last executing test programs: 15m22.08550749s ago: executing program 32 (id=31): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0xb, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 13m35.841225464s ago: executing program 33 (id=155): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='\x00', 0xa89a5489e6a765d0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x21820, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)="4f525f1af43876e17212c725d35923e788274abfbc3207d86fc5f94a179acc7f5d19ba6274b3004b349db4b321e337448f320d8dd862f034108f6d6f518fe12880fb9f13cd631b58dff6e20a203fab759c7557a6d27bea867452c53877e06451131d5076f645fd01cf2347c158afb620920fda0360356e3e402f9142a4f8aa283a2e0965fab691bbb4c33d35eb15e809529f30caec66ad73705c8b152026d1497284be80c82a82f18185f03df9809755d4a5", 0xb2, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000049000000000000000c3c0000ea9102d9a7b26f04e28590070986c27d5d0a0300a97687671e8f60c60172f2609e9a69dca2e79572be"], 0xaa}) ioctl$UI_DEV_CREATE(r2, 0x5501) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 13m34.976354037s ago: executing program 0 (id=172): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 13m34.112859224s ago: executing program 0 (id=174): syz_open_dev$sg(0x0, 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 13m31.359058418s ago: executing program 0 (id=176): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 13m25.764597907s ago: executing program 0 (id=180): bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x5, 0xf5, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000001c0)={'pim6reg0\x00', {0x2, 0x4e22, @broadcast}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4000000) socketpair$tipc(0x1e, 0x3122f7f4b3cacf04, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2003, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) 13m23.276283729s ago: executing program 0 (id=182): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x1}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c2512449", 0x36}], 0x1}, 0x0) 13m22.189249759s ago: executing program 0 (id=184): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13m3.756491193s ago: executing program 34 (id=184): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12m0.814331323s ago: executing program 35 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = fsopen(0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYBLOB="2ddd4fc193248be5f98159f32d71bcc2dbd3be7e569410843c803a01f63c6c3d23f34a9bda88119e459513d7aef185797678d1de16a1b4da76401cbe73396c13727fcad7bb102126cd"], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m15.606158058s ago: executing program 6 (id=292): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000029a, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1a}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) syz_usb_connect$midi(0x6, 0x31, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x3f, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5, [], [{{0x9, 0x5, 0xf, 0x15, 0x400, 0x1, 0x5, 0x3, {0x4}}}]}}}}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m12.008608279s ago: executing program 6 (id=294): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x3000) ftruncate(r0, 0xc17a) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 10m9.470335658s ago: executing program 5 (id=51): r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000000180)) 10m5.822751197s ago: executing program 5 (id=296): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 10m3.434004867s ago: executing program 6 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 10m0.971717733s ago: executing program 5 (id=300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 9m59.765960625s ago: executing program 6 (id=301): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderockperm,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000840)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 9m59.607234801s ago: executing program 5 (id=302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r0) 9m58.76532244s ago: executing program 6 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 9m58.121230837s ago: executing program 6 (id=304): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e5", 0x6d, 0xfffffffffffffffe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(r2, r2, 0x0, 0x200000) 9m55.794743286s ago: executing program 5 (id=306): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000"], 0x30}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 9m54.827953075s ago: executing program 5 (id=307): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="010000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001700)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000101, r0, 0x8000000}, 0x38) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4000000, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m39.416449736s ago: executing program 36 (id=304): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e5", 0x6d, 0xfffffffffffffffe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(r2, r2, 0x0, 0x200000) 9m38.045496384s ago: executing program 37 (id=307): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="010000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001700)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000101, r0, 0x8000000}, 0x38) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4000000, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 7m49.491143675s ago: executing program 7 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m48.844634222s ago: executing program 7 (id=413): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) 7m34.91032292s ago: executing program 7 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c00}, 0x40) 7m33.816865427s ago: executing program 7 (id=430): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x8044) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 7m31.193484381s ago: executing program 7 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) 7m29.806777981s ago: executing program 7 (id=436): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) 7m13.252806292s ago: executing program 38 (id=436): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) 4m57.13185703s ago: executing program 1 (id=568): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x34040, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x11, 0x12}], 0x18) 4m56.193297528s ago: executing program 1 (id=571): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0xa, 0x0, 0x6, 0x0, 0x7, 0x470240}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0) creat(&(0x7f0000002280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 4m53.214227899s ago: executing program 1 (id=573): close(0x3) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 4m50.751544996s ago: executing program 1 (id=575): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4m49.843955285s ago: executing program 1 (id=577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r0) 4m42.506579078s ago: executing program 1 (id=583): close(0x3) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) 4m25.015335501s ago: executing program 39 (id=583): close(0x3) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) 2m51.001845777s ago: executing program 8 (id=676): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x264001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2m48.270287308s ago: executing program 8 (id=677): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m46.001947775s ago: executing program 8 (id=678): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2m45.406262228s ago: executing program 8 (id=679): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m43.88754191s ago: executing program 8 (id=680): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r1 = syz_clone(0x629bb680, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x2, 0x0) ftruncate(r0, 0x2007ffc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) sendfile(r2, r2, 0x0, 0x2000000000006) lseek(r2, 0x8, 0x4) sendfile(r0, r0, 0x0, 0x2000000000006) 2m42.553401595s ago: executing program 8 (id=681): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(0x0, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x29, 0x6, 0x80000000, 0x0, 0xfa, 0x6, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x3, [0x6c, 0x7]}}) r4 = socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r5, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 2m26.226886587s ago: executing program 40 (id=681): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(0x0, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x29, 0x6, 0x80000000, 0x0, 0xfa, 0x6, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x3, [0x6c, 0x7]}}) r4 = socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r5, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 23.21505775s ago: executing program 4 (id=741): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 22.679126776s ago: executing program 3 (id=742): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) openat(0xffffffffffffff9c, &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40441, 0x14e) 20.983119385s ago: executing program 3 (id=743): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getuid() 19.549464455s ago: executing program 4 (id=744): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x264001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 17.980137727s ago: executing program 3 (id=746): socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0xcb, 0x0) 13.152047209s ago: executing program 2 (id=747): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x5199, &(0x7f0000000580)={0x0, 0xc914, 0x8, 0x2000006, 0x3ce}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 12.989321188s ago: executing program 4 (id=748): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 12.773339463s ago: executing program 3 (id=749): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8004, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0xd, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7dff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac6, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffd, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x400, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x8c}, 0x20) 11.898321851s ago: executing program 4 (id=750): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a5540) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) 11.578685641s ago: executing program 2 (id=751): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740), 0x10, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r0, 0x4}, 0x38) r1 = socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}, 0x20000040) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[], 0x0, 0x22f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) 8.653448154s ago: executing program 4 (id=752): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 7.198416123s ago: executing program 3 (id=753): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 5.195771689s ago: executing program 2 (id=754): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getuid() 3.672885652s ago: executing program 3 (id=755): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.55890067s ago: executing program 4 (id=756): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x264001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2.246020856s ago: executing program 2 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x8, 0x6, 0xb, 0x0, 0xbc, 0x7f, 0x2, 0x4, 0x0, 0x46, 0x1, 0x2a, 0x0, 0x4, 0x7, 0x2, 0x4, 0x3, 0x3, '\x00', 0x9, 0x10001}) 1.041487019s ago: executing program 2 (id=758): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 0s ago: executing program 2 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000300)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, 0x0, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x9f91, 0x10000, 0x1, 0x323}, 0x0, &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): gh-speed USB device number 18 using dummy_hcd [ 854.954611][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.962756][ T5833] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 855.043720][ T8017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.056119][ T8589] usb 9-1: Using ep0 maxpacket: 16 [ 855.080947][ T8589] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.096257][ T8589] usb 9-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.119294][ T8589] usb 9-1: config 0 interface 0 has no altsetting 0 [ 855.128641][ T8589] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 855.158768][ T8658] veth0_vlan: entered promiscuous mode [ 855.172803][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.200245][ T8589] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.212170][ T5833] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 855.246687][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.271626][ T8589] usb 9-1: config 0 descriptor?? [ 855.338990][ T5833] usb 5-1: config 0 descriptor?? [ 855.354301][ T8589] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 855.422656][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 855.452386][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.545032][ T8658] veth1_vlan: entered promiscuous mode [ 855.734094][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.741838][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.861315][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 856.014733][ T8981] loop1: detected capacity change from 0 to 1024 [ 856.145744][ T5833] pwc: recv_control_msg error -32 req 02 val 2c00 [ 856.372153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.380266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.840675][ T5833] pwc: recv_control_msg error -32 req 04 val 1000 [ 856.985886][ T5833] pwc: recv_control_msg error -32 req 04 val 1300 [ 856.994769][ T5833] pwc: recv_control_msg error -32 req 04 val 1400 [ 857.004508][ T5833] pwc: recv_control_msg error -32 req 02 val 2000 [ 857.019453][ T5833] pwc: recv_control_msg error -32 req 02 val 2100 [ 857.059790][ T5833] pwc: recv_control_msg error -32 req 04 val 1500 [ 857.069331][ T5833] pwc: recv_control_msg error -32 req 02 val 2500 [ 857.091771][ T5833] pwc: recv_control_msg error -32 req 02 val 2400 [ 857.125532][ T5833] pwc: recv_control_msg error -32 req 02 val 2600 [ 857.135869][ T5833] pwc: recv_control_msg error -32 req 02 val 2900 [ 857.363068][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 857.419931][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 857.441205][ T5833] pwc: Registered as video103. [ 857.459153][ T8658] veth0_macvtap: entered promiscuous mode [ 857.484065][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 857.597781][ T5833] usb 5-1: USB disconnect, device number 42 [ 858.056208][ T5833] usb 9-1: USB disconnect, device number 18 [ 859.848805][ T9001] netlink: 'syz.4.552': attribute type 12 has an invalid length. [ 859.914392][ T9001] netlink: 'syz.4.552': attribute type 29 has an invalid length. [ 860.003646][ T9001] netlink: 148 bytes leftover after parsing attributes in process `syz.4.552'. [ 860.012843][ T9001] netlink: 3 bytes leftover after parsing attributes in process `syz.4.552'. [ 861.834337][ T9018] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 862.378423][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 862.388638][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 862.410182][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 862.424835][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 862.442079][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.739194][ T9027] process 'syz.8.555' launched './file0' with NULL argv: empty string added [ 864.610958][ T7987] Bluetooth: hci1: command tx timeout [ 864.723842][ T9019] vxcan1 speed is unknown, defaulting to 1000 [ 864.750394][ T9032] loop1: detected capacity change from 0 to 1024 [ 864.828551][ T9032] EXT4-fs: Ignoring removed orlov option [ 865.001736][ T9032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.076491][ T9032] xt_hashlimit: max too large, truncated to 1048576 [ 866.715311][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.842399][ T7987] Bluetooth: hci1: command tx timeout [ 870.304634][ T5782] Bluetooth: hci1: command tx timeout [ 871.645524][ T8749] veth0_vlan: entered promiscuous mode [ 871.985400][ T7020] libceph: connect (1)[c::]:6789 error -101 [ 872.049857][ T7020] libceph: mon0 (1)[c::]:6789 connect error [ 872.126616][ T9042] ceph: No mds server is up or the cluster is laggy [ 872.226375][ T8749] veth1_vlan: entered promiscuous mode [ 872.480115][ T5782] Bluetooth: hci1: command tx timeout [ 873.222444][ T9046] loop8: detected capacity change from 0 to 1024 [ 873.282327][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.561'. [ 873.536839][ T8017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.492891][ T9066] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 876.846314][ T9058] netlink: 'syz.1.562': attribute type 12 has an invalid length. [ 876.906693][ T9058] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 876.983722][ T9058] netlink: 148 bytes leftover after parsing attributes in process `syz.1.562'. [ 877.036972][ T9058] netlink: 43 bytes leftover after parsing attributes in process `syz.1.562'. [ 877.849543][ T7558] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 877.990296][ T7987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 878.011951][ T7987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 878.021354][ T7987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 878.058955][ T7987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 878.066394][ T7558] usb 5-1: device descriptor read/64, error -71 [ 878.084512][ T7987] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 878.319104][ T7558] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 880.285415][ T7987] Bluetooth: hci5: command tx timeout [ 880.658011][ T7558] usb 5-1: device descriptor read/64, error -71 [ 880.816447][ T7558] usb usb5-port1: attempt power cycle [ 880.831266][ T9077] vxcan1 speed is unknown, defaulting to 1000 [ 881.381552][ T35] bridge_slave_1: left allmulticast mode [ 881.404858][ T35] bridge_slave_1: left promiscuous mode [ 881.442855][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.122247][ T35] bridge_slave_0: left allmulticast mode [ 882.129482][ T9098] loop8: detected capacity change from 0 to 1024 [ 882.175815][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 882.251436][ T35] bridge_slave_0: left promiscuous mode [ 882.258277][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.279690][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 882.289896][ T9098] EXT4-fs: Ignoring removed orlov option [ 882.369484][ T9101] ceph: No mds server is up or the cluster is laggy [ 882.476122][ T7987] Bluetooth: hci5: command tx timeout [ 882.962937][ T9098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.705118][ T9102] loop1: detected capacity change from 0 to 1024 [ 883.813905][ T9111] xt_hashlimit: max too large, truncated to 1048576 [ 883.911543][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.572'. [ 884.699140][ T7987] Bluetooth: hci5: command tx timeout [ 885.089016][ T9118] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 886.921499][ T7987] Bluetooth: hci5: command tx timeout [ 887.005623][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.037498][ T7332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.051787][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.076512][ T35] bond0 (unregistering): Released all slaves [ 887.179672][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 887.566749][ T9128] netlink: 'syz.1.575': attribute type 12 has an invalid length. [ 887.595116][ T9128] netlink: 'syz.1.575': attribute type 29 has an invalid length. [ 887.616199][ T9128] netlink: 148 bytes leftover after parsing attributes in process `syz.1.575'. [ 887.644002][ T9128] netlink: 43 bytes leftover after parsing attributes in process `syz.1.575'. [ 888.442642][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 889.069591][ T10] usb 2-1: device descriptor read/64, error -71 [ 889.881500][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 891.901423][ T10] usb 2-1: device descriptor read/64, error -71 [ 892.009673][ T35] hsr_slave_0: left promiscuous mode [ 892.044142][ T35] hsr_slave_1: left promiscuous mode [ 892.074631][ T10] usb usb2-port1: attempt power cycle [ 892.234627][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.310572][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.368650][ T35] veth0_macvtap: left promiscuous mode [ 893.217985][ T9153] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 894.633802][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 894.678992][ T9151] loop8: detected capacity change from 0 to 1024 [ 894.688311][ T35] veth1_vlan: left promiscuous mode [ 894.700967][ T35] veth0_vlan: left promiscuous mode [ 895.180774][ T10] usb 2-1: device descriptor read/8, error -71 [ 896.516021][ T9165] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 897.614689][ T35] team0 (unregistering): Port device team_slave_1 removed [ 897.730975][ T35] team0 (unregistering): Port device team_slave_0 removed [ 901.179893][ T794] libceph: connect (1)[c::]:6789 error -101 [ 901.212741][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 901.234135][ T9195] ceph: No mds server is up or the cluster is laggy [ 902.910514][ T5830] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 903.139497][ T9213] loop8: detected capacity change from 0 to 1024 [ 903.228922][ T5830] usb 5-1: device descriptor read/64, error -71 [ 903.593021][ T9077] chnl_net:caif_netlink_parms(): no params data found [ 904.222104][ T5830] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 904.372141][ T5830] usb 5-1: device descriptor read/64, error -71 [ 904.461677][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.489936][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.497753][ T9019] bridge_slave_0: entered allmulticast mode [ 904.529671][ T9019] bridge_slave_0: entered promiscuous mode [ 904.549882][ T5830] usb usb5-port1: attempt power cycle [ 904.789650][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.797879][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.853211][ T9019] bridge_slave_1: entered allmulticast mode [ 904.891256][ T9019] bridge_slave_1: entered promiscuous mode [ 904.953887][ T5830] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 905.011243][ T5830] usb 5-1: device descriptor read/8, error -71 [ 905.269560][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.325819][ T5830] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 905.358741][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.389285][ T5830] usb 5-1: device descriptor read/8, error -71 [ 905.516508][ T5830] usb usb5-port1: unable to enumerate USB device [ 905.767311][ T9019] team0: Port device team_slave_0 added [ 906.045365][ T9019] team0: Port device team_slave_1 added [ 907.139922][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.223364][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.361591][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.383709][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.391007][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.417504][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.040193][ T12] bridge_slave_1: left allmulticast mode [ 909.062876][ T12] bridge_slave_1: left promiscuous mode [ 909.106597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.183154][ T12] bridge_slave_0: left allmulticast mode [ 909.189025][ T12] bridge_slave_0: left promiscuous mode [ 909.288982][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.988831][ T9242] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 912.937462][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.028175][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.072379][ T12] bond0 (unregistering): Released all slaves [ 913.109425][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.118680][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.146267][ T9077] bridge_slave_0: entered allmulticast mode [ 913.201637][ T9077] bridge_slave_0: entered promiscuous mode [ 913.265275][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.364197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.377726][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.385203][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.444882][ T9077] bridge_slave_1: entered allmulticast mode [ 913.498577][ T9077] bridge_slave_1: entered promiscuous mode [ 914.187079][ T9019] hsr_slave_0: entered promiscuous mode [ 914.221006][ T9019] hsr_slave_1: entered promiscuous mode [ 914.249254][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 914.269025][ T9019] debugfs: 'hsr0' already exists in 'hsr' [ 914.327633][ T9019] Cannot create hsr debugfs directory [ 914.482227][ T9259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.605'. [ 914.518969][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.542916][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.552920][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.588527][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.613644][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.627366][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 914.671030][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 914.695825][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 914.709685][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 914.721451][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.792680][ T9256] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 914.827434][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 915.129979][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.189431][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.212234][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.818367][ T12] hsr_slave_0: left promiscuous mode [ 915.881273][ T12] hsr_slave_1: left promiscuous mode [ 915.932917][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.972542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.053946][ T12] veth1_vlan: left promiscuous mode [ 916.072371][ T7558] usb 9-1: USB disconnect, device number 19 [ 916.094454][ T12] veth0_vlan: left promiscuous mode [ 917.013293][ T7987] Bluetooth: hci0: command tx timeout [ 918.812924][ T12] team0 (unregistering): Port device team_slave_1 removed [ 918.901451][ T12] team0 (unregistering): Port device team_slave_0 removed [ 919.237750][ T7987] Bluetooth: hci0: command tx timeout [ 919.298249][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 919.368937][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 919.382740][ T9077] team0: Port device team_slave_0 added [ 919.430065][ T9077] team0: Port device team_slave_1 added [ 919.441760][ T9274] ceph: No mds server is up or the cluster is laggy [ 919.989450][ T9273] tipc: Started in network mode [ 919.998387][ T9273] tipc: Node identity bbbbbb01, cluster identity 4711 [ 920.007675][ T9273] tipc: Enabled bearer , priority 10 [ 920.279694][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.328581][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.431880][ T9077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.491806][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.537607][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.643446][ T9077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.863436][ T9258] tipc: Resetting bearer [ 921.428193][ T9286] netlink: 104 bytes leftover after parsing attributes in process `syz.4.613'. [ 921.453678][ T10] tipc: Node number set to 3149642497 [ 921.459949][ T7987] Bluetooth: hci0: command tx timeout [ 921.872748][ T9077] hsr_slave_0: entered promiscuous mode [ 921.894442][ T9077] hsr_slave_1: entered promiscuous mode [ 921.904621][ T9077] debugfs: 'hsr0' already exists in 'hsr' [ 921.911710][ T9077] Cannot create hsr debugfs directory [ 921.975169][ T9258] vxcan1 speed is unknown, defaulting to 1000 [ 922.208322][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.838878][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.116869][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.327350][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.682380][ T7987] Bluetooth: hci0: command tx timeout [ 925.179745][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.8.616'. [ 925.309766][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 925.521752][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.564554][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 925.585448][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 925.602904][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.655191][ T9292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.753990][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 925.771792][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 925.784586][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 925.813882][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 925.831655][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 925.847263][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.928834][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.025529][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.229364][ T7558] usb 5-1: USB disconnect, device number 50 [ 927.983901][ T12] bridge_slave_1: left allmulticast mode [ 928.009428][ T12] bridge_slave_1: left promiscuous mode [ 928.042268][ T10] libceph: connect (1)[c::]:6789 error -101 [ 928.048578][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 928.055215][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.091698][ T12] bridge_slave_0: left allmulticast mode [ 928.099639][ T12] bridge_slave_0: left promiscuous mode [ 928.107486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.129158][ T5782] Bluetooth: hci2: command tx timeout [ 928.313124][ T9304] ceph: No mds server is up or the cluster is laggy [ 930.374999][ T5782] Bluetooth: hci2: command tx timeout [ 930.540682][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.602453][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.639929][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 930.649617][ T9319] netlink: 104 bytes leftover after parsing attributes in process `syz.8.622'. [ 930.675023][ T12] bond0 (unregistering): Released all slaves [ 931.372916][ T9296] vxcan1 speed is unknown, defaulting to 1000 [ 932.322444][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 932.394273][ T5830] IPVS: starting estimator thread 0... [ 932.503802][ T9326] IPVS: using max 240 ests per chain, 12000 per kthread [ 932.598354][ T5782] Bluetooth: hci2: command tx timeout [ 932.625907][ T9077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 932.876886][ T9077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 933.504086][ T9077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 934.174455][ T9077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 934.197846][ T9328] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 934.923553][ T5782] Bluetooth: hci2: command tx timeout [ 935.178567][ T9334] ceph: No mds server is up or the cluster is laggy [ 935.198025][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 935.297521][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 936.088292][ T5830] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 936.119502][ T12] hsr_slave_0: left promiscuous mode [ 936.131433][ T12] hsr_slave_1: left promiscuous mode [ 936.161808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.174040][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.208826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.226904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.246466][ T12] veth1_macvtap: left promiscuous mode [ 936.252718][ T12] veth0_macvtap: left promiscuous mode [ 936.260496][ T12] veth1_vlan: left promiscuous mode [ 936.266014][ T12] veth0_vlan: left promiscuous mode [ 936.287754][ T5830] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 936.300362][ T5830] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 936.311570][ T5830] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 936.326055][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.364041][ T9339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 936.403309][ T5830] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 936.623613][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.677351][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.239014][ T5830] usb 5-1: USB disconnect, device number 51 [ 937.618722][ T12] team0 (unregistering): Port device team_slave_1 removed [ 937.669802][ T12] team0 (unregistering): Port device team_slave_0 removed [ 937.998626][ T9341] netlink: 'syz.8.628': attribute type 12 has an invalid length. [ 938.037417][ T9341] netlink: 148 bytes leftover after parsing attributes in process `syz.8.628'. [ 938.639116][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.650464][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.658918][ T9258] bridge_slave_0: entered allmulticast mode [ 938.676379][ T9258] bridge_slave_0: entered promiscuous mode [ 938.727093][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.744746][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.757230][ T9258] bridge_slave_1: entered allmulticast mode [ 938.768560][ T9258] bridge_slave_1: entered promiscuous mode [ 939.741334][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.820520][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.417412][ T9352] netlink: 104 bytes leftover after parsing attributes in process `syz.8.630'. [ 940.500468][ T9258] team0: Port device team_slave_0 added [ 940.648744][ T9258] team0: Port device team_slave_1 added [ 941.096172][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.151783][ T7987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 941.164750][ T7987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 941.174906][ T7987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 941.197917][ T7987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 941.216245][ T7987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 941.227217][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.338070][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.362223][ T6723] bridge_slave_1: left allmulticast mode [ 941.382304][ T6723] bridge_slave_1: left promiscuous mode [ 941.399547][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.388935][ T6723] bridge_slave_0: left allmulticast mode [ 942.435435][ T6723] bridge_slave_0: left promiscuous mode [ 942.463502][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.617108][ T7987] Bluetooth: hci1: command tx timeout [ 945.822764][ T7987] Bluetooth: hci1: command tx timeout [ 946.043091][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.171528][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.188455][ T6723] bond0 (unregistering): Released all slaves [ 946.657394][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.671444][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.701010][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.207766][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 947.864275][ T6723] hsr_slave_0: left promiscuous mode [ 947.889789][ T6723] hsr_slave_1: left promiscuous mode [ 947.914445][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.935891][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.046243][ T7987] Bluetooth: hci1: command tx timeout [ 948.667670][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 948.732911][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 949.408542][ T9258] hsr_slave_0: entered promiscuous mode [ 949.446011][ T9258] hsr_slave_1: entered promiscuous mode [ 949.782605][ T9354] vxcan1 speed is unknown, defaulting to 1000 [ 950.268921][ T7987] Bluetooth: hci1: command tx timeout [ 951.581053][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.614991][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.622646][ T9296] bridge_slave_0: entered allmulticast mode [ 951.661153][ T9296] bridge_slave_0: entered promiscuous mode [ 951.719677][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.743135][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.750805][ T9296] bridge_slave_1: entered allmulticast mode [ 951.778891][ T9296] bridge_slave_1: entered promiscuous mode [ 952.146147][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.198952][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.194466][ T6723] bridge_slave_1: left allmulticast mode [ 953.200933][ T6723] bridge_slave_1: left promiscuous mode [ 953.219528][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.240350][ T6723] bridge_slave_0: left allmulticast mode [ 953.246617][ T6723] bridge_slave_0: left promiscuous mode [ 953.277517][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.935408][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.002590][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.074991][ T6723] bond0 (unregistering): Released all slaves [ 954.762962][ T9296] team0: Port device team_slave_0 added [ 954.807842][ T9296] team0: Port device team_slave_1 added [ 954.819757][ T794] libceph: connect (1)[c::]:6789 error -101 [ 954.834528][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 954.858023][ T9381] loop4: detected capacity change from 0 to 4096 [ 954.982255][ T9377] ceph: No mds server is up or the cluster is laggy [ 954.984631][ T9381] EXT4-fs: inline encryption not supported [ 955.045901][ T9381] EXT4-fs (loop4): Test dummy encryption mode enabled [ 955.258798][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.266407][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.295083][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.353421][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.368781][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.397711][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.564993][ T9381] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003] [ 955.614428][ T9381] System zones: 0-5 [ 955.818702][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.930715][ T6723] hsr_slave_0: left promiscuous mode [ 955.968328][ T6723] hsr_slave_1: left promiscuous mode [ 955.978381][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.005159][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.136124][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.389396][ T9391] netlink: 104 bytes leftover after parsing attributes in process `syz.8.638'. [ 956.665211][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 956.721750][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 957.699012][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 957.896777][ T9258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 958.093195][ T9296] hsr_slave_0: entered promiscuous mode [ 958.111605][ T9296] hsr_slave_1: entered promiscuous mode [ 958.120401][ T9296] debugfs: 'hsr0' already exists in 'hsr' [ 958.128621][ T9296] Cannot create hsr debugfs directory [ 958.137918][ T9258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 958.450885][ T9258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 958.530686][ T9258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.558200][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.364181][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.404771][ T9354] bridge_slave_0: entered allmulticast mode [ 961.427609][ T9354] bridge_slave_0: entered promiscuous mode [ 962.077533][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.085057][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.161240][ T9354] bridge_slave_1: entered allmulticast mode [ 962.176017][ T9354] bridge_slave_1: entered promiscuous mode [ 962.677442][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.801907][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.074815][ T9354] team0: Port device team_slave_0 added [ 963.168703][ T9354] team0: Port device team_slave_1 added [ 963.461298][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.485364][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.516423][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.594205][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.602886][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.632507][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.963464][ T9354] hsr_slave_0: entered promiscuous mode [ 963.993956][ T9354] hsr_slave_1: entered promiscuous mode [ 964.023795][ T9354] debugfs: 'hsr0' already exists in 'hsr' [ 964.030909][ T9354] Cannot create hsr debugfs directory [ 964.048256][ T9296] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 964.262438][ T9296] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 964.571217][ T9296] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 964.737495][ T9296] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 965.007410][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.742455][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.967437][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.974960][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.198741][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.206378][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.726175][ T9354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 967.875488][ T9354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 967.995071][ T9354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 968.227751][ T9354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 968.527371][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.804528][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 968.811276][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 968.933226][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.953747][ T9417] ceph: No mds server is up or the cluster is laggy [ 969.192036][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.199675][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.296677][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.304305][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.253961][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.482180][ T9431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.647'. [ 971.056340][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.123269][ T9258] veth0_vlan: entered promiscuous mode [ 971.295597][ T9258] veth1_vlan: entered promiscuous mode [ 971.353536][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.840041][ T9258] veth0_macvtap: entered promiscuous mode [ 971.902420][ T9258] veth1_macvtap: entered promiscuous mode [ 972.003546][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.011197][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.396352][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.403990][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.506305][ T794] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 972.709540][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 972.725813][ T794] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 972.781271][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.851052][ T794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 972.940623][ T794] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 972.996318][ T794] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 973.059907][ T794] usb 5-1: Product: syz [ 973.075634][ T794] usb 5-1: Manufacturer: syz [ 973.080479][ T794] usb 5-1: SerialNumber: syz [ 973.155637][ T794] usb 5-1: config 0 descriptor?? [ 973.333147][ T794] ldusb 5-1:0.0: Interrupt in endpoint not found [ 973.346689][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.640189][ T794] usb 5-1: USB disconnect, device number 52 [ 973.660699][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.964740][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.139292][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.185060][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.254832][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.289207][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.790469][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.207622][ T9354] veth0_vlan: entered promiscuous mode [ 978.597590][ T9354] veth1_vlan: entered promiscuous mode [ 978.688603][ T794] libceph: connect (1)[c::]:6789 error -101 [ 978.734335][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 978.797819][ T9471] ceph: No mds server is up or the cluster is laggy [ 979.349818][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.361169][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.045187][ T9354] veth0_macvtap: entered promiscuous mode [ 980.122574][ T9354] veth1_macvtap: entered promiscuous mode [ 980.237957][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.251816][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.267142][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.282573][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.308142][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.595954][ T9296] veth0_vlan: entered promiscuous mode [ 980.643977][ T9492] tipc: Resetting bearer [ 980.842910][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.045439][ T9296] veth1_vlan: entered promiscuous mode [ 981.113898][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.172726][ T9492] vxcan1 speed is unknown, defaulting to 1000 [ 981.355340][ T7827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.404961][ T7827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.435338][ T7827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.572246][ T7827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.964482][ T9296] veth0_macvtap: entered promiscuous mode [ 982.160477][ T6024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.306946][ T9296] veth1_macvtap: entered promiscuous mode [ 982.467212][ T6024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.638846][ T5782] Bluetooth: hci5: command tx timeout [ 982.888896][ T6024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.110773][ T5830] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 984.444839][ T6024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.837854][ T5782] Bluetooth: hci5: command tx timeout [ 984.886496][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.254293][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 985.384849][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.427790][ T5830] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 985.456409][ T5830] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.475579][ T5830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 985.496930][ T5830] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 985.527691][ T5830] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 985.561169][ T5830] usb 9-1: Product: syz [ 985.566765][ T5830] usb 9-1: Manufacturer: syz [ 985.571589][ T5830] usb 9-1: SerialNumber: syz [ 985.610115][ T5830] usb 9-1: config 0 descriptor?? [ 985.655159][ T5830] ldusb 9-1:0.0: Interrupt in endpoint not found [ 985.919988][ T5830] usb 9-1: USB disconnect, device number 20 [ 986.045466][ T7827] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.138898][ T6024] bridge_slave_1: left allmulticast mode [ 986.149875][ T6024] bridge_slave_1: left promiscuous mode [ 986.183497][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.259865][ T6024] bridge_slave_0: left allmulticast mode [ 986.290722][ T6024] bridge_slave_0: left promiscuous mode [ 986.297322][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.028551][ T5782] Bluetooth: hci5: command tx timeout [ 988.387267][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.432510][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.473807][ T6024] bond0 (unregistering): Released all slaves [ 988.562828][ T7827] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.658151][ T7827] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.699535][ T7827] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.260175][ T5782] Bluetooth: hci5: command tx timeout [ 990.192853][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 990.199284][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 990.331188][ T9553] ceph: No mds server is up or the cluster is laggy [ 990.731990][ T6024] hsr_slave_0: left promiscuous mode [ 990.787173][ T6024] hsr_slave_1: left promiscuous mode [ 990.844032][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.902818][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.029869][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.066595][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.101506][ T9564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.144054][ T9564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.153589][ T9564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.196297][ T9564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.227990][ T9564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.292431][ T6024] veth1_macvtap: left promiscuous mode [ 991.298180][ T6024] veth0_macvtap: left promiscuous mode [ 991.306197][ T6024] veth1_vlan: left promiscuous mode [ 991.312920][ T6024] veth0_vlan: left promiscuous mode [ 993.041772][ T9580] kernel profiling enabled (shift: 9) [ 993.442942][ T5782] Bluetooth: hci0: command tx timeout [ 995.470043][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 995.572129][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 995.662994][ T5782] Bluetooth: hci0: command tx timeout [ 997.492583][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 997.691767][ T794] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 997.886360][ T5782] Bluetooth: hci0: command tx timeout [ 997.913663][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 997.978654][ T794] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 998.047669][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.135496][ T794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 998.217694][ T794] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 998.277915][ T794] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 998.365151][ T794] usb 5-1: Product: syz [ 998.398609][ T794] usb 5-1: Manufacturer: syz [ 998.446532][ T794] usb 5-1: SerialNumber: syz [ 998.533291][ T794] usb 5-1: config 0 descriptor?? [ 998.637524][ T6024] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.692151][ T794] ldusb 5-1:0.0: Interrupt in endpoint not found [ 998.813449][ T9563] vxcan1 speed is unknown, defaulting to 1000 [ 998.882405][ T794] usb 5-1: USB disconnect, device number 53 [ 999.097779][ T6024] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.349546][ T6024] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.893105][ T6024] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.108337][ T5782] Bluetooth: hci0: command tx timeout [ 1001.067899][ T794] libceph: connect (1)[c::]:6789 error -101 [ 1001.083239][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 1001.240673][ T9613] ceph: No mds server is up or the cluster is laggy [ 1002.085500][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.108754][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.181487][ T9492] bridge_slave_0: entered allmulticast mode [ 1002.283627][ T9492] bridge_slave_0: entered promiscuous mode [ 1002.603749][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.617253][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.660338][ T9492] bridge_slave_1: entered allmulticast mode [ 1002.685541][ T9492] bridge_slave_1: entered promiscuous mode [ 1002.745293][ T6024] bridge_slave_1: left allmulticast mode [ 1002.763264][ T6024] bridge_slave_1: left promiscuous mode [ 1002.794113][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.934791][ T6024] bridge_slave_0: left allmulticast mode [ 1002.961119][ T6024] bridge_slave_0: left promiscuous mode [ 1002.967789][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.009494][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.028619][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.064556][ T6024] bond0 (unregistering): Released all slaves [ 1004.483133][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.957555][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.527085][ T6024] hsr_slave_0: left promiscuous mode [ 1005.624740][ T6024] hsr_slave_1: left promiscuous mode [ 1005.676000][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.699997][ T9564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.723152][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.741186][ T9564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.759100][ T9564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.780379][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.807286][ T9564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.826093][ T9564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.875941][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.966377][ T6024] veth1_macvtap: left promiscuous mode [ 1005.976249][ T6024] veth0_macvtap: left promiscuous mode [ 1005.982190][ T6024] veth1_vlan: left promiscuous mode [ 1006.014051][ T6024] veth0_vlan: left promiscuous mode [ 1008.060833][ T5782] Bluetooth: hci2: command tx timeout [ 1010.025081][ T2007] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1010.242172][ T2007] usb 9-1: Using ep0 maxpacket: 32 [ 1010.277188][ T2007] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1010.286303][ T5782] Bluetooth: hci2: command tx timeout [ 1010.318747][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1010.319417][ T2007] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.382211][ T2007] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1010.409185][ T2007] usb 9-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1010.462744][ T2007] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1010.497559][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1010.535416][ T2007] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1010.569736][ T2007] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1010.578460][ T2007] usb 9-1: Product: syz [ 1010.633763][ T2007] usb 9-1: Manufacturer: syz [ 1010.638616][ T2007] usb 9-1: SerialNumber: syz [ 1010.707010][ T2007] usb 9-1: config 0 descriptor?? [ 1010.756231][ T2007] ldusb 9-1:0.0: Interrupt in endpoint not found [ 1011.014273][ T7558] usb 9-1: USB disconnect, device number 21 [ 1011.591622][ T9492] team0: Port device team_slave_0 added [ 1011.646166][ T9492] team0: Port device team_slave_1 added [ 1012.303958][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.348661][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.430966][ T9492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.499347][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.525279][ T5782] Bluetooth: hci2: command tx timeout [ 1012.539046][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.178303][ T9492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.195060][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1013.209244][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1013.297409][ T9651] vxcan1 speed is unknown, defaulting to 1000 [ 1013.480499][ T9677] ceph: No mds server is up or the cluster is laggy [ 1013.499157][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1013.505530][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1014.358009][ T9686] loop8: detected capacity change from 0 to 1024 [ 1014.446327][ T9686] EXT4-fs: Ignoring removed bh option [ 1014.523842][ T9686] EXT4-fs: Ignoring removed oldalloc option [ 1014.530287][ T9686] EXT4-fs: Ignoring removed nobh option [ 1014.718582][ T6024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.731243][ T5782] Bluetooth: hci2: command tx timeout [ 1014.801934][ T9686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.939751][ T9492] hsr_slave_0: entered promiscuous mode [ 1015.038138][ T9492] hsr_slave_1: entered promiscuous mode [ 1015.223227][ T6024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.256760][ T7332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.299117][ T9563] chnl_net:caif_netlink_parms(): no params data found [ 1015.433923][ T6024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.352826][ T6024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.106530][ T9701] 9pnet_virtio: no channels available for device syz [ 1023.637964][ T6024] bridge_slave_1: left allmulticast mode [ 1023.659906][ T6024] bridge_slave_1: left promiscuous mode [ 1023.673667][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.732387][ T6024] bridge_slave_0: left allmulticast mode [ 1023.777698][ T6024] bridge_slave_0: left promiscuous mode [ 1023.784382][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.002128][ T2007] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1024.183851][ T2007] usb 5-1: Using ep0 maxpacket: 32 [ 1024.199032][ T2007] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1024.216507][ T2007] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.257357][ T2007] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1024.284010][ T2007] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1024.320446][ T2007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1024.414575][ T2007] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1024.435825][ T2007] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1024.477526][ T2007] usb 5-1: Product: syz [ 1024.481958][ T2007] usb 5-1: Manufacturer: syz [ 1024.511902][ T2007] usb 5-1: SerialNumber: syz [ 1024.557051][ T2007] usb 5-1: config 0 descriptor?? [ 1024.606767][ T2007] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1024.829575][ T2007] usb 5-1: USB disconnect, device number 54 [ 1024.966525][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.024911][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.053553][ T6024] bond0 (unregistering): Released all slaves [ 1026.124631][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.137211][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.157073][ T9563] bridge_slave_0: entered allmulticast mode [ 1026.388030][ T9563] bridge_slave_0: entered promiscuous mode [ 1027.910390][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1027.927287][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1028.018351][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.033704][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.041941][ T9563] bridge_slave_1: entered allmulticast mode [ 1028.046299][ T9735] ceph: No mds server is up or the cluster is laggy [ 1028.056304][ T9563] bridge_slave_1: entered promiscuous mode [ 1028.081137][ T9651] chnl_net:caif_netlink_parms(): no params data found [ 1028.396395][ T6024] hsr_slave_0: left promiscuous mode [ 1028.450964][ T6024] hsr_slave_1: left promiscuous mode [ 1028.460109][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.467721][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.483477][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.536225][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.567812][ T9742] loop4: detected capacity change from 0 to 1024 [ 1028.591754][ T6024] veth1_macvtap: left promiscuous mode [ 1028.601370][ T9742] EXT4-fs: Ignoring removed bh option [ 1028.639926][ T6024] veth0_macvtap: left promiscuous mode [ 1028.646155][ T6024] veth1_vlan: left promiscuous mode [ 1028.688619][ T9742] EXT4-fs: Ignoring removed oldalloc option [ 1028.698318][ T6024] veth0_vlan: left promiscuous mode [ 1028.753048][ T9742] EXT4-fs: Ignoring removed nobh option [ 1028.877046][ T9742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.329313][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.422166][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1031.592209][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1033.313988][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.402234][ T9564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.413262][ T9564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.430375][ T9564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.450943][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.769056][ T9564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.794840][ T9564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1034.411785][ T9563] team0: Port device team_slave_0 added [ 1034.457128][ T9563] team0: Port device team_slave_1 added [ 1034.789332][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.805591][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.933632][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.133433][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.158569][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.211798][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.311923][ T6024] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.384946][ T9762] vxcan1 speed is unknown, defaulting to 1000 [ 1035.647753][ T6024] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.013237][ T5782] Bluetooth: hci1: command tx timeout [ 1036.101058][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.130935][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.138728][ T9651] bridge_slave_0: entered allmulticast mode [ 1036.206557][ T9651] bridge_slave_0: entered promiscuous mode [ 1036.295420][ T9563] hsr_slave_0: entered promiscuous mode [ 1036.327426][ T9563] hsr_slave_1: entered promiscuous mode [ 1036.367404][ T9563] debugfs: 'hsr0' already exists in 'hsr' [ 1036.373269][ T9563] Cannot create hsr debugfs directory [ 1036.448329][ T6024] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.579261][ T9492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1036.623445][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.630991][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.669223][ T9651] bridge_slave_1: entered allmulticast mode [ 1036.704462][ T9651] bridge_slave_1: entered promiscuous mode [ 1036.860554][ T6024] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.922831][ T9492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1037.222775][ T9492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1037.297252][ T9492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1037.396737][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.236749][ T5782] Bluetooth: hci1: command tx timeout [ 1038.786621][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.193005][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.302256][ T9651] team0: Port device team_slave_0 added [ 1039.343477][ T9651] team0: Port device team_slave_1 added [ 1039.773071][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.802980][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.865270][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.169178][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.198649][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.277115][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.419278][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.455283][ T6024] bridge_slave_1: left allmulticast mode [ 1040.462030][ T5782] Bluetooth: hci1: command tx timeout [ 1040.537557][ T6024] bridge_slave_1: left promiscuous mode [ 1040.576806][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.598042][ T6024] bridge_slave_0: left allmulticast mode [ 1040.603926][ T6024] bridge_slave_0: left promiscuous mode [ 1040.630796][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.305004][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.351826][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.374313][ T6024] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1041.389874][ T6024] bond0 (unregistering): Released all slaves [ 1041.594730][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.602475][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.272354][ T9651] hsr_slave_0: entered promiscuous mode [ 1042.284214][ T9651] hsr_slave_1: entered promiscuous mode [ 1042.312866][ T9651] debugfs: 'hsr0' already exists in 'hsr' [ 1042.319212][ T9651] Cannot create hsr debugfs directory [ 1042.681082][ T5782] Bluetooth: hci1: command tx timeout [ 1043.374950][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.382641][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.206412][ T9762] chnl_net:caif_netlink_parms(): no params data found [ 1044.686968][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1044.694474][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1045.224806][ T9564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.235024][ T9564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.258026][ T9564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.283382][ T9564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.295305][ T9564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1045.678557][ T6024] hsr_slave_0: left promiscuous mode [ 1045.688284][ T6024] hsr_slave_1: left promiscuous mode [ 1045.704531][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.721316][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.733564][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.743585][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.827120][ T6024] veth1_macvtap: left promiscuous mode [ 1045.832948][ T6024] veth0_macvtap: left promiscuous mode [ 1045.867474][ T6024] veth1_vlan: left promiscuous mode [ 1045.873249][ T6024] veth0_vlan: left promiscuous mode [ 1047.575328][ T9564] Bluetooth: hci3: command tx timeout [ 1048.246841][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1048.308284][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1048.334170][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1048.360104][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1048.461321][ T9823] ceph: No mds server is up or the cluster is laggy [ 1048.590986][ T7827] smc: removing ib device syz2 [ 1048.941768][ T9833] loop4: detected capacity change from 0 to 1024 [ 1049.062604][ T9563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1049.090156][ T9833] EXT4-fs: Ignoring removed bh option [ 1049.126622][ T9833] EXT4-fs: Ignoring removed oldalloc option [ 1049.147074][ T9833] EXT4-fs: Ignoring removed nobh option [ 1049.243415][ T9563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1049.373534][ T9833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.777055][ T9564] Bluetooth: hci3: command tx timeout [ 1049.923608][ T2007] vxcan1 speed is unknown, defaulting to 1000 [ 1049.940167][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.034699][ T2007] syz2: Port: 1 Link DOWN [ 1050.168742][ T9563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1050.280983][ T9563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1050.499319][ T9814] tipc: Resetting bearer [ 1052.005068][ T9564] Bluetooth: hci3: command tx timeout [ 1053.147168][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.159610][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.181631][ T9762] bridge_slave_0: entered allmulticast mode [ 1053.204028][ T9762] bridge_slave_0: entered promiscuous mode [ 1053.415014][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.431819][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.439650][ T9762] bridge_slave_1: entered allmulticast mode [ 1053.493989][ T9762] bridge_slave_1: entered promiscuous mode [ 1053.683828][ T6024] IPVS: stop unused estimator thread 0... [ 1053.920032][ T9762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.085975][ T9762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.222827][ T9564] Bluetooth: hci3: command tx timeout [ 1054.520549][ T9762] team0: Port device team_slave_0 added [ 1054.945334][ T9762] team0: Port device team_slave_1 added [ 1055.516626][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.568695][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.653121][ T9762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.800171][ T9651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1055.831661][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1055.844442][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1055.853615][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1055.896579][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1055.907449][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1056.024653][ T9762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.060255][ T9762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.115494][ T9762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.242167][ T9651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1056.530207][ T9651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1056.612161][ T9651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1056.892559][ T9762] hsr_slave_0: entered promiscuous mode [ 1056.937742][ T9762] hsr_slave_1: entered promiscuous mode [ 1056.945591][ T9762] debugfs: 'hsr0' already exists in 'hsr' [ 1056.965109][ T9762] Cannot create hsr debugfs directory [ 1057.173327][ T9814] chnl_net:caif_netlink_parms(): no params data found [ 1058.198995][ T5782] Bluetooth: hci5: command tx timeout [ 1059.819430][ T6024] bridge_slave_1: left allmulticast mode [ 1059.826537][ T6024] bridge_slave_1: left promiscuous mode [ 1059.840675][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.862228][ T6024] bridge_slave_0: left allmulticast mode [ 1059.870543][ T6024] bridge_slave_0: left promiscuous mode [ 1059.879410][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.377361][ T9564] Bluetooth: hci5: command tx timeout [ 1060.498012][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.564940][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.613498][ T6024] bond0 (unregistering): Released all slaves [ 1061.330977][ T6024] hsr_slave_0: left promiscuous mode [ 1061.345575][ T6024] hsr_slave_1: left promiscuous mode [ 1061.365563][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.107109][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.610714][ T5782] Bluetooth: hci5: command tx timeout [ 1064.079609][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1064.184541][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1064.830211][ T5782] Bluetooth: hci5: command tx timeout [ 1065.505421][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 1066.248806][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.265827][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.273608][ T9814] bridge_slave_0: entered allmulticast mode [ 1066.294495][ T9814] bridge_slave_0: entered promiscuous mode [ 1066.568668][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.593481][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.625925][ T9814] bridge_slave_1: entered allmulticast mode [ 1066.657665][ T9814] bridge_slave_1: entered promiscuous mode [ 1067.182508][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.263396][ T9814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.340844][ T9814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.313799][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1069.320209][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1069.439885][ T9941] ceph: No mds server is up or the cluster is laggy [ 1070.107957][ T9564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.118552][ T9564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.132048][ T9814] team0: Port device team_slave_0 added [ 1070.142046][ T9564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.159864][ T9564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.177122][ T9564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1070.323290][ T9967] netlink: 'syz.4.703': attribute type 12 has an invalid length. [ 1070.337508][ T9967] netlink: 'syz.4.703': attribute type 29 has an invalid length. [ 1070.346010][ T9967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.703'. [ 1070.369167][ T9967] netlink: 51 bytes leftover after parsing attributes in process `syz.4.703'. [ 1070.421352][ T9762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1070.515165][ T9814] team0: Port device team_slave_1 added [ 1070.837821][ T9762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.905460][ T9762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1071.071427][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.101607][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.159548][ T9814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.198503][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.223949][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.243021][ T9871] bridge_slave_0: entered allmulticast mode [ 1071.272805][ T9871] bridge_slave_0: entered promiscuous mode [ 1071.314273][ T9762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1071.411984][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.482177][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.614578][ T9814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.648629][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.689268][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.840459][ T9871] bridge_slave_1: entered allmulticast mode [ 1071.929723][ T9871] bridge_slave_1: entered promiscuous mode [ 1072.395834][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.430972][ T9564] Bluetooth: hci0: command tx timeout [ 1072.657550][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.935832][ T9871] team0: Port device team_slave_0 added [ 1073.052437][ T9814] hsr_slave_0: entered promiscuous mode [ 1073.064993][ T9814] hsr_slave_1: entered promiscuous mode [ 1073.181362][ T9871] team0: Port device team_slave_1 added [ 1073.433910][ T6024] bridge_slave_1: left allmulticast mode [ 1073.441575][ T6024] bridge_slave_1: left promiscuous mode [ 1073.450230][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.479263][ T6024] bridge_slave_0: left allmulticast mode [ 1073.496550][ T6024] bridge_slave_0: left promiscuous mode [ 1073.517314][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.016143][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.067451][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.087497][ T6024] bond0 (unregistering): Released all slaves [ 1074.238160][ T9981] loop5: detected capacity change from 0 to 7 [ 1074.296765][ T9981] Dev loop5: unable to read RDB block 7 [ 1074.303603][ T9981] loop5: AHDI p1 [ 1074.308099][ T9981] loop5: partition table partially beyond EOD, truncated [ 1074.654228][ T9564] Bluetooth: hci0: command tx timeout [ 1075.627208][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.634412][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.664856][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.693380][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.702745][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.748627][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.781175][ T6024] hsr_slave_0: left promiscuous mode [ 1075.793855][ T6024] hsr_slave_1: left promiscuous mode [ 1075.805024][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.815782][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.338288][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1076.414984][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1076.940682][ T9564] Bluetooth: hci0: command tx timeout [ 1077.480812][ T9871] hsr_slave_0: entered promiscuous mode [ 1077.492886][ T9871] hsr_slave_1: entered promiscuous mode [ 1077.504232][ T9871] debugfs: 'hsr0' already exists in 'hsr' [ 1077.537137][ T9871] Cannot create hsr debugfs directory [ 1078.598759][ T9968] chnl_net:caif_netlink_parms(): no params data found [ 1079.131916][ T9564] Bluetooth: hci0: command tx timeout [ 1080.449807][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.607214][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.950790][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.958515][ T7827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.021112][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.028885][ T7827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.591349][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.634539][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.666507][ T9968] bridge_slave_0: entered allmulticast mode [ 1082.723987][ T9968] bridge_slave_0: entered promiscuous mode [ 1082.824128][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.845710][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.887785][ T9968] bridge_slave_1: entered allmulticast mode [ 1082.917517][ T9968] bridge_slave_1: entered promiscuous mode [ 1082.970170][ T6024] bridge_slave_1: left allmulticast mode [ 1082.976170][ T6024] bridge_slave_1: left promiscuous mode [ 1082.992043][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.019725][ T6024] bridge_slave_0: left allmulticast mode [ 1083.031724][ T6024] bridge_slave_0: left promiscuous mode [ 1083.038336][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.668953][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.693263][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.714146][ T6024] bond0 (unregistering): Released all slaves [ 1084.405669][ T6024] hsr_slave_0: left promiscuous mode [ 1084.433545][ T6024] hsr_slave_1: left promiscuous mode [ 1084.466329][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.518604][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.575848][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1085.645303][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1086.311787][ T9968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.403469][ T9968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.743795][ T9968] team0: Port device team_slave_0 added [ 1086.830982][ T9968] team0: Port device team_slave_1 added [ 1086.917459][ T9871] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1087.071867][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.079087][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.108921][ T9968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.130542][ T9871] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1087.200554][ T9968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.215434][ T9968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.249707][ T9968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.270057][ T9871] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1087.400504][ T9871] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1087.472453][ T794] libceph: connect (1)[c::]:6789 error -101 [ 1087.491093][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 1087.621054][T10033] ceph: No mds server is up or the cluster is laggy [ 1087.766646][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.960581][ T9968] hsr_slave_0: entered promiscuous mode [ 1087.971592][ T9968] hsr_slave_1: entered promiscuous mode [ 1087.993997][ T9968] debugfs: 'hsr0' already exists in 'hsr' [ 1087.999974][ T9968] Cannot create hsr debugfs directory [ 1088.095192][ T9814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1088.180911][ T9814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1088.380538][ T9814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1088.408722][ T9814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.860239][ T9762] veth0_vlan: entered promiscuous mode [ 1090.118378][ T9762] veth1_vlan: entered promiscuous mode [ 1090.570133][ T9814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.683893][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.886082][ T9968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1090.969230][ T9762] veth0_macvtap: entered promiscuous mode [ 1091.027257][ T9968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1091.074921][ T9968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1091.159885][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.190187][ T9814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.209895][ T9762] veth1_macvtap: entered promiscuous mode [ 1091.241978][ T9968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1091.375072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.382713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.467335][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.475051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.566400][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.574034][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.602139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.609671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.809128][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.003070][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.289224][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.315970][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.363790][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.443257][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.939982][T10068] netlink: 'syz.4.710': attribute type 12 has an invalid length. [ 1092.960072][T10068] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 1092.968030][T10068] netlink: 148 bytes leftover after parsing attributes in process `syz.4.710'. [ 1093.015850][T10068] netlink: 51 bytes leftover after parsing attributes in process `syz.4.710'. [ 1093.702087][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.969046][ T9968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.100011][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.107657][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.341763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.349549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.213551][ T9814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.973637][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.962107][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1099.972338][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1099.983592][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1099.998938][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1100.012553][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1100.212309][ T9814] veth0_vlan: entered promiscuous mode [ 1100.859841][ T9814] veth1_vlan: entered promiscuous mode [ 1102.114464][ T9814] veth0_macvtap: entered promiscuous mode [ 1102.269417][ T9564] Bluetooth: hci2: command tx timeout [ 1102.349630][ T9814] veth1_macvtap: entered promiscuous mode [ 1102.657323][ T9968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.875650][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.102665][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.574801][ T9564] Bluetooth: hci2: command tx timeout [ 1105.013058][T10107] chnl_net:caif_netlink_parms(): no params data found [ 1105.066286][ T6024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.680940][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.901415][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.056470][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.799098][ T9564] Bluetooth: hci2: command tx timeout [ 1107.211366][ T6024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.242981][ T6024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.350848][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.652788][ T6024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.691234][ T9871] veth0_vlan: entered promiscuous mode [ 1108.129026][ T9968] veth0_vlan: entered promiscuous mode [ 1108.249276][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1108.287558][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1108.330933][ T9871] veth1_vlan: entered promiscuous mode [ 1108.368081][T10148] ceph: No mds server is up or the cluster is laggy [ 1108.586010][ T9968] veth1_vlan: entered promiscuous mode [ 1108.604797][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1108.613491][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1109.041859][ T9564] Bluetooth: hci2: command tx timeout [ 1109.122203][ T2979] bridge_slave_1: left allmulticast mode [ 1109.155395][ T2979] bridge_slave_1: left promiscuous mode [ 1109.170644][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.213489][ T2979] bridge_slave_0: left allmulticast mode [ 1109.219409][ T2979] bridge_slave_0: left promiscuous mode [ 1109.245431][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.829774][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1109.850062][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1109.859387][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1109.881894][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1109.894809][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1110.342027][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.348999][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.529882][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.595921][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.637506][ T2979] bond0 (unregistering): Released all slaves [ 1111.059227][ T2979] hsr_slave_0: left promiscuous mode [ 1111.085740][ T2979] hsr_slave_1: left promiscuous mode [ 1111.115839][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.123443][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.150261][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.180794][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.235624][ T2979] veth1_macvtap: left promiscuous mode [ 1111.241393][ T2979] veth0_macvtap: left promiscuous mode [ 1111.275300][ T2979] veth1_vlan: left promiscuous mode [ 1111.280907][ T2979] veth0_vlan: left promiscuous mode [ 1112.097738][ T5782] Bluetooth: hci1: command tx timeout [ 1112.256894][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 1112.300744][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 1112.678869][T10107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.703062][T10107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.728101][T10107] bridge_slave_0: entered allmulticast mode [ 1112.746501][T10107] bridge_slave_0: entered promiscuous mode [ 1112.764319][T10107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.780383][T10107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.795655][T10107] bridge_slave_1: entered allmulticast mode [ 1112.806145][T10107] bridge_slave_1: entered promiscuous mode [ 1112.861052][T10161] tipc: Resetting bearer [ 1113.169047][ T9968] veth0_macvtap: entered promiscuous mode [ 1113.216602][T10107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.302804][ T9968] veth1_macvtap: entered promiscuous mode [ 1113.359331][T10107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.632398][T10107] team0: Port device team_slave_0 added [ 1113.776741][ T9871] veth0_macvtap: entered promiscuous mode [ 1113.830204][T10107] team0: Port device team_slave_1 added [ 1113.991573][T10176] netlink: 'syz.4.717': attribute type 12 has an invalid length. [ 1114.007253][T10176] netlink: 'syz.4.717': attribute type 29 has an invalid length. [ 1114.017567][T10176] netlink: 148 bytes leftover after parsing attributes in process `syz.4.717'. [ 1114.028698][T10176] netlink: 51 bytes leftover after parsing attributes in process `syz.4.717'. [ 1114.058941][T10107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.074557][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.139122][T10107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.230735][ T9871] veth1_macvtap: entered promiscuous mode [ 1114.320770][ T5782] Bluetooth: hci1: command tx timeout [ 1114.368130][ T2979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.402747][T10107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.424715][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.526770][T10107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.743180][ T2979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.828665][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.124872][ T2979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.146037][T10186] binder: 10180:10186 ioctl c0306201 0 returned -14 [ 1115.218979][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.300569][T10107] hsr_slave_0: entered promiscuous mode [ 1115.323730][T10107] hsr_slave_1: entered promiscuous mode [ 1115.348863][T10107] debugfs: 'hsr0' already exists in 'hsr' [ 1115.366755][T10107] Cannot create hsr debugfs directory [ 1115.405881][ T9968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.556878][ T2979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.867147][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.881208][T10100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.082128][T10100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.104875][T10100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.344655][T10100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.543015][ T5782] Bluetooth: hci1: command tx timeout [ 1116.560943][ T7826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.587223][ T7826] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.884217][ T7826] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.934435][ T7826] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.650902][ T2979] bridge_slave_1: left allmulticast mode [ 1117.658206][ T2979] bridge_slave_1: left promiscuous mode [ 1117.676712][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.703455][ T2979] bridge_slave_0: left allmulticast mode [ 1117.712095][ T2979] bridge_slave_0: left promiscuous mode [ 1117.719881][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.469027][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.533506][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.552734][ T2979] bond0 (unregistering): Released all slaves [ 1118.629951][T10161] chnl_net:caif_netlink_parms(): no params data found [ 1118.766763][ T5782] Bluetooth: hci1: command tx timeout [ 1119.174120][ T2979] hsr_slave_0: left promiscuous mode [ 1119.202316][ T2979] hsr_slave_1: left promiscuous mode [ 1119.257803][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.265403][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.304499][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.319403][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.382242][ T2979] veth1_macvtap: left promiscuous mode [ 1119.389907][ T2979] veth0_macvtap: left promiscuous mode [ 1119.397567][ T2979] veth1_vlan: left promiscuous mode [ 1119.403047][ T2979] veth0_vlan: left promiscuous mode [ 1120.222556][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 1120.248253][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 1122.121309][ T9564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1122.144809][T10107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1122.153454][ T9564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1122.162889][ T9564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1122.178000][ T9564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1122.191651][ T9564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.301480][T10107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1122.487304][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.501111][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.517235][T10161] bridge_slave_0: entered allmulticast mode [ 1122.539761][T10161] bridge_slave_0: entered promiscuous mode [ 1123.270530][T10107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.356108][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.380657][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.401717][T10161] bridge_slave_1: entered allmulticast mode [ 1123.422939][T10161] bridge_slave_1: entered promiscuous mode [ 1123.760421][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.920003][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.995435][T10107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1124.287227][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.416247][ T9564] Bluetooth: hci3: command tx timeout [ 1124.577769][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.721865][T10161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.890277][T10161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.345671][T10161] team0: Port device team_slave_0 added [ 1125.527507][T10161] team0: Port device team_slave_1 added [ 1126.025678][T10161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.051480][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.091234][T10161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.167669][T10161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.190873][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.234055][T10161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.446417][ T35] bridge_slave_1: left allmulticast mode [ 1126.487305][ T35] bridge_slave_1: left promiscuous mode [ 1126.506831][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.547450][ T35] bridge_slave_0: left allmulticast mode [ 1126.560755][ T35] bridge_slave_0: left promiscuous mode [ 1126.586685][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.630934][ T9564] Bluetooth: hci3: command tx timeout [ 1127.364208][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.412936][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.428831][ T35] bond0 (unregistering): Released all slaves [ 1127.671503][ T35] hsr_slave_0: left promiscuous mode [ 1127.680882][ T35] hsr_slave_1: left promiscuous mode [ 1127.691394][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.699418][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.716918][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.724801][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.764322][ T35] veth1_macvtap: left promiscuous mode [ 1127.770065][ T35] veth0_macvtap: left promiscuous mode [ 1127.779239][ T35] veth1_vlan: left promiscuous mode [ 1127.790341][ T35] veth0_vlan: left promiscuous mode [ 1128.644558][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1128.685600][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1128.864139][ T9564] Bluetooth: hci3: command tx timeout [ 1129.433316][T10030] libceph: connect (1)[c::]:6789 error -101 [ 1129.441312][T10030] libceph: mon0 (1)[c::]:6789 connect error [ 1129.524998][T10161] hsr_slave_0: entered promiscuous mode [ 1129.562202][T10161] hsr_slave_1: entered promiscuous mode [ 1129.570115][T10249] ceph: No mds server is up or the cluster is laggy [ 1130.018187][T10220] chnl_net:caif_netlink_parms(): no params data found [ 1130.045654][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.087467][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.406933][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.446055][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.882717][T10107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.076101][ T9564] Bluetooth: hci3: command tx timeout [ 1131.269206][ T7563] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1131.315359][T10107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.450672][ T7563] usb 4-1: Using ep0 maxpacket: 32 [ 1131.473688][ T7563] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1131.480061][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.493044][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.502076][T10220] bridge_slave_0: entered allmulticast mode [ 1131.511880][T10220] bridge_slave_0: entered promiscuous mode [ 1131.552647][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.568093][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.587752][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.595443][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.608866][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.642613][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.650896][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.669796][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.673191][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.718976][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.727242][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.734917][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.743394][T10220] bridge_slave_1: entered allmulticast mode [ 1131.757789][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.778761][T10220] bridge_slave_1: entered promiscuous mode [ 1131.789520][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.803203][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.833509][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.869573][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.888100][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.894634][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.934299][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.957068][ T7563] usb 4-1: config 0 has no interface number 0 [ 1131.971765][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.990521][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1132.007440][ T7563] usb 4-1: config 0 has no interface number 0 [ 1132.027101][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.053115][ T7563] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1132.070744][ T7563] usb 4-1: config 0 has no interface number 0 [ 1132.077091][ T7563] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.111411][ T7563] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1132.127948][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.141289][ T7563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.158861][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.166484][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.176791][ T7563] usb 4-1: Product: syz [ 1132.181160][ T7563] usb 4-1: Manufacturer: syz [ 1132.185951][ T7563] usb 4-1: SerialNumber: syz [ 1132.222757][ T7563] usb 4-1: config 0 descriptor?? [ 1132.278469][ T7563] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1132.348939][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.677341][T10220] team0: Port device team_slave_0 added [ 1132.715505][T10220] team0: Port device team_slave_1 added [ 1133.025413][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.035204][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.068612][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.148520][T10161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1133.195108][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.207285][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.239172][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.273859][T10161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1133.354082][T10161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1133.414689][T10161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1133.701491][T10220] hsr_slave_0: entered promiscuous mode [ 1133.713634][T10220] hsr_slave_1: entered promiscuous mode [ 1133.723224][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 1133.737195][T10220] Cannot create hsr debugfs directory [ 1134.838638][T10267] netlink: 'syz.4.724': attribute type 12 has an invalid length. [ 1134.847285][T10267] netlink: 'syz.4.724': attribute type 29 has an invalid length. [ 1134.864107][T10267] netlink: 148 bytes leftover after parsing attributes in process `syz.4.724'. [ 1134.880306][T10267] netlink: 51 bytes leftover after parsing attributes in process `syz.4.724'. [ 1135.373291][ T5833] usb 4-1: USB disconnect, device number 7 [ 1135.855544][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 1136.772894][T10161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.920861][T10107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.880123][T10161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.831207][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.838845][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.868944][T10220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1139.943149][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1139.943233][ T29] audit: type=1326 audit(1774745943.570:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.4.729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa3f99c799 code=0x0 [ 1140.043112][T10220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1140.119621][T10220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1140.221578][T10220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1140.445392][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.453082][ T7826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.049395][T10107] veth0_vlan: entered promiscuous mode [ 1141.357817][T10107] veth1_vlan: entered promiscuous mode [ 1141.428638][T10291] netlink: 'syz.4.732': attribute type 12 has an invalid length. [ 1141.449023][T10291] netlink: 'syz.4.732': attribute type 29 has an invalid length. [ 1141.474704][T10291] netlink: 148 bytes leftover after parsing attributes in process `syz.4.732'. [ 1141.489855][T10291] netlink: 51 bytes leftover after parsing attributes in process `syz.4.732'. [ 1142.277433][T10294] ceph: No mds server is up or the cluster is laggy [ 1142.286753][ T7559] libceph: connect (1)[c::]:6789 error -101 [ 1142.293089][ T7559] libceph: mon0 (1)[c::]:6789 connect error [ 1142.551964][T10107] veth0_macvtap: entered promiscuous mode [ 1142.825430][T10107] veth1_macvtap: entered promiscuous mode [ 1143.141966][ T7563] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1143.386632][ T7563] usb 5-1: Using ep0 maxpacket: 32 [ 1143.399816][ T7563] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 1143.463085][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1143.481040][T10107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.527887][ T7563] usb 5-1: config 0 has no interface number 0 [ 1143.534229][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1143.646722][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1143.717934][ T7563] usb 5-1: config 0 has no interface number 0 [ 1143.747756][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1143.826051][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1143.882289][ T7563] usb 5-1: config 0 has no interface number 0 [ 1143.954481][T10107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.967854][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.004061][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1144.063011][ T7563] usb 5-1: config 0 has no interface number 0 [ 1144.117488][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.201417][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1144.294696][ T7563] usb 5-1: config 0 has no interface number 0 [ 1144.301178][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.343534][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.380230][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.400480][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1144.422945][ T7563] usb 5-1: config 0 has no interface number 0 [ 1144.429286][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.495194][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1144.565711][ T7563] usb 5-1: config 0 has no interface number 0 [ 1144.590518][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.600035][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.629926][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.674111][ T7563] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1144.706968][ T7563] usb 5-1: config 0 has no interface number 0 [ 1144.734110][ T7563] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.755359][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.799429][ T7563] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1144.829777][ T7563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.866442][ T7563] usb 5-1: Product: syz [ 1144.897551][ T7563] usb 5-1: Manufacturer: syz [ 1144.902392][ T7563] usb 5-1: SerialNumber: syz [ 1144.935212][ T7563] usb 5-1: config 0 descriptor?? [ 1145.012209][ T7563] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 1145.214853][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.452294][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.460109][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.631033][T10161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.707619][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.715368][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.833568][ T7563] libceph: connect (1)[c::]:6789 error -101 [ 1145.839943][ T7563] libceph: mon0 (1)[c::]:6789 connect error [ 1145.971318][T10306] ceph: No mds server is up or the cluster is laggy [ 1148.022656][T10161] veth0_vlan: entered promiscuous mode [ 1148.392485][T10161] veth1_vlan: entered promiscuous mode [ 1148.533635][ T7563] usb 5-1: USB disconnect, device number 55 [ 1149.090782][T10161] veth0_macvtap: entered promiscuous mode [ 1149.297629][T10161] veth1_macvtap: entered promiscuous mode [ 1149.463904][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1149.484725][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1149.497412][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1150.128278][T10337] infiniband syz2: set active [ 1150.133308][T10337] infiniband syz2: added vxcan1 [ 1150.144456][T10337] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1150.153621][T10337] infiniband syz2: Couldn't open port 1 [ 1150.181144][ T7020] vxcan1 speed is unknown, defaulting to 1000 [ 1150.213445][T10337] RDS/IB: syz2: added [ 1150.217767][T10337] smc: adding ib device syz2 with port count 1 [ 1150.224103][T10337] smc: ib device syz2 port 1 has no pnetid [ 1150.235421][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1150.403428][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 1150.423175][ T29] audit: type=1326 audit(1774745952.553:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1150.769174][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1151.242794][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1151.415041][ T29] audit: type=1326 audit(1774745952.553:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.439385][ T29] audit: type=1326 audit(1774745952.553:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.608404][ T29] audit: type=1326 audit(1774745952.553:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.643533][ T29] audit: type=1326 audit(1774745952.563:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.801690][ T29] audit: type=1326 audit(1774745952.563:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.833941][T10161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.912041][ T29] audit: type=1326 audit(1774745952.563:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1151.985390][T10161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.062036][ T29] audit: type=1326 audit(1774745952.563:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1152.143552][ T29] audit: type=1326 audit(1774745952.563:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1152.261483][ T29] audit: type=1326 audit(1774745952.563:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eeb9c799 code=0x7ffc0000 [ 1152.435274][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1152.651464][ T2948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.700573][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.863700][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.953243][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.152223][T10348] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1153.279938][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.521579][T10337] vxcan1 speed is unknown, defaulting to 1000 [ 1154.054402][T10353] netlink: 'syz.4.740': attribute type 12 has an invalid length. [ 1154.075519][T10353] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 1154.139018][T10353] netlink: 148 bytes leftover after parsing attributes in process `syz.4.740'. [ 1154.157080][T10353] netlink: 39 bytes leftover after parsing attributes in process `syz.4.740'. [ 1154.435294][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.468540][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.499917][ T9564] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1154.508478][ T9564] Bluetooth: hci0: Injecting HCI hardware error event [ 1154.517728][ T9564] Bluetooth: hci0: hardware error 0x00 [ 1155.378204][T10361] loop3: detected capacity change from 0 to 1024 [ 1155.657756][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.860856][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1156.007680][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1156.396988][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1156.483010][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1156.681401][T10365] ceph: No mds server is up or the cluster is laggy [ 1156.687877][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.738823][ T9564] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1159.122757][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1159.138439][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1159.240106][T10371] ceph: No mds server is up or the cluster is laggy [ 1160.226680][T10220] veth0_vlan: entered promiscuous mode [ 1160.260076][ T7020] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1160.580116][ T7020] usb 3-1: Using ep0 maxpacket: 32 [ 1161.732091][T10220] veth1_vlan: entered promiscuous mode [ 1161.906221][ T7020] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1162.061403][ T7020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1162.338277][ T7020] usb 3-1: config 0 has no interface number 0 [ 1162.405968][ T7020] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1162.577593][ T7020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1162.595349][ T7020] usb 3-1: config 0 has no interface number 0 [ 1162.621990][ T7020] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1162.678385][ T7020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1162.718005][ T7020] usb 3-1: config 0 has no interface number 0 [ 1162.769109][ T7020] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1162.996255][ T7020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1163.069520][ T7020] usb 3-1: config 0 has no interface number 0 [ 1163.239809][ T7020] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1164.122111][T10220] veth0_macvtap: entered promiscuous mode [ 1164.265936][T10220] veth1_macvtap: entered promiscuous mode [ 1164.561209][ T7020] usb 3-1: unable to read config index 4 descriptor/start: -71 [ 1164.613129][ T7020] usb 3-1: can't read configurations, error -71 [ 1164.723444][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.906160][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.163385][ T7826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.198386][ T2979] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.287512][T10409] netlink: 'syz.4.748': attribute type 12 has an invalid length. [ 1165.396944][T10409] netlink: 'syz.4.748': attribute type 29 has an invalid length. [ 1165.433479][T10409] netlink: 148 bytes leftover after parsing attributes in process `syz.4.748'. [ 1165.471755][T10409] netlink: 39 bytes leftover after parsing attributes in process `syz.4.748'. [ 1165.550705][ T2979] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.602695][ T2979] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.848967][T10428] loop2: detected capacity change from 0 to 16 [ 1166.958840][T10428] erofs (device loop2): invalid ishare xattr prefix id 0 [ 1171.610001][T10439] ceph: No mds server is up or the cluster is laggy [ 1171.619213][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1171.625546][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1171.962474][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1171.982466][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1172.550257][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1172.605662][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1175.135831][ T7558] libceph: connect (1)[c::]:6789 error -101 [ 1175.160249][ T7558] libceph: mon0 (1)[c::]:6789 connect error [ 1175.282065][T10447] ceph: No mds server is up or the cluster is laggy [ 1175.596460][ T7020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1175.840028][ T7020] usb 4-1: Using ep0 maxpacket: 32 [ 1175.863708][ T7020] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1175.901163][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1175.963291][ T7020] usb 4-1: config 0 has no interface number 0 [ 1175.986176][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.028069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.035220][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.074807][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.104322][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.121114][ T7020] usb 4-1: config 0 has no interface number 0 [ 1176.127472][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.168873][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.287491][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.320865][ T7020] usb 4-1: config 0 has no interface number 0 [ 1176.327203][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.350682][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.452981][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.466543][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1176.470586][ T7020] usb 4-1: config 0 has no interface number 0 [ 1176.492978][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1176.503453][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1176.527173][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.547336][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1176.555149][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.573850][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.586352][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.651869][ T7020] usb 4-1: config 0 has no interface number 0 [ 1176.658214][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.742807][T10469] tipc: Resetting bearer [ 1176.790172][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1176.866007][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.902576][ T7020] usb 4-1: config 0 has no interface number 0 [ 1176.940596][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.950658][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1177.046610][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1177.092566][ T7020] usb 4-1: config 0 has no interface number 0 [ 1177.098920][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1177.132362][T10469] vxcan1 speed is unknown, defaulting to 1000 [ 1177.197032][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1177.264254][ T7020] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1177.268645][T10476] netlink: 'syz.2.758': attribute type 12 has an invalid length. [ 1177.295062][ T7020] usb 4-1: config 0 has no interface number 0 [ 1177.301510][ T7020] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1177.357636][T10476] netlink: 'syz.2.758': attribute type 29 has an invalid length. [ 1177.365576][T10476] netlink: 148 bytes leftover after parsing attributes in process `syz.2.758'. [ 1177.381717][ T7020] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1177.393599][T10476] netlink: 39 bytes leftover after parsing attributes in process `syz.2.758'. [ 1177.432081][ T7020] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1177.475549][ T7020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.483844][ T7020] usb 4-1: Product: syz [ 1177.533084][ T7020] usb 4-1: Manufacturer: syz [ 1177.538273][ T7020] usb 4-1: SerialNumber: syz [ 1177.596173][ T7020] usb 4-1: config 0 descriptor?? [ 1177.660060][ T7020] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1177.919142][ T7020] etas_es58x 4-1:0.2: could not parse product info: '' [ 1178.790951][ T5782] Bluetooth: hci5: command tx timeout [ 1179.264573][T10488] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1179.273839][T10488] ===================================================== [ 1179.281429][T10488] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 1179.289406][T10488] dvbdmx_release_ts_feed+0x198/0x290 [ 1179.295260][T10488] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1179.306185][T10488] dvb_demux_do_ioctl+0x78b/0xc80 [ 1179.311413][T10488] dvb_usercopy+0x263/0x500 [ 1179.317834][T10488] dvb_demux_ioctl+0x46/0x70 [ 1179.322620][T10488] __se_sys_ioctl+0x23c/0x400 [ 1179.327764][T10488] __x64_sys_ioctl+0x97/0xe0 [ 1179.332576][T10488] x64_sys_call+0x1975/0x3ea0 [ 1179.337687][T10488] do_syscall_64+0x134/0xf80 [ 1179.342625][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.348838][T10488] [ 1179.351264][T10488] Uninit was created at: [ 1179.356424][T10488] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1179.362542][T10488] alloc_pages_mpol+0x328/0x860 [ 1179.367789][T10488] alloc_pages_noprof+0x101/0x280 [ 1179.372994][T10488] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1179.379269][T10488] __vmalloc_noprof+0x128/0x1f0 [ 1179.384314][T10488] vmalloc_array_noprof+0x48/0x80 [ 1179.389863][T10488] dvb_dmx_init+0x121/0x930 [ 1179.394582][T10488] vidtv_bridge_probe+0x1b1f/0x2690 [ 1179.400282][T10488] platform_probe+0x213/0x370 [ 1179.405273][T10488] really_probe+0x4d5/0xe40 [ 1179.415635][T10488] __driver_probe_device+0x25e/0x370 [ 1179.422975][T10488] driver_probe_device+0x70/0x8f0 [ 1179.428202][T10488] __driver_attach+0x541/0xaa0 [ 1179.433289][T10488] bus_for_each_dev+0x33b/0x580 [ 1179.438372][T10488] driver_attach+0x51/0x70 [ 1179.443122][T10488] bus_add_driver+0x54f/0xdb0 [ 1179.448008][T10488] driver_register+0x42e/0x6a0 [ 1179.453258][T10488] __platform_driver_register+0x65/0x80 [ 1179.459040][T10488] vidtv_bridge_init+0x73/0x100 [ 1179.464351][T10488] do_one_initcall+0x237/0xbb0 [ 1179.469318][T10488] do_initcall_level+0x157/0x350 [ 1179.474614][T10488] do_initcalls+0x176/0x310 [ 1179.479303][T10488] do_basic_setup+0x1d/0x30 [ 1179.484135][T10488] kernel_init_freeable+0x213/0x460 [ 1179.489519][T10488] kernel_init+0x2f/0x5e0 [ 1179.494235][T10488] ret_from_fork+0x20f/0x910 [ 1179.499070][T10488] ret_from_fork_asm+0x1a/0x30 [ 1179.504041][T10488] [ 1179.506662][T10488] CPU: 1 UID: 0 PID: 10488 Comm: syz.2.759 Not tainted syzkaller #0 PREEMPT(full) [ 1179.516383][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.532250][T10488] ===================================================== [ 1179.541219][T10488] Disabling lock debugging due to kernel taint [ 1179.655333][T10488] Kernel panic - not syncing: kmsan.panic set ... [ 1179.661965][T10488] CPU: 1 UID: 0 PID: 10488 Comm: syz.2.759 Tainted: G B syzkaller #0 PREEMPT(full) [ 1179.673048][T10488] Tainted: [B]=BAD_PAGE [ 1179.677332][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.687595][T10488] Call Trace: [ 1179.691008][T10488] [ 1179.694064][T10488] __dump_stack+0x26/0x30 [ 1179.698643][T10488] dump_stack_lvl+0x50/0x1c0 [ 1179.703624][T10488] ? dump_stack+0x12/0x25 [ 1179.708164][T10488] dump_stack+0x1e/0x25 [ 1179.712512][T10488] vpanic+0x7b4/0x1430 [ 1179.716834][T10488] panic+0x15d/0x160 [ 1179.721028][T10488] kmsan_report+0x31a/0x320 [ 1179.725796][T10488] ? vprintk_emit+0xb60/0xba0 [ 1179.730872][T10488] ? __msan_warning+0x1b/0x30 [ 1179.735768][T10488] ? dvbdmx_release_ts_feed+0x198/0x290 [ 1179.741560][T10488] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 1179.746980][T10488] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 1179.752371][T10488] ? dvb_usercopy+0x263/0x500 [ 1179.757231][T10488] ? dvb_demux_ioctl+0x46/0x70 [ 1179.762193][T10488] ? __se_sys_ioctl+0x23c/0x400 [ 1179.767277][T10488] ? __x64_sys_ioctl+0x97/0xe0 [ 1179.772279][T10488] ? x64_sys_call+0x1975/0x3ea0 [ 1179.777365][T10488] ? do_syscall_64+0x134/0xf80 [ 1179.782348][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.788614][T10488] ? irqentry_exit+0x8f/0x6c0 [ 1179.793500][T10488] ? kmsan_get_metadata+0xf1/0x160 [ 1179.798885][T10488] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1179.805463][T10488] ? kmsan_get_metadata+0xf1/0x160 [ 1179.810833][T10488] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1179.816903][T10488] ? preempt_schedule_common+0x5b/0x80 [ 1179.822658][T10488] ? preempt_schedule+0x30/0x40 [ 1179.827718][T10488] ? preempt_schedule_thunk+0x16/0x30 [ 1179.833303][T10488] ? _raw_spin_unlock_irq+0x47/0x50 [ 1179.838938][T10488] ? kmsan_get_metadata+0x146/0x160 [ 1179.844410][T10488] __msan_warning+0x1b/0x30 [ 1179.849145][T10488] dvbdmx_release_ts_feed+0x198/0x290 [ 1179.854775][T10488] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1179.860021][T10488] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 1179.866180][T10488] dvb_demux_do_ioctl+0x78b/0xc80 [ 1179.871465][T10488] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1179.877235][T10488] dvb_usercopy+0x263/0x500 [ 1179.881936][T10488] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1179.887738][T10488] ? kmsan_get_metadata+0xf1/0x160 [ 1179.893097][T10488] dvb_demux_ioctl+0x46/0x70 [ 1179.897890][T10488] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1179.903391][T10488] __se_sys_ioctl+0x23c/0x400 [ 1179.908334][T10488] __x64_sys_ioctl+0x97/0xe0 [ 1179.913188][T10488] x64_sys_call+0x1975/0x3ea0 [ 1179.918098][T10488] do_syscall_64+0x134/0xf80 [ 1179.922903][T10488] ? clear_bhb_loop+0x50/0xa0 [ 1179.927806][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.933925][T10488] RIP: 0033:0x7fae7f79c799 [ 1179.938501][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.958314][T10488] RSP: 002b:00007fae805ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.966933][T10488] RAX: ffffffffffffffda RBX: 00007fae7fa16180 RCX: 00007fae7f79c799 [ 1179.975066][T10488] RDX: 0000200000000300 RSI: 0000000040026f33 RDI: 0000000000000007 [ 1179.983274][T10488] RBP: 00007fae7f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1179.991422][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.999544][T10488] R13: 00007fae7fa16218 R14: 00007fae7fa16180 R15: 00007fff4650ee78 [ 1180.007745][T10488] [ 1180.011488][T10488] Kernel Offset: disabled [ 1180.015902][T10488] Rebooting in 86400 seconds..