last executing test programs: 4m14.239778514s ago: executing program 5 (id=112): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@local, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "dea68e14fe0356d7"}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 4m10.970648419s ago: executing program 5 (id=119): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 4m9.152627324s ago: executing program 5 (id=124): r0 = userfaultfd(0x801) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4m2.611067249s ago: executing program 5 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m1.531083561s ago: executing program 5 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m58.456486883s ago: executing program 5 (id=158): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_pwait2(r2, &(0x7f00000029c0)=[{}], 0x1, &(0x7f0000002a00), &(0x7f0000002a40)={[0xd3d]}, 0x8) 3m56.79985306s ago: executing program 32 (id=158): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = epoll_create(0x2) epoll_pwait2(r2, &(0x7f00000029c0)=[{}], 0x1, &(0x7f0000002a00), &(0x7f0000002a40)={[0xd3d]}, 0x8) 3m42.632840379s ago: executing program 4 (id=188): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000007) 3m39.856724123s ago: executing program 4 (id=196): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) read$ptp(r0, &(0x7f0000000040)=""/60, 0x3c) 3m37.87092549s ago: executing program 4 (id=200): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m32.226783134s ago: executing program 4 (id=208): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6715, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x800, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x3, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x74) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 3m30.699214572s ago: executing program 4 (id=212): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6715, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m28.830509775s ago: executing program 4 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001a10", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x9, 0x105, @local}}}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0xad6ee90038c5ac90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000108000000092100000001220500090581030000"], 0x0) 3m13.46451362s ago: executing program 33 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001a10", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x9, 0x105, @local}}}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0xad6ee90038c5ac90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000108000000092100000001220500090581030000"], 0x0) 18.868461201s ago: executing program 1 (id=540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) 16.128525054s ago: executing program 1 (id=544): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet6(0xa, 0x3, 0xff) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) 13.547969409s ago: executing program 1 (id=549): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6715, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x800, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x3, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x74) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13.07652988s ago: executing program 0 (id=551): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6715, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x800, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x3, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x74) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.896514438s ago: executing program 2 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 11.260066577s ago: executing program 1 (id=553): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10.85421346s ago: executing program 1 (id=554): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2241, 0x1b86, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'wlan0\x00', @multicast}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r6, 0x0) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) read$watch_queue(r7, 0x0, 0x0) 10.829956411s ago: executing program 0 (id=555): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$sndseq(r1, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xb8}}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000400)) ioctl$KDSKBENT(r4, 0x4b47, 0x0) r6 = getpid() getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000040)=""/138, &(0x7f0000000100)=0x8a) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000200)}, 0x20) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r0, 0x2046}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904"], 0x0) 9.508495235s ago: executing program 1 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 8.793470407s ago: executing program 34 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 8.779526356s ago: executing program 2 (id=559): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x2, 0x0) 8.778534003s ago: executing program 3 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x555) semtimedop(r3, &(0x7f00000002c0)=[{0x0, 0x3, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 7.709985032s ago: executing program 3 (id=561): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) read$ptp(r0, &(0x7f0000000040)=""/60, 0x3c) 7.620264863s ago: executing program 0 (id=562): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 6.500122087s ago: executing program 3 (id=563): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a3000000000090003007379"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) 5.644976081s ago: executing program 0 (id=564): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5.34434979s ago: executing program 0 (id=565): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0x64c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x4fc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4d0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070ebd08ccbfb9eb"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x9, 0x6, "ebe6c48aa90c9330f8"}}}, @TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552be72cdd91a079b7c6ea14bfd9"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0xb5, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf7, 0x2}, {0x0, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xd7}, {0x0, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5b4293921e5bd848", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="320bab098f"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\"', @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xfb, 0x1}, {0x4, 0xfc}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x5b4}, {0x2, 0x1, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xe, 0x1, 0xfff}, {0xb6, 0x1, 0x8, 0x2, 0x1, 0x2}}}, @TCF_EM_META={0x100, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="07753f4957d13932", @TCF_META_TYPE_VAR="7a742fd408", @TCF_META_TYPE_VAR="8f6523", @TCF_META_TYPE_VAR="72c62cbe04"]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="223aae32845e83", @TCF_META_TYPE_VAR="12a9816dc8", @TCF_META_TYPE_VAR="cf", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="92a8213b588cf6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1e247798", @TCF_META_TYPE_VAR='^', @TCF_META_TYPE_VAR="4ba29b5c", @TCF_META_TYPE_VAR="91e2ed63b5", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x2}, {0x2, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xbe25, 0x4, 0x1}, {0xfff8, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="c448", @TCF_META_TYPE_VAR="ffba1ad651", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="42ec44cd626ff4", @TCF_META_TYPE_VAR="1a0a6b6933", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='HD']}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='%']}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="e13c06b6be9ef7", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1ca473966ff2", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="e7c1fa", @TCF_META_TYPE_VAR='b']}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x53}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3e, 0x1, 0x5}, {0x10000, 0x8, 0x3, 0x4, 0x9, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xb66}, {0x1ff, 0x53b, 0xd405, 0x4, 0x7, 0x1, 0x1}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="b4"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x8}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="3cde2991dde3d3693d", @TCF_META_TYPE_VAR="86a24bea", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x1}, {0x2, 0x3, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x80}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0xd0, 0x1, 0x0, 0x0, {{0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xad, 0x5, "717fd78d94f2ed852fef37652539cb21ceefe56bda5c9d0b2f18c424e93d93a028d331862622f23fe3e661fdee25cffc3e74149b8ebe8968a34d40966569d4d3b9bd1063aa6fb89ffeabbc9a629b4ca087aaba154e9583ed42344f62b976b4f8a83a8e13724829ffdb96479f332bd8bc9fb6717030453e1855009de4171eb9c81b2b4a8bbcb54de2f9c9758f94c397f12a65fcbfed71062fcdd7f533892bade363de35d16d96780e35"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf8, 0x1, [@m_simple={0x94, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x60, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.8298018s ago: executing program 2 (id=566): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x39000, 0x0) 4.375759434s ago: executing program 3 (id=567): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2241, 0x1b86, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'wlan0\x00', @multicast}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r6, 0x0) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) read$watch_queue(r7, 0x0, 0x0) 3.162289012s ago: executing program 3 (id=568): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet6(0xa, 0x3, 0xff) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) 3.096611504s ago: executing program 0 (id=569): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2008c2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000800)=0x4) syz_init_net_socket$llc(0x1a, 0x7, 0x0) lseek(r0, 0x8000000000000000, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 2.202800665s ago: executing program 35 (id=569): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2008c2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000800)=0x4) syz_init_net_socket$llc(0x1a, 0x7, 0x0) lseek(r0, 0x8000000000000000, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 1.994377977s ago: executing program 3 (id=571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a) syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast, @multicast, @void, {@generic={0x88f7}}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 1.303458648s ago: executing program 2 (id=572): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) read$ptp(r0, &(0x7f0000000040)=""/60, 0x3c) 207.220227ms ago: executing program 2 (id=573): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = epoll_create(0x2) epoll_pwait2(r2, &(0x7f00000029c0)=[{}], 0x1, &(0x7f0000002a00), &(0x7f0000002a40)={[0xd3d]}, 0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x241, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x111800, 0x0) pwrite64(r4, &(0x7f00000000c0)="bb17368dc6b45ca759d129bb65347c2c8a2d462098e00cdad0d4b5d88b6a2862584c133dc64871d7ee71097349c2bf040303a6e4cb31c255c4c0d1dfc7", 0xfffffffffffffe51, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) 0s ago: executing program 2 (id=574): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 85.359628][ T5829] cgroup: Unknown subsys name 'net' [ 85.537908][ T5829] cgroup: Unknown subsys name 'cpuset' [ 85.548236][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.181389][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.184219][ T975] cfg80211: failed to load regulatory.db [ 91.748573][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.783474][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.790639][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.799540][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.807591][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.816045][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.823430][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.831427][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.832064][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.839771][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.852890][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.854503][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.868199][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.876075][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.877290][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.884106][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.898982][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.907212][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.915231][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.923167][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.940692][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.963812][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.971714][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.972017][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.979100][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.990414][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.008780][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.052879][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.065723][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.076016][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.842232][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.939665][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 92.976509][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.046571][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 93.306446][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 93.369064][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.376872][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.384509][ T5847] bridge_slave_0: entered allmulticast mode [ 93.391986][ T5847] bridge_slave_0: entered promiscuous mode [ 93.476403][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.486721][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.494716][ T5847] bridge_slave_1: entered allmulticast mode [ 93.502302][ T5847] bridge_slave_1: entered promiscuous mode [ 93.519443][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 93.546840][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.554135][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.561332][ T5853] bridge_slave_0: entered allmulticast mode [ 93.569087][ T5853] bridge_slave_0: entered promiscuous mode [ 93.638162][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.645928][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.653351][ T5853] bridge_slave_1: entered allmulticast mode [ 93.660778][ T5853] bridge_slave_1: entered promiscuous mode [ 93.691083][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.698270][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.705568][ T5852] bridge_slave_0: entered allmulticast mode [ 93.713234][ T5852] bridge_slave_0: entered promiscuous mode [ 93.751971][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.759156][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.766980][ T5846] bridge_slave_0: entered allmulticast mode [ 93.775212][ T5846] bridge_slave_0: entered promiscuous mode [ 93.829372][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.845613][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.852849][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.859988][ T5852] bridge_slave_1: entered allmulticast mode [ 93.868176][ T5852] bridge_slave_1: entered promiscuous mode [ 93.877545][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.890846][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.900325][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.907954][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.915305][ T5846] bridge_slave_1: entered allmulticast mode [ 93.926805][ T5846] bridge_slave_1: entered promiscuous mode [ 93.941647][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.983531][ T51] Bluetooth: hci3: command tx timeout [ 94.053210][ T5855] Bluetooth: hci5: command tx timeout [ 94.053275][ T5848] Bluetooth: hci2: command tx timeout [ 94.058891][ T51] Bluetooth: hci1: command tx timeout [ 94.118517][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.130509][ T5847] team0: Port device team_slave_0 added [ 94.133303][ T5848] Bluetooth: hci0: command tx timeout [ 94.141649][ T51] Bluetooth: hci4: command tx timeout [ 94.174253][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.189378][ T5853] team0: Port device team_slave_0 added [ 94.196000][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.204228][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.211419][ T5854] bridge_slave_0: entered allmulticast mode [ 94.219454][ T5854] bridge_slave_0: entered promiscuous mode [ 94.230333][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.259898][ T5847] team0: Port device team_slave_1 added [ 94.268228][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.310316][ T5853] team0: Port device team_slave_1 added [ 94.348462][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.359189][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.366888][ T5854] bridge_slave_1: entered allmulticast mode [ 94.376210][ T5854] bridge_slave_1: entered promiscuous mode [ 94.444965][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.452119][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.459929][ T5856] bridge_slave_0: entered allmulticast mode [ 94.467931][ T5856] bridge_slave_0: entered promiscuous mode [ 94.476121][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.483742][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.509923][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.542508][ T5852] team0: Port device team_slave_0 added [ 94.567953][ T5846] team0: Port device team_slave_0 added [ 94.577400][ T5846] team0: Port device team_slave_1 added [ 94.584823][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.592096][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.599904][ T5856] bridge_slave_1: entered allmulticast mode [ 94.608427][ T5856] bridge_slave_1: entered promiscuous mode [ 94.616271][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.623612][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.649676][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.678900][ T5852] team0: Port device team_slave_1 added [ 94.685559][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.692508][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.718795][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.731701][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.738788][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.765139][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.835204][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.869136][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.876995][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.903035][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.915789][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.922951][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.949415][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.985277][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.022112][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.029219][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.055656][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.068483][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.075769][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.102173][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.126312][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.141174][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.265619][ T5854] team0: Port device team_slave_0 added [ 95.277553][ T5853] hsr_slave_0: entered promiscuous mode [ 95.284965][ T5853] hsr_slave_1: entered promiscuous mode [ 95.314307][ T5846] hsr_slave_0: entered promiscuous mode [ 95.320821][ T5846] hsr_slave_1: entered promiscuous mode [ 95.329759][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.337539][ T5846] Cannot create hsr debugfs directory [ 95.389633][ T5854] team0: Port device team_slave_1 added [ 95.450255][ T5856] team0: Port device team_slave_0 added [ 95.459569][ T5856] team0: Port device team_slave_1 added [ 95.471725][ T5847] hsr_slave_0: entered promiscuous mode [ 95.478300][ T5847] hsr_slave_1: entered promiscuous mode [ 95.485097][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.492652][ T5847] Cannot create hsr debugfs directory [ 95.565057][ T5852] hsr_slave_0: entered promiscuous mode [ 95.571593][ T5852] hsr_slave_1: entered promiscuous mode [ 95.578156][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.586049][ T5852] Cannot create hsr debugfs directory [ 95.617539][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.624942][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.650898][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.720219][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.730479][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.760015][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.811972][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.819472][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.846127][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.859338][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.866383][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.892380][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.052923][ T51] Bluetooth: hci3: command tx timeout [ 96.133822][ T5848] Bluetooth: hci2: command tx timeout [ 96.133836][ T5855] Bluetooth: hci5: command tx timeout [ 96.139286][ T51] Bluetooth: hci1: command tx timeout [ 96.159843][ T5854] hsr_slave_0: entered promiscuous mode [ 96.166906][ T5854] hsr_slave_1: entered promiscuous mode [ 96.173707][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.181270][ T5854] Cannot create hsr debugfs directory [ 96.213402][ T51] Bluetooth: hci4: command tx timeout [ 96.218822][ T51] Bluetooth: hci0: command tx timeout [ 96.274653][ T5856] hsr_slave_0: entered promiscuous mode [ 96.281100][ T5856] hsr_slave_1: entered promiscuous mode [ 96.287781][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.295549][ T5856] Cannot create hsr debugfs directory [ 96.735696][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.767072][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.799604][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.830922][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.893898][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.909547][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.921252][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.932492][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.037400][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.055869][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.069788][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.090208][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.217085][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.240820][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.252508][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.272649][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.441392][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.468756][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.479889][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.527144][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.560288][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.612062][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.627759][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.657817][ T5856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.682522][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.689797][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.714669][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.721615][ T5856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.737549][ T5856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.749702][ T5856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.767815][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.775054][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.840561][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.879122][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.918967][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.926189][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.937182][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.944410][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.954436][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.961614][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.050057][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.057370][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.139064][ T51] Bluetooth: hci3: command tx timeout [ 98.169482][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.214045][ T51] Bluetooth: hci5: command tx timeout [ 98.214137][ T5855] Bluetooth: hci1: command tx timeout [ 98.219533][ T51] Bluetooth: hci2: command tx timeout [ 98.290419][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.300291][ T51] Bluetooth: hci4: command tx timeout [ 98.307344][ T5848] Bluetooth: hci0: command tx timeout [ 98.338619][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.346047][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.461888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.469949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.500136][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.639905][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.743938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.751197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.791282][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.816206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.823434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.866972][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.950985][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.979396][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.066891][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.074163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.102630][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.122613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.129936][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.487350][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.631255][ T5846] veth0_vlan: entered promiscuous mode [ 99.728375][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.750263][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.760475][ T5852] veth0_vlan: entered promiscuous mode [ 99.793951][ T5846] veth1_vlan: entered promiscuous mode [ 99.885400][ T5852] veth1_vlan: entered promiscuous mode [ 99.937106][ T5854] veth0_vlan: entered promiscuous mode [ 99.992630][ T5846] veth0_macvtap: entered promiscuous mode [ 100.026548][ T5854] veth1_vlan: entered promiscuous mode [ 100.056318][ T5846] veth1_macvtap: entered promiscuous mode [ 100.064809][ T5853] veth0_vlan: entered promiscuous mode [ 100.085683][ T5852] veth0_macvtap: entered promiscuous mode [ 100.101891][ T5852] veth1_macvtap: entered promiscuous mode [ 100.118616][ T5847] veth0_vlan: entered promiscuous mode [ 100.131947][ T5853] veth1_vlan: entered promiscuous mode [ 100.174611][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.197898][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.207204][ T5847] veth1_vlan: entered promiscuous mode [ 100.213392][ T51] Bluetooth: hci3: command tx timeout [ 100.241494][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.304641][ T51] Bluetooth: hci1: command tx timeout [ 100.310123][ T51] Bluetooth: hci5: command tx timeout [ 100.316219][ T5848] Bluetooth: hci2: command tx timeout [ 100.331470][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.358810][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.373080][ T51] Bluetooth: hci4: command tx timeout [ 100.378501][ T51] Bluetooth: hci0: command tx timeout [ 100.415365][ T5853] veth0_macvtap: entered promiscuous mode [ 100.430451][ T5854] veth0_macvtap: entered promiscuous mode [ 100.442325][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.459516][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.469368][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.487958][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.501232][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.510595][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.519349][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.528079][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.542240][ T5854] veth1_macvtap: entered promiscuous mode [ 100.554298][ T5853] veth1_macvtap: entered promiscuous mode [ 100.656783][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.713477][ T5847] veth0_macvtap: entered promiscuous mode [ 100.727210][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.740547][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.753962][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.806318][ T5847] veth1_macvtap: entered promiscuous mode [ 100.822490][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.831899][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.840839][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.849634][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.867925][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.876920][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.885879][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.888223][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.903950][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.912656][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.989442][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.021922][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.078822][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.087706][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.098002][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.107140][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.120225][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.128312][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.171187][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.180285][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.224632][ T5856] veth0_vlan: entered promiscuous mode [ 101.263131][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.271005][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.294649][ T5856] veth1_vlan: entered promiscuous mode [ 101.357331][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.388775][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.403171][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.504844][ T5856] veth0_macvtap: entered promiscuous mode [ 101.543129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.586815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.689163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.894017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.001191][ T5856] veth1_macvtap: entered promiscuous mode [ 102.012032][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.032370][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.073400][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.128771][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.192494][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.412560][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.887904][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.993679][ T5856] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.089699][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.106714][ T5856] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.143779][ T5856] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.195233][ T5856] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.351971][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.363262][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.371749][ T6005] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.532846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.036482][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.083046][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.619300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.632759][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.700068][ T6011] random: crng reseeded on system resumption [ 105.111738][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.281577][ T4653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.307459][ T9] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 105.325249][ T4653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.343855][ T9] usb 4-1: config 0 has no interface number 0 [ 105.603906][ T9] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 105.629438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.606034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.623897][ T9] usb 4-1: Product: syz [ 106.626907][ T6035] overlayfs: overlapping lowerdir path [ 106.637342][ T6036] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 106.643097][ T9] usb 4-1: Manufacturer: syz [ 106.650084][ T9] usb 4-1: SerialNumber: syz [ 106.971620][ T6038] tipc: Started in network mode [ 106.976816][ T6038] tipc: Node identity 4a7f5ecabf35, cluster identity 4711 [ 107.003431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.012022][ T6038] tipc: Enabled bearer , priority 0 [ 107.038566][ T9] usb 4-1: config 0 descriptor?? [ 107.493070][ T9] usb 4-1: probing VID:PID(2201:012C) [ 107.518432][ T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 107.565045][ T6045] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 107.621756][ T6020] tipc: Disabling bearer [ 107.631744][ T9] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 107.634790][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.668623][ T6049] netlink: 'syz.5.6': attribute type 21 has an invalid length. [ 107.690967][ T9] usb 4-1: USB disconnect, device number 2 [ 107.732324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.793187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.833534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.861567][ T6045] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.894364][ T6049] netlink: 'syz.5.6': attribute type 1 has an invalid length. [ 108.903233][ T6049] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6'. [ 110.821085][ T6065] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.895510][ T6075] loop6: detected capacity change from 0 to 524287487 [ 110.912385][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.922166][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.930987][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.940275][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.949298][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.958614][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.967493][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.976147][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.984594][ T6075] ldm_validate_partition_table(): Disk read failed. [ 110.991657][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.000335][ T6075] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.012436][ T6075] Dev loop6: unable to read RDB block 0 [ 111.026211][ T6075] loop6: unable to read partition table [ 111.033655][ T6075] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 112.071921][ T6087] mac80211_hwsim hwsim12 »»»»»»: renamed from wlan0 (while UP) [ 114.268920][ T6097] overlayfs: missing 'lowerdir' [ 116.833397][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.586519][ T6121] process 'syz.4.33' launched './file2' with NULL argv: empty string added [ 117.665993][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 118.064737][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.141281][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.276102][ T24] usb 2-1: can't set config #252, error -71 [ 118.333085][ T24] usb 2-1: USB disconnect, device number 2 [ 118.414370][ T5942] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.537540][ T6130] fuse: Bad value for 'fd' [ 118.706124][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.727851][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.752542][ T5942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.818214][ T5942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.922457][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.053820][ T5942] usb 1-1: Product: syz [ 119.115919][ T6140] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 119.157809][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 119.184627][ T5942] usb 1-1: Manufacturer: syz [ 119.525932][ T5942] usb 1-1: SerialNumber: syz [ 119.602200][ T5942] cdc_mbim 1-1:1.0: skipping garbage [ 119.622988][ T5942] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 119.646071][ T5942] cdc_mbim 1-1:1.0: bind() failure [ 121.054962][ T6152] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 (while UP) [ 121.931735][ T24] usb 1-1: USB disconnect, device number 2 [ 122.428614][ T6164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.440555][ T6164] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 128.038081][ T6190] loop6: detected capacity change from 0 to 524287487 [ 128.121235][ T6190] buffer_io_error: 6 callbacks suppressed [ 128.121255][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.107635][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.128964][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.195161][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.250871][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.261855][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.275197][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.287196][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.297294][ T6190] ldm_validate_partition_table(): Disk read failed. [ 129.305403][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.316734][ T6190] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.502931][ T6190] Dev loop6: unable to read RDB block 0 [ 129.558677][ T6190] loop6: unable to read partition table [ 129.569201][ T6190] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 129.659366][ T6205] fuse: Bad value for 'fd' [ 130.754539][ T6204] syz.0.53 (6204): drop_caches: 2 [ 131.661040][ T6222] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.673574][ T6222] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.137884][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.241456][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.573802][ T6253] loop6: detected capacity change from 0 to 524287487 [ 134.610361][ T5845] buffer_io_error: 7 callbacks suppressed [ 134.610377][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.628229][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.640533][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.650699][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.660028][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.671557][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.679819][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.689998][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.702595][ T5845] ldm_validate_partition_table(): Disk read failed. [ 134.709599][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.718287][ T5845] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.727175][ T5845] Dev loop6: unable to read RDB block 0 [ 134.733680][ T5845] loop6: unable to read partition table [ 134.742059][ T6253] ldm_validate_partition_table(): Disk read failed. [ 134.752219][ T6253] Dev loop6: unable to read RDB block 0 [ 134.760842][ T6253] loop6: unable to read partition table [ 134.772396][ T6253] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 136.273389][ T6276] lo speed is unknown, defaulting to 1000 [ 136.279852][ T6276] lo speed is unknown, defaulting to 1000 [ 136.294530][ T6276] lo speed is unknown, defaulting to 1000 [ 136.351535][ T6276] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.522907][ T6276] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.910808][ T6276] lo speed is unknown, defaulting to 1000 [ 136.920359][ T6276] lo speed is unknown, defaulting to 1000 [ 136.928215][ T6276] lo speed is unknown, defaulting to 1000 [ 136.935469][ T6276] lo speed is unknown, defaulting to 1000 [ 136.942604][ T6276] lo speed is unknown, defaulting to 1000 [ 136.949820][ T6276] lo speed is unknown, defaulting to 1000 [ 138.110653][ T6297] loop6: detected capacity change from 0 to 524287487 [ 138.156608][ T6299] openvswitch: netlink: Flow key attr not present in new flow. [ 138.171391][ T6297] ldm_validate_partition_table(): Disk read failed. [ 138.196629][ T6297] Dev loop6: unable to read RDB block 0 [ 138.220191][ T6297] loop6: unable to read partition table [ 138.258534][ T6297] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 138.308899][ T5210] udevd[5210]: worker [5845] terminated by signal 33 (Unknown signal 33) [ 138.331261][ T5210] udevd[5210]: worker [5845] failed while handling '/devices/virtual/block/loop6' [ 140.148600][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 140.156115][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 140.308055][ T6323] ceph: No mds server is up or the cluster is laggy [ 140.419211][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 140.432898][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 141.492942][ T6343] openvswitch: netlink: Flow key attr not present in new flow. [ 142.487292][ T6355] Zero length message leads to an empty skb [ 142.600779][ T5949] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.214692][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.112818][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 145.158129][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.723856][ T5941] usb 3-1: string descriptor 0 read error: -71 [ 145.730737][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 145.756574][ T5941] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 145.782201][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 145.983389][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.020328][ T5941] usb 3-1: config 0 descriptor?? [ 146.043089][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 146.066091][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 146.262882][ T6375] ceph: No mds server is up or the cluster is laggy [ 147.013932][ T5941] usb 3-1: can't set config #0, error -71 [ 147.513423][ T5941] usb 3-1: USB disconnect, device number 2 [ 147.653885][ T6396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.726348][ T6399] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2 [ 151.410267][ T30] audit: type=1800 audit(1752930185.239:2): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="bus" dev="overlay" ino=138 res=0 errno=0 [ 152.390517][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 152.398508][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 152.876716][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 152.893906][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 152.920610][ T6434] ceph: No mds server is up or the cluster is laggy [ 153.253742][ T6448] fuse: Bad value for 'fd' [ 154.042979][ T6028] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.402797][ T6028] usb 4-1: Using ep0 maxpacket: 16 [ 155.567332][ T6028] usb 4-1: device descriptor read/all, error -71 [ 155.828466][ T30] audit: type=1800 audit(1752930189.679:3): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="bus" dev="overlay" ino=168 res=0 errno=0 [ 158.035800][ T6495] fuse: Bad value for 'fd' [ 159.292134][ T6499] fuse: Bad value for 'fd' [ 159.920445][ T30] audit: type=1800 audit(1752930193.729:4): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name="bus" dev="overlay" ino=166 res=0 errno=0 [ 161.440982][ T1021] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.607996][ T1021] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.872907][ T6525] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 162.860128][ T1021] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.349630][ T1021] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.439465][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 164.445781][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 164.759216][ T6544] fuse: Bad value for 'fd' [ 164.997935][ T6537] ceph: No mds server is up or the cluster is laggy [ 165.294620][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 165.322980][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 166.716083][ T30] audit: type=1800 audit(1752930200.569:5): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="bus" dev="overlay" ino=195 res=0 errno=0 [ 166.869258][ T1021] bridge_slave_1: left allmulticast mode [ 166.900753][ T1021] bridge_slave_1: left promiscuous mode [ 166.909155][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.919931][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.921716][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.935911][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.016694][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.053483][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.123751][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 167.815511][ T1021] bridge_slave_0: left allmulticast mode [ 167.821202][ T1021] bridge_slave_0: left promiscuous mode [ 167.949465][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.040344][ T6570] fuse: Bad value for 'fd' [ 169.172949][ T51] Bluetooth: hci5: command tx timeout [ 169.560684][ T6576] overlayfs: failed to resolve './file0': -2 [ 171.574061][ T51] Bluetooth: hci5: command tx timeout [ 171.821037][ T6589] fuse: Bad value for 'fd' [ 172.607330][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 173.570681][ T6604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.570744][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 173.579189][ T6604] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 173.752933][ T51] Bluetooth: hci5: command tx timeout [ 173.757526][ T6595] ceph: No mds server is up or the cluster is laggy [ 174.386622][ T6604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.392570][ T6604] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 174.472109][ T6604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.478263][ T6604] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 174.511267][ T6604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.518787][ T6604] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 174.528778][ T6604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.534865][ T6604] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 174.544736][ T6604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 174.550638][ T6604] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 174.575249][ T30] audit: type=1800 audit(1752930208.419:6): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="bus" dev="overlay" ino=226 res=0 errno=0 [ 174.812332][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.831915][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.850097][ T1021] bond0 (unregistering): Released all slaves [ 175.083821][ T6581] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 176.569392][ T6556] lo speed is unknown, defaulting to 1000 [ 176.657343][ T6625] fuse: Bad value for 'fd' [ 177.493722][ T6640] fuse: Bad value for 'fd' [ 179.102530][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 179.119120][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 179.252126][ T1021] hsr_slave_0: left promiscuous mode [ 179.280563][ T1021] hsr_slave_1: left promiscuous mode [ 179.299343][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.330075][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.352623][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.374798][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.418848][ T9] libceph: connect (1)[c::]:6789 error -101 [ 179.447544][ T1021] veth1_macvtap: left promiscuous mode [ 179.453264][ T1021] veth0_macvtap: left promiscuous mode [ 179.459120][ T1021] veth1_vlan: left promiscuous mode [ 179.461278][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 179.472929][ T1021] veth0_vlan: left promiscuous mode [ 179.592367][ T6647] ceph: No mds server is up or the cluster is laggy [ 179.749112][ T30] audit: type=1800 audit(1752930213.579:7): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.198" name="bus" dev="overlay" ino=192 res=0 errno=0 [ 179.835170][ T6660] loop6: detected capacity change from 0 to 524287487 [ 179.847721][ T6660] buffer_io_error: 39 callbacks suppressed [ 179.847764][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.862154][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.870695][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.879857][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.888582][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.897452][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.906225][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.914914][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.924470][ T6660] ldm_validate_partition_table(): Disk read failed. [ 179.932119][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.940979][ T6660] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.950849][ T6660] Dev loop6: unable to read RDB block 0 [ 179.960227][ T6660] loop6: unable to read partition table [ 179.967775][ T6660] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 180.481952][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 180.489529][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 183.553946][ T6681] siw: device registration error -23 [ 185.053584][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 185.139877][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 186.874351][ T6707] fuse: Bad value for 'fd' [ 187.016938][ T6708] fuse: Bad value for 'fd' [ 188.890238][ T6721] fuse: Bad value for 'fd' [ 189.650072][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 193.599279][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.736725][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.191072][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.210874][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.219491][ T6556] bridge_slave_0: entered allmulticast mode [ 194.228610][ T6556] bridge_slave_0: entered promiscuous mode [ 194.326880][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.981977][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.016019][ T6556] bridge_slave_1: entered allmulticast mode [ 195.061173][ T6556] bridge_slave_1: entered promiscuous mode [ 195.417689][ T6770] fuse: Bad value for 'fd' [ 196.702426][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.477751][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.736762][ T6556] team0: Port device team_slave_0 added [ 198.786790][ T6556] team0: Port device team_slave_1 added [ 200.818693][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.713297][ T6805] siw: device registration error -23 [ 201.879993][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.082965][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.096839][ T6802] tipc: Started in network mode [ 202.226018][ T6802] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 202.233503][ T6802] tipc: Enabled bearer , priority 10 [ 202.483140][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.490133][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.799841][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.643061][ T5988] tipc: Node number set to 10005162 [ 204.021966][ T6556] hsr_slave_0: entered promiscuous mode [ 204.221406][ T6556] hsr_slave_1: entered promiscuous mode [ 204.233555][ T6556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.244645][ T6556] Cannot create hsr debugfs directory [ 206.411306][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 206.491845][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 206.703515][ T6834] netlink: 'syz.1.242': attribute type 5 has an invalid length. [ 206.832649][ T6845] xt_TCPMSS: Only works on TCP SYN packets [ 206.849899][ T6845] netlink: 9 bytes leftover after parsing attributes in process `syz.2.247'. [ 206.948466][ T6846] netlink: 5 bytes leftover after parsing attributes in process `syz.2.247'. [ 211.643130][ T6845] gretap0: entered promiscuous mode [ 211.658420][ T6846] 0ªX¹¦D: renamed from gretap0 [ 211.697287][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.713850][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.721877][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.730026][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.737857][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.749044][ T6846] 0ªX¹¦D: left promiscuous mode [ 211.754388][ T6846] 0ªX¹¦D: entered allmulticast mode [ 211.761195][ T6846] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 211.928098][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.186427][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.854662][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.896812][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.917311][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.524523][ T6857] lo speed is unknown, defaulting to 1000 [ 215.013341][ T51] Bluetooth: hci6: command tx timeout [ 215.888315][ T5847] syz-executor (5847) used greatest stack depth: 20152 bytes left [ 216.465742][ T6093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.817549][ T6556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.012266][ T6556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.097475][ T6556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.097809][ T51] Bluetooth: hci6: command tx timeout [ 217.245172][ T6093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.394067][ T6556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.773319][ T6093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.003359][ T6093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.176666][ T51] Bluetooth: hci6: command tx timeout [ 220.608633][ T6931] fuse: Bad value for 'fd' [ 221.290386][ T51] Bluetooth: hci6: command tx timeout [ 221.471683][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 222.365287][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 222.374517][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 222.383502][ T6942] netlink: 'syz.0.269': attribute type 5 has an invalid length. [ 224.262801][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.273300][ T6093] bridge_slave_1: left allmulticast mode [ 224.278969][ T6093] bridge_slave_1: left promiscuous mode [ 224.462121][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.582959][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 224.786004][ T6093] bridge_slave_0: left allmulticast mode [ 224.810184][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.828784][ T6093] bridge_slave_0: left promiscuous mode [ 224.913330][ T6963] fuse: Bad value for 'fd' [ 225.632988][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.667361][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.703660][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.711886][ T9] usb 2-1: Product: syz [ 225.794476][ T9] usb 2-1: Manufacturer: syz [ 225.832776][ T9] usb 2-1: SerialNumber: syz [ 226.054124][ T9] usb 2-1: config 0 descriptor?? [ 226.784249][ T9] usb 2-1: can't set config #0, error -71 [ 226.818281][ T9] usb 2-1: USB disconnect, device number 4 [ 227.099356][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.107538][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.115112][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.126228][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.140763][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.298626][ T6975] loop6: detected capacity change from 0 to 524287487 [ 227.306213][ T6975] buffer_io_error: 6 callbacks suppressed [ 227.306229][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.320050][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.328001][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.337953][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.345912][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.353938][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.361925][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.370006][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.377968][ T6975] ldm_validate_partition_table(): Disk read failed. [ 227.384701][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.392665][ T6975] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.400834][ T6975] Dev loop6: unable to read RDB block 0 [ 227.406933][ T6975] loop6: unable to read partition table [ 227.412889][ T6975] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 229.189131][ T51] Bluetooth: hci1: command tx timeout [ 229.310191][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.408808][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.443345][ T6093] bond0 (unregistering): Released all slaves [ 230.848973][ T6093] tipc: Left network mode [ 231.252965][ T51] Bluetooth: hci1: command tx timeout [ 233.352893][ T51] Bluetooth: hci1: command tx timeout [ 233.358653][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.434817][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.499886][ T6857] bridge_slave_0: entered allmulticast mode [ 233.524788][ T6857] bridge_slave_0: entered promiscuous mode [ 233.546093][ T6973] lo speed is unknown, defaulting to 1000 [ 233.874223][ T7023] fuse: Bad value for 'fd' [ 235.095444][ T7025] siw: device registration error -23 [ 235.143504][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.205418][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.225324][ T6857] bridge_slave_1: entered allmulticast mode [ 235.243755][ T6857] bridge_slave_1: entered promiscuous mode [ 235.412950][ T51] Bluetooth: hci1: command tx timeout [ 235.604768][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 236.232345][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 236.273683][ T7035] netlink: 'syz.3.293': attribute type 5 has an invalid length. [ 237.602646][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.669500][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.887632][ T6093] hsr_slave_0: left promiscuous mode [ 237.916941][ T6093] hsr_slave_1: left promiscuous mode [ 237.934497][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.948492][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.958649][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.971514][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.009120][ T6093] veth1_macvtap: left promiscuous mode [ 238.015157][ T6093] veth0_macvtap: left promiscuous mode [ 238.023805][ T6093] veth1_vlan: left promiscuous mode [ 238.029428][ T6093] veth0_vlan: left promiscuous mode [ 240.279336][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 240.306138][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 240.482046][ T7067] ceph: No mds server is up or the cluster is laggy [ 240.608791][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 240.642504][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 241.410717][ T6857] team0: Port device team_slave_0 added [ 241.457959][ T6857] team0: Port device team_slave_1 added [ 242.461196][ T7079] xt_TCPMSS: Only works on TCP SYN packets [ 242.696340][ T7079] netlink: 9 bytes leftover after parsing attributes in process `syz.0.303'. [ 242.947024][ T7082] netlink: 5 bytes leftover after parsing attributes in process `syz.0.303'. [ 245.529228][ T7079] gretap0: entered promiscuous mode [ 245.540594][ T7082] 0ªX¹¦D: renamed from gretap0 [ 245.563933][ T7082] 0ªX¹¦D: left promiscuous mode [ 245.569253][ T7082] 0ªX¹¦D: entered allmulticast mode [ 245.579541][ T7082] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 246.651426][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.660760][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.924178][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.159420][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.371502][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.472993][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.546775][ T7108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.312'. [ 248.162306][ T6973] chnl_net:caif_netlink_parms(): no params data found [ 248.197907][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 248.207472][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 248.432640][ T6857] hsr_slave_0: entered promiscuous mode [ 248.450515][ T6857] hsr_slave_1: entered promiscuous mode [ 248.475806][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 248.486240][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.509751][ T6857] Cannot create hsr debugfs directory [ 248.512493][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 248.593953][ T7126] ceph: No mds server is up or the cluster is laggy [ 249.957583][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.967191][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.974787][ T6973] bridge_slave_0: entered allmulticast mode [ 249.988835][ T6973] bridge_slave_0: entered promiscuous mode [ 250.064324][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.082440][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.101156][ T6973] bridge_slave_1: entered allmulticast mode [ 250.130910][ T6973] bridge_slave_1: entered promiscuous mode [ 250.180059][ T5988] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 250.363114][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 250.400561][ T5988] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 250.429792][ T5988] usb 3-1: config 2 has no interface number 0 [ 250.451867][ T5988] usb 3-1: config 2 interface 31 has no altsetting 0 [ 250.621057][ T5988] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 250.630367][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.638575][ T5988] usb 3-1: Product: syz [ 250.644784][ T5988] usb 3-1: Manufacturer: syz [ 250.649476][ T5988] usb 3-1: SerialNumber: syz [ 250.804290][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.703492][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.046265][ T5988] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 252.285378][ T5988] usb 3-1: USB disconnect, device number 3 [ 252.898032][ T6973] team0: Port device team_slave_0 added [ 253.044873][ T6973] team0: Port device team_slave_1 added [ 253.160527][ T5988] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 253.346281][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 253.666149][ T5988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.689638][ T5988] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 253.710194][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 253.721973][ T5988] usb 2-1: Product: syz [ 253.921587][ T5988] usb 2-1: Manufacturer: syz [ 253.926829][ T5988] usb 2-1: SerialNumber: syz [ 253.945007][ T5988] usb 2-1: config 0 descriptor?? [ 254.650372][ T5834] usb 2-1: USB disconnect, device number 5 [ 254.774875][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.014306][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.030294][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.048100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.082236][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.106235][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.117030][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.332487][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.441060][ T6857] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.549630][ T7191] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 255.803053][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 255.840341][ T7188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 255.887435][ T7197] loop6: detected capacity change from 0 to 524287487 [ 255.894955][ T7197] buffer_io_error: 7 callbacks suppressed [ 255.894971][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.910385][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.918389][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.926396][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.934535][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.942672][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.950724][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.958801][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.966805][ T7197] ldm_validate_partition_table(): Disk read failed. [ 255.973930][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.981968][ T7197] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.990172][ T7197] Dev loop6: unable to read RDB block 0 [ 255.996344][ T7197] loop6: unable to read partition table [ 256.002848][ T7197] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 256.290958][ T6857] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.324879][ T6857] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.336121][ T1021] bridge_slave_1: left allmulticast mode [ 256.341799][ T1021] bridge_slave_1: left promiscuous mode [ 256.352210][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.370377][ T1021] bridge_slave_0: left allmulticast mode [ 256.379170][ T1021] bridge_slave_0: left promiscuous mode [ 256.389525][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.945539][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.996872][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.015199][ T1021] bond0 (unregistering): Released all slaves [ 258.035962][ T7191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 258.138534][ T6857] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.336466][ T7218] fuse: Bad value for 'fd' [ 259.575022][ T6973] hsr_slave_0: entered promiscuous mode [ 259.646707][ T6973] hsr_slave_1: entered promiscuous mode [ 259.670736][ T6973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.732885][ T6973] Cannot create hsr debugfs directory [ 260.623648][ T1021] hsr_slave_0: left promiscuous mode [ 260.707874][ T7236] fuse: Bad value for 'fd' [ 261.550373][ T1021] hsr_slave_1: left promiscuous mode [ 261.563847][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.622886][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.249340][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 263.808548][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 265.521603][ T7270] fuse: Bad value for 'fd' [ 267.617397][ T5834] hid-generic 0010:0004:0000.0001: collection stack underflow [ 267.867607][ T7278] fuse: Bad value for 'fd' [ 267.893676][ T5834] hid-generic 0010:0004:0000.0001: item 0 4 0 12 parsing failed [ 267.920268][ T5834] hid-generic 0010:0004:0000.0001: probe with driver hid-generic failed with error -22 [ 270.240557][ T7293] No control pipe specified [ 272.691432][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.703769][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.727349][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.742945][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.757832][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.774929][ T7320] fuse: Bad value for 'fd' [ 273.059900][ T7315] lo speed is unknown, defaulting to 1000 [ 273.389679][ T7327] fuse: Bad value for 'fd' [ 274.862781][ T51] Bluetooth: hci5: command tx timeout [ 276.181699][ T7341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 276.195205][ T7341] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.942847][ T51] Bluetooth: hci5: command tx timeout [ 276.952836][ T6973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.143813][ T6973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.170994][ T6973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.453666][ T6973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.107650][ T51] Bluetooth: hci5: command tx timeout [ 279.220831][ T5988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.393646][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 279.404128][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.590927][ T5988] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.397539][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.407453][ T5988] usb 1-1: Product: syz [ 280.411660][ T5988] usb 1-1: Manufacturer: syz [ 280.416717][ T5988] usb 1-1: SerialNumber: syz [ 280.545457][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 280.585969][ T5988] usb 1-1: config 0 descriptor?? [ 280.633283][ T59] bridge_slave_1: left allmulticast mode [ 280.796415][ T59] bridge_slave_1: left promiscuous mode [ 281.222938][ T51] Bluetooth: hci5: command tx timeout [ 281.643063][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.674118][ T5988] usb 1-1: USB disconnect, device number 3 [ 281.824103][ T59] bridge_slave_0: left allmulticast mode [ 281.829855][ T59] bridge_slave_0: left promiscuous mode [ 281.909890][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.202077][ T7391] loop6: detected capacity change from 0 to 524287487 [ 282.209463][ T7391] buffer_io_error: 7 callbacks suppressed [ 282.209475][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.224136][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.232012][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.240334][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.248231][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.256177][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.264164][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.272052][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.280005][ T7391] ldm_validate_partition_table(): Disk read failed. [ 282.286713][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.294727][ T7391] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.302831][ T7391] Dev loop6: unable to read RDB block 0 [ 282.308811][ T7391] loop6: unable to read partition table [ 282.314856][ T7391] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 286.036147][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.123383][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.257556][ T59] bond0 (unregistering): Released all slaves [ 287.791546][ T7413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.799067][ T7413] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 288.105189][ T7413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.111190][ T7413] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 288.310430][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.335142][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.401676][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.442252][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.467644][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.500499][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.543365][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.552043][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.576869][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.590172][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.282858][ T59] hsr_slave_0: left promiscuous mode [ 290.335062][ T59] hsr_slave_1: left promiscuous mode [ 290.341365][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.350800][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.382888][ T5848] Bluetooth: hci6: command tx timeout [ 292.982804][ T5949] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 293.382878][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 293.450284][ T5848] Bluetooth: hci6: command tx timeout [ 294.034444][ T59] team0 (unregistering): Port device team_slave_1 removed [ 294.100624][ T5949] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 294.125802][ T59] team0 (unregistering): Port device team_slave_0 removed [ 294.141388][ T5949] usb 1-1: can't read configurations, error -71 [ 295.604554][ T51] Bluetooth: hci6: command tx timeout [ 295.696027][ T7467] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 295.702045][ T7467] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 299.699718][ T7416] lo speed is unknown, defaulting to 1000 [ 299.700586][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.716392][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.723780][ T7315] bridge_slave_0: entered allmulticast mode [ 299.735769][ T7315] bridge_slave_0: entered promiscuous mode [ 301.800305][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.843040][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.852521][ T7315] bridge_slave_1: entered allmulticast mode [ 301.914984][ T7315] bridge_slave_1: entered promiscuous mode [ 302.089315][ T7515] loop6: detected capacity change from 0 to 524287487 [ 302.097559][ T7515] buffer_io_error: 7 callbacks suppressed [ 302.097575][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.111291][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.119228][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.127275][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.135355][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.143378][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.151370][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.159359][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.167339][ T7515] ldm_validate_partition_table(): Disk read failed. [ 302.174041][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.182004][ T7515] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.191428][ T7515] Dev loop6: unable to read RDB block 0 [ 302.197525][ T7515] loop6: unable to read partition table [ 302.203468][ T7515] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 302.929994][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.999633][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.564524][ T7315] team0: Port device team_slave_0 added [ 304.406647][ T7315] team0: Port device team_slave_1 added [ 304.943260][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.952791][ T5834] IPVS: starting estimator thread 0... [ 305.100386][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.275468][ T7543] IPVS: using max 29 ests per chain, 69600 per kthread [ 306.061372][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.239110][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.246227][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.470814][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.066503][ T7315] hsr_slave_0: entered promiscuous mode [ 309.083336][ T7315] hsr_slave_1: entered promiscuous mode [ 309.089664][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.422941][ T7315] Cannot create hsr debugfs directory [ 309.657158][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 312.874091][ T6028] hid-generic 0010:0004:0000.0002: collection stack underflow [ 312.886707][ T6028] hid-generic 0010:0004:0000.0002: item 0 4 0 12 parsing failed [ 312.895463][ T6028] hid-generic 0010:0004:0000.0002: probe with driver hid-generic failed with error -22 [ 313.302473][ T7598] siw: device registration error -23 [ 316.331413][ T7609] tipc: Enabling of bearer rejected, failed to enable media [ 316.514996][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.521716][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.555211][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.597686][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.621573][ T7416] bridge_slave_0: entered allmulticast mode [ 316.639259][ T7416] bridge_slave_0: entered promiscuous mode [ 316.647234][ T7617] loop6: detected capacity change from 0 to 524287487 [ 316.654556][ T7617] buffer_io_error: 7 callbacks suppressed [ 316.654567][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.668251][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.676162][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.684852][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.692740][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.700630][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.708558][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.716459][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.724349][ T7617] ldm_validate_partition_table(): Disk read failed. [ 316.731662][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.739576][ T7617] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.747660][ T7617] Dev loop6: unable to read RDB block 0 [ 316.753713][ T7617] loop6: unable to read partition table [ 316.759526][ T7617] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 316.909136][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.949759][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.998074][ T7416] bridge_slave_1: entered allmulticast mode [ 317.068232][ T7416] bridge_slave_1: entered promiscuous mode [ 319.763208][ T12] bridge_slave_1: left allmulticast mode [ 319.768886][ T12] bridge_slave_1: left promiscuous mode [ 319.799190][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.145925][ T12] bridge_slave_0: left allmulticast mode [ 320.255042][ T12] bridge_slave_0: left promiscuous mode [ 320.436170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.299718][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.325643][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.353633][ T12] bond0 (unregistering): Released all slaves [ 321.648762][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.803048][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.838179][ T5834] hid-generic 0010:0004:0000.0003: collection stack underflow [ 321.882975][ T5834] hid-generic 0010:0004:0000.0003: item 0 4 0 12 parsing failed [ 321.895177][ T12] hsr_slave_0: left promiscuous mode [ 321.901561][ T5834] hid-generic 0010:0004:0000.0003: probe with driver hid-generic failed with error -22 [ 321.987916][ T12] hsr_slave_1: left promiscuous mode [ 322.035025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.083469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.867994][ T12] team0 (unregistering): Port device team_slave_1 removed [ 324.965766][ T12] team0 (unregistering): Port device team_slave_0 removed [ 326.372431][ T7660] tipc: Enabling of bearer rejected, failed to enable media [ 327.261390][ T7416] team0: Port device team_slave_0 added [ 327.328998][ T7416] team0: Port device team_slave_1 added [ 327.385986][ T6028] IPVS: starting estimator thread 0... [ 328.112861][ T7680] IPVS: using max 23 ests per chain, 55200 per kthread [ 328.871437][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.913076][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.957513][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.003217][ T7695] loop6: detected capacity change from 0 to 524287487 [ 329.011030][ T7695] buffer_io_error: 7 callbacks suppressed [ 329.011042][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.025873][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.033910][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.041912][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.050191][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.058489][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.066548][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.074580][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.082591][ T7695] ldm_validate_partition_table(): Disk read failed. [ 329.089336][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.097449][ T7695] Buffer I/O error on dev loop6, logical block 0, async page read [ 329.105684][ T7695] Dev loop6: unable to read RDB block 0 [ 329.111772][ T7695] loop6: unable to read partition table [ 329.117673][ T7695] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 329.150207][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.157498][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.189280][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.687049][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.702190][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.710285][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.719032][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.727575][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.731476][ T7416] hsr_slave_0: entered promiscuous mode [ 329.749434][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.762051][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.767989][ T7416] hsr_slave_1: entered promiscuous mode [ 329.794565][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.802156][ T7416] Cannot create hsr debugfs directory [ 329.813123][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.829593][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.838504][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.058850][ T7696] lo speed is unknown, defaulting to 1000 [ 330.250280][ T12] bridge_slave_1: left allmulticast mode [ 330.265927][ T12] bridge_slave_1: left promiscuous mode [ 330.633100][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.732700][ T12] bridge_slave_0: left allmulticast mode [ 330.761687][ T12] bridge_slave_0: left promiscuous mode [ 330.781762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.962934][ T5848] Bluetooth: hci1: command tx timeout [ 332.104851][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.144789][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.176966][ T12] bond0 (unregistering): Released all slaves [ 333.542884][ T12] hsr_slave_0: left promiscuous mode [ 333.592944][ T5988] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.037997][ T12] hsr_slave_1: left promiscuous mode [ 334.060818][ T51] Bluetooth: hci1: command tx timeout [ 334.238695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.462599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.702796][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 334.733196][ T5988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.677047][ T5988] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.698623][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.739074][ T5988] usb 2-1: Product: syz [ 335.885839][ T5988] usb 2-1: config 0 descriptor?? [ 335.920182][ T5988] usb 2-1: can't set config #0, error -71 [ 336.906814][ T51] Bluetooth: hci1: command tx timeout [ 336.993986][ T5988] usb 2-1: USB disconnect, device number 6 [ 338.784586][ T12] team0 (unregistering): Port device team_slave_1 removed [ 338.836282][ T12] team0 (unregistering): Port device team_slave_0 removed [ 339.022827][ T51] Bluetooth: hci1: command tx timeout [ 344.193289][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 346.034837][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.118753][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.167217][ T7696] bridge_slave_0: entered allmulticast mode [ 346.236688][ T7696] bridge_slave_0: entered promiscuous mode [ 347.362650][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 347.414046][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.423729][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.441638][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.458009][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.465810][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.720987][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 347.736404][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.752861][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.604421][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 348.683065][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.738112][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.802960][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.828260][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.842937][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.868166][ T5942] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.883985][ T7696] bridge_slave_1: entered allmulticast mode [ 348.996424][ T7696] bridge_slave_1: entered promiscuous mode [ 349.089946][ T5942] usb 3-1: Manufacturer: syz [ 349.119274][ T5942] usb 3-1: config 0 descriptor?? [ 349.636767][ T51] Bluetooth: hci5: command tx timeout [ 349.757832][ T5942] rc_core: IR keymap rc-hauppauge not found [ 349.813993][ T5942] Registered IR keymap rc-empty [ 349.819315][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.710921][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 350.755253][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 350.834606][ T7891] fuse: Bad value for 'fd' [ 351.405354][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 351.489042][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.611342][ T6476] bridge_slave_1: left allmulticast mode [ 351.617316][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 351.642849][ T6476] bridge_slave_1: left promiscuous mode [ 351.649350][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.657153][ T51] Bluetooth: hci5: command tx timeout [ 351.686400][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 352.102120][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 352.570024][ T7900] ceph: No mds server is up or the cluster is laggy [ 352.633057][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 352.638493][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 352.652993][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.037276][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.136850][ T6476] bridge_slave_0: left allmulticast mode [ 353.143327][ T6476] bridge_slave_0: left promiscuous mode [ 353.283085][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.304476][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.334057][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.383158][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.393028][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.410939][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 353.465336][ T5942] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 353.482802][ T5942] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.790796][ T51] Bluetooth: hci5: command tx timeout [ 354.933691][ T5942] usb 3-1: USB disconnect, device number 4 [ 355.667112][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.727355][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.784697][ T6476] bond0 (unregistering): Released all slaves [ 355.813044][ T51] Bluetooth: hci5: command tx timeout [ 356.143799][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.244520][ T6476] hsr_slave_0: left promiscuous mode [ 356.250624][ T6476] hsr_slave_1: left promiscuous mode [ 356.283284][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.352104][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.166597][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 357.543589][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 358.871384][ T7827] lo speed is unknown, defaulting to 1000 [ 359.551709][ T7696] team0: Port device team_slave_0 added [ 359.762237][ T7696] team0: Port device team_slave_1 added [ 359.989661][ T7942] fuse: Bad value for 'fd' [ 360.734828][ T7944] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 362.097643][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.121790][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.435063][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 362.699196][ T7949] ceph: No mds server is up or the cluster is laggy [ 362.781529][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.805021][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.810474][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 362.844473][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.894283][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.685628][ T7696] hsr_slave_0: entered promiscuous mode [ 364.772688][ T7696] hsr_slave_1: entered promiscuous mode [ 364.878233][ T7696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.886002][ T7696] Cannot create hsr debugfs directory [ 365.846341][ T7981] siw: device registration error -23 [ 368.469049][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 369.764786][ T8010] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 371.546910][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.634004][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.641330][ T7827] bridge_slave_0: entered allmulticast mode [ 371.675515][ T7827] bridge_slave_0: entered promiscuous mode [ 371.708725][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.736544][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.761565][ T7827] bridge_slave_1: entered allmulticast mode [ 371.789630][ T7827] bridge_slave_1: entered promiscuous mode [ 373.192448][ T8040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.198532][ T8040] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 373.285064][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.297926][ T43] hid-generic 0010:0004:0000.0004: collection stack underflow [ 373.308851][ T8040] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 373.314823][ T8040] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 373.328887][ T43] hid-generic 0010:0004:0000.0004: item 0 4 0 12 parsing failed [ 373.344925][ T43] hid-generic 0010:0004:0000.0004: probe with driver hid-generic failed with error -22 [ 373.623066][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.767577][ T7696] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.841957][ T8045] siw: device registration error -23 [ 374.566344][ T7696] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 374.831577][ T7827] team0: Port device team_slave_0 added [ 374.840096][ T7827] team0: Port device team_slave_1 added [ 374.856950][ T7696] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.230196][ T7696] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.263894][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.375565][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.402930][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.431766][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.661476][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.692918][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.828591][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.857233][ T7827] hsr_slave_0: entered promiscuous mode [ 376.868765][ T7827] hsr_slave_1: entered promiscuous mode [ 376.877609][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.890222][ T7827] Cannot create hsr debugfs directory [ 377.136538][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.208281][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.215491][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.357510][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.364746][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.945964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.952926][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.449549][ T7827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.449051][ T7827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 379.585269][ T7827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.063659][ T7827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 381.513975][ T8111] siw: device registration error -23 [ 381.625400][ T8110] fuse: Bad value for 'fd' [ 382.688565][ T5942] hid-generic 0010:0004:0000.0005: collection stack underflow [ 382.705152][ T5942] hid-generic 0010:0004:0000.0005: item 0 4 0 12 parsing failed [ 382.907402][ T5942] hid-generic 0010:0004:0000.0005: probe with driver hid-generic failed with error -22 [ 383.050916][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.322539][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.895518][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.925870][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.933074][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.099057][ T8129] siw: device registration error -23 [ 384.183695][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.190851][ T7866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.116173][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.063022][ T5988] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 389.252911][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 389.271464][ T7880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.292308][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.314976][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.326721][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.337618][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.346177][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.354656][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.375914][ T5988] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 389.393214][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 389.401398][ T5988] usb 1-1: Product: syz [ 389.414752][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.421798][ T5988] usb 1-1: Manufacturer: syz [ 389.426846][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.437696][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.446905][ T5988] usb 1-1: SerialNumber: syz [ 389.455541][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.465392][ T5988] usb 1-1: config 0 descriptor?? [ 389.473498][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.578015][ T7880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.619948][ T8174] lo speed is unknown, defaulting to 1000 [ 389.675905][ T5834] usb 1-1: USB disconnect, device number 6 [ 389.718715][ T7880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.846476][ T7880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.008896][ T7827] veth0_vlan: entered promiscuous mode [ 391.022977][ T7827] veth1_vlan: entered promiscuous mode [ 391.054611][ T7827] veth0_macvtap: entered promiscuous mode [ 391.065637][ T7827] veth1_macvtap: entered promiscuous mode [ 391.089254][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.851239][ T8194] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 391.988462][ T5848] Bluetooth: hci0: command tx timeout [ 392.092801][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.200705][ T7827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.230153][ T7827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.282390][ T7827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.338815][ T7827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.596011][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.612103][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.626044][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.645144][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.654173][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.126039][ T7880] bridge_slave_1: left allmulticast mode [ 393.158885][ T7880] bridge_slave_1: left promiscuous mode [ 393.170520][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.211922][ T7880] bridge_slave_0: left allmulticast mode [ 393.223096][ T7880] bridge_slave_0: left promiscuous mode [ 393.244518][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.053249][ T5848] Bluetooth: hci0: command tx timeout [ 394.270701][ T7880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.282323][ T7880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.294684][ T7880] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 394.308709][ T7880] bond0 (unregistering): Released all slaves [ 394.327339][ T8202] lo speed is unknown, defaulting to 1000 [ 394.430501][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 394.933266][ T5848] Bluetooth: hci1: command tx timeout [ 395.360867][ T7857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.395506][ T7857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.895827][ T8226] siw: device registration error -23 [ 396.140837][ T5848] Bluetooth: hci0: command tx timeout [ 396.572877][ T7880] hsr_slave_0: left promiscuous mode [ 396.580879][ T7880] hsr_slave_1: left promiscuous mode [ 396.592462][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.619945][ T7880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.633346][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.651158][ T7880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.682342][ T7880] veth1_macvtap: left promiscuous mode [ 396.692137][ T7880] veth0_macvtap: left promiscuous mode [ 396.700465][ T7880] veth1_vlan: left promiscuous mode [ 396.712710][ T7880] veth0_vlan: left promiscuous mode [ 396.803015][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.812170][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.826411][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.083351][ T51] Bluetooth: hci1: command tx timeout [ 397.097139][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.106566][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.827383][ T9] libceph: connect (1)[c::]:6789 error -101 [ 398.153572][ T8240] ceph: No mds server is up or the cluster is laggy [ 398.182203][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 398.290846][ T51] Bluetooth: hci0: command tx timeout [ 399.068574][ T8250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.074749][ T8250] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 399.088683][ T8250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.094652][ T8250] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 399.102775][ C0] ------------[ cut here ]------------ [ 399.110623][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 399.117351][ C0] WARNING: CPU: 0 PID: 7871 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 399.126374][ C0] Modules linked in: [ 399.130328][ C0] CPU: 0 UID: 0 PID: 7871 Comm: kworker/u8:18 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 399.142565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.152610][ C0] Workqueue: bat_events batadv_tt_purge [ 399.158154][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 399.163440][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 29 58 97 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 c0 46 35 00 90 0f 0b 90 e9 dd fc ff [ 399.183046][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 399.189127][ C0] RAX: bdf6dd9bada61200 RBX: 0000000000000100 RCX: ffff88802efd0000 [ 399.197096][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 399.205066][ C0] RBP: 1ffff1100fd3c138 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 399.213038][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 399.221012][ C0] R13: ffff88804f998988 R14: 0000000000000008 R15: ffff88807e9e0978 [ 399.228984][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 399.237909][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.244487][ C0] CR2: 0000001b30b20220 CR3: 00000000598b1000 CR4: 0000000000350ef0 [ 399.252454][ C0] Call Trace: [ 399.255730][ C0] [ 399.258583][ C0] call_timer_fn+0x17e/0x5f0 [ 399.263174][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 399.268999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.274642][ C0] ? call_timer_fn+0xbe/0x5f0 [ 399.279320][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 399.284436][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.290094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.295727][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 399.300936][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 399.306754][ C0] __run_timer_base+0x646/0x860 [ 399.311616][ C0] ? ktime_get+0x3e/0x1f0 [ 399.315985][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 399.321366][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 399.327620][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.333358][ C0] run_timer_softirq+0xb7/0x180 [ 399.338245][ C0] handle_softirqs+0x286/0x870 [ 399.343018][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 399.347789][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 399.353080][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.358717][ C0] __irq_exit_rcu+0xca/0x1f0 [ 399.363327][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.368534][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.374175][ C0] irq_exit_rcu+0x9/0x30 [ 399.378420][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.384054][ C0] [ 399.386977][ C0] [ 399.389901][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.395877][ C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 399.401857][ C0] Code: 8b e8 8f e2 e7 09 65 66 8b 05 6f 1f 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 a8 32 0b 00 e8 33 04 42 00 fb 65 8b 05 4b 1f 1a 11 <85> c0 75 05 e8 82 f5 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 399.421458][ C0] RSP: 0018:ffffc90003c1f8c0 EFLAGS: 00000282 [ 399.427526][ C0] RAX: 0000000080000000 RBX: 0000000000000201 RCX: bdf6dd9bada61200 [ 399.435494][ C0] RDX: 0000000000000006 RSI: ffffffff8d9960e1 RDI: ffffffff8be28c00 [ 399.443460][ C0] RBP: ffffc90003c1f958 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 399.451426][ C0] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: ffffffff8b3e1bb7 [ 399.459396][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000783f18 [ 399.467374][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 399.472865][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 399.478589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.484238][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 399.489447][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 399.494910][ C0] batadv_tt_local_purge+0x2a7/0x340 [ 399.500212][ C0] batadv_tt_purge+0x35/0x9e0 [ 399.504891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.510530][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.515725][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 399.521446][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 399.527169][ C0] process_scheduled_works+0xae1/0x17b0 [ 399.532759][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.538755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.544399][ C0] worker_thread+0x8a0/0xda0 [ 399.549033][ C0] kthread+0x711/0x8a0 [ 399.553116][ C0] ? __pfx_worker_thread+0x10/0x10 [ 399.558230][ C0] ? __pfx_kthread+0x10/0x10 [ 399.562828][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.568467][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.573665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.579301][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.584500][ C0] ? __pfx_kthread+0x10/0x10 [ 399.589101][ C0] ret_from_fork+0x3fc/0x770 [ 399.593692][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 399.598807][ C0] ? __switch_to_asm+0x39/0x70 [ 399.603575][ C0] ? __switch_to_asm+0x33/0x70 [ 399.608343][ C0] ? __pfx_kthread+0x10/0x10 [ 399.612942][ C0] ret_from_fork_asm+0x1a/0x30 [ 399.617724][ C0] [ 399.620735][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.628009][ C0] CPU: 0 UID: 0 PID: 7871 Comm: kworker/u8:18 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 399.640245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.650299][ C0] Workqueue: bat_events batadv_tt_purge [ 399.655851][ C0] Call Trace: [ 399.659125][ C0] [ 399.661961][ C0] dump_stack_lvl+0x99/0x250 [ 399.666555][ C0] ? __asan_memcpy+0x40/0x70 [ 399.671150][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.676357][ C0] ? __pfx__printk+0x10/0x10 [ 399.680959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.686599][ C0] panic+0x2db/0x790 [ 399.690503][ C0] ? __pfx_panic+0x10/0x10 [ 399.694919][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 399.700127][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 399.705074][ C0] __warn+0x31b/0x4b0 [ 399.709056][ C0] ? __queue_work+0xd62/0xfe0 [ 399.713737][ C0] ? __queue_work+0xd62/0xfe0 [ 399.718417][ C0] report_bug+0x2be/0x4f0 [ 399.722754][ C0] ? __queue_work+0xd62/0xfe0 [ 399.727438][ C0] ? __queue_work+0xd62/0xfe0 [ 399.732116][ C0] ? __queue_work+0xd64/0xfe0 [ 399.736803][ C0] handle_bug+0x84/0x160 [ 399.741059][ C0] exc_invalid_op+0x1a/0x50 [ 399.745568][ C0] asm_exc_invalid_op+0x1a/0x20 [ 399.750419][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 399.755710][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 29 58 97 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 c0 46 35 00 90 0f 0b 90 e9 dd fc ff [ 399.775318][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 399.781401][ C0] RAX: bdf6dd9bada61200 RBX: 0000000000000100 RCX: ffff88802efd0000 [ 399.789373][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 399.797339][ C0] RBP: 1ffff1100fd3c138 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 399.805308][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 399.813281][ C0] R13: ffff88804f998988 R14: 0000000000000008 R15: ffff88807e9e0978 [ 399.821269][ C0] ? __queue_work+0xd61/0xfe0 [ 399.825964][ C0] call_timer_fn+0x17e/0x5f0 [ 399.830553][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 399.836368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.842000][ C0] ? call_timer_fn+0xbe/0x5f0 [ 399.846675][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 399.851795][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.857436][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.863073][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 399.868282][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 399.874095][ C0] __run_timer_base+0x646/0x860 [ 399.878968][ C0] ? ktime_get+0x3e/0x1f0 [ 399.883326][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 399.888705][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 399.894959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.900598][ C0] run_timer_softirq+0xb7/0x180 [ 399.905462][ C0] handle_softirqs+0x286/0x870 [ 399.910235][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 399.915009][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 399.920303][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.925941][ C0] __irq_exit_rcu+0xca/0x1f0 [ 399.930531][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.935735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.941542][ C0] irq_exit_rcu+0x9/0x30 [ 399.945786][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.951439][ C0] [ 399.954366][ C0] [ 399.957292][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.963273][ C0] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 399.969255][ C0] Code: 8b e8 8f e2 e7 09 65 66 8b 05 6f 1f 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 a8 32 0b 00 e8 33 04 42 00 fb 65 8b 05 4b 1f 1a 11 <85> c0 75 05 e8 82 f5 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 399.988859][ C0] RSP: 0018:ffffc90003c1f8c0 EFLAGS: 00000282 [ 399.994933][ C0] RAX: 0000000080000000 RBX: 0000000000000201 RCX: bdf6dd9bada61200 [ 400.002903][ C0] RDX: 0000000000000006 RSI: ffffffff8d9960e1 RDI: ffffffff8be28c00 [ 400.010871][ C0] RBP: ffffc90003c1f958 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 400.018840][ C0] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: ffffffff8b3e1bb7 [ 400.026810][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000783f18 [ 400.034785][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 400.040257][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 400.045975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.051612][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 400.056821][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 400.062286][ C0] batadv_tt_local_purge+0x2a7/0x340 [ 400.067585][ C0] batadv_tt_purge+0x35/0x9e0 [ 400.072266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.077905][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.083103][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.088830][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.094558][ C0] process_scheduled_works+0xae1/0x17b0 [ 400.100139][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.106130][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.111770][ C0] worker_thread+0x8a0/0xda0 [ 400.116389][ C0] kthread+0x711/0x8a0 [ 400.120473][ C0] ? __pfx_worker_thread+0x10/0x10 [ 400.125593][ C0] ? __pfx_kthread+0x10/0x10 [ 400.130188][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.135829][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.141028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.146751][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.151945][ C0] ? __pfx_kthread+0x10/0x10 [ 400.156544][ C0] ret_from_fork+0x3fc/0x770 [ 400.161135][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 400.166252][ C0] ? __switch_to_asm+0x39/0x70 [ 400.171019][ C0] ? __switch_to_asm+0x33/0x70 [ 400.175788][ C0] ? __pfx_kthread+0x10/0x10 [ 400.180387][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.185180][ C0] [ 400.188427][ C0] Kernel Offset: disabled [ 400.192752][ C0] Rebooting in 86400 seconds..