660] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.314063][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3016.419189][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3016.563078][ T3665] syz.4.8746: attempt to access beyond end of device [ 3016.563078][ T3665] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3017.417363][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3017.446489][ T3677] ip6_vti0 speed is unknown, defaulting to 1000 [ 3017.461025][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3017.653520][ T3672] ceph: No mds server is up or the cluster is laggy [ 3018.003864][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 3018.009957][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 3018.612959][ T3677] wg1 speed is unknown, defaulting to 1000 [ 3018.686287][ T3695] input: syz1 as /devices/virtual/input/input73 [ 3019.714619][ T2039] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3019.769435][ T3708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3019.943945][ T2039] usb 6-1: Using ep0 maxpacket: 8 [ 3020.048631][ T2039] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3020.101062][ T2039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.269462][ T2039] usb 6-1: Product: syz [ 3020.314389][ T2039] usb 6-1: Manufacturer: syz [ 3020.333694][ T2039] usb 6-1: SerialNumber: syz [ 3020.346395][ T2039] usb 6-1: config 0 descriptor?? [ 3020.357129][ T2039] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3020.389443][ T2039] usb 6-1: setting power ON [ 3020.425509][ T2039] dvb-usb: bulk message failed: -22 (2/0) [ 3020.457773][ T2039] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3020.479507][ T2039] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3020.511028][ T2039] usb 6-1: media controller created [ 3020.589118][ T2039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3020.665886][ T2039] usb 6-1: selecting invalid altsetting 6 [ 3020.671773][ T2039] usb 6-1: digital interface selection failed (-22) [ 3020.703553][ T2039] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3020.743331][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.767713][ T2039] usb 6-1: setting power OFF [ 3020.772378][ T2039] dvb-usb: bulk message failed: -22 (2/0) [ 3020.803868][ T2039] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3020.813989][ T2039] (NULL device *): no alternate interface [ 3020.869451][ T2039] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3020.950527][ T2039] usb 6-1: USB disconnect, device number 5 [ 3022.007266][ T23] libceph: connect (1)[c::]:6789 error -101 [ 3022.252509][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 3022.378975][ T23] libceph: connect (1)[c::]:6789 error -101 [ 3023.334324][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 3023.599279][ T23] libceph: connect (1)[c::]:6789 error -101 [ 3024.201273][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 3024.493555][ T3743] can0: slcan on ptm0. [ 3024.723999][ T23] libceph: connect (1)[c::]:6789 error -101 [ 3024.770945][ T3749] input: syz1 as /devices/virtual/input/input74 [ 3024.840376][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 3024.985964][ T3740] can0 (unregistered): slcan off ptm0. [ 3025.083560][ T5791] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3025.275475][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 3025.297852][ T5791] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3025.307873][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3025.316701][ T5791] usb 5-1: Product: syz [ 3025.325064][ T5791] usb 5-1: Manufacturer: syz [ 3025.329772][ T5791] usb 5-1: SerialNumber: syz [ 3025.339983][ T5791] usb 5-1: config 0 descriptor?? [ 3025.367384][ T5791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3025.377711][ T5791] usb 5-1: setting power ON [ 3025.382469][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 3025.398061][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3025.410133][ T5791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3025.420958][ T5791] usb 5-1: media controller created [ 3025.448803][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3025.476037][ T3734] ceph: No mds server is up or the cluster is laggy [ 3025.483784][ T5791] usb 5-1: selecting invalid altsetting 6 [ 3025.512099][ T5791] usb 5-1: digital interface selection failed (-22) [ 3025.563053][ T5791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3025.606969][ T5791] usb 5-1: setting power OFF [ 3025.619062][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 3025.652724][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3025.684651][ T5791] (NULL device *): no alternate interface [ 3025.890612][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8770'. [ 3026.039415][ T3754] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8770'. [ 3026.241571][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3026.288721][ T5791] usb 5-1: USB disconnect, device number 72 [ 3026.367423][ T3756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3026.949492][ T3762] syz.2.8772: attempt to access beyond end of device [ 3026.949492][ T3762] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3027.162882][ T3779] netlink: 'syz.4.8775': attribute type 1 has an invalid length. [ 3027.251461][ T3770] ip6_vti0 speed is unknown, defaulting to 1000 [ 3027.888530][ T3770] wg1 speed is unknown, defaulting to 1000 [ 3029.837149][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3030.102192][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3030.715026][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3030.945164][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3032.703929][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3032.713517][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3032.933974][ T3811] input: syz1 as /devices/virtual/input/input75 [ 3033.044851][ T3801] libceph: connect (1)[c::]:6789 error -101 [ 3033.052727][ T3801] libceph: mon0 (1)[c::]:6789 connect error [ 3033.274183][T23653] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3033.313916][T30417] libceph: connect (1)[c::]:6789 error -101 [ 3033.320140][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 3033.427033][ T3797] ceph: No mds server is up or the cluster is laggy [ 3033.480841][T23653] usb 5-1: Using ep0 maxpacket: 8 [ 3033.508157][ T3801] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3033.520537][T23653] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3033.531917][T23653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.542878][T23653] usb 5-1: Product: syz [ 3033.551809][T23653] usb 5-1: Manufacturer: syz [ 3033.557724][T23653] usb 5-1: SerialNumber: syz [ 3033.568556][T23653] usb 5-1: config 0 descriptor?? [ 3033.598857][T23653] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3033.632038][T23653] usb 5-1: setting power ON [ 3033.653612][T23653] dvb-usb: bulk message failed: -22 (2/0) [ 3033.720918][T23653] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3033.759052][ T3801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3033.782437][T23653] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3033.816239][ T3801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3033.851053][T23653] usb 5-1: media controller created [ 3033.899063][ T3801] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3033.979811][ T3801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3034.200941][ T3801] usb 3-1: config 0 descriptor?? [ 3034.392614][T23653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3034.436278][T23653] usb 5-1: selecting invalid altsetting 6 [ 3034.442114][T23653] usb 5-1: digital interface selection failed (-22) [ 3034.456075][T23653] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3034.471443][T23653] usb 5-1: setting power OFF [ 3034.486671][T23653] dvb-usb: bulk message failed: -22 (2/0) [ 3034.499453][T23653] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3034.517642][T23653] (NULL device *): no alternate interface [ 3034.556316][T23653] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3034.580161][T23653] usb 5-1: USB disconnect, device number 73 [ 3034.690099][ T3801] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 3034.699909][ T3801] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 3034.891566][ T3801] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 3037.308941][ T3801] cp2112 0003:10C4:EA90.0012: error setting SMBus config [ 3038.674120][ T3801] cp2112: probe of 0003:10C4:EA90.0012 failed with error -71 [ 3038.707845][ T3801] usb 3-1: USB disconnect, device number 76 [ 3038.839574][ T3843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3039.309132][ T3852] syz.5.8791: attempt to access beyond end of device [ 3039.309132][ T3852] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3040.425785][ T3867] ip6_vti0 speed is unknown, defaulting to 1000 [ 3042.397978][ T3867] wg1 speed is unknown, defaulting to 1000 [ 3042.953513][ T3801] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3043.235339][ T3801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3043.246357][ T3801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3043.256319][ T3801] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3043.266743][ T3801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.290364][ T3801] usb 5-1: config 0 descriptor?? [ 3044.722337][ T3801] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 3044.732896][ T3801] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 3044.932063][ T3801] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 3045.958555][ T3801] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 3046.011166][ T3801] usb 5-1: USB disconnect, device number 74 [ 3047.520686][ T3929] lo: entered promiscuous mode [ 3047.544462][ T3929] tunl0: entered promiscuous mode [ 3047.556624][ T3929] gre0: entered promiscuous mode [ 3047.567585][ T3929] gretap0: entered promiscuous mode [ 3047.579318][ T3929] erspan0: entered promiscuous mode [ 3047.589793][ T3929] ip_vti0: entered promiscuous mode [ 3047.624786][ T3929] ip6_vti0: entered promiscuous mode [ 3047.631316][ T3929] sit0: entered promiscuous mode [ 3047.698343][ T3929] ip6tnl0: entered promiscuous mode [ 3047.704725][ T3929] ip6gre0: entered promiscuous mode [ 3047.711146][ T3929] syz_tun: entered promiscuous mode [ 3047.720719][ T3929] ip6gretap0: entered promiscuous mode [ 3047.728538][ T3929] bridge0: entered promiscuous mode [ 3047.735180][ T3929] vcan0: entered promiscuous mode [ 3047.740931][ T3929] bond0: entered promiscuous mode [ 3047.746929][ T3929] bond_slave_0: entered promiscuous mode [ 3047.752949][ T3929] bond_slave_1: entered promiscuous mode [ 3047.760992][ T3929] team0: entered promiscuous mode [ 3047.779513][ T3929] team_slave_0: entered promiscuous mode [ 3047.861862][ T3929] team_slave_1: entered promiscuous mode [ 3048.059791][ T3929] dummy0: entered promiscuous mode [ 3048.198380][ T3929] nlmon0: entered promiscuous mode [ 3048.320525][ T3929] caif0: entered promiscuous mode [ 3048.391737][ T3929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3050.128805][ T3947] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8815'. [ 3051.571003][ T3967] (null): rxe_set_mtu: Set mtu to 1024 [ 3051.593940][ T3967] rdma_rxe: rxe_newlink: failed to add wg1 [ 3052.146210][ T3976] input: syz1 as /devices/virtual/input/input76 [ 3052.553677][T26001] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3053.369619][T26001] usb 5-1: Using ep0 maxpacket: 8 [ 3053.591803][T26001] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3053.659298][T26001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3053.726826][T26001] usb 5-1: Product: syz [ 3053.751328][T26001] usb 5-1: Manufacturer: syz [ 3053.798154][T26001] usb 5-1: SerialNumber: syz [ 3053.888837][T26001] usb 5-1: config 0 descriptor?? [ 3054.050597][T26001] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3054.092775][T26001] usb 5-1: setting power ON [ 3054.354981][T26001] dvb-usb: bulk message failed: -22 (2/0) [ 3054.510390][T26001] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3054.607825][T26001] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3055.266888][T26001] usb 5-1: media controller created [ 3055.351583][T26001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3055.392710][T26001] usb 5-1: selecting invalid altsetting 6 [ 3055.399814][T26001] usb 5-1: digital interface selection failed (-22) [ 3055.412167][T26001] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3055.423310][T26001] usb 5-1: setting power OFF [ 3055.645739][T26001] dvb-usb: bulk message failed: -22 (2/0) [ 3055.651822][T26001] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3055.663146][T26001] (NULL device *): no alternate interface [ 3056.345469][T26001] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3056.470711][T26001] usb 5-1: USB disconnect, device number 75 [ 3056.619492][ T4007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3056.844753][ T4017] (null): rxe_set_mtu: Set mtu to 1024 [ 3056.893511][ T4017] rdma_rxe: rxe_newlink: failed to add wg1 [ 3061.139436][ T4046] input: syz1 as /devices/virtual/input/input77 [ 3062.413834][ T4063] (null): rxe_set_mtu: Set mtu to 1024 [ 3062.446903][ T4063] rdma_rxe: rxe_newlink: failed to add wg1 [ 3062.839009][ T4063] pim6reg1: entered allmulticast mode [ 3063.119331][T26001] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3063.245117][ T4070] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8852'. [ 3063.333894][T26001] usb 3-1: Using ep0 maxpacket: 32 [ 3063.341119][T26001] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 3063.353560][T26001] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3063.373602][T26001] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3063.392064][T26001] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 3063.433576][T26001] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3063.476781][T26001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3063.495991][T26001] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3063.505895][T26001] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3063.516240][T26001] usb 3-1: Product: syz [ 3063.524506][T26001] usb 3-1: Manufacturer: syz [ 3063.529380][T26001] usb 3-1: SerialNumber: syz [ 3063.545344][T26001] usb 3-1: config 0 descriptor?? [ 3063.568883][T26001] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3063.585516][T26001] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3064.262465][ T4086] input: syz1 as /devices/virtual/input/input78 [ 3065.150852][ T4095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3066.228143][ T5791] usb 3-1: USB disconnect, device number 77 [ 3066.464289][ T5791] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 3069.568424][ T4144] Option ' ' to dns_resolver key: bad/missing value [ 3069.822246][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 3069.822809][ T28] audit: type=1326 audit(1752855878.976:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.112162][ T28] audit: type=1326 audit(1752855878.976:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.389090][ T28] audit: type=1326 audit(1752855879.036:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.634918][ T28] audit: type=1326 audit(1752855879.036:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.717534][ T28] audit: type=1326 audit(1752855879.036:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.839027][ T28] audit: type=1326 audit(1752855879.036:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.872447][ T28] audit: type=1326 audit(1752855879.036:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3070.960802][ T28] audit: type=1326 audit(1752855879.036:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3071.028938][ T28] audit: type=1326 audit(1752855879.066:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3071.344291][ T28] audit: type=1326 audit(1752855879.066:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4155 comm="syz.4.8875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c38e9a9 code=0x7ffc0000 [ 3071.674653][ T4167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3072.753542][ T5791] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3073.726725][ T5791] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3073.792433][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.956780][ T5791] usb 3-1: config 0 descriptor?? [ 3075.026829][ T5791] ath6kl: Failed to submit usb control message: -71 [ 3075.199581][ T5791] ath6kl: unable to send the bmi data to the device: -71 [ 3075.208137][ T5791] ath6kl: Unable to send get target info: -71 [ 3075.234698][ T5791] ath6kl: Failed to init ath6kl core: -71 [ 3075.241284][ T5791] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 3075.435329][ T5791] usb 3-1: USB disconnect, device number 78 [ 3076.152234][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 3076.152251][ T28] audit: type=1326 audit(1752855885.316:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.181056][ C1] vkms_vblank_simulate: vblank timer overrun [ 3076.237032][ T28] audit: type=1326 audit(1752855885.316:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.280074][ T28] audit: type=1326 audit(1752855885.356:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.323061][ T28] audit: type=1326 audit(1752855885.356:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.383441][ T28] audit: type=1326 audit(1752855885.356:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.442102][ T28] audit: type=1326 audit(1752855885.356:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.464522][ C1] vkms_vblank_simulate: vblank timer overrun [ 3076.513483][ T28] audit: type=1326 audit(1752855885.356:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.536011][ T28] audit: type=1326 audit(1752855885.356:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.558703][ T28] audit: type=1326 audit(1752855885.356:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.777137][ T28] audit: type=1326 audit(1752855885.356:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.2.8895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3076.799452][ C1] vkms_vblank_simulate: vblank timer overrun [ 3079.164708][ T4256] (null): rxe_set_mtu: Set mtu to 1024 [ 3079.172165][ T4256] rdma_rxe: rxe_newlink: failed to add wg1 [ 3080.979744][ T4275] xt_hashlimit: max too large, truncated to 1048576 [ 3081.133586][T26001] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3082.191114][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.315414][T26001] usb 5-1: config 241 has an invalid interface number: 0 but max is -1 [ 3082.329424][T26001] usb 5-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3082.431840][T26001] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3082.501012][T26001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3082.780602][T26001] pcwd_usb: The device isn't a Human Interface Device [ 3083.223333][ T3801] usb 5-1: USB disconnect, device number 76 [ 3083.277174][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 3083.277189][ T28] audit: type=1326 audit(1752855892.446:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.343501][ T28] audit: type=1326 audit(1752855892.446:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.374970][ T28] audit: type=1326 audit(1752855892.496:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.413251][ T28] audit: type=1326 audit(1752855892.496:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.445788][ T28] audit: type=1326 audit(1752855892.496:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.480048][ T28] audit: type=1326 audit(1752855892.496:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.505914][ T28] audit: type=1326 audit(1752855892.506:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.538722][ T28] audit: type=1326 audit(1752855892.506:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.602800][ T28] audit: type=1326 audit(1752855892.506:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3083.694768][ T28] audit: type=1326 audit(1752855892.506:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.5.8916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9a18e9a9 code=0x7ffc0000 [ 3089.880959][ T4337] netlink: 'syz.2.8928': attribute type 1 has an invalid length. [ 3096.148635][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8950'. [ 3097.973789][ T7673] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3098.182322][ T7673] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3098.193628][ T7673] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3098.206623][ T7673] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3098.216030][ T7673] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 3098.275838][ T7673] usb 3-1: Product: syz [ 3098.295153][ T4416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3098.309311][ T7673] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 3098.334231][ T4422] netlink: 'syz.5.8957': attribute type 1 has an invalid length. [ 3099.454223][T30434] usb 3-1: USB disconnect, device number 79 [ 3099.480554][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3105.606792][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 3105.606809][ T28] audit: type=1326 audit(1752855914.702:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3105.719330][ T28] audit: type=1326 audit(1752855914.702:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3106.948179][ T28] audit: type=1326 audit(1752855914.712:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.024808][ T28] audit: type=1326 audit(1752855914.712:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.033737][ T4495] netlink: 'syz.2.8976': attribute type 1 has an invalid length. [ 3107.214792][ T28] audit: type=1326 audit(1752855914.712:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.697067][ T28] audit: type=1326 audit(1752855914.712:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.777813][ T28] audit: type=1326 audit(1752855914.712:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.807944][ T28] audit: type=1326 audit(1752855914.712:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.832149][ T28] audit: type=1326 audit(1752855914.712:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3107.855422][ T28] audit: type=1326 audit(1752855914.712:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95758e9a9 code=0x7ffc0000 [ 3110.034894][ T4504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3113.594063][ T3801] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3113.973652][ T3801] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3113.984795][ T3801] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3114.002128][ T3801] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3114.014512][ T3801] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 3114.022683][ T3801] usb 6-1: Product: syz [ 3114.074137][ T4516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3114.096066][ T3801] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 3114.691252][ T5791] usb 6-1: USB disconnect, device number 6 [ 3114.832555][ T4528] udevd[4528]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3114.857420][ T4533] (null): rxe_set_mtu: Set mtu to 1024 [ 3114.883837][ T4533] rdma_rxe: rxe_newlink: failed to add wg1 [ 3120.004695][T30434] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3120.209191][T30434] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 3120.258758][T30434] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3120.303752][T30434] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3120.317407][T30434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.327561][ T4574] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2 [ 3120.364342][T30434] pcwd_usb: This driver only supports 1 device [ 3120.864468][ T3801] usb 3-1: USB disconnect, device number 80 [ 3124.547140][ T3801] libceph: connect (1)[c::]:6789 error -101 [ 3124.563674][ T3801] libceph: mon0 (1)[c::]:6789 connect error [ 3124.831202][ T3801] libceph: connect (1)[c::]:6789 error -101 [ 3124.835268][ T4611] ceph: No mds server is up or the cluster is laggy [ 3124.845218][ T3801] libceph: mon0 (1)[c::]:6789 connect error [ 3127.661808][ T4636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9017'. [ 3127.889185][ T4640] (null): rxe_set_mtu: Set mtu to 1024 [ 3127.946241][ T4640] rdma_rxe: rxe_newlink: failed to add wg1 [ 3128.125581][ T4644] tipc: Enabling of bearer rejected, failed to enable media [ 3129.552965][ T4663] overlay: Unknown parameter '/' [ 3129.648684][ T4664] overlayfs: missing 'lowerdir' [ 3130.853156][ T4670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3132.937303][ T4705] (null): rxe_set_mtu: Set mtu to 1024 [ 3132.945618][ T4705] rdma_rxe: rxe_newlink: failed to add wg1 [ 3135.860623][ T4722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3136.111167][ T4732] netlink: 'syz.2.9037': attribute type 1 has an invalid length. [ 3136.311616][ T4694] udevd[4694]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3139.104915][ T4761] (null): rxe_set_mtu: Set mtu to 1024 [ 3139.112146][ T4761] rdma_rxe: rxe_newlink: failed to add wg1 [ 3141.771055][ T4780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3143.606127][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3147.087863][ T3801] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3147.408716][ T3801] usb 3-1: Using ep0 maxpacket: 16 [ 3147.504500][ T3801] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 3147.523447][ T3801] usb 3-1: config 254 has no interface number 0 [ 3147.529824][ T3801] usb 3-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping [ 3147.557911][ T3801] usb 3-1: config 254 interface 235 has no altsetting 0 [ 3147.574491][ T3801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 3147.587442][ T3801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3147.598546][ T3801] usb 3-1: Product: syz [ 3147.602965][ T3801] usb 3-1: Manufacturer: syz [ 3147.611293][ T3801] usb 3-1: SerialNumber: syz [ 3147.665712][ T3801] usbtest 3-1:254.235: couldn't get endpoints, -22 [ 3147.672336][ T3801] usbtest: probe of 3-1:254.235 failed with error -22 [ 3148.672694][ T7673] usb 3-1: USB disconnect, device number 81 [ 3148.764505][ T4844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3148.928813][ T4848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9071'. [ 3148.943966][ T4848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9071'. [ 3149.653899][ T4848] nvme_fabrics: missing parameter 'transport=%s' [ 3149.833693][ T4848] nvme_fabrics: missing parameter 'nqn=%s' [ 3154.712511][T30417] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3154.922901][T30417] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3155.020262][T30417] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3155.032307][T30417] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3155.049899][T30417] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 3155.066692][T30417] usb 5-1: Product: syz [ 3155.105091][ T4884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3155.115994][T30417] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3155.902175][T26001] usb 5-1: USB disconnect, device number 77 [ 3158.610238][ T4918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3164.152345][ T4902] udevd[4902]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3165.171662][ T4979] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 3165.268922][ T4984] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9107'. [ 3165.280995][ T4984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9107'. [ 3166.433584][ T4988] netlink: 'syz.2.9109': attribute type 4 has an invalid length. [ 3166.441369][ T4988] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9109'. [ 3168.317974][ T5003] input: syz1 as /devices/virtual/input/input80 [ 3168.609348][ T5008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3170.006923][ T5025] Cannot find set identified by id 0 to match [ 3172.723459][T30417] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3172.854874][ T5056] syz.4.9131: attempt to access beyond end of device [ 3172.854874][ T5056] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3172.939878][ T5065] syz0: rxe_newlink: already configured on wg1 [ 3172.943020][T30417] usb 6-1: Using ep0 maxpacket: 16 [ 3173.082930][T30417] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3173.190781][T30417] usb 6-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 3173.202896][T30417] usb 6-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 3173.213221][T30417] usb 6-1: Product: syz [ 3173.223468][T30417] usb 6-1: Manufacturer: syz [ 3173.235321][T30417] usb 6-1: SerialNumber: syz [ 3173.337920][T30417] usb 6-1: config 0 descriptor?? [ 3173.406559][T30417] usb 6-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 3173.421957][T30417] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3173.442784][T30417] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 3173.452317][T30417] usb 6-1: media controller created [ 3173.487887][ T5059] ip6_vti0 speed is unknown, defaulting to 1000 [ 3173.523859][T30417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3173.705641][T30417] usb 6-1: selecting invalid altsetting 2 [ 3173.711473][T30417] set interface failed [ 3173.711908][T30417] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3173.725915][T30417] error writing reg: 0xff, val: 0x00 [ 3174.496381][T30417] dvb_usb_mxl111sf: probe of 6-1:0.0 failed with error -22 [ 3174.714376][ T5059] wg1 speed is unknown, defaulting to 1000 [ 3175.518808][ T5791] usb 6-1: USB disconnect, device number 7 [ 3177.368085][ T5107] (null): rxe_set_mtu: Set mtu to 1024 [ 3177.375466][ T5107] rdma_rxe: rxe_newlink: failed to add wg1 [ 3180.023016][ T5148] syz.2.9153 uses old SIOCAX25GETINFO [ 3180.633446][T23653] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3180.835392][T23653] usb 6-1: config 241 has an invalid interface number: 0 but max is -1 [ 3180.852594][T23653] usb 6-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3180.877932][T23653] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3180.899910][T23653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.937926][T23653] pcwd_usb: This driver only supports 1 device [ 3180.957404][ T5161] syz.1.9159: attempt to access beyond end of device [ 3180.957404][ T5161] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3181.953025][ T5171] ip6_vti0 speed is unknown, defaulting to 1000 [ 3181.963843][T30434] usb 6-1: USB disconnect, device number 8 [ 3182.673870][ T5171] wg1 speed is unknown, defaulting to 1000 [ 3182.932529][ T5180] tmpfs: Bad value for 'mpol' [ 3184.467902][ T5189] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3187.206805][ T5222] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3187.544188][T30417] libceph: connect (1)[c::]:6789 error -101 [ 3187.550303][T30417] libceph: mon0 (1)[c::]:6789 connect error [ 3187.736957][ T5231] ceph: No mds server is up or the cluster is laggy [ 3187.827073][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 3187.904302][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 3188.537521][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 3188.602443][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 3190.160626][ T5269] syz.2.9194: attempt to access beyond end of device [ 3190.160626][ T5269] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3191.056225][ T5269] ip6_vti0 speed is unknown, defaulting to 1000 [ 3191.258874][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 3191.268420][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 3191.339240][ T5287] ceph: No mds server is up or the cluster is laggy [ 3191.547689][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 3191.556028][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 3191.970673][ T5269] wg1 speed is unknown, defaulting to 1000 [ 3192.230280][ T5298] fuse: Bad value for 'fd' [ 3195.763926][T20467] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3195.772518][ T1994] Bluetooth: hci2: command 0x1003 tx timeout [ 3196.522198][ T5327] fuse: Bad value for 'fd' [ 3199.167157][ T4902] udevd[4902]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3199.908710][ T5355] syz.4.9215: attempt to access beyond end of device [ 3199.908710][ T5355] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3199.932566][ T5360] ip6_vti0 speed is unknown, defaulting to 1000 [ 3204.379020][ T5360] wg1 speed is unknown, defaulting to 1000 [ 3205.051536][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.894636][ T5407] tmpfs: Bad value for 'mpol' [ 3209.052544][ T5427] udevd[5427]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3210.959765][ T5438] syz.5.9238: attempt to access beyond end of device [ 3210.959765][ T5438] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3211.023108][ T5442] ip6_vti0 speed is unknown, defaulting to 1000 [ 3211.184307][ T5453] tmpfs: Bad value for 'mpol' [ 3212.379557][ T5442] wg1 speed is unknown, defaulting to 1000 [ 3212.972184][T15552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.074895][ T1351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3213.108924][ T1351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3213.118225][ T1351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3213.149163][ T1351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3213.157613][ T1351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3213.165230][ T1351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3213.198229][ T5320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3213.206278][ T5320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3213.215816][ T5320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3213.235025][ T5320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3213.244485][ T5320] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3213.251829][ T5320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3213.297418][T15552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.602596][T15552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.830043][T15552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3213.959718][ T5465] ip6_vti0 speed is unknown, defaulting to 1000 [ 3214.173781][T26001] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 3214.187144][ T5427] udevd[5427]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3214.365468][T26001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3214.383502][T26001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3214.399026][ T5465] wg1 speed is unknown, defaulting to 1000 [ 3214.409472][T26001] usb 5-1: string descriptor 0 read error: -22 [ 3214.423810][T26001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3214.443493][T26001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.468873][T26001] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3214.496739][T26001] usb 5-1: MIDIStreaming interface descriptor not found [ 3215.366954][ T1351] Bluetooth: hci2: command tx timeout [ 3215.653870][ T5486] tmpfs: Bad value for 'mpol' [ 3216.824894][ T5465] chnl_net:caif_netlink_parms(): no params data found [ 3217.124455][ T5791] usb 5-1: USB disconnect, device number 78 [ 3217.259252][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 3217.268474][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 3217.276143][ T5465] bridge_slave_0: entered allmulticast mode [ 3217.297602][ T5465] bridge_slave_0: entered promiscuous mode [ 3217.341637][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 3217.403631][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 3217.412278][ T5465] bridge_slave_1: entered allmulticast mode [ 3217.428953][ T5465] bridge_slave_1: entered promiscuous mode [ 3217.456410][ T1351] Bluetooth: hci2: command tx timeout [ 3217.507121][ T5465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3217.519400][ T5465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3217.663859][ T5465] team0: Port device team_slave_0 added [ 3217.691415][ T5465] team0: Port device team_slave_1 added [ 3218.684204][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3218.691693][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3219.142381][ T5465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3219.181897][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3219.198226][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3219.262125][ T5465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3219.313663][T15552] hsr_slave_0: left promiscuous mode [ 3219.319758][T15552] hsr_slave_1: left promiscuous mode [ 3219.331357][T15552] bridge_slave_1: left allmulticast mode [ 3219.338313][T15552] bridge_slave_1: left promiscuous mode [ 3219.346734][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 3219.355123][ T5523] syz.4.9260: attempt to access beyond end of device [ 3219.355123][ T5523] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3219.370058][T15552] bridge_slave_0: left allmulticast mode [ 3219.533435][ T1351] Bluetooth: hci2: command tx timeout [ 3220.241321][T15552] bridge_slave_0: left promiscuous mode [ 3220.265134][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 3220.341468][T15552] veth1_macvtap: left promiscuous mode [ 3220.349825][T15552] veth0_macvtap: left promiscuous mode [ 3220.356325][T15552] veth1_vlan: left promiscuous mode [ 3220.362011][T15552] veth0_vlan: left promiscuous mode [ 3221.562588][T15552] team_slave_1 (unregistering): left promiscuous mode [ 3221.578311][T15552] team0 (unregistering): Port device team_slave_1 removed [ 3221.603776][ T1351] Bluetooth: hci2: command tx timeout [ 3221.664184][T15552] team_slave_0 (unregistering): left promiscuous mode [ 3221.675741][T15552] team0 (unregistering): Port device team_slave_0 removed [ 3221.752807][T15552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3221.761795][T15552] bond_slave_1 (unregistering): left promiscuous mode [ 3221.837150][T15552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3221.846653][T15552] bond_slave_0 (unregistering): left promiscuous mode [ 3222.684102][T15552] bond0 (unregistering): Released all slaves [ 3222.824085][ T5533] ip6_vti0 speed is unknown, defaulting to 1000 [ 3225.885665][ T5465] hsr_slave_0: entered promiscuous mode [ 3225.906774][ T5465] hsr_slave_1: entered promiscuous mode [ 3225.920492][ T5465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3225.928575][ T5465] Cannot create hsr debugfs directory [ 3226.018026][ T5533] wg1 speed is unknown, defaulting to 1000 [ 3228.530687][ T5465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3228.560678][ T5465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3228.582610][ T5465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3228.605493][ T5465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3228.870441][ T5465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3228.936053][ T5465] 8021q: adding VLAN 0 to HW filter on device team0 [ 3229.018508][T24888] bridge0: port 1(bridge_slave_0) entered blocking state [ 3229.025727][T24888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3229.060761][T24888] bridge0: port 2(bridge_slave_1) entered blocking state [ 3229.068089][T24888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3232.619008][ T5599] udevd[5599]: symlink '../../loop8' '/dev/disk/by-diskseq/578.tmp-b7:8' failed: Read-only file system [ 3232.759593][ T5465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3233.840938][ T5604] can: request_module (can-proto-0) failed. [ 3233.932731][ T5465] veth0_vlan: entered promiscuous mode [ 3234.161495][ T5465] veth1_vlan: entered promiscuous mode [ 3234.189577][ T5619] syz.4.9279: attempt to access beyond end of device [ 3234.189577][ T5619] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3234.225976][ T5609] xt_nfacct: accounting object `syz1' does not exists [ 3234.274517][ T5465] veth0_macvtap: entered promiscuous mode [ 3234.310003][ T5465] veth1_macvtap: entered promiscuous mode [ 3234.378978][ T5617] ip6_vti0 speed is unknown, defaulting to 1000 [ 3234.596646][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3235.022933][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3235.110347][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3235.165302][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3235.205936][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3235.251453][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3235.269685][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3235.339101][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3235.502549][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3235.523015][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3236.183492][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3236.193534][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3236.215247][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3236.341728][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3236.362030][ T5617] wg1 speed is unknown, defaulting to 1000 [ 3236.396072][ T5465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3236.408653][ T5465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3236.417529][ T5465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3236.426567][ T5465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3236.652944][T24888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3236.799900][T28664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3236.913144][T24888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3236.916064][T28664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3239.049742][T28402] Bluetooth: hci3: Frame reassembly failed (-84) [ 3240.212067][ T5681] syz.1.9292: attempt to access beyond end of device [ 3240.212067][ T5681] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3240.301431][ T5688] ip6_vti0 speed is unknown, defaulting to 1000 [ 3240.527876][ T5688] wg1 speed is unknown, defaulting to 1000 [ 3240.973658][ T1351] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 3246.268642][ T5720] ceph: No mds server is up or the cluster is laggy [ 3246.284159][T26001] libceph: connect (1)[c::]:6789 error -101 [ 3246.290969][T26001] libceph: mon0 (1)[c::]:6789 connect error [ 3246.426249][ T5791] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3246.685943][ T5791] usb 5-1: config 241 has an invalid interface number: 0 but max is -1 [ 3246.715202][ T5791] usb 5-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3246.752424][ T5791] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3246.839547][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.919778][ T5734] syz.5.9302: attempt to access beyond end of device [ 3246.919778][ T5734] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3247.013587][ T5791] pcwd_usb: This driver only supports 1 device [ 3247.076065][ T5743] ip6_vti0 speed is unknown, defaulting to 1000 [ 3247.541206][T30417] usb 5-1: USB disconnect, device number 79 [ 3247.569647][ T5743] wg1 speed is unknown, defaulting to 1000 [ 3250.457906][ T1351] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 3250.465899][ T5320] Bluetooth: hci3: command 0x1003 tx timeout [ 3252.182276][ T23] libceph: connect (1)[c::]:6789 error -101 [ 3252.196472][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 3252.216499][ T5770] ceph: No mds server is up or the cluster is laggy [ 3252.882705][ T5789] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3253.673446][ T5727] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3254.504756][ T5727] usb 5-1: config 241 has an invalid interface number: 0 but max is -1 [ 3254.513090][ T5727] usb 5-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3254.548230][ T5727] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3254.560870][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.478714][ T5727] pcwd_usb: This driver only supports 1 device [ 3255.924441][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3256.028275][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3256.043999][ T2039] libceph: connect (1)[c::]:6789 error -101 [ 3256.044600][ T2039] libceph: mon0 (1)[c::]:6789 connect error [ 3256.114252][ T5817] ceph: No mds server is up or the cluster is laggy [ 3256.197253][ T2039] usb 5-1: USB disconnect, device number 80 [ 3256.339214][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 3256.339879][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 3258.123005][ T5847] netlink: 'syz.4.9332': attribute type 11 has an invalid length. [ 3260.130649][ T5859] ceph: No mds server is up or the cluster is laggy [ 3260.137943][ T7673] libceph: connect (1)[c::]:6789 error -101 [ 3260.146843][ T7673] libceph: mon0 (1)[c::]:6789 connect error [ 3260.651042][T23653] libceph: connect (1)[c::]:6789 error -101 [ 3260.686931][T23653] libceph: mon0 (1)[c::]:6789 connect error [ 3264.463899][ T5903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3265.690654][T30417] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3266.022025][T30417] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3266.033395][T30417] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3266.045456][T30417] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3266.054903][T30417] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 3266.063011][T30417] usb 6-1: Product: syz [ 3266.154069][ T5905] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3266.166724][T30417] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 3266.486921][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3270.296376][ T5958] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3270.589735][T23653] usb 6-1: USB disconnect, device number 9 [ 3275.041957][ T5993] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3276.414231][ T6008] netlink: 'syz.4.9378': attribute type 1 has an invalid length. [ 3277.228578][ T6016] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3277.392884][ T6020] syz0: rxe_newlink: already configured on wg1 [ 3277.400404][ T6020] pim6reg1: entered allmulticast mode [ 3277.415814][ T6020] pim6reg1: left allmulticast mode [ 3280.842285][ T6053] netlink: 'syz.4.9391': attribute type 1 has an invalid length. [ 3282.266224][ T6068] syz0: rxe_newlink: already configured on wg1 [ 3282.273153][ T6068] pim6reg1: entered allmulticast mode [ 3282.287547][ T6068] pim6reg1: left allmulticast mode [ 3282.513559][ T6075] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3283.564253][ T6091] netlink: 'syz.1.9404': attribute type 1 has an invalid length. [ 3287.305676][ T6138] netlink: 'syz.4.9418': attribute type 1 has an invalid length. [ 3288.019883][ T6142] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 3288.735058][ T6149] infiniband syz0: set active [ 3288.751034][ T6149] bridge_slave_0: left allmulticast mode [ 3288.762603][ T6149] bridge_slave_0: left promiscuous mode [ 3288.781309][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 3289.077276][ T6149] bridge_slave_1: left allmulticast mode [ 3289.263926][ T6149] bridge_slave_1: left promiscuous mode [ 3289.270999][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 3289.296444][ T6149] bond0: (slave bond_slave_0): Releasing backup interface [ 3289.315835][ T6149] bond_slave_0: left promiscuous mode [ 3289.666189][ T6149] bond0: (slave bond_slave_1): Releasing backup interface [ 3289.798775][ T6149] bond_slave_1: left promiscuous mode [ 3289.907321][ T6149] team_slave_0: left promiscuous mode [ 3289.980640][ T6149] team0: Port device team_slave_0 removed [ 3289.988012][ T6149] team_slave_1: left promiscuous mode [ 3290.020528][ T6149] team0: Port device team_slave_1 removed [ 3290.089508][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3290.115754][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3290.207787][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3290.250193][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3290.363612][T30434] wg1 speed is unknown, defaulting to 1000 [ 3291.813414][T30434] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3292.919793][T30434] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 3293.379316][T30434] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 3293.389234][T30434] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 3293.398613][T30434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3293.445246][T30434] pcwd_usb: This driver only supports 1 device [ 3293.500161][ T6186] (null): rxe_set_mtu: Set mtu to 1024 [ 3293.505984][ T6186] rdma_rxe: rxe_newlink: failed to add wg1 [ 3293.549151][ T6186] pim6reg1: entered allmulticast mode [ 3293.555261][ T6186] pim6reg1: left allmulticast mode [ 3295.909991][T30417] usb 3-1: USB disconnect, device number 82 [ 3297.410352][ T6224] syz.5.9445: attempt to access beyond end of device [ 3297.410352][ T6224] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3297.902031][ T6225] ip6_vti0 speed is unknown, defaulting to 1000 [ 3297.902979][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9443'. [ 3298.439593][ T6225] wg1 speed is unknown, defaulting to 1000 [ 3304.430757][ T6295] syz.2.9461: attempt to access beyond end of device [ 3304.430757][ T6295] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 3305.101935][ T6300] ip6_vti0 speed is unknown, defaulting to 1000 [ 3306.363132][ T6300] wg1 speed is unknown, defaulting to 1000 [ 3309.249758][ T6346] fuse: Bad value for 'fd' [ 3310.681861][ T6357] input: syz1 as /devices/virtual/input/input81 [ 3310.713056][T30434] IPVS: starting estimator thread 0... [ 3310.804077][ T6361] IPVS: using max 22 ests per chain, 52800 per kthread [ 3312.563997][ C1] ================================================================== [ 3312.572226][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 3312.580266][ C1] Read of size 2 at addr ffff88805d35342a by task swapper/1/0 [ 3312.580286][ C1] [ 3312.580311][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 3312.580329][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3312.580345][ C1] Call Trace: [ 3312.611003][ C1] [ 3312.613847][ C1] dump_stack_lvl+0x16c/0x230 [ 3312.618542][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 3312.623565][ C1] ? show_regs_print_info+0x20/0x20 [ 3312.628785][ C1] ? load_image+0x3b0/0x3b0 [ 3312.633347][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 3312.638839][ C1] ? __virt_addr_valid+0x18c/0x540 [ 3312.643985][ C1] ? __virt_addr_valid+0x469/0x540 [ 3312.649130][ C1] print_report+0xac/0x200 [ 3312.653581][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 3312.658711][ C1] kasan_report+0x117/0x150 [ 3312.663318][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 3312.668449][ C1] rose_timer_expiry+0x46a/0x4b0 [ 3312.673401][ C1] call_timer_fn+0x16e/0x530 [ 3312.678001][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3312.683781][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 3312.688823][ C1] ? call_timer_fn+0xbf/0x530 [ 3312.693520][ C1] ? __run_timers+0x7d0/0x7d0 [ 3312.698297][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 3312.703338][ C1] __run_timers+0x52d/0x7d0 [ 3312.707927][ C1] ? detach_timer+0x2b0/0x2b0 [ 3312.712604][ C1] ? lock_chain_count+0x20/0x20 [ 3312.717458][ C1] run_timer_softirq+0x67/0xf0 [ 3312.722213][ C1] handle_softirqs+0x280/0x820 [ 3312.726966][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 3312.731714][ C1] ? do_softirq+0x180/0x180 [ 3312.736204][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3312.741392][ C1] __irq_exit_rcu+0xc7/0x190 [ 3312.745976][ C1] ? irq_exit_rcu+0x20/0x20 [ 3312.750461][ C1] irq_exit_rcu+0x9/0x20 [ 3312.754688][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3312.760309][ C1] [ 3312.763234][ C1] [ 3312.766174][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3312.772160][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3312.777901][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 17 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 3312.797515][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 3312.803575][ C1] RAX: a1e1936ece663f00 RBX: ffffffff81619a7b RCX: a1e1936ece663f00 [ 3312.811529][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 3312.819482][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 3312.827531][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7ce8 [ 3312.835509][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037ca780 [ 3312.843467][ C1] ? do_idle+0x1eb/0x510 [ 3312.847714][ C1] default_idle+0x13/0x20 [ 3312.852032][ C1] default_idle_call+0x6c/0xa0 [ 3312.856783][ C1] do_idle+0x1eb/0x510 [ 3312.860920][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 3312.867152][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3312.872344][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 3312.877536][ C1] ? do_idle+0x4ef/0x510 [ 3312.881763][ C1] cpu_startup_entry+0x43/0x60 [ 3312.886514][ C1] start_secondary+0xee/0xf0 [ 3312.891093][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 3312.897170][ C1] [ 3312.900174][ C1] [ 3312.902507][ C1] Allocated by task 4677: [ 3312.906834][ C1] kasan_set_track+0x4e/0x70 [ 3312.911438][ C1] __kasan_kmalloc+0x8f/0xa0 [ 3312.916101][ C1] rose_add_node+0x23a/0xdd0 [ 3312.920767][ C1] rose_rt_ioctl+0xa42/0xfb0 [ 3312.925344][ C1] rose_ioctl+0x3cf/0x8b0 [ 3312.929658][ C1] sock_do_ioctl+0xd7/0x2f0 [ 3312.934241][ C1] sock_ioctl+0x623/0x7a0 [ 3312.938557][ C1] __se_sys_ioctl+0xfd/0x170 [ 3312.943133][ C1] do_syscall_64+0x55/0xb0 [ 3312.947533][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3312.953413][ C1] [ 3312.955719][ C1] Last potentially related work creation: [ 3312.961415][ C1] kasan_save_stack+0x3e/0x60 [ 3312.966076][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 3312.971433][ C1] insert_work+0x3d/0x310 [ 3312.975750][ C1] __queue_work+0xd2c/0x1020 [ 3312.980321][ C1] call_timer_fn+0x16e/0x530 [ 3312.984892][ C1] __run_timers+0x558/0x7d0 [ 3312.989379][ C1] run_timer_softirq+0x67/0xf0 [ 3312.994132][ C1] handle_softirqs+0x280/0x820 [ 3312.998876][ C1] __irq_exit_rcu+0xc7/0x190 [ 3313.003451][ C1] irq_exit_rcu+0x9/0x20 [ 3313.007676][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3313.013300][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3313.019274][ C1] [ 3313.021602][ C1] Second to last potentially related work creation: [ 3313.028194][ C1] kasan_save_stack+0x3e/0x60 [ 3313.032868][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 3313.038222][ C1] insert_work+0x3d/0x310 [ 3313.042549][ C1] __queue_work+0xd2c/0x1020 [ 3313.047148][ C1] call_timer_fn+0x16e/0x530 [ 3313.051725][ C1] __run_timers+0x558/0x7d0 [ 3313.056219][ C1] run_timer_softirq+0x67/0xf0 [ 3313.060990][ C1] handle_softirqs+0x280/0x820 [ 3313.065737][ C1] __irq_exit_rcu+0xc7/0x190 [ 3313.070303][ C1] irq_exit_rcu+0x9/0x20 [ 3313.074541][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3313.080156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3313.086126][ C1] [ 3313.088468][ C1] The buggy address belongs to the object at ffff88805d353400 [ 3313.088468][ C1] which belongs to the cache kmalloc-512 of size 512 [ 3313.102603][ C1] The buggy address is located 42 bytes inside of [ 3313.102603][ C1] freed 512-byte region [ffff88805d353400, ffff88805d353600) [ 3313.116290][ C1] [ 3313.118591][ C1] The buggy address belongs to the physical page: [ 3313.125086][ C1] page:ffffea000174d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805d353400 pfn:0x5d350 [ 3313.136521][ C1] head:ffffea000174d400 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3313.145430][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 3313.153393][ C1] page_type: 0xffffffff() [ 3313.157705][ C1] raw: 00fff00000000840 ffff888017841c80 ffffea0001927e10 ffffea00006bbe10 [ 3313.166299][ C1] raw: ffff88805d353400 000000000010000e 00000001ffffffff 0000000000000000 [ 3313.174898][ C1] page dumped because: kasan: bad access detected [ 3313.181293][ C1] page_owner tracks the page as allocated [ 3313.186981][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5795, tgid 5795 (syz-executor), ts 72213385334, free_ts 16941112084 [ 3313.206230][ C1] post_alloc_hook+0x1cd/0x210 [ 3313.210980][ C1] get_page_from_freelist+0x195c/0x19f0 [ 3313.216507][ C1] __alloc_pages+0x1e3/0x460 [ 3313.221080][ C1] alloc_slab_page+0x5d/0x170 [ 3313.225744][ C1] new_slab+0x87/0x2e0 [ 3313.229829][ C1] ___slab_alloc+0xc6d/0x12f0 [ 3313.234485][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 3313.239926][ C1] __kmalloc+0xa4/0x240 [ 3313.244065][ C1] fib6_info_alloc+0x32/0xe0 [ 3313.248702][ C1] ip6_route_info_create+0x44f/0x1200 [ 3313.254170][ C1] ip6_route_add+0x28/0x130 [ 3313.258671][ C1] addrconf_permanent_addr+0x659/0x980 [ 3313.264249][ C1] addrconf_notify+0x996/0x1010 [ 3313.269098][ C1] notifier_call_chain+0x197/0x390 [ 3313.274202][ C1] __dev_notify_flags+0x18e/0x2e0 [ 3313.279290][ C1] dev_change_flags+0xe8/0x1a0 [ 3313.284042][ C1] page last free stack trace: [ 3313.288692][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 3313.294140][ C1] free_unref_page+0x32/0x2e0 [ 3313.298800][ C1] free_contig_range+0xa1/0x160 [ 3313.303634][ C1] destroy_args+0x87/0x770 [ 3313.308030][ C1] debug_vm_pgtable+0x3cc/0x410 [ 3313.312855][ C1] do_one_initcall+0x1fd/0x750 [ 3313.317603][ C1] do_initcall_level+0x137/0x1f0 [ 3313.322520][ C1] do_initcalls+0x69/0xd0 [ 3313.326833][ C1] kernel_init_freeable+0x3d2/0x570 [ 3313.332016][ C1] kernel_init+0x1d/0x1c0 [ 3313.336331][ C1] ret_from_fork+0x48/0x80 [ 3313.340734][ C1] ret_from_fork_asm+0x11/0x20 [ 3313.345488][ C1] [ 3313.347838][ C1] Memory state around the buggy address: [ 3313.353448][ C1] ffff88805d353300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3313.361487][ C1] ffff88805d353380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3313.369525][ C1] >ffff88805d353400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3313.377584][ C1] ^ [ 3313.382942][ C1] ffff88805d353480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3313.390982][ C1] ffff88805d353500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3313.399021][ C1] ================================================================== [ 3313.407153][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3313.414430][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 3313.422051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3313.432097][ C1] Call Trace: [ 3313.435365][ C1] [ 3313.438197][ C1] dump_stack_lvl+0x16c/0x230 [ 3313.442862][ C1] ? show_regs_print_info+0x20/0x20 [ 3313.448041][ C1] ? load_image+0x3b0/0x3b0 [ 3313.452531][ C1] panic+0x2c0/0x710 [ 3313.456428][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 3313.460939][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 3313.466842][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3313.472732][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3313.477568][ C1] ? print_memory_metadata+0x314/0x400 [ 3313.483020][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 3313.488214][ C1] check_panic_on_warn+0x84/0xa0 [ 3313.493266][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 3313.498402][ C1] end_report+0x6f/0x140 [ 3313.502628][ C1] kasan_report+0x128/0x150 [ 3313.507123][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 3313.512218][ C1] rose_timer_expiry+0x46a/0x4b0 [ 3313.517149][ C1] call_timer_fn+0x16e/0x530 [ 3313.521731][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3313.527353][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 3313.532484][ C1] ? call_timer_fn+0xbf/0x530 [ 3313.537157][ C1] ? __run_timers+0x7d0/0x7d0 [ 3313.541908][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 3313.546978][ C1] __run_timers+0x52d/0x7d0 [ 3313.551497][ C1] ? detach_timer+0x2b0/0x2b0 [ 3313.556158][ C1] ? lock_chain_count+0x20/0x20 [ 3313.560991][ C1] run_timer_softirq+0x67/0xf0 [ 3313.565736][ C1] handle_softirqs+0x280/0x820 [ 3313.570484][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 3313.575226][ C1] ? do_softirq+0x180/0x180 [ 3313.579748][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3313.585016][ C1] __irq_exit_rcu+0xc7/0x190 [ 3313.589584][ C1] ? irq_exit_rcu+0x20/0x20 [ 3313.594079][ C1] irq_exit_rcu+0x9/0x20 [ 3313.598392][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3313.604014][ C1] [ 3313.606934][ C1] [ 3313.609845][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3313.615815][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3313.621521][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 17 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 3313.641114][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 3313.647163][ C1] RAX: a1e1936ece663f00 RBX: ffffffff81619a7b RCX: a1e1936ece663f00 [ 3313.655119][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 3313.663168][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 3313.671298][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7ce8 [ 3313.679306][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037ca780 [ 3313.687269][ C1] ? do_idle+0x1eb/0x510 [ 3313.691509][ C1] default_idle+0x13/0x20 [ 3313.695823][ C1] default_idle_call+0x6c/0xa0 [ 3313.700570][ C1] do_idle+0x1eb/0x510 [ 3313.704619][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 3313.710757][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3313.715937][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 3313.721289][ C1] ? do_idle+0x4ef/0x510 [ 3313.725517][ C1] cpu_startup_entry+0x43/0x60 [ 3313.730273][ C1] start_secondary+0xee/0xf0 [ 3313.734846][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 3313.740902][ C1] [ 3313.744166][ C1] Kernel Offset: disabled [ 3313.748476][ C1] Rebooting in 86400 seconds..